Access Violation in SERVICES.EXE in EVENTLOG.DLL (166423)



The information in this article applies to:

  • Microsoft Windows NT Workstation 3.51
  • Microsoft Windows NT Workstation 4.0
  • Microsoft Windows NT Server 3.51
  • Microsoft Windows NT Server 4.0

This article was previously published under Q166423

SYMPTOMS

If you have a high frequency of events and the event log is set to overwrite old entries as needed, Services.exe might hit an access violation in Eventlog.dll.

Since Services.exe hosts several essential Windows NT system services as well as the service control manager your computer might hang or refuse to shut down after such a failure.

CAUSE

There have been code paths in Eventlog.dll with insufficient error checking which only appear under stress conditions.

STATUS

Microsoft has confirmed this to be a problem in Windows NT version 4.0. This problem was corrected in the latest Microsoft Windows NT 4.0 U.S. Service Pack. For information on obtaining the service pack, query on the following word in the Microsoft Knowledge Base (without the spaces):

S E R V P A C K


Microsoft has confirmed this to be a problem in Windows NT versions 3.51. A supported fix is now available, but is not fully regression-tested and should be applied only to systems experiencing this specific problem. Unless you are severely impacted by this specific problem, Microsoft recommends that you wait for the next Service Pack that contains this fix. Contact Microsoft Product Support Services for more information.

Modification Type:MajorLast Reviewed:8/10/2001
Keywords:kbbug kbnetwork KB166423