• Home
  • About 404TS
  • Contact

404 Tech Support

Where IT Help is Found

  • Articles
    • Code
    • Entertainment
    • Going Green
    • Hardware, Gadgets, and Products
    • Management
    • Network
    • News
    • Operating Systems
    • Security and Privacy
    • Software
    • System Administration
    • Talking Points
    • Tech Solutions
    • Web
    • Webmaster
  • Reviews
  • Media
    • Infographics
    • Videos
  • Tech Events
  • Tools
    • How do I find my IP address?
    • Browser and plugin tests
  • Get a Technical Consultation
You are here: Home / Articles / Tech Solutions / Symantec and Norton blue screen Windows XP computers

Symantec and Norton blue screen Windows XP computers

2012-07-16 by Jason

Starting last Wednesday evening, many Windows XP computers running Symantec Endpoint Protection 12.1 experienced a Blue Screen of Death when Symantec updated to its latest definitions. The BSoD will show 0x000000CB upon updating to July 11, 2012 rev. 11 definitions. The problem is said to result from running a combination of Symantec’s SONAR product, Windows XP, and third-party software. That third-party software includes a variety of whole disk encryption tools like Microsoft’s BitLocker, PGP WDE, WinMagic SecureDoc, and others.

The issue first cropped up in the Symantec forums where more information was gathered and Symantec was able to reproduce the problem. They also explained the quality assurance steps taken to review signature updates. Following the detection and investigation, the SONAR signatures were found to be at fault and rolled back to a previous version.

Based on our analysis, the problem is isolated to Windows XP machines running:

  • Symantec Endpoint Protection Small Business Edition (SEP SBE) 12.1
  • Symantec Endpoint Protection (SEP) 12.1
  • Symantec Endpoint Protection.cloud (SEP.cloud).
  • Norton 2010, 2011, or 2012 consumer security product
  • Norton 360 versions 4, 5 6

Symantec has acknowledged and summarized the issue in a blog post. They have also provided a KB article that includes a solution for affected customers.

Symantec has posted updated signatures which resolve the issue to the public LiveUpdate production servers.  To work around the issue please follow these steps on the impacted machines.

For Enterprise customers, make sure you have updated to the latest virus definitions on the Symantec Endpoint Protection Manager(SEPM)

  1. Open the Symantec Endpoint Protection Manager
  2. Login
  3. Select “Admin“
  4. Select “Local site“
  5. Select “Download LiveUpdate content“

On affected client machines running Symantec Endpoint Protection 12.1

  1. Start computer in safe mode (do not use safe mode with networking)
  2. Navigate to the Symantec Endpoint Protection definition directory: C:Documents and SettingsAll UsersApplication DataSymantecSymantec Endpoint ProtectionCurrentVersionDataDefinitionsBASHDefs
  3. Delete the latest content directory (should be 20120711.011)
  4. Reboot

Note: If the client is pulling down content from LiveUpdate or LiveUpdate Administrator, please run LiveUpdate.  If the client is pulling down content from the SEPM, the content will be automatically downloaded without any interaction.  Until the content is delivered, the client UI may show with a warning due to missing content.

When the system has been updated properly in the client user interface for Proactive Threat Protection the definition versions will be Wednesday, July 11, 2012 r12

The problem has been confirmed to be Windows XP-only (though that may include Server 2003). If you are seeing issues with Symantec on Windows 7, your issue is likely unrelated, according to Symantec.

Filed Under: Tech Solutions

Trending

  • Malwarebytes refreshes logo, website and introduces Breach Remediation service
    In News, Security and Privacy
  • Cisco Meraki cloud-managed line now includes VoIP phones
    In Featured, Hardware, Gadgets, and Products
  • Watching CES 2015 on January 6-9
    In Hardware, Gadgets, and Products, News

Latest Media Posts

Find Out Where To Download SNES ROMs

Find Out Where To Download SNES ROMs

Multifunctional Video Conversion Tools – Wondershare Video Converter

Multifunctional Video Conversion Tools – Wondershare Video Converter

  • Popular
  • Latest
  • Today Week Month All
  • How to ‘Unblock’ multiple files at a time with PowerShell How to 'Unblock' multiple files at a time with PowerShell
  • Increase IIS Private Memory Limit to improve WSUS availability Increase IIS Private Memory Limit to improve WSUS availability
  • SOLVED: “This modification is not allowed because the selection is locked.” SOLVED: "This modification is not allowed because the selection is locked."
  • Creating and editing views in phpMyAdmin Creating and editing views in phpMyAdmin
  • Configure Outlook to recurring appointments for the last weekday of the month Configure Outlook to recurring appointments for the last weekday of the month
  • 3d rendering circuit cloud for cloud computing technology Build and Deploy a Modern Web 3.0 Blockchain App in 2022
  • Telecom Application Development: When to Outsource Telecom Application Development: When to Outsource
  • Printer printing document wirelessly from mobile phone or smartphone wifi connection vector flat cartoon illustration, file air print on fax or ink jet via cellphone bluetooth modern design Why Your Business Needs Online Fax Services In 2022
  • 6 Best Ways to Protect Your Business Account 6 Best Ways to Protect Your Business Account
  • How to download videos from Instagram How to download videos from Instagram
Ajax spinner

Elevator Pitch

404 Tech Support documents solutions to IT problems, shares worthwhile software and websites, and reviews hardware, consumer electronics, and technology-related books.

Subscribe to 404TS articles by email.

Recent Posts

  • Build and Deploy a Modern Web 3.0 Blockchain App in 2022
  • Telecom Application Development: When to Outsource
  • Why Your Business Needs Online Fax Services In 2022

Search

FTC Disclaimer

404TechSupport is an Amazon.com affiliate; when you click on an Amazon link from 404TS, the site gets a cut of the proceeds from whatever you buy. This site also uses Skimlinks for smart monetization of other affiliate links.
Use of this site requires displaying and viewing ads as they are presented.

Copyright © 2022 · Magazine Pro Theme on Genesis Framework · WordPress · Log in