You notice that the Symantec Endpoint Protection (SEP) 14.2 RU1 shield in the taskbar displays a yellow exclamation mark. When clicking the shield, a popup message that says the services cannot be started. When trying to start Symantec Endpoint Protection service it starts for a short period and then stops again.
Event Viewer > Application log shows:
<timestamp> Application Error Application Error <machine_name> 1000 "Faulting application name: ccSvcHst.exe, version: 13.4.0.26, time stamp: 0x5bd740a5 Faulting module name: MSVCR110.dll, version: 11.0.51106.1, time stamp: 0x5098858e Exception code: 0xc0000409 Fault offset: 0x000a326c Faulting process id: 0xe818 Faulting application start time: 0x01d5369f7f85dd66 Faulting application path: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3332.1000.105\Bin\ccSvcHst.exe Faulting module path: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3332.1000.105\Bin\MSVCR110.dll Report Id: 0249a743-9218-4125-bff6-73884224fe21 Faulting package full name:Faulting package-relative application ID:"
+++
Process dump shows ccSvcHst.exe is failing with faulting module MSVCR110.dll.
STACK_TEXT:
05754648 648c9157 ae52722c 010626cc 00000000 msvcr110!abort+0x28
05754678 0106270c 0575471c 746a5b20 0575474c msvcr110!terminate+0x33
05754680 746a5b20 0575474c beba39ea 00000000 ccSvcHst!__CxxUnhandledExceptionFilter+0x40
0575471c 773dda71 0575474c 773aeeb2 0575f824 KERNELBASE!UnhandledExceptionFilter+0x1a0
0575f824 773a4198 ffffffff 773bf354 00000000 ntdll!__RtlUserThreadStart+0x398d8
0575f834 00000000 6485f28e 02ee8348 00000000 ntdll!_RtlUserThreadStart+0x1b
SEP 14.2.3332.1000
Windows 10 Enterprise 64-bit
Windows Server 2016 Server
This issue is fixed in Symantec Endpoint Protection 14.2 RU2. For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec software here.