Should I block it?

No, this file is 100% safe to run.

Additional versions

12.0.122.172	10.00%
11.0.6300.541	10.00%
11.0.6200.513	10.00%
11.0.6100.463	10.00%
11.0.6070.422	30.00%
11.0.5002.290	10.00%
11.0.4010.14	10.00%
11.0.777.1008	10.00%

Relationships

PE file structure

Show functions

Import table

kernel32.dll

DisableThreadLibraryCalls, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, InterlockedCompareExchange, Sleep, InterlockedExchange, IsDebuggerPresent

msvcr80.dll

DllMain

rpcrt4.dll

NdrOleFree, NdrDllUnregisterProxy, NdrDllRegisterProxy, NdrCStdStubBuffer_Release, NdrDllCanUnloadNow, NdrDllGetClassObject, IUnknown_QueryInterface_Proxy, IUnknown_AddRef_Proxy, IUnknown_Release_Proxy, CStdStubBuffer_QueryInterface, CStdStubBuffer_AddRef, CStdStubBuffer_Connect, CStdStubBuffer_Disconnect, CStdStubBuffer_Invoke, CStdStubBuffer_IsIIDSupported, CStdStubBuffer_CountRefs, CStdStubBuffer_DebugServerQueryInterface, CStdStubBuffer_DebugServerRelease, NdrOleAllocate

Export table

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

GetProxyDllInfo

RTVScanPS.dll

Symantec AntiVirus by Symantec Corporation (Signed)

Remove RTVScanPS.dll

Version:	11.0.6200.513
MD5:	debcb2ba045e1ca444ef3ce9a5830d79
SHA1:	00acbc9de328b4a7d6721f91a0885c585df76165
SHA256:	230859e277115b87f73aa25127d205440527cbb1331a8615296e9b280ba5c102

Overview

rtvscanps.dll is loaded as dynamic link library that runs in the context of a process. This is typically installed with the program Symantec Endpoint Protection published by Symantec Corporation. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).

Details

File name:	rtvscanps.dll
Publisher:	Symantec Corporation
Product name:	Symantec AntiVirus
Description:	RTVScanPS
Typical file path:	C:\Program Files\symantec client security\symantec antivirus\rtvscanps.dll
File version:	11.0.6200.513
Size:	19.86 KB (20,336 bytes)
Certificate
Issued to:	Symantec Corporation
Authority (CA):	VeriSign
Effective date:	Tuesday, October 30, 2007
Expiration date:	Wednesday, November 24, 2010
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 8.0
.NET CLR:	No

More details

Programs

The following program will install this file

Symantec Endpoint Protection

Symantec Corporation

9% remove

“Customers have embraced Symantec Endpoint Protection 12 faster than any previous release. In Symantec Endpoint Protection 12.1.2, we've worked hard to further the Unrivaled Security, Blazing Performance and support for Virtual Environments. By layering technologies like Insight and SONAR, antivirus scans are reduced and maximum performance is achieved while stopping cyber-criminals and even zero-day threats in their tracks. Endpoint pro...”