Endpoint Protection

Hi all,
 

          One of my client sheduled scan stoped automatically giving windows error one of  your application stopped working contact online for Solution.

Client os:-  Vista
SEP version:--11.0.4
Updates r upto date
error showing in Event viewer

System event:---

Faulting application Rtvscan.exe, version 11.0.4202.48, time stamp 0x4a0a5300, faulting module SAVSubmitter.dll, version 11.0.4202.48, time stamp 0x4a0a64b8, exception code 0xc0000005, fault offset 0x0000a815, process id 0x4a0, application start time 0x01caa573dec94d23

Event id:--7031

App evevt:--

Faulting application Rtvscan.exe, version 11.0.4202.48, time stamp 0x4a0a5300, faulting module SAVSubmitter.dll, version 11.0.4202.48, time stamp 0x4a0a64b8, exception code 0xc0000005, fault offset 0x0000a815, process id 0x4a0, application start time 0x01caa573dec94d23.

Event id:--1000

App info:---

Fault bucket 1286806862, type 1

Event Name: APPCRASH

Response: None

Cab Id: 0

Problem signature:

P1: Rtvscan.exe

P2: 11.0.4202.48

P3: 4a0a5300

P4: SAVSubmitter.dll

P5: 11.0.4202.48

P6: 4a0a64b8

P7: c0000005

P8: 0000a815

P9:

P10:
Event id 1001

Please help me in solving this issue

the version you are using is version 11.0.4202.48
always had issues with RTVSCAN.exe, this is the latest one Upgrading to MU5 should fix the issue

An application fault occurs in RTVScan.exe due to corrupted data in the registry
Fix ID: 1592186
Symptom: An application fault in RTVScan.exe occurs when it attempts to read an unexpected date value in the registry for a scheduled scan.
Solution: Checks were added to validate the date value

Release notes for Symantec Endpoint Protection 11.0.x and Symantec Network Access Control 11.0.x

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007121216360648

HI  Rafeeq,

It is a managed client, directly installing 11.0.5 will work as a managed client?

Yes it will still work as a managed client and report to the SEPM without any issue, once issue is resolved we shall then upgrade the Manager and al the clients to MU5 :) 
Latest is the greatest :) 

The SEPM should be upgraded to the latest version first and then the Vista client can be upgraded to the latest version i.e. RU 5.

This should take care of the issue.