When Symantec Endpoint Protection 12.1 and Websense Endpoint are installed on the same computer, applications fail to load with exception 0xc0000005

book

Article ID: 158407

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

When Symantec Endpoint Protection 12.1 RU3 (SEP) and Websense Endpoint 7.7.1629 are installed simultaneously on a Windows 7 or Windows 8 computer, some applications fail to load with an exception code 0xc0000005. Any one of the following actions are known to prevent the issue from occurring:
 
1. Uninstalling SEP's Application and Device Control feature
2. Uninstalling Websense Endpoint
3. Adding ADC Exceptions for the affected application. It appears that preventing sysfer.dll injection resolves the issue.

Example of said error from Application Event Viewer log from an affected machine:

Faulting application name: VpxClient.exe, version: 5.1.0.2083, time stamp: 0x50c9099b
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x5ea40000
Faulting process id: 0x1288
Faulting application start time: 0x01ceb332b1406777
Faulting application path: C:\Program Files (x86)\VMware\Infrastructure\Virtual Infrastructure Client\Launcher\VpxClient.exe
Faulting module path: unknown
Report Id: ef211b5d-1f25-11e3-be9e-000c990bcfda
Faulting package full name: 
Faulting package-relative application ID:

Resolution

This issue has been fixed in Symantec Endpoint Protection 12.1 Release Update 4 Maintenance Patch 1 (12.1 RU4 MP1).

Please upgrade affected computers to this version or higher of the SEP client to take advantage of this fix.