Topics

1

Tweaking.com Support & Help / Windows 7 and WMI revisited

« on: September 29, 2019, 04:31:11 am »

Please see my original post made on: September 05, 2017, 09:27:59 PM :

https://www.tweaking.com/forums/index.php/topic,5442.0.html

I cannot understand why after all this time this problem still exists and has not been fixed.

Using Windows Repair Portable 4.5.5 I had occasion to carry out the standard repair yesterday and sure enough the registry value in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt's Image path has  been reset to netsvcs.

This disables WMI and Security Centre

Please adjust whatever repair module that alters this setting to set:
Key Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt
Value Name: ImagePath
Value: %systemroot%\system32\svchost.exe -k winmgmt
 

See attached correct WMI Services screenshot after  netsvcs has been replaced with winmgmt.

Thank you very much

2

Tweaking.com Support & Help / Windows 7 and WMI

« on: September 05, 2017, 09:27:59 pm »

Hello

I've been using  windows_repair_all_in_one Free version for years (as well as CleanMem) and it has been a lifesaver on many, many occasions for which I am eternally grateful.

I am on win 7 Ultimate and over the last couple of months I've had some severe problems which seemed to have been resolved by doing a repair installation however there is one  recurring problem which occurs whenever I do a repair of the WMI  and restore services in Safemode - not sure if this is caused by  Windows Repair or some bug in my system which is reported as being clean by Avast and HitmanPro.

WMI service would not start nor the Security Center service. Malwarebytes Anti-Ransomware Service I've just discovered relies on WMI to be running and I could not work out why it kept telling me that it had stopped working or clicking on the Fix it button did not work.

I also kept getting "Error 1083  The executable program that this service is configured to run in does not implement the service" whenever I clicked on the Dependencies tab in services.msc. Tried all sorts of repairs to no avail and was convinced that I had a hidden rootkit lurking somewhere but undetected by any of the tools like Combofix and others.

After a lot of searching and researching I finally came across the solution. It seems ( I may be wrong, please correct me if I am) that WR adds the following path for WMI which causes it and all associated dependencies to fail:

C:\Windows\system32\svchost.exe -k netsvcs

I've discovered that changing HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt's Image path to:

%systemroot%\system32\svchost.exe -k winmgmt

has solved all the problems I've been having with WMI and the other services.

Can you please check that WR does indeed add "netsvcs" to the path when doing Repair WMI  / Reset Service Permissions /  Restore Important important Windows Services / Set Windows Services to Default Startup and if so please replace it with "winmgmt"?

Thank you.

I also notice that one of WR's scripts enables the Security Centre in Safemode ( WMI Repair, I think) can you  please let me know if this can be achieved with the Technicians Toolbox or by other means.

Thanks again for a marvelous and indispensable set of programs, only wished I could afford the Pro versions to help support your altruism, dedication and responsiveness  to your grateful users.

All the best.

PS - I recall asking this query years ago and not sure if thing have changed since but is it also possible to add an option to restore Windows services according to Black Viper's !Safe_W7_reg configurations - mine is win32  (http://www.blackviper.com/downloads/Win7/Registry_Files/Safe_W7_Ultimate_32_SP1_Start_v100.zip)?

Cheers.

3

Tweaking.com Support & Help / Windows Repair (All in One)

« on: July 30, 2014, 02:09:37 am »

Hi

Been using Windows Repair for ages and it has saved me many times to restore my  XP computer after malware  attacks and other problems.

I do have a query regarding the restoration of Services.

I have ports 137, 138.139, 1900, 2869.445 blocked as a security measure since someone hijacked my computer and caused me heaps of trouble - still not sure if it safe - and I notice that those services are restored in the registry after doing a repair.

I use Windows Worms Doors Cleaner to disable those services as well blocking the ports with my firewall.

Is it possible to have an option to have those services disabled as part of a security considerations in Windows Repair (All in One) and Set Windows Services To Default Startup?

Thanks and also many thanks for great programs that have proven to be life savers. much appreciated.