Services.exe terminated unexpectedly (Ops Mgr 2007)

  • Article

A system running OpsMgr might run in a restart loop, caused by services.exe crashes. In this case, you might see the following error message being displayed:

· C:\windows\System32\services.exe terminated unexpectedly with status code -1073741819. The system will now shutdown and restart.

As a workaround, you can pause the shutdown process by executing the following command in a Command Prompt: "shutdown /a"
The problem appears because the reg path pointing to the event-log is not correct or complete:

· HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Operations Manager\File

To resolve this issue, configure the registry entry to point to a complete and correct path as described in KB970219

OpsMgr 2007: Backup programs may fail to backup the event log when the 64-bit agent is installed
https://support.microsoft.com/kb/970219

Important: please make sure to perform a backup of the registry before modifying this, as described in KB322756

How to back up and restore the registry in Windows XP
https://support.microsoft.com/default.aspx?scid=kb;EN-US;322756

In the described situation, you might find the following trap in services.exe:

00000000`0620eae8 00000000`77ef3202 ntdll!ZwRaiseException+0xa
00000000`0620eaf0 000007ff`7fc51dbb ntdll!KiUserExceptionDispatcher+0x52
00000000`0620f090 000007ff`7c3e296c msvcrt!wcsicmp+0x8b
00000000`0620f0c0 000007ff`7c3e2efb eventlog!ElfpOpenELW+0x16d
00000000`0620f150 000007ff`7fd69a75 eventlog!ElfrRegisterEventSourceW+0x2b
00000000`0620f1a0 000007ff`7fe96cc9 rpcrt4!Invoke+0x65
00000000`0620f210 000007ff`7fe9758d rpcrt4!NdrStubCall2+0x54d
00000000`0620f7d0 000007ff`7fd697b4 rpcrt4!NdrServerCall2+0x1d
00000000`0620f800 000007ff`7fd6990d rpcrt4!DispatchToStubInCNoAvrf+0x14
00000000`0620f830 000007ff`7fd69766 rpcrt4!RPC_INTERFACE::DispatchToStubWorker+0x50d
00000000`0620f9a0 000007ff`7fd6b214 rpcrt4!RPC_INTERFACE::DispatchToStub+0x2ec
00000000`0620fa20 000007ff`7fd6b9e3 rpcrt4!LRPC_SCALL::DealWithRequestMessage+0x63b
00000000`0620fae0 000007ff`7fd7007c rpcrt4!LRPC_ADDRESS::DealWithLRPCRequest+0x3bf
00000000`0620fba0 000007ff`7fd45369 rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+0x710
00000000`0620feb0 000007ff`7fd65996 rpcrt4!RecvLotsaCallsWrapper+0x9
00000000`0620fee0 000007ff`7fd65d51 rpcrt4!BaseCachedThreadRoutine+0xde
00000000`0620ff50 00000000`77d6b6da rpcrt4!ThreadStartRoutine+0x21
00000000`0620ff80 00000000`00000000 kernel32!BaseThreadStart+0x3a

Oni Sandru
- Support Engineer / Enterprise Platforms Support (Core)