Norton A-virus CE vers 7.51 & 7.61 - high cpu rtvscan.exe

[cablegirl]

I've got two flavors of Norton in our corporate environment - about 2 wks ago 26 different servers starting hitting high cpu (between 85 - 100) percent during the scan - very unusual. About half started two weeks ago, other half 3 or 4 days apart since then until now I'm at 26 with the same issue. I'm a server eng - but the security guy in charge of Norton is coming up empty handed - even after talking with Norton. Has anyone seen this kind of behavior before? We've ran sysdiags and come up empty handed as well. Help!! Any assistance is appreciated. Thx in advance.

 

[AVChap]

The logs might tell you what has been happening. Also, you might want to run PerfMon to monitor the program.

AVChap

 

[cablegirl]

Unfortunately, the logs are showing nothing other than configuration changes (which is where I felt the issue could be coming from - but Symantec says no) and updates from the parent server. Perfmon is running - which is how I found out which component was causing the high cpu utilization - but again, nothing conclusive, other than rtvscan.exe is problematic. Thanks for the ideas. If you can think of anything else, PLEASE let me know.

 

[bettyb]

I saw this on my server when I was scanning mailboxes. Turned out I had a mailbox with corruption in folders/messages. The way I could tell was that the event log showed that as the last mailbox processed. I had to kill the process and then figure out what was wrong with the mailbox.