Event ID 7023 System Event Notification service terminated. Invalid access to memory location

tolenmay
tolenmay used Ask the Experts™
on
I have a Windows 2003 server that acts as a database for our website.  Multiple times a day (often many in a row) I'm getting Event ID 7023 with the message:
The System Event Notification service terminated with the following error:
Invalid access to memory location.

I haven't found this error online related to the System Event Notification service.  I found an article saying to run a checkdisk and I repaired some errors that were found but I still get the error.  Others say some sort of trojan. I'm at a loss.  Malwarebytes doesn't notice anything.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
systechSenior Technical Lead

Commented:
Hi,

Open services.msc, scroll down to the System Event Notification Service, and restart it. Are you still getting the error?

Also, refer these links http://support.microsoft.com/kb/910666

http://support.microsoft.com/kb/895575

Author

Commented:
Yes, when I restart the System Event Notification Service, I get the same error.
I looked at the articles and even downloaded the hotfix - it does not apply because I have Service Pack 2 (and all the latest updates) for Windows 2003.  Since the articles reference memory, I checked - the machine has 2GB (meaning I should probably add more), but I guess that rules out the PAE kernel, since it's only above 4GB.

When the server restarts, I do have a lot (I think 11) other services that hang during restart but starting them manually works.  The System Event Notification one, however, won't start.

Author

Commented:
FYI - when I try to start the System Event Notification Service, I get an error 998 pop up on the screen "Could not start the System Event Notification service on Local Computer.  Error 998: Invalid access to memory location."

If I try to change it from local system account to administrator, there is also an error:
Could not start the System Event Notification service on local computer:
Error 1079: The account specified for this service is different from the account specified for other services running in the same process.
Commented:
In the end we were changing to a dedicated web host anyway so I didn't pursue what was wrong with the old server.

Author

Commented:
We switched to a different web solution so the question became invalid.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial