Endpoint Protection

 View Only
  • 1.  rtvscan High CPU Usage

    Posted Mar 10, 2010 10:08 AM
    Hello,

    I have a laptop user that is complaining of rtvscan taking up to 40% of the CPU cycles during a FullScan.  I've already throttled the scan for best application performance but he's complaining of sluggish performance. 

    The system is a laptop:
     - WinXP SP3
     - Dual Core 2.16MHz
     - HD: 75 GB with 35GB free
     - Mem: 4GB

    The SEP client is 11.0.5002.333

    Do you have any suggestions where to look next?

    Thanks!


  • 2.  RE: rtvscan High CPU Usage

    Posted Mar 10, 2010 10:14 AM
    delete whatever you have in quarantine.
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\Quarantine
    check the performance 


  • 3.  RE: rtvscan High CPU Usage

    Posted Mar 10, 2010 10:17 AM
    Hi Rafeeq,

    Thanks for replying.  I checked the Quarantine folder and its empty.


  • 4.  RE: rtvscan High CPU Usage

    Posted Mar 10, 2010 10:23 AM
    is the performance slow only when scan is running or all the time?
     


  • 5.  RE: rtvscan High CPU Usage

    Posted Mar 10, 2010 10:25 AM
    IBM laptop?
    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/f685d600c25418b08825737f0072c216?OpenDocument
    if not can you check if there are any conflicting software in the add/remove programs..
    2 AV softwares ?
     


  • 6.  RE: rtvscan High CPU Usage

    Posted Mar 10, 2010 01:58 PM
    Only when the scan is running.


  • 7.  RE: rtvscan High CPU Usage

    Posted Mar 10, 2010 02:13 PM
    Hi BNoren,

    Is there a difference between the scheduled and on demand scans?


  • 8.  RE: rtvscan High CPU Usage

    Posted Mar 10, 2010 04:44 PM
    As it turns out the scan finally completed and had scanned 5.4 million files.  It sounds like he was scanning mapped network drives.  Does SEP make provisions for not scanning mapped drives or is that only done with exclusions?


  • 9.  RE: rtvscan High CPU Usage

    Posted Mar 10, 2010 10:42 PM
    I believe it is standard not to include mapped drives, as this will also slowdown your network.