Symantec Antivirus rtvscan 100% cpu

SAV Corp 10.1.7000 on the client (uninstalled 10.1.1000, installed 10.1.7000)

OS Server 2000, sp4.

Uninstalled, reinstalled 10.1.7000.  Installed as custom with no mail support.  Set to scan on Access Only, and not scan on open for backup.  Nothing seems to make a difference.

rtvscan.exe pegs the cpu.  The  SAV client shows as "Scanning..." but doesn't show what the scan is (e.g. scheduled, startup, etc.), what it's currently scanning, or how to stop the scan.  It'll run for hours at 100% cpu, so I'm pretty sure it's not the startup quick scan.

Help.
snowdog_2112Asked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
snowdog_2112Connect With a Mentor Author Commented:
Here's my solution (note: several reboots are needed, so be aware of that before starting):

- SCS_Cleanwipe_v3 to completely remove SAV client.  You can get this from Symantec Support, I don't think it's available to the public.
- VMware tools did not match the version of VMware server (this was a P-to-V conversion performed on a different VMware host.
- Uninstal VMware tools
- Reboot
- Install the version of VMware tools from the current host
- Reboot
- Install the SAV client (10.1.7000 in this case, on a Win 2000 Server)
  - Custom install
  - uncheck Mail Tools (not sure if this matters, but I saw a post suggesting the Mail tools may cause issues)
- No reboot after installing SAV client
- RTVSCAN.exe pops on the CPU use, but after 2 hours, it's running clean.

Hope this helps someone else out there.
0
 
muneer0811Commented:
hi snowdog,

can i know how you did the uninstallation?
0
 
snowdog_2112Author Commented:
Add/Remove programs-->Remove.
It asked for the uninstall password, and then completed successfully.  I rebooted the server, and it appeared normal on boot.  I did not run any of the NoNav cleaners, though I suspect I should do that before reinstalling again.

Also, I forgot to mention, this Windows 2000 Server is running as a VMware Server 1.07 machine.  Other 2000 Server guests on the same host are running fine.
0
 
muneer0811Commented:
i think you should do a clean uninstall.

which includes:
-the SAV corp program (using add/remove)
-symantec antivirus folder under doc & setting -> all users -> app data
-reg keys for SAV corp under hkey_localmachine-> software

then do a reboot before u uninstall.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.