Endpoint Protection

 View Only
  • 1.  Event ID 1000 Application Error Smc.exe

    Posted Jan 22, 2015 08:37 AM

    Hello,

    One of my server is currently experiencing some issues with SEP application keep crashing and services are stopping. This is an Group Update Provider Server therefore none of my client are getting definition updates at this point.Here is the error message I found on the event viewer

     

    Log Name:      Application
    Source:        Application Error
    Date:          1/22/2015 1:52:45 AM
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:     
    Description:
    Faulting application name: Smc.exe, version: 12.1.4013.4013, time stamp: 0x52647fd2
    Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec4aa8e
    Exception code: 0xc0000374
    Fault offset: 0x00000000000c40f2
    Faulting process id: 0x1330
    Faulting application start time: 0x01d035f794b160cf
    Faulting application path: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin64\Smc.exe
    Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report Id: 44a37f76-a203-11e4-abf2-0017a44558e0
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2015-01-22T06:52:45.000000000Z" />
        <EventRecordID>185510</EventRecordID>
        <Channel>Application</Channel>
            <Security />
      </System>
      <EventData>
        <Data>Smc.exe</Data>
        <Data>12.1.4013.4013</Data>
        <Data>52647fd2</Data>
        <Data>ntdll.dll</Data>
        <Data>6.1.7601.17725</Data>
        <Data>4ec4aa8e</Data>
        <Data>c0000374</Data>
        <Data>00000000000c40f2</Data>
        <Data>1330</Data>
        <Data>01d035f794b160cf</Data>
        <Data>C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin64\Smc.exe</Data>
        <Data>C:\Windows\SYSTEM32\ntdll.dll</Data>
        <Data>44a37f76-a203-11e4-abf2-0017a44558e0</Data>
      </EventData>
    </Event>

     

    I'll appreciate any help or advise on this issue.



  • 2.  RE: Event ID 1000 Application Error Smc.exe

    Posted Jan 22, 2015 01:14 PM

    Know issue with GUP

    The SMC.exe processes crashes on Symantec Endpoint Protection 12.1 RU4 when Group Update Provider functionality is enabled

    http://www.symantec.com/business/support/index?page=content&id=TECH213461