This is just an informative post.
Starting in October 2010 my managed workstations began exhibiting very odd behavior ranging from mapped drives disconnecting and reconnecting, to user profiles going missing, to workstations going into an infinite reboot loop.
The problem I eventually identified was SAV v9.0.0.338 and recent virus definitions. That combination was eating up over 150mb of paged pool space and causing bizarre behavior in Windows XP.
Each workstation was running Windows XP SP2 and running SAV v9.0.0.338 scan engine 101.x and virus definitions older than 10/2/2010 rev2.
My only solution was to upgrade these workstations to SEP v11. I planned to do this sometime in the future anyway but this bizarre behavior pushed up my rollout plans.
I figured somebody else might benefit from my hours of frustration.
Related post:
https://www-secure.symantec.com/connect/forums/new-scan-engine-causing-memory-leaks
Jason Morrill
IT Manager