Endpoint Protection

 View Only

  • 1.  Rtvscan faulting and DEP

    Posted May 18, 2011 10:14 AM

    Hi

    I have SAV CE v10.1.8 on my SAV primary and secondary servers (W2K3).  Recently two of them have been posting this error: Faulting application Rtvscan.exe, version 10.1.8.8000, faulting module I2ldvp3.dll

    On these servers DEP is set to 'Turn on DEP for all programs and services except those I select' but has no exceptions configured.

    Is DEP likely to prevent Rtvscan from working correctly, and is it therefore good practice to set an exclusion for rtvscan.exe?

    If so...should I set an exclusion for my W2K3 and W2K8 clients that also have DEP enabled?  What is the likely impact on SAV if I don't?

    Thanks



  • 2.  RE: Rtvscan faulting and DEP

    Posted May 18, 2011 10:21 AM

    yes u need to create those exlcusions , SEP 11 does not have such issues. better to create for the time being till u upgrade

    http://service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/3b752d0de6a4f6c84925745d007f31c7?OpenDocument



  • 3.  RE: Rtvscan faulting and DEP

    Trusted Advisor
    Posted May 18, 2011 10:22 AM

     

    Hello,
     
    The issue should have been resolved in Maintenance Patch 1 for Maintenance Release 5 (MR 5 MP 1)
     
    "Faulting application Rtvscan.exe, version 10.1.5.5000, faulting module I2ldvp3.dll..." appears after installing Symantec AntiVirus 10.1.5.5000
     
    Fix ID: 833133
     
    Symptom: After you install Symantec AntiVirus 10.1.5, you see the error "Faulting application Rtvscan.exe, version 10.1.5.5000, faulting module I2ldvp3.dll, version 10.1.5.5000, fault address 0x000056ab."
     
    Solution: Changed the code to prevent the null pointer access that causes the application fault. A workaround for this problem is to run LiveUpdate after you install a Symantec AntiVirus server before you add clients to the server group.
     
     
     
    However, check the following Articles:
     
     
     
    Error: "Faulting application Rtvscan.exe, version 10.1.5.5000, faulting module I2ldvp3.dll, version 10.1.5.5000, fault address 0x000056ab"
     
     
    Error: EventID 1000 or 1004, "Faulting application Rtvscan.exe, version 10.0.1.1000, faulting module Rtvscan.exe, version 10.0.1.1000, fault address 0x0008811d"
     


  • 4.  RE: Rtvscan faulting and DEP

    Posted May 24, 2011 07:43 AM

    Thanks for your replies.  When I create the exclusion, the program I need to exclude is rtvscan.exe?

    Also, would I need to create an exclusion on just my Symantec servers, or any client where SAV is installed and DEP is activated, such as a server client?



  • 5.  RE: Rtvscan faulting and DEP

    Posted May 24, 2011 07:57 AM

    exclusions created on server will be transfered to clients

    u need to excluded it on the client side where  u get the pop ups.