How to detect Symantec Endpoint Protection services in version 12.1
| Article:TECH162901 | | | Created: 2011-06-21 | | | Updated: 2011-11-08 | | | Article URL http://www.symantec.com/docs/TECH162901 |
Problem
You want to know how to detect which Symantec Endpoint Protection services are running after you install version 12.1. You do not see RTVScan in the list of services.
Solution
As of version 12.1, RTVScan is no longer part of Symantec Endpoint Protection. The following services are used instead:
| Short name | Long name |
| SepMasterService | Symantec Endpoint Protection |
| SmcService | Symantec Management Client |
| SNAC | Symantec Network Access Control |
The RTVScan.exe functionality is now provided by the SepMasterService service. The image name for this service is now ccSvcHst.exe. Note that there are multiple ccSvcHst.exe instances running on your computer. The SepMasterService service requires one instance, and an additional instance is required for each user session.
You can determine whether the SepMasterService is running in either of the following ways:
- From a custom script that examines running processes, look for the ccSvcHst.exe process that includes the following substring:
/s "Symantec Endpoint Protection".
- From the command window, run the following command:
sc query sepmasterservice
|
|
| Source | ETrack |
| Value | 2398299 |
Article URL http://www.symantec.com/docs/TECH162901
Terms of use for this information are found in Legal Notices
Thank you.