How To Fix Rtvscan.exe Error Messages

What is the purpose of the rtvscan.exe file?

The rtvscan.exe file is part of the Symantec Internet Security Suite and is responsible for running the real-time scanning feature of the software.

The main job of rtvscan.exe is to detect malicious codes embedded on malware processes that may try to enter your system. As soon as a file enters the system, rtvscan.exe automatically scans the file and notifies the user about any files it detects. The rtvscan.exe file also possesses the capability of automatically cleaning the infected files.

In addition to automatically scanning the files that enter a system and notifying the user about malware infections, the rtvscan.exe process also logs a repot every time it conducts a scan. The log provides information about the files scanned, their location, and the malware that was attached to the scanned files and the action that was taken by the protective program, as well as the user.

If you use Symantec Internet Security Suite, the rtvscan.exe runs continuously to automatically scan any file that enters your system.

Rtvscan.exe Error 1

Error Message

“Rtvscan.exe - Application Error: The instruction at "0x77fcc8e1" referenced memory at 0x00000000. The memory could not be written or read. Click OK to terminate the program, or cancel to debug the program.”

What causes the Rtvscan.exe – Application error?

Generally, the above rtvscan.exe error is generated when DirectX 8.1 or a later version of DirectX is not installed on the computer.

How to resolve the issue

To fix the issue, perform the tasks below:

Task 1 – Determine the version of DirectX that currently exists on your system

To do this, perform the following steps:

  1. Click Start and then click Run.
  2. Type dxdiag and click OK to open DirectX Diagnostic Tool dialog box.
  3. Check the DirectX version in the System Information section under the System tab.

Task 2 – Upgrade to latest version of DirectX

Visit the Microsoft download website and download the latest DirectX version.  

Rtvscan.exe Error 2

Error Message

“Rtvscan.exe - Application Error - The Instruction at "0x77600f57" referenced memory at "0x69584d3c". The memory could not be "read".”

What causes this error?

This is a known Symantec Antivirus 10.x and Symantec Client 3.x issue. You may encounter it during the PC shutdown process.

How to resolve this issue

Symantec resolved the above issue in the Maintenance Patch 1 for Maintenance Release 6 of Symantec Antivirus 10.1 and Symantec Client 3.1.

If you are using Symantec Antivirus 10.1.6.x or Symantec Client 3.1.6.x, you will need to apply the Maintenance Patch 1 to resolve the error. To get more information about the patch, visit the Symantec web site.

Rtvscan.exe Issue

After you install Symantec Antivirus, you may find that rtvscan.exe is reporting 100% CPU usage.

What causes 100% CPU usage by RTVscan.exe?

The above issue occurs when during the installation of the Symantec software the following registry path to NavLogon.dll is not added:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\Notify\NavLogon\DllName

How can I resolve this issue?

Warning: The steps illustrated in this section require you to edit the registry. Perform these steps only if you are comfortable with working with the registry. As a precaution, make a registry backup before editing it.

You can fix this issue by performing the steps below –

  1. Open the Registry Editor by running the regedit command.
  2. In the left-pane of the Registry Editor window, navigate to the following registry entry:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\Notify

  3. Right-click Notify, select New, click Key, and type NavLogon to name the key.
  4. Next, right-click NavLogon, select New, click String Value, and type DllName for the string value.
  5. Now, right-click DllName, click Modify, type C:\WINDOWS\system32\NavLogon.dll in the Value data box..
  6. Click OK.
  7. Exit the Registry Editor.
  8. Restart your computer.

The problem should now be resolved.