How to fix rsEngineSvc High CPU/Memory/Disk Usage

What is rsEngineSvc/rsEngineSvc.exe?

rsEngineSvc.exe is an executable file associated with the Reason Security Engine, a component of RAV Endpoint Protection developed by Reason Software Company. This process is typically found in the C:\Program Files\RAVAntivirus directory and is designed to provide real-time protection against malware and other security threats. The rsEngineSvc process plays a crucial role in the smooth functioning of the Reason Security Engine by managing its operations. It scans the system for potential threats, blocks malicious activities, and provides alerts about suspicious activities. Without this executable file, the Reason Security Engine may not function properly.

Common Issues

Despite its intended purpose, rsEngineSvc is often reported to cause high CPU, memory, and disk usage, leading to system slowdowns and crashes, especially on weaker machines. Users have also reported frequent false positives and incompatibility with other antivirus programs, which can further degrade system performance. While rsEngineSvc.exe is not a virus, it is often categorized as a Potentially Unwanted Program (PUP). This classification is due to its tendency to be bundled with other software and installed without explicit user consent. Its high resource consumption and the intrusive nature of its operations make it a candidate for removal by many users.

How to fix rsEngineSvc High Resource Usage problem manually

1. Delete the Process Manually

You can manually terminate and delete the rsEngineSvc process via Task Manager:

• Open Task Manager: Press Ctrl + Shift + Esc.
• Locate the Process: Go to the Details tab, find rsEngineSvc.exe.
• Open File Location: Right-click on rsEngineSvc.exe and select Open file location.
• End the Process: Right-click on rsEngineSvc.exe in Task Manager and select End task.
• Delete the File: In the file location window, delete the rsEngineSvc.exe file.
• Empty Recycle Bin: Ensure the file is permanently deleted.

If you encounter an Access Denied error, you may need to take ownership of the file:

Right-click the file, select Properties > Security tab > Advanced > Change owner to your user account.

2. Uninstall RAV Antivirus

Removing the RAV Antivirus can permanently eliminate the rsEngineSvc process:

• Open Run Dialog: Press Win + R.
• Open Programs and Features: Type appwiz.cpl and press Enter.
• Uninstall RAV Antivirus: Find RAV Antivirus Desktop, RAV Endpoint Security or RAV Endpoint Antivirus, right-click on it, and select Uninstall. Follow the on-screen instructions to complete the process.

Uninstall RAV Antivirus Desktop

Uninstalling RAV Endpoint Protection
• Reboot: Restart your computer to ensure the uninstallation is complete.

3. Perform a System Restore

If the issue started recently, you can restore your system to a previous state:

• Open Run Dialog: Press Win + R.
• Open System Restore: Type rstrui and press Enter.
• Select Restore Point: Choose a restore point before the issue began and follow the prompts to restore your system.

4. Reset Your Computer

As a last resort, resetting your computer to factory settings can remove all unwanted programs, including rsEngineSvc:

• Backup Your Data: Ensure all important files are backed up.
• Open Settings: Go to Settings > Update & Security > Recovery.
• Reset This PC: Select Get started under Reset this PC and choose Remove everything to perform a full reset.

Additional Tips

Check for Malware: Sometimes, high resource usage can be due to malware mimicking the rsEngineSvc process. Perform a full system scan with a reputable antivirus program. You can do it either using the in-built Windows Defender or use a more advanced antivirus. We recommend Malwarebytes – a trusted and talented group of experts constantly updating their software to fight off both local and global threats. You can download it now using the link below and get a 14-day trial of the ultimate antimalware experience completely for free.

Malwarebytes main window

Malwarebytes settings

Malwarebytes scan results

Disable Unnecessary Services: Disable any unnecessary services related to RAV Endpoint Protection via the Services app (services.msc).
Update Windows: Ensure your Windows OS is up to date to patch any vulnerabilities that might be exploited by unwanted software.

High CPU, memory, and disk usage caused by the rsEngineSvc process can be disruptive. By following the steps outlined above, you can effectively manage and resolve these issues, ensuring your computer runs smoothly and efficiently.