Endpoint Protection

 View Only

  • 1.  Windows Event Viewer (Security logs and rtvscan.exe)

    Posted Apr 22, 2009 02:05 PM
    Am running Windows Server 2003,  SAV Corp ver 10, with Windows XP clients. Am getting numerous and meaningless event logs in the Security folder of Windows Event Viewer, pertaining to rtvscan.exe. 

    Does anyone know how to program / re-direct these [rtvscan.exe] logs from the Security folder to the Application or System events folder, by perhaps modifying the windows registry?

    SAIC


  • 2.  RE: Windows Event Viewer (Security logs and rtvscan.exe)

    Posted Apr 22, 2009 09:32 PM
    Security folder in Event veiwer is for Security Audting.It generates log when someone tries to connect to a computer.
    Could you please let us know what specific message do you get in this log which is related to rtvscan.exe.
    Is it a success audit or Failure Audit.

    If there too much failure audit be prepared Conficker does the same thing....


  • 3.  RE: Windows Event Viewer (Security logs and rtvscan.exe)

    Posted Apr 22, 2009 09:57 PM
    Which log file are you looking at - the client or the server?
    Servers store logs for clients connecting to it.


  • 4.  RE: Windows Event Viewer (Security logs and rtvscan.exe)

    Posted Apr 23, 2009 01:13 AM
    Pls post snapshot/error message for further troubleshooting.

    Also post for Event log at that particular time if you have anything related to Symantec Antivirus

    Rgrds,
    SAM.


  • 5.  RE: Windows Event Viewer (Security logs and rtvscan.exe)

    Posted Apr 23, 2009 06:48 AM
    we need more details on this to proceed further..


  • 6.  RE: Windows Event Viewer (Security logs and rtvscan.exe)

    Posted Apr 23, 2009 07:54 AM
    Hi,

    whenever you are creating a new discussion you have to give all details like error, snapshot or anything.