You receive an "Out of memory" error message when you try to save a file (830265)

Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect your system.

Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry

SYMPTOMS

You may experience one or more of the following symptoms:

In Microsoft Outlook, you cannot open the Personal Folders (.pst) file on a share across the network.
In Microsoft Office, you cannot save documents on a Distributed File System (DFS) share.
When you modify files on a network file server, you cannot save files, and you receive the following error message although there is sufficient free disk space on the network drive:
Disk is Full - not enough resources
You see one or more of the following program error messages.
- In Microsoft Excel, when you try to save a file:
  
  Message 1
  Document not saved
  Message 2
  The disk is full
- In Microsoft Word, when you try to save a file to the same location:
  
  Message 1
  The save failed due to out of memory or disk space drive:\path\filename
  Message 2
  The disk is full or too many files are open.
  Note You can save Rich Text Format (.rtf) files from Word to the mapped drive, but you cannot save .doc files.
- In Microsoft PowerPoint, when you try to access a file:
  
  Message 1
  Read only file
  Message 2
  There was an error accessing filename
- In Outlook:
  Cannot start the reminder service. Unable to show reminders. An error occurred that prevented the file <drive letter>:\Outlook\filename.pst from being saved. Close and then re-start all mail-enabled applications.
- In Outlook, when you try to access a personal file:
  Unable to expand the folder. An error occurred that prevented the file (file name.pst) from being saved. Close and then restart all mail-enabled applications.
- In Microsoft Paint, when you try to save a file:
  An unknown error occurred when accessing drive:\folder\filename.bmp
  Note You can save this file as a JPEG (Joint Photographic Experts Group), a TIFF (Tagged Image File Format), or a GIF (Graphics Interchange Format) file. Only BMP (Bitmap) files are a problem in Paint.
- In Adobe PageMaker 7.0, when you try to save a file:
  
  Message 1
  disk full
  Message 2
  invalid parameter
- When you try to save a file, other programs may return any one of the following error messages:
  
  Message 1
  Disk full or out of memory
  Message 2
  Access Denied
  Message 3
  Document not saved
  Message 4
  Disk full or not enough memory
  Additionally, a message that the file is being used may be returned. You receive this message even though you are not using the file.
Sometimes a file is not saved. Although you see no error, this file appears to be saved correctly.
The following symptoms may also occur:
1. You receive the message:Event ID 2020 INVALID_PARAMETER
2. After you initiate a computer shutdown or a computer restart, the computer does not successfully shut down. Instead, the computer displays a black screen with a blinking pointer or without a pointer. The computer does not continue past this screen.

Note that the symptoms that this article describes apply to the following client operating systems:

Microsoft Windows XP
Microsoft Windows 2000 Professional
Microsoft Windows NT 4.0 Workstation
Microsoft Windows 98
Microsoft Windows 95

CAUSE

These issues may occur for the following reasons:

A non-Microsoft application that is installed on your computer uses an outdated kernel-mode filter driver.
A third-party file system filter driver interferes with other filter drivers.
The VERITAS Backup Exec Advanced Open File Option (Vsp.sys) filter driver is loaded in combination with an antivirus filter driver, such as one of the following Symantec AntiVirus Corporate Edition 8.0 filter drivers:
- Symevent.sys (Symantec Event Library)
- Navap.sys (Symantec AutoProtect)
The file that causes this issue is the SystemRoot\system32\drivers\Vsp.sys file.

RESOLUTION

To resolve this issue, contact the manufacturer of the filter driver, and then ask about the availability of a filter driver update.

For more information, visit the following VERITAS Web sites:

http://support.veritas.com/

http://seer.support.veritas.com/docs/264490.htm?

To download the VERITAS update, visit the following VERITAS Web site:

http://ftp.support.veritas.com/pub/support/products/

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

WORKAROUND

To work around issues with the Vsp.sys driver, follow the appropriate steps.

Warning This workaround may make your computer or your network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

Remove the Vsp.sys driver or remove the VERITAS Remote Agent (this removes the Vsp.sys driver).
Remove the VERITAS NetBackup 4.5 client, and then install the 3.4.1 version of the NetBackup client. This version does not contain the Vsp.sys driver.
Remove the VERITAS Remote Agent software, and then install the VERITAS Remote Agent without the Advanced Open File Option.
Install the latest patched version of the VERITAS Advanced Open File Option.

Note The VERITAS Advanced Open File Option is an optional component of the VERITAS backup software. You do not require it to do regular backups.
Change the registry to temporarily deactivate the Vps.sys filter driver, and then restart the computer. If you use Windows 2000, use Registry Editor to change the registry subkey.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To manually disable the Advanced Open File Option service, follow these steps:
1. Locate the following registry subkey:
  \HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VSP\Start
2. Set the Start value to 0x4.
  
  This setting prevents the driver from loading when the computer restarts.
  
  Important If only the driver is disabled, the computer may stop on the next restart and display an "STOP 0x7B INACCESSIBLE_BOOT_DEVICE" error. This error occurs because the Vsp.sys driver, or its predecessor the Otman5.sys driver, is referenced in one or both of the following registry subkeys:
  \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E967-E325-11CE-BFC1-08002BE10318}\UpperFilters
  \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}\UpperFilters
  If you use Windows 2000, use Registry Editor to change the registry subkey. Delete the lines that reference the Vsp.sys driver.

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

816071 How to temporarily deactivate the kernel mode filter driver in Windows

MORE INFORMATION

The Vsp.sys driver enables the backup process to suspend itself and to cache file writes during the backup process. The Vsp.sys driver is located in %systemroot%\SYSTEM32\DRIVERS. The affected file versions are 1.2:0.0 and 1.0:0.0.

The driver is included in VERITAS NetBackup or in VERITAS BackupExec for Windows 9.0 (Backup Exec Advanced Open File Option). This file is also installed on the system by the VERITAS Remote Agent.

Notes

If you update to the latest version of VERITAS NetBackup or of VERITAS BackupExec, you may not update the Vsp.sys driver.
If you remove the VERITAS software, you might not remove the Vsp.sys driver.
To verify that the Vsp.sys driver is removed, view the output of the Drivers.exe utility or the output of the Pstat.exe utility. The output of these utilities must not include the Vsp.sys driver.

VERITAS NetBackup

The VERITAS NetBackup client version 3.4.1ga does not cause this issue because the version does not install the Vsp.sys driver. If you upgrade to the VERITAS 4.5 feature pack 4 client, you may introduce the issue.

Network Monitor

In a Network Monitor capture, you can see errors when you flush the cache. After a file is written, an SMB C_Flush_File request is sent from the client to the server. The server responds with the following STATUS_INVALID_PARAMETER error:

Client Request:
SMB: C Flush File
Server Response:
SMB: R flush file - NT error, System, Error, Code = (13) STATUS_INVALID_PARAMETER
SMB: NT status code = 0xC000000D, Facility = System, Severity = Error, Code = (13) STATUS_INVALID_PARAMETER
SMB: NT Status Severity Code = Error
SMB: NT Status Customer Code = 0 (0x0)
SMB: NT Status Reserved Bit = 0 (0x0)
SMB: NT Status Facility = System
SMB: NT Status Code System Error = STATUS_INVALID_PARAMETER

The SMB_COM_FLUSH command makes sure that all data and allocation information for the corresponding file has been written to stable storage. The response is not sent until the write operations are completed.

Notes

Typically, the issues described in the "Symptoms" section occur after several hours or several days of file server uptime.
You can save WordPad or Notepad documents to the same network share without a problem.
The issue occurs when applications use temporary files in the save process.
When you save a file, most Office applications:
1. Open the source file.
2. Open a temporary copy of the file.
3. Make changes to the temporary copy.
4. Flush all changes to the temporary file, and then replace the original source file by using the temporary file.

Important An antivirus program is designed to help protect your computer from viruses. You must not download or open files from sources that you do not trust, visit Web sites that you do not trust, or open e-mail attachments when your antivirus program is disabled. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

129972 Computer viruses: description, prevention, and recovery

REFERENCES

For more information, click the following article numbers to view the articles in the Microsoft Knowledge Base:

822219 You experience slow file server performance and delays occur when you work with files that are located on a file server

816071 How to temporarily deactivate the kernel mode filter driver

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.