Paging file size changes automatically

[Reagan Thomas]

We've got a couple hundred PCs that run Windows XP SP1 in
labs at Oklahoma State University. Because some of the
applications we support need enormous amounts of memory,
we set the paging file to at least 2048MB (min and max).

We first notice an issue after we sysprep'd, pulled an
image and ghosted it to lab PCs... though it still shows
our user selection of 2048MB, it has reduced the page
file size to the standard 1.5 times the physical RAM.

We next noticed this same issue after applying SP2 a
computer (don't know if the two are directly related or
not).

What are we missing?

 

[JimWae±]

Are you by any chance running NAV with Autoprotect on during system boot?

 

[Guest]

The chances of that are 100%

I'm off to google for info on it (Hmmm, maybe read the
Symantec AV user guide too?). Sounds like you know what
is going on?

 

[JimWae±]

To disable the Auto-Protect advanced option, perform the steps provided
below:

1. Start Norton AntiVirus (NAV).
2. Click on Options.
3. Double click on Auto-Protect under System.
4. Click on Advanced.
5. Under 'How to increase Windows start up protection' uncheck 'Load
Auto-Protect during system boot'.
6. Click on OK.
7. Restart the computer and check whether the issue persists.


To check whether your Norton AntiVirus is working properly, you can perform
an EICAR test. Refer to the link provided below to perform an EICAR test:

Title: 'How to use the EICAR test string to test Norton AntiVirus'
Document ID: 19975295056
Web URL: http://service1.symantec.com/SUPPORT/nav.nsf/docid/19975295056

 

[Guest]

Thanks for the direction. My web searches were not
fruitful, but I've figured out a method.

I'm using Symantec AV 9.0, which seems to be a little
different from the version you were describing.
Basically, I need to set 'pagefile.sys' as an exclusion
to the filesystem autoprotect. Unfortunately, SAV 9.0
doesn't seem to let me specify that particular file
(shows things like NTDETECT.COM as files to checkmark at
excluded, but not pagefile.sys).

I found where SAV 9.0 stores the exclusions in the
registry and manually specified pagefile.sys and it works
fine (leaves my pagefile size changes alone).

The registry key is:

HKEY_LOCAL_MACHINE\
SOFTWARE\
INTEL\
LANDesk\
VirusProtect6\
CurrentVersion\
Storages\
Filesystem\
RealTimeScan\
FileExceptions

and the value is a type REG_DWORD with
name 'C:\pagefile.sys' and a value of 0

Thanks again for the pointer

Reagan Thomas
CEAT Labs
Oklahoma State University

 

[JimWae±]

Hey, I had put off trying exceptions there on NAV2004 - but it worked doing
that for me too -- and I could type in c:\pagefile.sys (couldn't browse &
select it)
I'll let Symantec know this works too