cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
179
Views
0
Helpful
1
Replies

Amp service not starting

QCaz
Level 1
Level 1

I have a laptop which won't start the Amp service.  I've updated it from 8.2.1 8.2.4 and still get the same problem.

The event log gives this:

Faulting application name: sfc.exe, version: 8.2.4.30130, time stamp: 0x65cfcfa4Faulting module name: sfc.exe, version: 8.2.4.30130, time stamp: 0x65cfcfa4Exception code: 0xc0000005Fault offset: 0x0000000000283985Faulting process ID: 0x1fd0Faulting application start time: 0x01da9d40beeb9924Faulting application path: C:\Program Files\Cisco\AMP\8.2.4.30130\sfc.exeFaulting module path: C:\Program Files\Cisco\AMP\8.2.4.30130\sfc.exeReport ID: 88e6c2b1-c155-4370-bf1e-1150c5e0c11bFaulting package full name: Faulting package-relative application ID:

Any suggestions?

1 Reply 1

Matthew Franks
Cisco Employee
Cisco Employee

Do you have any other antivirus products running on the laptop? They can sometimes conflict, especially if they both have in memory protections turned on. If that is the case, try disabling the other one to see if the Secure Endpoint service will start. If it does, you may have to choose a product to do memory protection or add exclusions to both products.  If you don't have another AV running, try collecting the associated DMP and opening a TAC case for analysis.

Hope that helps,

-Matt