You installed Symantec AntiVirus Corporate Edition 8 or Norton AntiVirus Corporate Edition 7.x on your Windows NT-based client and scheduled a scan. The scan does not run. When you check the System event log, you see Event 2020 and the message "The server was unable to allocate from the system paged pool because the pool was empty."
This problem may have several causes.:
- Norton AntiVirus 7.61 Build 40 addressed a pool non-paged memory leak occurring every 30 minutes. Norton AntiVirus has code which monitors file changes in certain directories, but our usage of the Microsoft file monitoring functions/APIs was incorrect. The code was modified to use these APIs in the proper order. For upgrade information, see the article How to Obtain an Update or Upgrade for Your Symantec Enterprise Product. This fix is included in all builds released after Norton AntiVirus 7.61 build 40, and Symantec AntiVirus Corporate Edition 8.01
- If you are using Windows NT 4.0 with an early Service Pack, you must update it to Service Pack 4 or newer.
- Older Symevent files. See the document Updating the Symevent files for steps on updating these files.
- Mapped Shared Local Printers.
See the following documents in the Microsoft Knowledge Base: 196745, Very Slow Paged Pool Leak in Windows NT 4.0 272568, Event ID 2019 or 2020 Errors or "Insufficient System Resources" error when logging on 286060, Mapping Shared Local Printers to Central Share Causes Server to Crash, Generates Event ID 2020 from SRV 312362, Server is Unable to Allocate Memory from the System Paged Pool