Endpoint Protection Small Business Edition

Installed management console and 6 clients.

On all the clients rtvscan.exe crashes with 10 secs of running.

This is the message in the Applications log:

 Faulting application Rtvscan.exe, version 12.0.1001.93, faulting module unknown, version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. 

 SYMANTEC TAMPER PROTECTION ALERT

Target:  C:\Program Files\Symantec AntiVirus\Rtvscan.exe
Event Info:  Suspend Thread
Action Taken:  Logged
Actor Process:  C:\WINDOWS\System32\svchost.exe (PID 1404)
Time:  Monday, May 16, 2011  8:00:32 PM

SYMANTEC TAMPER PROTECTION ALERT
Target:  C:\Program Files\Symantec AntiVirus\Rtvscan.exe
Event Info:  Resume Thread
Action Taken:  Logged
Actor Process:  C:\WINDOWS\System32\svchost.exe (PID 1404)
Time:  Monday, May 16, 2011  8:00:46 PM 

create a tamper protection exception for svchost.

then export the package with this feature set.

try running the scan

http://www.symantec.com/business/support/index?page=content&id=TECH105952

Seems like all symantec products need to be doctored along to get them to run properly.  With Symantec there is no such thing as install and go, it's install and fix every few weeks.  I can sympathize with you on the terrible tech support also.  I don't even bother to call them anymore it's a waste of time.  I would recommend NOD 32 or Trend Micro.

That is not a known version number. Are you running a special build? 

Are you running any other security products on these systems?

12.0.1001.93 is the version of rtvscan.exe that comes with SEP 12.0.1001.95. The particular version number of rtvscan.exe should not be confused with the SEP release version number.

Ahh, got it. Thanks Thomas.

@ Federico, Can you run the SEP support tool and report back any errors?

http://www.symantec.com/business/support/index?page=content&id=TECH105414&locale=en_US

After trying everything the tech support specialist told me that a higher tier specialist was going to take care of the case. I had to call back several time, finally I was able to schedule a call. Sure enough no one called me back.

The support tool is unable to collect data on any of my machines, the tech support specialist remoted in a couple of machines and witnessed the support tool launching and not collecting anything.

I'm too busy for this, I run a network of 95 macs and 6 PC's, I can't waste too much time with software that needs to be tweaked to even run, maybe I'm spoiled, but I've never had any similar experiences.

Getting to the store rep who will refund our purchase took 6 attempts, transfers to the wrong extension etc...

I spent in total close to 50 hours. The average consulting rate in NY is $ 200 an hour. That's 10 grands + the price of the software...

Well, that is depressing. I am having the exact same issue. It is only happening on one PC.

I am a bit apprehensive to contact Tech Support after hearing this. I don't have the time to sit on the phone either.

Has there been any other developments on this? I have the exact same version numbers and as far as I know, that is the most up to date.

I'll take a look at updates and see if there is something newer.

Any help would be great.

I would recommend updating to SEP 12.1. If you have a valid support contract you should have access to it via FileConnect