Event ID: 7026(Teefer3) error

[Migration User]

Has anyone seen this issue on 64bit W2K8 R2 Server:

 

The folloing boot-start or system-star driver(s) failed to load:

Teefer3

 

We only have AV & Antispyware installed. Nothing else? Seems after the reboots this occurs?

 

SEP 11.7 RU 2.

 

Also seems to cause the server after about 2 hours to lock up, not sure if this is related?

 

Any advice or assistace requsted on this.

 

Thanks,

 

 

 

[ℬrίαη]

Do you have other components installed but not enabled by policy?

Can you share a screenshot?

Did you upgrade from a previous version of SEP?

Check this KB article:

https://www.symantec.com/business/support/index?page=content&id=TECH94974

[Migration User]

1. Policy is NOT enabled

2. Removed NTP months ago.

Here is the the System Log.

Attachment(s)

Teefer3.docx   37 KB 1 version

[ℬrίαη]

If you go into Device Manager and under View select Show Hidden Devices, do you see anything relating to Teefer under Non-Plug and Play Drivers?

Open a command prompt and type "sc query teefer" without quotes

What shows?

[Migration User]

I found under Non-Plug and Play Drivers:

Symantec Endpoint Protection Firewall

It looks Like I can uninstall it and Current Status is:

This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Running "sc query teefer recieved the following:

[SC] EnumQueryServicesStatus:OpenService FAILED 1060:

The specified service does not exist as an installed service.

Hope that helps?

Ideas?

 

 

 

 

[ℬrίαη]

Check this KB article, specifically the pieces on removing the teefer2 driver from the registry:

https://www.symantec.com/business/support/index?page=content&id=TECH91038

[Migration User]

Wouldn't a Cleanwipe be easier on this?

 

I appreciate this, but my gosh, this is a Production VM and we are 100% VM. This would be tedious.

What do you think?

 

 

[ℬrίαη]

I don't want you to uninstall the entire client, just pointing out the removal part regarding the teefer driver

But if you can use Cleanwipe than by all means do it. Wasn't sure if you could in a prod environment but if you can than go for it.

[Migration User]

Thanks,

To me that would be the simpiliest way. Especially since it would then be a Clean Reinstall.

 

Of Course I would check the Device Manager then I if still there after a Cleanwipe, I would uninstall it.

While I love Cleanwipe, I have come to learn, it tend NOT to remove everything, but like 99%.

 

Thanks for your help on this.

 

 

 

[ℬrίαη]

I usually suggest cleanwipe but in a lot of cases it just can't be run on a production server without doing some sort of outage notice...but it's usually the best bet when there is an issue with an install.

[Mithun Sanghavi]

Hello,

I would suggest you to work on the steps provided in the document of SEP Client via Manual Uninstall

How to manually uninstall the Symantec Endpoint Protection client from Windows Vista, Windows 7, and Windows 2008 R2 64-bit

http://www.symantec.com/docs/TECH91038

Hope that helps!!

[Migration User]

Query for teefer3 and see

sc query teefer3