Should I block it?

No, this file is 100% safe to run.

Additional versions

12.0.122.172	10.00%
11.0.6300.541	10.00%
11.0.6200.513	10.00%
11.0.6100.463	10.00%
11.0.6070.422	30.00%
11.0.5002.290	10.00%
11.0.4010.14	10.00%
11.0.777.1008	10.00%

Relationships

PE file structure

Show functions

Import table

kernel32.dll

DisableThreadLibraryCalls, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, InterlockedCompareExchange, Sleep, InterlockedExchange, IsDebuggerPresent

msvcr80.dll

DllMain

rpcrt4.dll

NdrOleFree, NdrDllUnregisterProxy, NdrDllRegisterProxy, NdrCStdStubBuffer_Release, NdrDllCanUnloadNow, NdrDllGetClassObject, IUnknown_QueryInterface_Proxy, IUnknown_AddRef_Proxy, IUnknown_Release_Proxy, CStdStubBuffer_QueryInterface, CStdStubBuffer_AddRef, CStdStubBuffer_Connect, CStdStubBuffer_Disconnect, CStdStubBuffer_Invoke, CStdStubBuffer_IsIIDSupported, CStdStubBuffer_CountRefs, CStdStubBuffer_DebugServerQueryInterface, CStdStubBuffer_DebugServerRelease, NdrOleAllocate

Export table

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

GetProxyDllInfo

RTVScanPS.dll

Symantec AntiVirus by Symantec Corporation (Signed)

Remove RTVScanPS.dll

Version:	11.0.4010.14
MD5:	014f2c46d32de623f06d5acfe666b827
SHA1:	6ebefef0073f3777033076bd87d9e936750a8155
SHA256:	c11d57f4e9bc61c631a096adf801f0afd91dc342329bb6a9e622e70969e363bd

Overview

rtvscanps.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including Symantec Endpoint Protection published by Symantec Corporation and Symantec Endpoint Protection published by Symantec Corporation. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).

Details

File name:	rtvscanps.dll
Publisher:	Symantec Corporation
Product name:	Symantec AntiVirus
Description:	RTVScanPS
Typical file path:	C:\Program Files\symantec client security\symantec antivirus\rtvscanps.dll
File version:	11.0.4010.14
Size:	19.93 KB (20,408 bytes)
Certificate
Issued to:	Symantec Corporation
Authority (CA):	VeriSign
Effective date:	Tuesday, October 30, 2007
Expiration date:	Wednesday, November 24, 2010
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 8.0
.NET CLR:	No

More details

Programs

The following programs will install this file

Symantec Endpoint Protection

Symantec Corporation

9% remove

“Customers have embraced Symantec Endpoint Protection 12 faster than any previous release. In Symantec Endpoint Protection 12.1.2, we've worked hard to further the Unrivaled Security, Blazing Performance and support for Virtual Environments. By layering technologies like Insight and SONAR, antivirus scans are reduced and maximum performance is achieved while stopping cyber-criminals and even zero-day threats in their tracks. Endpoint pro...”