RTVScan.exe
Symantec AntiVirus by Symantec Corporation (Signed)
| Version: | 10.1.6.6000 |
| MD5: | 0023cc5610b9c48cf68571dee4c686fc |
| SHA1: | a44e28e6fe3f525a1aeb6a99ef5e06c6e16e2f7b |
| SHA256: | 415f803c1a1d559c90c04ebd21d449fa6c6a740e8273dec8163eaad7a72385f7 |
Overview
rtvscan.exe runs as a service under the name Symantec Endpoint Protection (Symantec AntiVirus) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Symantec AntiVirus published by Symantec Corporation and Symantec Client Security published by Symantec Corporation. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).
Details
| File name: | rtvscan.exe |
| Publisher: | Symantec Corporation |
| Product name: | Symantec AntiVirus |
| Typical file path: | C:\Program Files\symantec client security\symantec antivirus\rtvscan.exe |
| File version: | 10.1.6.6000 |
| Size: | 1.73 MB (1,816,768 bytes) |
| Certificate |
| Issued to: | Symantec Corporation |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, October 30, 2007 |
| Expiration date: | Wednesday, November 24, 2010 |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | No |
| Code language: | Microsoft Visual C++ 8.0 |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
Symantec AntiVirus Corporate Edition was the previous offering from Symantec in this market. Symantec Endpoint Protection, developed by Symantec Corporation, is an antivirus and personal firewall product leveled at centrally managed corporate environments security for servers and workstations.
“Antivirus protection alone is not a sufficient defense against today's complex Internet security threats. One breed of threats blend characteristics of viruses, worms,Trojan horses, and malicious code with server and Internet vulnerabilities. By using multiple methods and techniques, blended threats such as CodeRed, Bugbear, and Opaserv can rapidly initiate, transmit, and spread, causing widespread damage.The newest breed of security ri...”
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00028537% | |
| Kernel CPU: | 0.00007939% | |
| User CPU: | 0.00020599% | |
| Kernel CPU time: | 23,375 ms/min | |
| Context switches: | 26/sec | |
| Memory |
| Private memory: | 71.26 MB | |
| Private (maximum): | 462.56 MB | |
| Private (minimum): | 5.2 MB | |
| Non-paged memory: | 71.26 MB | |
| Virtual memory: | 634.35 MB | |
| Virtual memory (peak): | 653.92 MB | |
| Working set: | 457.03 MB | |
| Working set (peak): | 474.18 MB | |
| Resource allocations |
| Threads: | 54 | |
| Handles: | 745 | |
| GUI GDI count: | 13 | |
| GUI USER count: | 10 | |
Process properties
| Integrety level: | Undefined |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\symantec antivirus\rtvscan.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | Symantec AntiVirus |
| Display name: | Symantec Endpoint Protection |
| Description: | “Provides real-time virus scanning, reporting, and management functionality for Symantec AntiVirus.” |
| Type: | Win32OwnProcess, InteractiveProcess |
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
47.37% |
|
| Windows 7 Home Premium |
26.32% |
|
| Windows 7 Enterprise |
10.53% |
|
| Windows Vista Home Premium |
5.26% |
|
| Windows Vista Ultimate |
5.26% |
|
| Windows 7 Professional |
5.26% |
|
Distribution by country
United States installs about 57.89% of Symantec AntiVirus.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
47.62% |
|
| Hewlett-Packard |
23.81% |
|
| Lenovo |
19.05% |
|
| Intel |
9.52% |
|
