WMI Error

[Guest]

I have begun getting "WMI has encountered a problem...." error messages
shortly after bootup. They continue every 15-30 seconds until just about
every service shuts down. I cannot print, run virus scans, share files (to
try to offload so I can reinstall OS), run any registry editors/cleaners.
Basically, I'm stuck.
To the best of my knowledge, the only changes have been auto updates. Here
is the error report sent to MS:

szAppName : wmiprvse.exe szAppVer : 5.1.2600.2180
szModName : kernel32.dll szModVer : 5.1.2600.2945 offset : 00018943

 

[Guest]

I have begun getting "WMI has encountered a problem...." error messages
shortly after bootup. They continue every 15-30 seconds until just about
every service shuts down. I cannot print, run virus scans, share files (to
try to offload so I can reinstall OS), run any registry editors/cleaners.
Basically, I'm stuck.
To the best of my knowledge, the only changes have been auto updates. Here
is the error report sent to MS:

szAppName : wmiprvse.exe szAppVer : 5.1.2600.2180
szModName : kernel32.dll szModVer : 5.1.2600.2945 offset : 00018943

MS:: <Quote>
Stopping and Starting the WMI Service

If you are experiencing problems with the WMI service you might need to
manually stop and restart the service. Before doing so you should enable
WMI’s verbose logging option. This provides additional information in the WMI
error logs that might be useful in diagnosing the problem. To enable verbose
logging using the WMI control, do the following:
1.Open the Computer Management MMC snap-in and expand Services and
Applications.
2.Right-click WMI Control and click Properties.
3.In the WMI Control Properties dialog box, on the Logging tab, select
Verbose (includes extra information for Microsoft troubleshooting) and then
click OK.
Alternatively, you can modify the following registry values:
•Set HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\Logging to 2.
•Set HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\Logging File Max Size
to 4000000.
After enabling verbose logging try stopping the WMI service by typing the
following
Open a run command prompt:
net stop winmgmt

If the net stop command fails you can force the service to stop by typing
this:
winmgmt /kill

Important. If you are running Windows XP or Windows Server 2003 the WMI
service runs inside a process named Svchost; this process contains other
services as well as WMI. Because of that, you should not try to stop
Svchost;
if you succeed, you’ll stop all the other services running in that process
as
well. Instead, use net stop winmgmt or winmgmt /kill in order to stop just
the WMI service.

You can then restart the service by typing the following command:
net start winmgmt

If the service does not restart try rebooting the computer to see if that
corrects the problem.
If it does not, then continue reading.
MS:: </Quote>

"WMI Diagnosis Utility"
http://www.microsoft.com/technet/scriptcenter/topics/help/wmidiag.mspx

Systems that have changed the default Access Control List permissions on the
%windir%\registration directory may experience various problems after you
install the Microsoft Security Bulletin MS05-051 for COM+ and MS DTC
http://support.microsoft.com/kb/909444
Also you can download the DiagWMI from here and some good solutions on the
page:
http://windowsxp.mvps.org/repairwmi.htm.
HTH.
Let us know.
nass

 

[Wesley Vogel]

If you used a real newsreader, instead of that stupid CDO, you wouldn't have
this crap: ’ ’ • • ’ll ’ll when you copy and paste something.

CDO cannot handle curly quotes ’ ’ ’ ’ ” ” ” ” or Alt + 0149 bullets • • • •

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

I appreciate your advice Wes, but it will do for me LOL.
Regards,
nass
Û© Û© Û©

 

[Guest]

I could not use the Computer Management MMC snap in and had to edit the
registry instead. The properties tab wouldn't open because of this problem
(WMI errors continuously pop up when trying).

I was also able to stop/start the service (it is running), but I still get
the errors popping up every 10-15 seconds and nothing else is working still.
I've located several logs in the wbem/logs directory, but don't know which
apply.

I also tried to download/run the wmidiag utility. I downloaded it, but the
word doc dies and nothing happens when I run the utility.

I was able to get the WMI Control properties to come up and it showed:
Win32_processorWMI: ProviderLoadFailure
Win32_WMISetting: Successful
SecurityInformation: Successful
Win32_OperatingSystem: Windows: ServerExecutionFailure

Would doing an OS repair fix this?

Thanks for your help.

 

[Guest]

Hi Saje,
Open a run command and try to re-register these DLLs:
regsvr32 hnetcfg.dll
regsvr32 netcfgx.dll
regsvr32 netman.dll
regsvr32 atl.dll
regsvr32 netshell.dll
Also try repair the WMI as descriped here:
http://groups.google.com/group/microsoft.public.win32.programmer.wmi/msg/1da6ab3690bc75a0
What Firewall/Anti-Virus you have running on your machine?.
HTH.
Let us know.
nass

 

[Guest]

All DLLs re-registered successfully (am still getting the WMI error screen
every ~15 sec).

I am working through the WMI repair as referenced. I am all the way down to
the cross-checking of the PID, and have found no problems/errors.

FYI - the WMI Repair utility actually did run - it just popped up a result
log. It is pretty frightening. Lots of errors and scary talk. Is this
something I can send you (way too much to type here)?

I am running Norton System Works 2006 (Personal Firewall, Internet Security,
Antivirus). Windows firewall is shut down.

 

[Guest]

Note: some Anti-Virus and other application will contribute in the
corruption or damaging the WMI files, so try to turn the Firewall OFF while
attempting the Repair steps.
All the DLL and the EXE are located in this path:

C:\Windows\system32\wbem
You can re-register all of them or try the see the list suggested in the WMI
Repair utility, list the files and try to copy them from a CD.

How to Repair the WMI perform the following steps:

<Ramesh Quote>:

* Insert your Windows XP CD into the drive.

Important note: If you've installed Service Pack 1 or 2, you need to
insert your Windows XP CD (with Service Pack integration, called as the
Slipstreamed Windows XP CD). If you don't have one, you may point to the
%Windir%\ServicePackFiles\i386 folder for the updated DLLs required during
WMI repair. Or, you may create a Slipstreamed XP CD, and insert it when
prompted.

* Click Start, Run and type the following command, and press enter:

rundll32.exe setupapi,InstallHinfSection WBEM 132 %windir%\inf\wbemoc.inf

* Repair process should take few minutes to complete.
Then, restart Windows for the changes to take effect
</End of Quote>

I will be sure the Machine is clean from malwares by scanning for them if
you have n Anti-Spyware software or from here:
http://www.lavasoft.com/products/ad-aware_se_personal.php
http://www.safer-networking.org for Spybot S&D.
As Norton is anti-Virus not complete Anti-Malwares/Graywares it will be wise
to use a complete Anti-Spyware application.
Did you run the System File Checker?.
HTH.
Let us know.
nass

 

[Wesley Vogel]

As Doris Day once sang, "Que Sera, Sera (Whatever Will Be, Will Be)". ;-)

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Nass -

Repairing the WMI as described below did the trick! Much appreciated!!!
I do have several malware/spyware scanners loaded to. However, with this WMI
problem, none would run. Your lavasoft suggestion did run, so I was able to
scan and have confidence this problem was not malware/spyware induced.

Thanks again for all your help!!

 

[Guest]

Glad to help Saje, I think you need to uninstall the other Anti-Sypware
scanner that corrupted and reinstall if you wish or stick with Lavasoft.
I will keep an eye on thing and on the Anti-virus may is the culprit for
corrupting other software.
Thanks for taking the time to post back with your result and good luck.
Regards,
nass