Windows 10: svchost.exe is causing system slowdown due to repeating warning; Source: EvntAgnt, Event...

The Service Host: Windows Event Log is using much of my CPU and I believe the issue is that its constantly generating the same event over and over. Going into event viewer, I'm finding that every second tens of thousands of identical copies of the same event are being generated, to the point where they're being overwritten as quickly as they're generated, as the events instantly surpass my maximum log size.


This is the event in question:


Event 3007, EvntAgnt


Error opening event log file Parameters. Log will not be processed. Return code from OpenEventLog is 87.


Log Name: Application

Source: EvntAgnt

Event ID: 3007

Level: Warning


User: N/A

Task Category: None

Keyword: Classic


I've not been able to find any help topics on this particular error, and the various help tools haven't helped either.

:)

 

Windows 10 slowdown

Hi Aman,

There are some factors that may cause the computer to slowdown, corrupt Windows system files, is one of the factor that can slow down the computer and cause other problems.

To isolate the issue, we would like to ask some information:

• Did you get any error messages?
• Have you done any changes on your computer prior to the issue?
• What troubleshooting steps have you done so far?

We will wait for your response.

 

RAM Died: svchost error

svchost is part of the OS, it just interacts with other aspects.

 

What does the svchost do?

Lots of Windows services are tied to the SVChost, and /or are listed as SVChost in the process list(s).

Unfortunatley with Vista, there's a lot more dependencies between the services, and thus you'll be FORCED to run more instances of SVChosts; unlike XP where things were more independent and you could disable more features resulting in less SVChost instances. That and XP and Vista are different.

Regardless of your Windows version, you can check out some service slimming guides or goto Black Viper's website and take his advice. Depending on your needs you may be able to cut down the amount of SVChost running, and save some RAM.

XP should never have an SVChost using 50mb. Vista however can.

 

You guys aren't answering his question or even reading it for that matter. It doesn't matter what svchost is, the event log clearly states what the service is and so does Task Manager. I'm having the same exact problem.

I have been for a couple weeks now, it happens pretty constant when it does start (I don't notice it so much earlier in the day). My event log also has thousands of new entries PER SECOND added - which is pretty clearly the cause of the high CPU usage.

@CorySmith2 a few questions:
- First, most importantly, have you figured out what the problem is and how to fix it?
- Are you using an Insider build? I am on the latest Fast Ring Insider build and have noticed it across at least two builds.
- Do use Visual Studio 2017? I seem to always notice it when I'm VS'ing, but I haven't tested anything related to that very closely.



It just idles around 20 - 30% cpu utilization, which is too much for a service that doesn't do shit.





Thanks

 

Running ProcMon I can see what seems to be hundreds (or thousands) of READ operations against the event log file between each of the writes. Included screenshot



The right window is a stack trace of a write operation and left is a read operation. Looks like it's something in the filesystem filter