64bit client running 32bit process!
Updated: 21 May 2010 | 8 comments
This issue has been solved. See solution.
Hi all,
Symantec Endpoint Protection MR4
I have a question about 64bit clients.
After install (64bit client on 64bit Windows Server 2008) I have noticed that two processes iz running in 32 bit.
see att.
Processes are:
Rtvscan.exe
ccApp.exe
Kind Regards,
Antun.
Discussion Filed Under:
Comments
Hi Antun, The ccapp.exe file
Hi Antun,
The ccapp.exe file stands for Common Client Application and is the executable responsible for checking emails and auto-protect facilities as part of the Norton Antivirus suite.
The ccapp.exe file is used as the Norton Antivirus’ real-time scanner. When Windows loads, the ccapp.exe file also loads as VxD or virtual device driver. As the ccapp.exe file executes behind the scenes, it scans your system for Trojan Horses, viruses, and worms.
The rtvscan.exe file runs the real-time scanning feature of the Symantec Internet Security Suite and is responsible for detecting malicious code embedded on possible viruses and other malware processes. When a file enters the system, the rtvscan.exe file will automatically execute and scan the file, immediately notifying the user about any files it detects. The rtvscan.exe file can also automatically clean the infected file.
Rgrds,
SAM
Here in your case , it will
Here in your case , it will be Symantec and not Norton.
Rgrds,
SAM
Hi Sam, Thank you for quick
Hi Sam,
Thank you for quick response. So is it normaly to have this processes in 32bit on a 64bit machine?
I've seen the same on my
I've seen the same on my 64bitmachines too.
Which version of SEP are you using??
Rgrds,
SAM
SEP MR4
SEP MR4
Normal
Hi Antun,
It is per design for some of these processes to run as 32 bit on a 64 bit client install.
Regards.
Yep
Yes,
As GUJAR says, its perfectly normal. The bits that need to be 64 bit are, the rest we have left (for now) as 32bit.
BTW, its a common misconception, but RTVScan does not perform realtime scanning, only scheduled and manual. Realtime AV Scanning is now taken care of by a kernel mode driver.
Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint
Thanks guys,
Thanks guys,
Would you like to reply?
Login or Register to post your comment.