Endpoint Protection

Hi everyone,

I am running Windows 7 with Symantec Endpoint version 11.0.5002.333 and I just started getting an Interactive Services Detection popup that states  Microsoft Visual C++ Runtime Library for program smc.exe runtime error. It is very annoying because it has been poping up about every 10 minutes for the past 2 days no matter how many times I hit OK or Cancel. Any help or insight in appreciated. Thanks!

Denny

This document may help in this issue-
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009090915222948

Disable or  remove any third party Antivirus or Anti-Spyware program and see if that helps

Is there anything else in event viewer that may provide any add't info on the error?

Also, do you use an Application and Device Control policy on that machine?

I dont have any third party antivirus or antispyware programs installed. I am trying the recommendations in the first document now. running that command line program and uninstalling/reinstalling SEP. I will update tomorrow. Thanks everyone for the quick replies!

I uninstalled and reinstalled with no luck. I am still getting the error message.

I have found the following description a few weeks ago because i had this failure with Symantec AV 10 - i do not know if this walkaround works also with SEP 11.

RTVscan.exe – Microsoft Visual C++ Runtime Error
 
How to Fix Symantec Run Time Error rtvscan.exe

You have Symantec antivirus program installed on your computer, but you remove some spywares, malwares using some anti-malware programs like Malwarebytes. Then you realized that Symantec can not be started again even if you uninstall and reinstall.
Here is the error message looks like:

"Microsoft Visual C++ Runtime Library Runtime Error!
Program: C\Program Files\Symantec AntiVirus\Rtvscan.exe
This application has requested the Runtime to terminate it in an unusual way.
Please conrtact the application's support team for more information."

Your system keeps crashing, and also Auto-Protect will not activate, to fix this problem, just follow these stpes:


Instructions


Step 1

From Start, click on "Run" to bring up the DOS command line window

Step 2

Now type in: "wbemtest" and hit the ENTER key. The Window Management Instrumentation Tester window opens up.

Step 3

On the top field, replace "root\default" with "root\securitycenter" and click Connect

Step 4

You will be returned to the original screen, now click the Enum Classes button, leave the Superclass info box that appears as is (empty) and click OK

Step 5

On the Query Results screen, highlight "AntivirusProduct" and choose the Delete button.

Step 6

Close the Query windows and exit wbemtest

Step 7

Now either reinstall or repair Symantec Antivirus Corporate Edition
 
Up until your post I was not aware of wbemtest so it took me awhile to figure out what to do with it.
For the sake of those you may have this problem in the future, here are the steps that corrected my issue:
• Go to a command prompt and run wbemtest
• Click the Connect button
• Replace root\default with root\securitycenter and click Connect
• You will be returned to the original screen, now click the Enum Classes button, leave the Superclass info box that appears as is (empty) and click OK
• On the Query Results screen, highlight AntivirusProduct and choose the Delete button.
• Close the Query windows and exit wbemtest
• Now either reinstall or repair Symantec Antivirus Corporate Edition
Interesting note, in my case when I re-entered the wbemtest after fixing my problem, the AntivirusProduct class no longer existed, even after a reboot. I can only guess this was a remnant of an older Symantec AV product or some other software package placed it there and it was causing a conflict with Symantec AV.
 



regards
Kai Schumacher

Thanks for the idea but that was mentioned in the first post's link I believe and it didnt work

I tried doing Repairs and Uninstalls of SEP 11 and the weird thing is when I do an uninstall it never really uninstalls it because the icon is still in the toolbar and the program works like I never uninstalled it. Is there a SEP removal tool? The norton one didnt work.

the tool is called cleanwipe you can get it by calling support.

so far so good. I had a heck of a time trying to completely uninstall SEP from my machine. Even Cleanwipe didnt do the trick. I had to use Revo Uninstaller to uninstall the program and delete any registry items and any left over files from my drive. Then I rebooted and reinstalled and so far I havent had that annoying popup. Hopefully it stays that way!

Thanks for all your help!!

Denny

How is it going now? Still no errors? If you could update us that would be great so we can close out this case.

Thanks!
Grant

did you happen to install java 6 update 19 right before this started to happen?

I had 2 machines start to have this exact same issue. one running Windows 2000 and one with windows 7 and both were shortly after updating java.

I actually just came here to see if there is a know issue with the new version of java and SEP 11 and that is when i seen your post here.

The pop ups are no longer. Although I was having trouble with my network connection (not sure if its related) and symantec didnt reinstall correctly. Only network threat protection installed so Im trying to resolve that but all in all Id mark this one down as a win  

I still have Java 6 version 18 by the way not the newest update

Thanks Denny I will mark this one as solved but feel free to create a new one regarding the network connection. Or if you feel that it is related to this issue post back on this one and I will remove the "Solved" mark.

Thanks Again,
Grant