Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

64bit client running 32bit process!

Updated: 21 May 2010 | 8 comments
AntunHR's picture
+1 1 Vote
Login to vote
This issue has been solved. See solution.

Hi all,

Symantec Endpoint Protection MR4
I have a question about 64bit clients.
After install (64bit client on 64bit Windows Server 2008) I have noticed that two processes iz running in 32 bit.
see att.

Processes are:
Rtvscan.exe
ccApp.exe

Kind Regards,

Antun.

Comments

SAM_SHAIKH's picture
16
Apr
2009
1 Vote +1
Login to vote

Hi Antun, The ccapp.exe file

Hi Antun,

The ccapp.exe file stands for Common Client Application and is the executable responsible for checking emails and auto-protect facilities as part of the Norton Antivirus suite.

The ccapp.exe file is used as the Norton Antivirus’ real-time scanner. When Windows loads, the ccapp.exe file also loads as VxD or virtual device driver. As the ccapp.exe file executes behind the scenes, it scans your system for Trojan Horses, viruses, and worms.

The rtvscan.exe file runs the real-time scanning feature of the Symantec Internet Security Suite and is responsible for detecting malicious code embedded on possible viruses and other malware processes. When a file enters the system, the rtvscan.exe file will automatically execute and scan the file, immediately notifying the user about any files it detects. The rtvscan.exe file can also automatically clean the infected file.

Rgrds,
SAM

SAM_SHAIKH's picture
16
Apr
2009
1 Vote +1
Login to vote

Here in your case , it will

Here in your case , it will be Symantec and not Norton.

Rgrds,
SAM

AntunHR's picture
16
Apr
2009
1 Vote +1
Login to vote

Hi Sam, Thank you for quick

Hi Sam,

Thank you for quick response. So is it normaly to have this processes in 32bit on a 64bit machine?

SAM_SHAIKH's picture
16
Apr
2009
1 Vote +1
Login to vote

I've seen the same on my

I've seen the same on my 64bitmachines too.

Which version of SEP are you using??

Rgrds,
SAM

AntunHR's picture
16
Apr
2009
1 Vote +1
Login to vote

SEP MR4

SEP MR4

A.G.'s picture
19
Apr
2009
1 Vote +1
Login to vote

Normal

Hi Antun,
        It is per design for some of these processes to run as 32 bit on a 64 bit client install.

Regards.

Paul Murgatroyd's picture
19
Apr
2009
1 Vote +1
Login to vote

Yep

Yes,

As GUJAR says, its perfectly normal.  The bits that need to be 64 bit are, the rest we have left (for now) as 32bit.  

BTW, its a common misconception, but RTVScan does not perform realtime scanning, only scheduled and manual.  Realtime AV Scanning is now taken care of by a kernel mode driver. 

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint

AntunHR's picture
20
Apr
2009
1 Vote +1
Login to vote

Thanks guys,

Thanks guys,