RTVscan is taking up 50% - 99% of the CPU time when scanning.


Article ID: 178016


Updated On:


Endpoint Protection


RTVscan is utilizing high amounts of CPU time when performing scheduled scans, and the scans are taking longer than expected. Why does this occur?

CPU utilization varies between 50% - 99% when a scan is running. Scans can take several hours to complete.


A possible cause for high CPU utilization by RTVscan and long scan times is that the policy applied to Symantec Endpoint Protection clients has scheduled scans configured to scan mapped network drives. This causes scheduled scans to perform more work, with increased elapsed time, particularly if multiple clients are scanning the same network drives concurrently.


Exclude the mapped network drives from scheduled scans on SEP clients. Instead, perform scheduled scans on these drives from the server to which they are attached.