Endpoint Protection

I see the below message on Symantec Endpoint on almost all the machines in our environment.

Kindly suggest the workaround for this.

Known issue. There is no workaround yet.

Subscribe to this article:

http://www.symantec.com/docs/TECH248552

It says a hotfix is coming but there is no ETA yet.

Follow this thread as well for all the updates:

https://www.symantec.com/connect/forums/sep-system-tray-icon-warns-multiple-issues-following-installation-january-3rd-2018-windows-se?list_context_id=1403&list_context_type=sc_forum

hi,

you need to wait till fix released by symatnec or roll back the hotfix which updated on windows systems .

Regards

Thanks Brain,

But if that is showing as a problem, that has to come from somwhere, right?

Can i check what is that error? anything that i can check on server OR local machine logs?

Just curious to know about the this.

Cheers.

Per the Symantec article, the SEP client breaks after applying an MS update. The is all due to the Meltdown/Spectre vulnerabilities from last week. There really isn't anything check. Just waiting on Symantec to respond with a fix. The link to the thread I posted explains as well as has a bunch of questions that customers are asking and waiting on answers for.

Before seeing this post till now tried many uninstalls, fixes, etc. Thanks God it is a generel problem :) Waiting the fix from now on.

Hello Sumit,

This issue is currently a Symantec known issue.

Check these Threads which are already being discussed over forums.

https://www.symantec.com/connect/forums/sep-system-tray-icon-warns-multiple-issues-following-installation-january-3rd-2018-windows-se#comment-11953161

After several hours of google this post appeared.
But why can Symantec send a message that pops up on my Endpoint server?
This would save me time spent looking for trouble.

Thanks Mithun for the update.

Yes, we do have issues also with the client that are running SEP 12.1 MP6 and earlier version. Services crash and stops responding.

Sadly, as there is no solution for this, we are reinstalling the clients to the latest version.

Thanks

Found the same issue, hope for the solution soon. Thanks.

Hi

In Windows 8.1 uninstall KB4056895

and in Windows 10 KB4056891

That was the soloutions for our company.

Hi Mr. Sumit,

I also have a same problem just as you have. I suggest you uninstall 12.1 Version. And Instal the 14.1 Version. It works.

Good Luck Sir

Regards

Thanks for your idea, but:
we dont have installed KB4056891 on our Win10 computers because "valid for Windows 10 Version 1703"
We are running Win10 1709.

Nevertheless, I can confirm mentioned issue on ~10 computers.

(SEP 14.01 RU1)

Regards

herbert

Sorry Herbert,

I checked computers running Win10 1709 as well
And there is no problem.

The updates on these computers are;
KB4054517
KB4058043
KB4054022

We also running (SEP  14.01 RU1)

I should have add if you running Win10 1709

remove KB4056892

We should not miss os bugs as a simple ui problem
The os bug is more dangerous
Delaying Windows updates is foolish

Update now.
We need to inform employees about UI
There is no problem with Symantec operations.

Symantec should give you an improved program soon.

We should not miss os bugs as a simple ui problem
The os bug is more dangerous
Delaying Windows updates is foolish

Update now.
We need to inform employees about UI
There is no problem with Symantec operations.

Symantec should give you an improved program soon.

I agree..

OS problem is more critical than UI issue. As Symantec has openly said there is no issue with the protection technology.

Soon there will be update which will resolve this issue.

Its not a wise step for not having a security patch.

Thanks

yes, kb 4056892 is installed at WIn10/1709 and uninstalling it may solve the UI issue, but it's a wise thought, to acceppt UI malfunction rather to run a risk while uninstalling a patch.
So let's wait.
herbert

Any solutions with Windows 8? 

Packages that the fix is in.

January 3, 2018—KB4056897 (Security-only update)

January 9, 2018—KB4056894 (Monthly Rollup)

January 3, 2018—KB4056888 (OS Build 10586.1356)

January 3, 2018—KB4056892 (OS Build 16299.192)

January 3, 2018—KB4056891 (OS Build 15063.850)

January 3, 2018—KB4056890 (OS Build 14393.2007)

January 3, 2018—KB4056898 (Security-only update)

January 3, 2018—KB4056893 (OS Build 10240.17735)

January 9, 2018—KB4056895 (Monthly Rollup)

I have systems on the latest (er) 14.0 RU1 build. clients say they have 2 problems but to open the client displays no problem. We have only updated a couple servers. monitoring CPU utilization and now symantec behavior.

https://support.symantec.com/en_US/article.TECH248552.html

Hotfixs are released by symatnec for this issue ?

Yes; some time today.

Hello Brian,
you told Yesterday Hotfix will be released "some time today".
I have not found it under
"Product Download
Symantec Endpoint Protection 14 - International English"

Why?

It's been released, everyone has been able to get it. Have you? If not, open a support case.

Cant find the Hotfix to download...Please share more details about this.

https://www.symantec.com/connect/forums/latest-win10-update-corrupts-sep14?page=1#comment-11959701

Hi All,

That issue is finally resolved by installing/upgrading the client version to Symantec Endpoint Protection version 14.0.3892.1101 .After rebooting there is no error showing on system tray icon.

Good morning to all,
I have a problem, try to update my server from version 12.1 to 14.1, start installing normally, but when it is almost finished it appears that the installation was interrupted and that no changes were made and it does not indicate why there will be a way to See what was the error?
I thank you in advance

Hi Shibukalayil,

How can you get the version 14.0.3892.1101?

I just check again the endpoint 14 download center, the latest version still 14.0.3876.1100

Where in the download section do you see the version numbers?  All I see is the 14.0.1.MP1.

Didn't they say RU1 MP1 is available for download?

Still the same today not a newer version availble

Because the hotfix was pulled:

http://www.symantec.com/docs/TECH248552

So .. now that my company is on 14.0.3876.1100 .. and the problem still exists ... what are we suppose to do now?

So I have a Windows 10 Build 1709 64-bit workstation with the appropriate KB4056892 applied.  I even uninstalled/reinstalled 14.0.0 MP2 after patch was applied and am still getting the the system tray and "multiple problems" notification error.

Now what?

Win10/64 1709 needs kb4073290, afterwards the issue disappears.

So what.

Win10/64 1709 needs kb4073290, afterwards the issue disappears.

So what.

I beleave the issue with all the version of Symantec and Symantec was supposed to fix it by 17th Jan.

But I dont think so it has still come up.

@ Herbert Heuberger - KB4073290 is included in KB4056892, which is what is causing the problem.

So Symantec pulled their hotfix. Microsoft's update was seen by my Server 2016 systems and installed and resolved the issue. Great... but all my Windows 10 clients show "no updates available" and the issue persists.

So what am I supposed to do with this?

I'm having a similar issue with our Windows 10 1709 PC's. Symantec still shows that my client has multiple errors. I even downloaded KB4073290 from the Windows Update Catalog (because it doesn't show up in my windows updates), but whenever I manually install the patch it gives me a generic "This update was not installed" error. So I'm stuck... Microsofts patch won't install and Symanctec now has pulled the fix...

Same here. I tried the latest suggestion: https://support.symantec.com/en_US/article.TECH193508.html

and it didn't work... Multiple machines no luck. SEP 14.0 MP2

I tested uninstalling KB4056892 and it does in fact get rid of that UI error.  However, like others have said, maybe its not worth uninstalling if it will cause a security issue?  

Is it only a cosmetic UI issue?  Does everything else work, realtime protection, comsync to servers...etc?  

Will the fix for this automatically pipe down to the managed server environment at some point?  

I am getting ready to deploy SEP ver 14.x to a bunch of clients that have Windows 10 on it, because it seems ver 12 no longer works.  

As long as 14 "works" I will install even with a UI issue, I just want to make sure.  

Is this case closed?

It's still the same. Most of the security stuff in KB4056892 concerns Microsoft Edge

Hi LWill,

Yes you can go ahead with the installing later version of SEP clients on the endpoints.

Before that please ensure you upgrade your server as well.

There is no issue with the protection technology & connectivity.

But there is still no update from symantec on when this UI error will be fixed.

Keep checking the blogs for more details.

After windows update today the shield has become green and fine. :-)

Windows 10 Version 10.0.15063 Build 15063

These are updates that were installed

(KB4057144)
(KB4056254)
(KB4023057)
(KB4057144)
(KB4016509)
(KB2538243)
(KB4074595)

Is there  Sep 12 fix for 32bit Win 7 systems?  Been doing some digging and I can't seem to find anything

Stuart

Hi All,

I see that the error "Multiple Problems" on the UI is has gone.

I am trying to identify was that the Windows update or Symantec Update which fixed this.

Thanks

good day the problem was solved with the windows update in our symantec, but, now it gives us another error that is the following:

I do not know if someone could help me with this, what I have noticed is that it has given me in the computers that have the version 14.0.3897.1101, for the moment those that have the version 14.0.3897.1101 have not failed, in advance thank you very much.

Known issue:

http://www.symantec.com/docs/TECH240699

Hello all, can help in has problem: version symantec 14.0.3876.1100

it was improved after this update

February 13, 2018—KB4074588 (OS Build 16299.248)

https://support.microsoft.com/tr-tr/help/4074588/windows-10-update-kb4074588

to look at the windows version

windows run / winver 

thank you for your answers.

and update the antivirus version to the 14.0.3897.1101 y the version the windows is the 1709 (OS Build 16299.248), but, still the same problem

Hi all,

It seems that Symantec have updated their article with the following:

Hi,

We are experiencing the same issue after applying Windows 10 1709 (64-bit) – KB4073290 and the SEP version is 12.1.7061.6600. Windows is keep loading after first restart. As of now we are uninstalling this from safe mode and it is working fine post that.

We are running SEP 14.0 RU1, 14.0.3752.1000.  After installation of KB4074588 on four windows 10 machines (Feb 13, 2018) we are recieving the multiple warning error on Download Insight, Proactive Threat Protection, Network Intrusion Protection, Browser Intrusion Protection, Memory Exploit Mitigation.  

None of the post updates or patches seem to work - 

Also, those machines do not appear to be recieving definition updates.

Thanks,

...Rick

Hi,

Concerning:

this is the correct kb to fix the issue.

I had an issue with cloned machines, the SEP console displayed the install was successful however SEP never installed or even tried.   I tried exporting a package and installing manually only to be presented with this version isn't compatible.

Finally found a post suggesting I uninstall KB4088776.   After an uninstall and restart I was able to install via remote push from the SEP console.

Hope this can help others.

I had an issue with cloned machines, the SEP console displayed the install was successful however SEP never installed or even tried.   I tried exporting a package and installing manually only to be presented with this version isn't compatible.

Finally found a post suggesting I uninstall KB4088776.   After an uninstall and restart I was able to install via remote push from the SEP console.

Hope this can help others.