RTVScan.exe
Symantec AntiVirus by Symantec Corporation (Signed)
Overview
There are 14 versions of rtvscan.exe in the wild, the latest version being 12.0.122.172. It is started as a Windows Service called 'Symantec Endpoint Protection' with the name 'Symantec AntiVirus' and described as “Provides real-time virus scanning, reporting, and management functionality for Symantec AntiVirus.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 1.95 MB. The file is a digitally signed and issued to Symantec Corporation by VeriSign. The programs Symantec AntiVirus, Symantec Client Security and Symantec Endpoint Protection - CAH have been observed as installing specific variations of rtvscan.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0008% including both foreground and background operations, the average private memory consumption is about 43.62 MB with the maximum memory reaching around 188.16 MB. Addionally, typically read and write I/O disk operations is about 40.66 MB per minute for reads and 2.84 MB per minute for writes.
 Details
|
| File name: | rtvscan.exe |
| Publisher: | Symantec Corporation |
| Product name: | Symantec AntiVirus |
| Typical file path: | C:\Program Files\symantec client security\symantec antivirus\rtvscan.exe |
| Certificate |
| Issued to: | Symantec Corporation |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, October 30, 2007 |
| Expiration date: | Wednesday, November 24, 2010 |
| Windows Service |
| Service name: | Symantec AntiVirus |
| Display name: | Symantec Endpoint Protection |
| Description: | “Provides real-time virus scanning, reporting, and management functionality for Symantec AntiVirus.” |
| Type: | Win32OwnProcess, InteractiveProcess |
Programs installed in
(Note, the programs listed below are for all versions of Symantec AntiVirus.)
Symantec AntiVirus Corporate Edition was the previous offering from Symantec in this market. Symantec Endpoint Protection, developed by Symantec Corporation, is an antivirus and personal firewall prod...
“Antivirus protection alone is not a sufficient defense against today's complex Internet security threats. One breed of threats blend characteristics of viruses, worms,Trojan horses, and malicious code...”
“Customers have embraced Symantec Endpoint Protection 12 faster than any previous release. In Symantec Endpoint Protection 12.1.2, we've worked hard to further the Unrivaled Security, Blazing Performan...”
“Symantec Endpoint Protection Small Business Edition offers simple, fast and effective protection against viruses and malware. Available as a cloud-managed service, it sets up in just minutes with no h...”
“Customers have embraced Symantec Endpoint Protection 12 faster than any previous release. In Symantec Endpoint Protection 12.1.2, we've worked hard to further the Unrivaled Security, Blazing Performan...”
“Customers have embraced Symantec Endpoint Protection 12 faster than any previous release. In Symantec Endpoint Protection 12.1.2, we've worked hard to further the Unrivaled Security, Blazing Performan...”
Behaviors
(Note, the behaviors below are for all versions of rtvscan.exe, select a unique version for details.)
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
All file variations of rtvscan.exe
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
47.37% |
|
| Windows 7 Home Premium |
26.32% |
|
| Windows 7 Enterprise |
10.53% |
|
| Windows Vista Home Premium |
5.26% |
|
| Windows Vista Ultimate |
5.26% |
|
| Windows 7 Professional |
5.26% |
|
Distribution by country
United States installs about 57.89% of Symantec AntiVirus.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
47.62% |
|
| Hewlett-Packard |
23.81% |
|
| Lenovo |
19.05% |
|
| Intel |
9.52% |
|
