Should I block it?

No, this file is 100% safe to run.

Additional versions

12.0.122.172	10.00%
11.0.6300.541	10.00%
11.0.6200.513	10.00%
11.0.6100.463	10.00%
11.0.6070.422	30.00%
11.0.5002.290	10.00%
11.0.4010.14	10.00%
11.0.777.1008	10.00%

Relationships

PE file structure

Show functions

Import table

kernel32.dll

DisableThreadLibraryCalls, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, InterlockedCompareExchange, Sleep, InterlockedExchange, IsDebuggerPresent

msvcr80.dll

DllMain

rpcrt4.dll

NdrOleFree, NdrDllUnregisterProxy, NdrDllRegisterProxy, NdrCStdStubBuffer_Release, NdrDllCanUnloadNow, NdrDllGetClassObject, IUnknown_QueryInterface_Proxy, IUnknown_AddRef_Proxy, IUnknown_Release_Proxy, CStdStubBuffer_QueryInterface, CStdStubBuffer_AddRef, CStdStubBuffer_Connect, CStdStubBuffer_Disconnect, CStdStubBuffer_Invoke, CStdStubBuffer_IsIIDSupported, CStdStubBuffer_CountRefs, CStdStubBuffer_DebugServerQueryInterface, CStdStubBuffer_DebugServerRelease, NdrOleAllocate

Export table

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

GetProxyDllInfo

RTVScanPS.dll

Symantec AntiVirus by Symantec Corporation (Signed)

Remove RTVScanPS.dll

Version:	11.0.777.1008
MD5:	5745e19e848b04976622b32b9f707094
SHA1:	eb0b28a1db058ea767ef5f8dfd9a19d2acc7b547

Overview

rtvscanps.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).

Details

File name:	rtvscanps.dll
Publisher:	Symantec Corporation
Product name:	Symantec AntiVirus
Description:	RTVScanPS
Typical file path:	C:\Program Files\symantec client security\symantec antivirus\rtvscanps.dll
File version:	11.0.777.1008
Size:	21.93 KB (22,456 bytes)
Build date:	9/6/2007 5:55 AM
Certificate
Issued to:	Symantec Corporation
Authority (CA):	VeriSign
Effective date:	Tuesday, October 30, 2007
Expiration date:	Wednesday, November 24, 2010
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 8.0
.NET CLR:	No