Endpoint Protection

 View Only
  • 1.  SAV paged pool causes system crashes

    Posted Nov 29, 2010 03:59 PM

    This is just an informative post.

    Starting in October 2010 my managed workstations began exhibiting very odd behavior ranging from mapped drives disconnecting and reconnecting, to user profiles going missing, to workstations going into an infinite reboot loop.

    The problem I eventually identified was SAV v9.0.0.338 and recent virus definitions. That combination was eating up over 150mb of paged pool space and causing bizarre behavior in Windows XP.

    Each workstation was running Windows XP SP2 and running SAV v9.0.0.338 scan engine 101.x and virus definitions older than 10/2/2010 rev2.

    My only solution was to upgrade these workstations to SEP v11. I planned to do this sometime in the future anyway but this bizarre behavior pushed up my rollout plans.

    I figured somebody else might benefit from my hours of frustration.

    Related post:

    https://www-secure.symantec.com/connect/forums/new-scan-engine-causing-memory-leaks

     

    Jason Morrill
    IT Manager



  • 2.  RE: SAV paged pool causes system crashes

    Posted Nov 29, 2010 04:03 PM

    SAV 9.0 reached its end of life long time back as even sav 10.x have reached EOL..So staying with the latest Product keeps you away from many such issues.



  • 3.  RE: SAV paged pool causes system crashes

    Posted Nov 29, 2010 04:36 PM

    Yep, I believe the modern definition downloads are larger than that program (from 2004, I think) can handle.

    "Symantec Antivirus 9.x will reach its End of Support Life as of March 31, 2009. Virus definition updates for version 9.x will be discontinued on April 1, 2009. Please contact your account manager or reseller for information about our current shipping versions."

    sandra



  • 4.  RE: SAV paged pool causes system crashes

    Posted Nov 30, 2010 03:58 AM

    Hi Jason,

    Many thanks for sharing your experiences.  That is 100% the intention for which the community forums were created. 

    Please do continue to use the forums should you have any questions or concerns with SEP!

    Side note: there are updates to key AV Engine components released automatically through LiveUpdate.  These are distributed roughly 4 times per year.  I understand that the next update will contain additional improvements to ease pages pool usage with today's large definition files.

    Thanks and best regards,

    Mick