Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1821
  • Last Modified:

sysfer.dll not found and LiveUpdate Stops

We have a Windows Server 2003 server which is running SEPM.  In the past few weeks, Liveupdate stops working and clients show that the antivirus definitions are out of date.
To maintain the server we access it via remote desktop, which fails with the message "The application failed to start c:\windows\system32\sysfer.dll was not found....."

If we restart the server, Liveupdate runs successfully, and similarly remote desktop also works without the above error.
The server then runs successfully for a random time (1-3 days) and then the above symptoms repeat. (ie liveupdate stops, no RDP).

We have ran a full Symantec scan, and Malwarebytes scan over the server, and no errors/malware is detected.
Searching the internet reveals a number of "product" for fixing missing sysfer.dll errors - we are reluctant to randomly choose one of these.

What would you suggest?
0
Cantatech
Asked:
Cantatech
  • 3
  • 2
1 Solution
 
Paul SmartCommented:
c:\windows\system32\sysfer.dll is the main file of NTP that goes in with the LAN Drivers and monitors the traffic.
This is associated with failed logon attempts on the computers that were blocking logons

Do you have by any chance a sysfer.dll.bak file in the main SEP install folder??
0
 
Paul SmartCommented:
The only other solution would be to uninstall the NTP (Network Threat Protection) part of SEP.
This is down to you and only IF you believe it's not required.

But to do this;

1.Click Start> Settings> Control Panel.
2.Double-click Add or Remove Programs.
3.In the list of installed programs, click Symantec Endpoint Protection.
4.Click Change.
5.Click Next.
6.Click Modify.
7.Click Next.
8.Click on the Network Threat Protection icon
9.Click This feature will not be available.
10.Click Next.
11.Click Install to apply the changes.
12.Click Finish once the installation is complete.
13.Restart the computer.

Job Done!
0
 
CantatechAuthor Commented:
Thanks for your response - I have checked folder c:\program files\symantec\symantec endpoint protection\12.1.671.4971.105\bin and there is no sysfer.dll.bak file - sysfer.dll is present as expected.
For the moment the server is running correctly, and the next time it fails, I'll remove NTP.
0
 
CantatechAuthor Commented:
I've now removed NTP as per your instructions - unfortunately the symptoms of the original problem continue.
At this is a member server, my next move is to rebuild the server.
0
 
CantatechAuthor Commented:
Thanks for the suggestions but the ongoing issue can be more efficiently resolved in a somewhat more heavy handed fashion
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now