WMI Error

G

Guest

I usually get either of the following errors or both of them together every
time my Windows starts up:
"WMI encountered a problem and needed to close.
EventType : BEX P1 : wmiprvse.exe P2 : 5.1.2600.2180 P3 : 41107bbd
P4 : unknown P5 : 0.0.0.0 P6 : 00000000 P7 : 00d7e970
P8 : c0000005 P9 : 00000008 "
The time on the error message shows that this error occurred several hours
before or sometimes even a day before. I'm wondering why I didn't get this
error at the time that the error occurred. The other error which I receive is:
"wmiprvse.exe - Application Error
The instruction at "0x00d7e970" referenced memory at "0x00000000". The
memory could not be "written". This error has OK/Cancel options.
I have Windows XP Pro SP2 with IE7 installed.
If anyone knows how to fix this problem, please let me know. Thank you.
 
G

Guest

Eddie said:
I usually get either of the following errors or both of them together every
time my Windows starts up:
"WMI encountered a problem and needed to close.
EventType : BEX P1 : wmiprvse.exe P2 : 5.1.2600.2180 P3 : 41107bbd
P4 : unknown P5 : 0.0.0.0 P6 : 00000000 P7 : 00d7e970
P8 : c0000005 P9 : 00000008 "
The time on the error message shows that this error occurred several hours
before or sometimes even a day before. I'm wondering why I didn't get this
error at the time that the error occurred. The other error which I receive is:
"wmiprvse.exe - Application Error
The instruction at "0x00d7e970" referenced memory at "0x00000000". The
memory could not be "written". This error has OK/Cancel options.
I have Windows XP Pro SP2 with IE7 installed.
If anyone knows how to fix this problem, please let me know. Thank you.


WMI is a Windows Management Instrumentation, make sure your machine is clean
and fully up2date with security updates.
Windows Management Instrumentation Cannot Register Permanent Event Consumer
with Dynamic Classes
http://support.microsoft.com/kb/319322
http://www.microsoft.com/communitie...5dc71973d43c&lang=en&cr=US&sloc=en-us&m=1&p=1
http://www.microsoft.com/communitie...5dc71973d43c&lang=en&cr=US&sloc=en-us&m=1&p=1
Microsoft's WMI diagnosis utility
http://windowsxp.mvps.org/repairwmi.htm
Error Message: The Windows Management Instrumentation (WMI) Information
Might Be Corrupted
http://support.microsoft.com/default.aspx?scid=kb;en-us;823775&Product=winxp
My guess you may have a Memory Leak on the system, but you can be sure by
looking in the event viewer for error messages(X).
Also try to see what running in the background by downloading these tools:
"Process Explorer for Windows v10.21"
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

"AutoRuns for Windows v8.61 By Mark Russinovich and Bryce Cogswell"
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx
HTH.
nass
===
www.nasstec.co.uk
 
G

Guest

Hi Nass, sorry for the late reply. I tried your solutions but none of them
solved the problem. The WMI Diagnosis Utility found no problem and said
everything is OK. I looked in the event viewer for the error message, but
there was no memory leak report. Also, no suspicious process is running in
the background. This problem has even become more annoying since I receive
several Data Execution Prevention errors followed by the errors I mentioned
before at Windows startup. Any other solution? Please let me know. Thanks.
 
G

Guest

Hi Eddie,
Open a run command and type in:
services.msc click [OK] on the services control panel make sure this
service started:
WMI Performance Adapter Manual
Or you can set it to Auto.
All Posts about DEP and answers here
http://groups.google.com/group/microsoft.public.windowsxp.help_and_support/msg/5fa3cd13b9398122

= Try to Turn the DEP OFF by doing this:
Right click My Computer and select properties, then on the System properties
click on Advanced Tab.
Then click on StartUp and Recovery Button, on the StartUp and Recovery
window click on Edit Button under System Startup and edit like this:

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
Professional" /fastdetect /NoExecute=AlwaysOff.

Then click On Performance Button under Advanced tab, on Performance Options
click on Data Execution Prevention Tab and check this Radio Button:
(*) Turn on DEP for essential windows programs and services only.

All About DEP
http://www.microsoft.com/communitie...S&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-u
http://www.microsoft.com/communitie...S&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-u
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us
Make sure your computer is clean from malware and Viruses

If you have a third party shell running in the background can cause this
error to occur and an BHO on your Browser so with Process Explorer you will
see which is causing this error.
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit or you can send them here in your next
post) and click [OK] to confirm your Changes.

Click on Advanced Tab and scroll down under the browsing option and uncheck
this box:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) and click Apply
then OK to close your IE Properties.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2... You need to be sure your system is clean from malware and Viruses by
scanning for them
Scan for malwares from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
Run a scan from here on-line:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
http://www.lavasoft.com/products/ad-aware_se_personal.php
http://www.safer-networking.org ; for Spybot S&D
Run disk Clean Up and check all the boxes to clean up all temps.
HTH.
Regards,
nass
 
G

Guest

Hi Nass,
The WMI performance adapter was not started and I started it and set it to
automatic. I should mention that the DEP error refers to WMI. So should I
look for third parties which are associated with WMI or everything is related
to it? I went through all running processes and startup items and didn't find
anything wrong. Most of them belong to Microsoft and the rest are for safe
softwares. Is it safe to turn DEP off since it will not protect my system
from any malware code execution? Should I post a Hijackthis report to see if
anything is wrong? Please let me know. Thanks.

nass said:
Hi Eddie,
Open a run command and type in:
services.msc click [OK] on the services control panel make sure this
service started:
WMI Performance Adapter Manual
Or you can set it to Auto.
All Posts about DEP and answers here:
http://groups.google.com/group/microsoft.public.windowsxp.help_and_support/msg/5fa3cd13b9398122

= Try to Turn the DEP OFF by doing this:
Right click My Computer and select properties, then on the System properties
click on Advanced Tab.
Then click on StartUp and Recovery Button, on the StartUp and Recovery
window click on Edit Button under System Startup and edit like this:

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
Professional" /fastdetect /NoExecute=AlwaysOff.

Then click On Performance Button under Advanced tab, on Performance Options
click on Data Execution Prevention Tab and check this Radio Button:
(*) Turn on DEP for essential windows programs and services only.

All About DEP:
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us
Make sure your computer is clean from malware and Viruses

If you have a third party shell running in the background can cause this
error to occur and an BHO on your Browser so with Process Explorer you will
see which is causing this error.
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit or you can send them here in your next
post) and click [OK] to confirm your Changes.

Click on Advanced Tab and scroll down under the browsing option and uncheck
this box:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) and click Apply
then OK to close your IE Properties.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2... You need to be sure your system is clean from malware and Viruses by
scanning for them
Scan for malwares from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
Run a scan from here on-line:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
http://www.lavasoft.com/products/ad-aware_se_personal.php
http://www.safer-networking.org ; for Spybot S&D
Run disk Clean Up and check all the boxes to clean up all temps.
HTH.
Regards,
nass
-----
www.nasstec.co.uk

Eddie said:
Hi Nass, sorry for the late reply. I tried your solutions but none of them
solved the problem. The WMI Diagnosis Utility found no problem and said
everything is OK. I looked in the event viewer for the error message, but
there was no memory leak report. Also, no suspicious process is running in
the background. This problem has even become more annoying since I receive
several Data Execution Prevention errors followed by the errors I mentioned
before at Windows startup. Any other solution? Please let me know. Thanks.
 
G

Guest

Hi Eddie,
Yes, try to look for third-party, like the Add-Ons mentioned in my earlier
post.
About Turning OFF the DEP protection, you can if you have a Good Anti-Virus
and Firewall that can protect you from malicious code been installed on your
machine.
Yes, best if you run the Hijackthis and post the log for the relevant forum
for analysis.
P.S does starting the WMI service change any thing?.
HTH.
nass

Eddie said:
Hi Nass,
The WMI performance adapter was not started and I started it and set it to
automatic. I should mention that the DEP error refers to WMI. So should I
look for third parties which are associated with WMI or everything is related
to it? I went through all running processes and startup items and didn't find
anything wrong. Most of them belong to Microsoft and the rest are for safe
softwares. Is it safe to turn DEP off since it will not protect my system
from any malware code execution? Should I post a Hijackthis report to see if
anything is wrong? Please let me know. Thanks.

nass said:
Hi Eddie,
Open a run command and type in:
services.msc click [OK] on the services control panel make sure this
service started:
WMI Performance Adapter Manual
Or you can set it to Auto.
All Posts about DEP and answers here:
http://groups.google.com/group/microsoft.public.windowsxp.help_and_support/msg/5fa3cd13b9398122

= Try to Turn the DEP OFF by doing this:
Right click My Computer and select properties, then on the System properties
click on Advanced Tab.
Then click on StartUp and Recovery Button, on the StartUp and Recovery
window click on Edit Button under System Startup and edit like this:

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
Professional" /fastdetect /NoExecute=AlwaysOff.

Then click On Performance Button under Advanced tab, on Performance Options
click on Data Execution Prevention Tab and check this Radio Button:
(*) Turn on DEP for essential windows programs and services only.

All About DEP:
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us
Make sure your computer is clean from malware and Viruses

If you have a third party shell running in the background can cause this
error to occur and an BHO on your Browser so with Process Explorer you will
see which is causing this error.
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit or you can send them here in your next
post) and click [OK] to confirm your Changes.

Click on Advanced Tab and scroll down under the browsing option and uncheck
this box:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) and click Apply
then OK to close your IE Properties.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2... You need to be sure your system is clean from malware and Viruses by
scanning for them
Scan for malwares from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
Run a scan from here on-line:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
http://www.lavasoft.com/products/ad-aware_se_personal.php
http://www.safer-networking.org ; for Spybot S&D
Run disk Clean Up and check all the boxes to clean up all temps.
HTH.
Regards,
nass
-----
www.nasstec.co.uk

Eddie said:
Hi Nass, sorry for the late reply. I tried your solutions but none of them
solved the problem. The WMI Diagnosis Utility found no problem and said
everything is OK. I looked in the event viewer for the error message, but
there was no memory leak report. Also, no suspicious process is running in
the background. This problem has even become more annoying since I receive
several Data Execution Prevention errors followed by the errors I mentioned
before at Windows startup. Any other solution? Please let me know. Thanks.

:



:

I usually get either of the following errors or both of them together every
time my Windows starts up:
"WMI encountered a problem and needed to close.
EventType : BEX P1 : wmiprvse.exe P2 : 5.1.2600.2180 P3 : 41107bbd
P4 : unknown P5 : 0.0.0.0 P6 : 00000000 P7 : 00d7e970
P8 : c0000005 P9 : 00000008 "
The time on the error message shows that this error occurred several hours
before or sometimes even a day before. I'm wondering why I didn't get this
error at the time that the error occurred. The other error which I receive is:
"wmiprvse.exe - Application Error
The instruction at "0x00d7e970" referenced memory at "0x00000000". The
memory could not be "written". This error has OK/Cancel options.
I have Windows XP Pro SP2 with IE7 installed.
If anyone knows how to fix this problem, please let me know. Thank you.


WMI is a Windows Management Instrumentation, make sure your machine is clean
and fully up2date with security updates.
Windows Management Instrumentation Cannot Register Permanent Event Consumer
with Dynamic Classes
http://support.microsoft.com/kb/319322
http://www.microsoft.com/communitie...5dc71973d43c&lang=en&cr=US&sloc=en-us&m=1&p=1
http://www.microsoft.com/communitie...5dc71973d43c&lang=en&cr=US&sloc=en-us&m=1&p=1
Microsoft's WMI diagnosis utility
http://windowsxp.mvps.org/repairwmi.htm
Error Message: The Windows Management Instrumentation (WMI) Information
Might Be Corrupted
http://support.microsoft.com/default.aspx?scid=kb;en-us;823775&Product=winxp
My guess you may have a Memory Leak on the system, but you can be sure by
looking in the event viewer for error messages(X).
Also try to see what running in the background by downloading these tools:
"Process Explorer for Windows v10.21"
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

"AutoRuns for Windows v8.61 By Mark Russinovich and Bryce Cogswell"
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx
HTH.
nass
===
www.nasstec.co.uk
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top