The file rtvscan.exe is a legitimate part of the Symantec Internet Security Suite, which was developed by the same makers of the popular Norton-Anti Virus software. Its main purpose is to execute virus-scanning in real time conditions. This means it can scan every file that enters your system against possible security threats or virus infections. Thus, being “real-time” would signify that it can monitor all process activities, file accesses, and even the registry for any sign of virus activity.

This process is not a harmful file. Even if there are reports of memory “hogs” i.e. utilizing almost 99% of the CPU RAM, some users have solved this problem by simply disabling the real-time scanning process of Symantec AV. However, this action usually leads to compromises in the computer’s security.

A good suggestion for the user is to obtain an upgraded or updated version of the Symantec Antivirus Corporate Edition or the Symantec Client Security. Symantec claims that this version can fix the problem of excessive CPU usage.

There are also spyware processes that are disguised as the valid rtvscan.exe process. Such malicious versions of the valid process are usually found elsewhere and not in C:Program FilesDirectory.

Since spyware processes can take the names of valid Windows system files, it cannot be easily recognized. Thus, using an effective anti-spyware tool such as XoftSpy and BitDefender among others can easily prevent spyware infections and detect such malicious processes disguised as legitimate system files.