Main Forum > Tweaking.com Support & Help

Windows 7 and WMI

(1/4) > >>

plox:
Hello

I've been using  windows_repair_all_in_one Free version for years (as well as CleanMem) and it has been a lifesaver on many, many occasions for which I am eternally grateful.

I am on win 7 Ultimate and over the last couple of months I've had some severe problems which seemed to have been resolved by doing a repair installation however there is one  recurring problem which occurs whenever I do a repair of the WMI  and restore services in Safemode - not sure if this is caused by  Windows Repair or some bug in my system which is reported as being clean by Avast and HitmanPro.

WMI service would not start nor the Security Center service. Malwarebytes Anti-Ransomware Service I've just discovered relies on WMI to be running and I could not work out why it kept telling me that it had stopped working or clicking on the Fix it button did not work.

I also kept getting "Error 1083  The executable program that this service is configured to run in does not implement the service" whenever I clicked on the Dependencies tab in services.msc. Tried all sorts of repairs to no avail and was convinced that I had a hidden rootkit lurking somewhere but undetected by any of the tools like Combofix and others.

After a lot of searching and researching I finally came across the solution. It seems ( I may be wrong, please correct me if I am) that WR adds the following path for WMI which causes it and all associated dependencies to fail:

C:\Windows\system32\svchost.exe -k netsvcs

I've discovered that changing HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt's Image path to:

%systemroot%\system32\svchost.exe -k winmgmt

has solved all the problems I've been having with WMI and the other services.

Can you please check that WR does indeed add "netsvcs" to the path when doing Repair WMI  / Reset Service Permissions /  Restore Important important Windows Services / Set Windows Services to Default Startup and if so please replace it with "winmgmt"?

Thank you.

I also notice that one of WR's scripts enables the Security Centre in Safemode ( WMI Repair, I think) can you  please let me know if this can be achieved with the Technicians Toolbox or by other means.

Thanks again for a marvelous and indispensable set of programs, only wished I could afford the Pro versions to help support your altruism, dedication and responsiveness  to your grateful users.

All the best.

PS - I recall asking this query years ago and not sure if thing have changed since but is it also possible to add an option to restore Windows services according to Black Viper's !Safe_W7_reg configurations - mine is win32  (http://www.blackviper.com/downloads/Win7/Registry_Files/Safe_W7_Ultimate_32_SP1_Start_v100.zip)?

Cheers.

Boggin:
There are a couple of elevated cmds you can use to repair WMI but Shane has already incorporated these into the program.

They are -

winmgmt /standalonehost

winmgmt /resetrepository

However, I'll pass your query onto Shane.

Willy2:
- If you run #5 then it will stop the WMI Service. But since the "Security Center" and "Iphelper" are dependent on WMI, those 2 Services will be stopped as well. But these 2 are NOT started when WMI is started at the end of the repair.
- Same story for repair #18 ("Repair VSS"). In that repair WMI is also stopped and started but NOT the Security Center.

(@Boggin: this remains a topic of discussion. Does those 2 Services need to be (re-)started as well in a future version of Windows Repair ??)

- If you want to start manually these 2 Services then put the following 2 lines in a *.bat file:

     net start wscsvc      (for Security Center)
     net start iphlpsvc    (for IpHelper)

and run this file with admin rights.

Boggin:
I've already passed this onto Shane but I'll give him a Bump on it.

Willy2:
- I just ran the Tweaking's "Svchost look up" tool

http://www.tweaking.com/content/page/tweaking_com_svchost_exe_lookup_tool.html

and on my Win 7 64 bit PRO system the program reports the following path and switches:

"C:\windows\system32\svchost.exe -k netsvcs"

See also the content of the attachment.

Navigation

[0] Message Index

[#] Next page