WMI?

G

George

Running xp pro, sp2. It does run, but some things that I want to do
don't work. In looking into these, I find a number of problems. In
particular, WMI ...

When I open <network connections - properties> for the LAN adapter, it
takes about two MINUTES for the dialog to come up. It takes as much
time again to open the 'advanced' tab. When that does finally open, it
just shows the message ...

" Windows cannot display the properties of this connection. The
Windows Management Instrument (WMI) might be corrupted. "

Pursuing this, the WMImgmt service is indeed stopped, even though it's
set for 'auto'. When I try to start it manually, it gives the error ...

" Could not start [WMI] service ... error 126: specified module
not found "

And, a possibly related factoid: the (system) event log has a lot of
boot-time errors of this sort ...

" The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not
register with DCOM within the required timeout>

, which google hints is a WinMgmt error.

Stuff like that.

I am somewhat out of my depth on this. Any insight would be
appreciated. Even, just as to whether I need to re-install xp, whether
a 'repair install' would help, or (especially) if there's some magic
bullet that will take care of everything.


Thanks,
George
 
M

Michael T.

George said:
Running xp pro, sp2. It does run, but some things that I want to do
don't work. In looking into these, I find a number of problems. In
particular, WMI ...

When I open <network connections - properties> for the LAN adapter, it
takes about two MINUTES for the dialog to come up. It takes as much
time again to open the 'advanced' tab. When that does finally open, it
just shows the message ...

" Windows cannot display the properties of this connection. The
Windows Management Instrument (WMI) might be corrupted. "

Pursuing this, the WMImgmt service is indeed stopped, even though it's
set for 'auto'. When I try to start it manually, it gives the error ...

" Could not start [WMI] service ... error 126: specified module
not found "

And, a possibly related factoid: the (system) event log has a lot of
boot-time errors of this sort ...

" The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not
register with DCOM within the required timeout>

, which google hints is a WinMgmt error.

Stuff like that.

I am somewhat out of my depth on this. Any insight would be
appreciated. Even, just as to whether I need to re-install xp, whether
a 'repair install' would help, or (especially) if there's some magic
bullet that will take care of everything.


Thanks,
George

I would try System File Checker.

1. Insert your Windows XP Pro SP2 CD-ROM. If it auto runs and displays a
window, then close the window.
2. Go to Start > Run and type SFC /SCANNOW in the box named "Open", then
click OK.
3. You should see a dialog titled Windows File Protection.
4. Wait for the progress bar to move all the way to the right.
5. Remove your CD
 
G

George

George said:
Running xp pro, sp2. It does run, but some things that I want to do
don't work. In looking into these, I find a number of problems. In
particular, WMI ...

When I open <network connections - properties> for the LAN adapter, it
takes about two MINUTES for the dialog to come up. It takes as much
time again to open the 'advanced' tab. When that does finally open, it
just shows the message ...

" Windows cannot display the properties of this connection. The
Windows Management Instrument (WMI) might be corrupted. "

Pursuing this, the WMImgmt service is indeed stopped, even though it's
set for 'auto'. When I try to start it manually, it gives the error ...

" Could not start [WMI] service ... error 126: specified module
not found "

And, a possibly related factoid: the (system) event log has a lot of
boot-time errors of this sort ...

" The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not
register with DCOM within the required timeout>

, which google hints is a WinMgmt error.

Stuff like that.

I am somewhat out of my depth on this. Any insight would be
appreciated. Even, just as to whether I need to re-install xp, whether
a 'repair install' would help, or (especially) if there's some magic
bullet that will take care of everything.


Thanks,
George

I would try System File Checker.

1. Insert your Windows XP Pro SP2 CD-ROM. If it auto runs and displays a
window, then close the window.
2. Go to Start > Run and type SFC /SCANNOW in the box named "Open", then
click OK.
3. You should see a dialog titled Windows File Protection.
4. Wait for the progress bar to move all the way to the right.
5. Remove your CD

Initial attempt got:
Windows File Protection could not initiate a scan of protected system
files.

The specific error code is 0x000006ba [The RPC server is unavailable.
].

Same thing after reboot. 'sc query' appears to show RpcSs as "running".

G
 
M

Michael T.

George said:
George said:
Running xp pro, sp2. It does run, but some things that I want to do
don't work. In looking into these, I find a number of problems. In
particular, WMI ...

When I open <network connections - properties> for the LAN adapter, it
takes about two MINUTES for the dialog to come up. It takes as much
time again to open the 'advanced' tab. When that does finally open, it
just shows the message ...

" Windows cannot display the properties of this connection. The
Windows Management Instrument (WMI) might be corrupted. "

Pursuing this, the WMImgmt service is indeed stopped, even though it's
set for 'auto'. When I try to start it manually, it gives the error ...

" Could not start [WMI] service ... error 126: specified module
not found "

And, a possibly related factoid: the (system) event log has a lot of
boot-time errors of this sort ...

" The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not
register with DCOM within the required timeout>

, which Google hints is a WinMgmt error.

Stuff like that.

I am somewhat out of my depth on this. Any insight would be
appreciated. Even, just as to whether I need to re-install xp, whether
a 'repair install' would help, or (especially) if there's some magic
bullet that will take care of everything.


Thanks,
George

I would try System File Checker.

1. Insert your Windows XP Pro SP2 CD-ROM. If it auto runs and displays a
window, then close the window.
2. Go to Start > Run and type SFC /SCANNOW in the box named "Open", then
click OK.
3. You should see a dialog titled Windows File Protection.
4. Wait for the progress bar to move all the way to the right.
5. Remove your CD

Initial attempt got:
Windows File Protection could not initiate a scan of protected system
files.

The specific error code is 0x000006ba [The RPC server is unavailable.
].

Same thing after reboot. 'sc query' appears to show RpcSs as "running".

G

I wonder if these instructions for Win2K apply to XP Pro. I would test this
for you but I am running XP Home.
http://support.microsoft.com/?kbid=296241
 
M

Michael T.

George said:
I would try System File Checker.

1. Insert your Windows XP Pro SP2 CD-ROM. If it auto runs and displays a
window, then close the window.
2. Go to Start > Run and type SFC /SCANNOW in the box named "Open", then
click OK.
3. You should see a dialog titled Windows File Protection.
4. Wait for the progress bar to move all the way to the right.
5. Remove your CD

Initial attempt got:
Windows File Protection could not initiate a scan of protected system
files.

The specific error code is 0x000006ba [The RPC server is unavailable.
].

Same thing after reboot. 'sc query' appears to show RpcSs as "running".

G

See if this discussion thread helps.
http://tinyurl.com/2zcx7m
 
G

Gerry

George

What are your anti-virus and anti-spyware arrangements?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
George said:
George said:
Running xp pro, sp2. It does run, but some things that I want to do
don't work. In looking into these, I find a number of problems. In
particular, WMI ...

When I open <network connections - properties> for the LAN adapter,
it takes about two MINUTES for the dialog to come up. It takes as
much time again to open the 'advanced' tab. When that does finally
open, it just shows the message ...

" Windows cannot display the properties of this connection. The
Windows Management Instrument (WMI) might be corrupted. "

Pursuing this, the WMImgmt service is indeed stopped, even though
it's set for 'auto'. When I try to start it manually, it gives the
error ...

" Could not start [WMI] service ... error 126: specified module
not found "

And, a possibly related factoid: the (system) event log has a lot of
boot-time errors of this sort ...

" The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not
register with DCOM within the required timeout>

, which google hints is a WinMgmt error.

Stuff like that.

I am somewhat out of my depth on this. Any insight would be
appreciated. Even, just as to whether I need to re-install xp,
whether a 'repair install' would help, or (especially) if there's
some magic bullet that will take care of everything.


Thanks,
George

I would try System File Checker.

1. Insert your Windows XP Pro SP2 CD-ROM. If it auto runs and
displays a window, then close the window.
2. Go to Start > Run and type SFC /SCANNOW in the box named "Open",
then click OK.
3. You should see a dialog titled Windows File Protection.
4. Wait for the progress bar to move all the way to the right.
5. Remove your CD

Initial attempt got:
Windows File Protection could not initiate a scan of protected system
files.

The specific error code is 0x000006ba [The RPC server is unavailable.
].

Same thing after reboot. 'sc query' appears to show RpcSs as
"running".

G
 
N

nass

George said:
Running xp pro, sp2. It does run, but some things that I want to do
don't work. In looking into these, I find a number of problems. In
particular, WMI ...

When I open <network connections - properties> for the LAN adapter, it
takes about two MINUTES for the dialog to come up. It takes as much
time again to open the 'advanced' tab. When that does finally open, it
just shows the message ...

" Windows cannot display the properties of this connection. The
Windows Management Instrument (WMI) might be corrupted. "

Pursuing this, the WMImgmt service is indeed stopped, even though it's
set for 'auto'. When I try to start it manually, it gives the error ...

" Could not start [WMI] service ... error 126: specified module
not found "

And, a possibly related factoid: the (system) event log has a lot of
boot-time errors of this sort ...

" The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not
register with DCOM within the required timeout>

, which google hints is a WinMgmt error.

Stuff like that.

I am somewhat out of my depth on this. Any insight would be
appreciated. Even, just as to whether I need to re-install xp, whether
a 'repair install' would help, or (especially) if there's some magic
bullet that will take care of everything.
Thanks,
George

Hi George,
Make sure the machine is not crippled with malware and viruses, by perfuming
these cleaning steps:
Go through these Cleaning steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx


Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine (offline scanner):
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

After the scan run disk cleanup on your drive.

Then try to Repair the WMI as follow:
MS:: <Quote>
Stopping and Starting the WMI Service

If you are experiencing problems with the WMI service you might need to
manually stop and restart the service. Before doing so you should enable
WMI’s verbose logging option. This provides additional information in the WMI
error logs that might be useful in diagnosing the problem. To enable verbose
logging using the WMI control, do the following:
1.Open the Computer Management MMC snap-in and expand Services and
Applications.
2.Right-click WMI Control and click Properties.
3.In the WMI Control Properties dialog box, on the Logging tab, select
Verbose (includes extra information for Microsoft troubleshooting) and then
click OK.
Alternatively, you can modify the following registry values:
•Set HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\Logging to 2.
•Set HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\Logging File Max Size
to 4000000.
After enabling verbose logging try stopping the WMI service by typing the
following
Open a run command prompt:
net stop winmgmt

If the net stop command fails you can force the service to stop by typing
this:
winmgmt /kill

Important. If you are running Windows XP or Windows Server 2003 the WMI
service runs inside a process named Svchost; this process contains other
services as well as WMI. Because of that, you should not try to stop
Svchost;
if you succeed, you’ll stop all the other services running in that process
as
well. Instead, use net stop winmgmt or winmgmt /kill in order to stop just
the WMI service.

You can then restart the service by typing the following command:
net start winmgmt

If the service does not restart try rebooting the computer to see if that
corrects the problem.
If it does not, then continue reading.
MS:: </Quote>

Open a run command and try to re-register these DLLs:
regsvr32 hnetcfg.dll
regsvr32 netcfgx.dll
regsvr32 netman.dll
regsvr32 atl.dll
regsvr32 netshell.dll

"WMI Diagnosis Utility"
http://www.microsoft.com/technet/scriptcenter/topics/help/wmidiag.mspx

Systems that have changed the default Access Control List permissions on the
%windir%\registration directory may experience various problems after you
install the Microsoft Security Bulletin MS05-051 for COM+ and MS DTC
http://support.microsoft.com/kb/909444
Also you can download the DiagWMI from here and some good solutions on the
page:
http://windowsxp.mvps.org/repairwmi.htm.

<Ramesh Quote>:

* Insert your Windows XP CD into the drive.

Important note: If you've installed Service Pack 1 or 2, you need to
insert your Windows XP CD (with Service Pack integration, called as the
Slipstreamed Windows XP CD). If you don't have one, you may point to the
%Windir%\ServicePackFiles\i386 folder for the updated DLLs required during
WMI repair. Or, you may create a Slipstreamed XP CD, and insert it when
prompted.

* Click Start, Run and type the following command, and press enter:

rundll32.exe setupapi,InstallHinfSection WBEM 132 %windir%\inf\wbemoc.inf

* Repair process should take few minutes to complete.
Then, restart Windows for the changes to take effect
</End of Quote>

HTH.
Let us know.
nass
 
G

George

George

What are your anti-virus and anti-spyware arrangements?

AV : AVG free
Spyware : periodically run spybot & adaware
also teatimer (registry guard)
firewall: ZoneAlarm free
browser : firefox
I only run IE if URL demands it, which is seldom.
mail : eudora
internet: DSL, via router and separate DSL modem.
This consistently passes the "shields up" tests.

I installed xp on a new HDD in 9/05. Since then, AVG's 'VAULT' shows 8
viruses (all "I-worm/swen A"), and two "Trojans" ("Generic KLW" and
"Agent AO"). The most recent of these is dated 12/05. The WMI problems
started some time before 5/07. Per my notes on a somewhat related
issue, WMI was probably OK in 6/06.

G
 
G

George

George

Are you able to attempt a Repair Install of Windows XP?
http://www.michaelstevenstech.com/XPrepairinstall.htm

You will need your Windows XP CD.

Well, ... my XP CD is pre-SP2. So, the repair install is blocked
("installed version is newer", IIRC). Instead, per
- http://support.microsoft.com/?kbid=315341 ("Reinstall Windows XP
by using Windows XP")
and
- http://support.microsoft.com/kb/900871/ ...
("How to integrate Windows XP Service Pack 2 files into the
Windows XP installation folder")

.... I attempted an SP2-level repair install. That started OK, but
failed, because it couldn't find some files. (So far, it's called out
azlq4mld.sys, aovnlxea.sys, a8xkmk64.sys, anxluupf.sys, and
almnct2p.sys.) I have no idea what to make of that.

G
 
G

Gerry

George

Did you follow one of the procedures in KB 900871 first? What happened?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
G

George

George

Did you follow one of the procedures in KB 900871 first? What happened?

Yes. 'WindowsXP-KB835935-SP2-ENU.exe /integrate:C:\XPCD'

A message box came up, saying "copying files". When this finished,
there was a message, "integrated install has successfully completed"

Then, I did 'C:\XPCD\i386\winnt32'
This started OK, but then couldn't find those files. I hit 'retry', but
just got the error again. Then, I hit 'skip'. It shortly went to a
'reboot?' dialog. When I did that, it came up in a black screen
reporting the same file not found, "hit any key".

If it matters, each time I ran winnnt32, it reported a different file
not found. Since we were still in the 'a's, I decided not to just keep
beating on it.

G
 
G

George

Hi George,
Make sure the machine is not crippled with malware and viruses, by perfuming
these cleaning steps:
Go through these Cleaning steps: ...
Scan for malware from here:
SuperAntispyware - Free

All that found was some tracking cookies.

Found some garbled keys (security\policy\secrets\SAC, \SAI; and one in
hklm\software\microsoft\shared tools\
Then try to Repair the WMI as follow: ...
net stop winmgmt

Did that. ... "The Windows Management Instrumentation service is not
started."

If the net stop command fails you can force the service to stop by typing
this:
winmgmt /kill

Did that. No error message.
You can then restart the service by typing the following command:
net start winmgmt

Failed, error 126: "module not found"

If the service does not restart try rebooting the computer to see if that
corrects the problem. ...
Nope.

Open a run command and try to re-register these DLLs:
regsvr32 hnetcfg.dll
regsvr32 netcfgx.dll
regsvr32 netman.dll
regsvr32 atl.dll
regsvr32 netshell.dll

All said OK. No change in WMI behavior.

"WMI Diagnosis Utility"
http://www.microsoft.com/technet/scriptcenter/topics/help/wmidiag.mspx

Systems that have changed the default Access Control List permissions on the
%windir%\registration directory may experience various problems after you
install the Microsoft Security Bulletin MS05-051 for COM+ and MS DTC

If it matters, "COM+ system application" service is stopped (set to
manual). "COM+ events system" is running.

Also you can download the DiagWMI ...

The first 'bad' thing I see in the report is that WINMGMT service
"failed to start". I tried the things listed in the report: RPCSS
service is running. WINMGMT is set to "AUTO". I ran 'wmidiag
checkconsistency', but didn't see anything useful.

If anyone wants to see the report, I can post it.
<Ramesh Quote>:

* Insert your Windows XP CD into the drive.

Important note: If you've installed Service Pack 1 or 2, you need to
... create a Slipstreamed XP CD, and insert it when prompted.

Just to be clear, I don't have a slipstreamed CD: I did this to a folder
on c:, per http://support.microsoft.com/?kbid=315341
... Run ...
rundll32.exe setupapi,InstallHinfSection WBEM 132 %windir%\inf\wbemoc.inf

This immediately popped up a message box, "installation failed".

HTH.
Let us know.
nass

Thanks.
Running out of bullets.

G
 
N

nass

George said:
All that found was some tracking cookies.


Found some garbled keys (security\policy\secrets\SAC, \SAI; and one in
hklm\software\microsoft\shared tools\



Did that. ... "The Windows Management Instrumentation service is not
started."



Did that. No error message.



Failed, error 126: "module not found"



All said OK. No change in WMI behavior.



If it matters, "COM+ system application" service is stopped (set to
manual). "COM+ events system" is running.



The first 'bad' thing I see in the report is that WINMGMT service
"failed to start". I tried the things listed in the report: RPCSS
service is running. WINMGMT is set to "AUTO". I ran 'wmidiag
checkconsistency', but didn't see anything useful.

If anyone wants to see the report, I can post it.


Just to be clear, I don't have a slipstreamed CD: I did this to a folder
on c:, per http://support.microsoft.com/?kbid=315341


This immediately popped up a message box, "installation failed".



Thanks.
Running out of bullets.

Your best option is to backup the data on removable Storage and perform a
clean Install of the Operating system.
HTH.
nass
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top