Error: "Perflib Error 1000: %MachineName% access to performance data was denied..." when scanning a mapped drive

Article:TECH98563  |  Created: 1999-01-08  |  Updated: 2004-01-05  |  Article URL
Article Type
Technical Solution



When scanning a mapped drive using Norton AntiVirus Corporate Edition or Symantec AntiVirus Corporate Edition, the NT Event Viewer fills up with the error message "Perflib Error 1000 %MachineName% Access to performance data was denied to %UserName% as attempted from :\PROGRA~1\Navnt\rtvscan.exe." As a result of these error messages, you may also see the error message "Event log service: The application log file is full."


Norton AntiVirus Corporate Edition 7.5x and later releases solved Perflib Error 1000 by disabling the CPU Utilization check. When running a manual scan, manually disable the CPU Utilization check. This check box is found by clicking Options when configuring a scan.

Re-enabling the CPU Utilization check may cause Perflib Error 1000 to return if Rtvscan.exe does not have sufficient access to the Perflib registry key. Norton AntiVirus attempts to access the Perflib registry key to monitor the CPU utilization. As a workaround, follow the previous steps to grant access to the Perflib key. For more information on this error message, see Microsoft Article Q226494, INFO: Events for Performance Monitor Extensions.

Supplemental Materials

Value147983, 331206

Legacy ID


Article URL

Terms of use for this information are found in Legal Notices