Long time reader, first time poster...
I am having the following issues that I believe I have narrowed down the service host process mention above. Server 2008 x86 that was migrated form server 2003 about 3 months ago. I issue takes about 7-10 days to develop and a reboot seems to resolve the
issue temporarily.
1. Can not view event logs - "Event Viewer cannot open the event log or custom view. Verify that Event log service is running. No more threads can be created in the system (164) -- I verified the service is in fact running
2. Server can not get out to the internet - Cannot ping outside the network. Can ping the gateway and IP stack. Cannot not retrieve the arp table. Results form ipconfig
C:\Users\administrator.PARKSFW>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : WS........
Primary Dns Suffix . . . . . . . : P.......LOCAL
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
C:\Users\administrator.PARKSFW>ipconfig
Windows IP Configuration
C:\Users\administrator.PARKSFW>
3. Cannot restart the DNS service: "Windows could not start the DNS service on Local Computer. Error 8: Not enough storage is available to process this command".
4. Output from the task list and startup programs.
C:\Users\administrator.PARKSFW>tasklist /svc
Image Name PID Services
========================= ======== ============================================
System Idle Process 0 N/A
System 4 N/A
smss.exe 444 N/A
csrss.exe 532 N/A
csrss.exe 576 N/A
wininit.exe 584 N/A
winlogon.exe 620 N/A
services.exe 656 N/A
lsass.exe 668 kdc, Netlogon, NTDS, SamSs
lsm.exe 676 N/A
svchost.exe 940 DcomLaunch, PlugPlay
svchost.exe 1076 RpcSs
svchost.exe 1164 Dhcp, EventLog, lmhosts
svchost.exe 1200 gpsvc
svchost.exe 1224 AeLookupSvc, BITS, CertPropSvc, IKEEXT,
iphlpsvc, LanmanServer, ProfSvc, RasMan,
Schedule, seclogon, SENS, SessionEnv,
ShellHWDetection, Winmgmt, wuauserv
SLsvc.exe 1244 slsvc
svchost.exe 1292 EventSystem, FDResPub, LanmanWorkstation,
netprofm, nsi, SstpSvc, W32Time
svchost.exe 1352 Netman, UmRdpService, UxSms, WdiSystemHost
svchost.exe 1384 CryptSvc, Dnscache, KtmRm, NlaSvc,
TermService, WinRM
svchost.exe 1536 BFE, DPS, MpsSvc
taskeng.exe 1708 N/A
spoolsv.exe 724 Spooler
pbeagent.exe 652 APCPBEAgent
svchost.exe 672 AppHostSvc
BackupSC.exe 1704 Backup Service Controller
crmssecs.exe 2020 crmssecs
dsm_sa_eventmgr32.exe 2112 dcevt32
dsm_sa_datamgr32.exe 2136 dcstor32
dfsrs.exe 2156 DFSR
svchost.exe 2172 DHCPServer
dns.exe 2192 DNS
g2svc.exe 2216 GoToMyPC
inetinfo.exe 2432 IISADMIN
g2comm.exe 2460 N/A
SOFTDMN.EXE 2468 N/A
g2pre.exe 2596 N/A
ismserv.exe 2684 IsmServ
LMIGuardianSvc.exe 2796 LMIGuardianSvc
BackupFP.exe 3008 N/A
ramaint.exe 3024 LMIMaint
mr2kserv.exe 3060 mr2kserv
sqlservr.exe 3076 MSSQL$MICROSOFT##SSEE
svchost.exe 3164 Net Driver HPZ12
ntfrs.exe 3188 NtFrs
dsm_om_shrsvc32.exe 3284 omsad
svchost.exe 3496 Pml Driver HPZ12
svchost.exe 3508 PolicyAgent
svchost.exe 3524 RemoteRegistry
sqlwriter.exe 3556 SQLWriter
TeamViewer_Service.exe 3668 TeamViewer8
svchost.exe 3824 W3SVC, WAS
svchost.exe 3844 WerSvc
dfssvc.exe 3872 Dfs
CCCScheduler.exe 2860 CCCScheduler
LogMeIn.exe 3476 LogMeIn
dwm.exe 4564 N/A
WmiPrvSE.exe 4588 N/A
explorer.exe 4640 N/A
LogMeInSystray.exe 4768 N/A
WmiPrvSE.exe 4780 N/A
taskeng.exe 5100 N/A
TeamViewer.exe 5328 N/A
MtxHotPlugService.exe 5448 N/A
CCC Toaster Application.e 5480 N/A
CRMSFax.exe 5536 N/A
tv_w32.exe 5568 N/A
CRMSQUE.exe 5580 N/A
dsm_om_connsvc32.exe 3256 Server Administrator
SBAMSvc.exe 5356 SBAMSvc
svchost.exe 5512 TapiSrv
SBAMTray.exe 368 N/A
svchost.exe 5676 FontCache
msdtc.exe 5212 MSDTC
wsusservice.exe 4700 WsusService
agent.exe 632 N/A
TrustedInstaller.exe 8084 TrustedInstaller
FXSSVC.exe 5380 Fax
g2tray.exe 5796 N/A
taskmgr.exe 5720 N/A
perfmon.exe 5976 N/A
w3wp.exe 7652 N/A
w3wp.exe 2332 N/A
winagent.exe 4180 Advanced Monitoring Agent
TeamViewer_Desktop.exe 6080 N/A
cmd.exe 6396 N/A
agent.exe 4400 N/A
tasklist.exe 7032 N/A
C:\Users\administrator.PARKSFW>wmic startup get caption,command
Caption Command
BackupManager "C:\Program Files\Backup Manager\BackupManager.exe" minimized
CRMS Fax CRMS Fax.lnk
CRMS Printing CRMS Printing.lnk
BackupManager "C:\Program Files\Backup Manager\BackupManager.exe" minimized
MtxHotPlugService C:\Windows\system32\MtxHotPlugService.exe v
Seagull Drivers ssdal_nc.exe startup
LogMeIn GUI "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
CCC Toaster C:\Program Files\CCC\CCC ONE Update Manager\CCC Toaster Appli
cation.exe
SBAMTray "C:\PROGRA~1\ADVANC~1\managedav\SBAMTray.exe"
Any help would be greatly appreciated.