Customers may be concerned with Symantec Endpoint Protection's compatibility with new version of Microsoft's NDIS (Network Driver Interface Specification). This compatibility is addressed in newer versions of the Symantec Endpoint Protection Teefer driver.
There is a Teefer3.sys file introduced in Symantec Endpoint Protection 11 RU7 as part of new support for NDIS 6.
In Symantec Endpoint Protection 12.1 all of the Teefer system files are called simply "Teefer" and the service name is called "Teefer2". This gives the impression that the 12.1 drivers are older than those in version 11 RU7.
Symantec Endpoint Protection 12.1 Teefer driver version is not reflected in the driver file name or display name.
Despite the different naming conventions, customers can be assured that the Teefer driver in Symantec Endpoint Protection 12.1 are newer. Check the version tab of the Teefer.sys file properties.
For Windows Vista or higher, teefer3 will be installed. Otherwise, teefer2 is installed. As mentioned above, both drivers still use the same filename: teefer.sys.The service short name is also the same for both teefer2 and teefer3; it’s called ‘teefer2’.
In addtion to checking the file properties, teefer2 and teefer3 can also be identified by running the following from the command prompt:
sc qc teefer2
Teefer2 will return the following:
TYPE : 1 KERNEL_DRIVER
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : system32\DRIVERS\teefer.sys
TAG : 0
DISPLAY_NAME : Teefer2 Miniport
Teefer3 will return the following (the "TAG" value may vary):