Link to home
Start Free TrialLog in
Avatar of davels
davels

asked on

rtvscan.exe at 99% CPU - version 7.60.

I heard of some issues with users noticing their pc's locking up last week, my pc was also slow. This is what I found on my PC this morning.

The symptoms don't match exactly to the Symantec site - but are similar.

rtvscan.exe running at 99% of cpu. The link below talks about Norton Anti Virus being upgraded to 8.0. Even though my anti virus software is still 7.60 - the fix worked for me.

http://service1.symantec.com/SUPPORT/ent-security.nsf/d04e6f2f2dfad5de88256c910079502c/845f77881410fac588256c940061ee1e?OpenDocument&src=bar_sch_nam

All I had to do was rename the file in C:\temp\Clt-Inst\DATA\MSINOTES\nlnvp.dll and reboot the PC.

Maybe there is a better match to the problem but this works in the short term. My live update happened on friday - the problems started then.

Any idea?
Avatar of davels
davels

ASKER

Increasing the points, really would like an answer on this
Avatar of war1
Greetings, davels!

http://www.answersthatwork.com/Tasklist_pages/tasklist_r.htm

Real Time Virus Scan service installed by Norton Anti-Virus 7.x for Windows NT/2000/2003.  This service keeps in touch with the Symantec System Center via "keepalive packets" so that updates can be delivered to you quickly.  RTVSCAN’s main purpose, however, is, as the name implies, to scan accessed files in real time, in the background.

Recommendation :
As it is the main component of "real-time virus scanning" for Norton Anti-Virus 7.x and above, you should leave this process alone.  That said, there are some known compatibility issues with WordPerfect, so make sure to check the Symantec site for product updates (as opposed to virus updates).  Also, if you have the Corporate Edition, and you have a permanent connection to the Internet, make sure you change the frequency of keepalive packages from its 3-minute default to something more stretched out (e.g. 1 to 4 hours for standard installations) as you will otherwise get significantly irritated by temporary freezes of your PC much in the same way as with Microsoft’s infamous "FastFind".

Best wishes, war1
Avatar of davels

ASKER

Thanks for the reply war1... It doesnt really answer the question though unfortunatly.

We are running the corporate version, yes, but I think it's more of a bug within the program rather than the requirement to change the liveupdate thing. The timings just don't make sense for it to be liveupdate causing the problems.

Any other idea's anyone?
ASKER CERTIFIED SOLUTION
Avatar of MobileOakAI
MobileOakAI

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks
rtvscan is Real Time Virus Scan. In Norton Anti Virus, open Symantec Anti Virus. Go to Configure >File System Realtime Protection. Click Advanced. You have 2 choices of events on which to scan. Scan on create, or Scan on accessed, modified, create, open, move ,copy, run. Then you can choose 'Opened for Backup'. Then you have the choice of how long virus protection is permitted to be disabled. Heuristics may be turned on or off in Additional advanced options. Going back to Configure >Realtime Protection, click Selected. and Extensions. Remove those file extensions you feel you don't need scanning, but leave imortant ones such as .bat, .pif, .com, .dll, .exe, .scr, .sys, .vbe, .vxd. This will lighten the load of Realtime scanning protection, but will allow more opportunity for Viruses to slip through. Applications such as automatic backups may not need to be scanned, so unticking Opened for Backup in 'Advanced' will reduce scanning activity, but again, one may not desire to back up a Virus! Other widely used applications used across a network such as Novell's Btrieve database engine will benefit with less crashes, (provided Opportunistic Locking is disabled!). This is an aside, of course, but so much protection is needed on today's workstations, that Anti-Virus App Providers cover everything possible. Excessive realtime scanning is not a bug. It's one of those things we need in today's world.
Cheers!......//Stocky2//
We had the same problem... the 99% CPU spikes led to blue screens.

Symantec issued a patch for NAVCE 7.6 numbers 7.61.942. This patch solved most of our problems, but upgrading to SAVCE 8.1 seemed to resolve most of our issues.

You really want to leave on the real-time scanner capabilities with heuristics. AV is the first-line of defense against 0 day attacks.
We had this problem also. It was related to Live Update. We'd do a system restart and it would be fine until the next Live Update ran, then this process would get hung and continue to consume massive cpu indefinately. The Live Update, by the way, never did complete. Our AV defs were stuck at the July 27 version.
We downloaded an update for Live Update and then everything was fixed.
The only further thing I can add is that I have experienced many problems with NAV. Serious problems, even affecting Apps to the point of halting them. When all else fails, consider that when NAV subscription runs out, to change over completely to ASaP. This is a corporate managed AV App provided by McAfee. In every single case where I have gotten rid of all vestiges of NAV and installed ASaP, the network is faster. No further problems with Apps using Opportunistic Locking. No Virus problem and no customer problem. (less money for me :( - P.S. I am independent of both of these AV Providers!
I only have problems with RTVscan.exe on the slower PCs, especially when I start my system and the scan kicks in. I think NAV is not the best solution out there. NAV has known issues but try to upgrade your product to the recent versions. Symantec solves their problems as they release new patches.