Services.exe causes high CPU or RAM usage

Recently I have an unusual problem. Services.exe causes high RAM usage on one of my servers. Reason why is this happened is too many records in Event Viewer (more than one million).

This can cause also corruption of .evt file.

How to resolve problem?

We can use two steps.

First you can be patient and try to clear your .evt file from records. But if .evt file is corrupted you maybe couldn’t do that.

Second step is to delete corrupted .evt files and here is steps how to do it:

  1. Click the Start button, point to Settings, click Control Panel, and then double-click Services.
  2. Select the EventLog service and click Startup. Change the Startup Type to Disabled, and then click OK. If you are unable to log on to the computer but can access the registry remotely, you can change the Startup value in the following registry key to 0x4:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog

  1. Restart Windows.NOTE: When the system starts up, several services may fail; a message informing the user to use Event Viewer to review errors may appear.
  2. Rename or move the corrupt *.evt file from the following location:

%SystemRoot%\System32\Config

  1. In Control Panel Services tool, re-enable the EventLog service by setting it back to the default of Automatic startup, or change the registry Startup value back to 0x2.
Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s