W8.1 Freezing

Main Forum > General Computer Support

W8.1 Freezing

<< < (4/12) > >>

Boggin:
From what I've found on that WMI error, that would seem to be the problem.

I've copied & pasted these steps from an article which has resolved that error.

Open a Command Prompt (Admin) and follow the steps to rebuild the WMI Repository and then check the results.

a. Disable and stop the WMI service.
sc config winmgmt start= disabled
net stop winmgmt
b. At a command prompt (cmd), change to the WBEM folder.
cd %windir%\system32\wbem
c. Rename the repository folder
rename repository repository.old
d. Re-enable the WMI service.
sc config winmgmt start= auto
e. Run the following command to manually recompile all of the default WMI .mof files and .mfl files
cd %windir%\system32\wbem
for /f %s in ('dir /b *.mof *.mfl') do mofcomp %s
f. Reboot the system.
shutdown /r /t 00

You can copy & paste the long one to avoid any typos.

The Windows Repair program would probably have repaired this had it been able to run.

I would normally advise to create a restore point before executing complex cmds but in your case, that isn't possible.

If there's still a problem then the WMI may need resyncing which you can do with these two cmds -

regsvr32 wmisvc.dll

winmgmt /resyncperf

shutdown /r /t 00

and see what things are like after the reboot.

EDITED to split a cmd.

jpm:
https://support.lenovo.com/us/en/solutions/ht078705
according to Lenovo (found with a search) this can happen when you do a system restore. The fix is to unprotect the missing version and delete it. I've never done it, but it makes sense.

mrwoof:
Ran the complete cmds, however:
e. Run the following command to manually recompile all of the default WMI .mof files and .mfl files
cd %windir%\system32\wbem for /f %s in ('dir /b *.mof *.mfl') do mofcomp %s

returned "File not found".

I repeated the full process and no change.
Below is a raw copy of latest event viewer, First 5 "Warning" then next entry, scores of "Error".

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 16/11/2018 22:36:51
Event ID: 63
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: Acer
Description:
A provider, dsccore, has been registered in the Windows Management Instrumentation namespace root\Microsoft\Windows\DesiredStateConfiguration to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1EDEEE53-0AFE-4609-B846-D8C0B2075B1F}" />
<EventID>63</EventID>
<Version>2</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-11-16T22:36:51.452232000Z" />
<EventRecordID>20520</EventRecordID>
<Correlation ActivityID="{D7E9E239-7DFC-0006-53E2-E9D7FC7DD401}" />
<Execution ProcessID="888" ThreadID="896" />
<Channel>Application</Channel>
<Computer>Acer</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<data_0x8000003F xmlns="http://manifests.microsoft.com/win/2006/windows/WMI">
<Provider>dsccore</Provider>
<Namespace>root\Microsoft\Windows\DesiredStateConfiguration</Namespace>
</data_0x8000003F>
</UserData>
</Event>
..........................
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 16/11/2018 22:36:51
Event ID: 63
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: Acer
Description:
A provider, dsccore, has been registered in the Windows Management Instrumentation namespace root\Microsoft\Windows\DesiredStateConfiguration to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1EDEEE53-0AFE-4609-B846-D8C0B2075B1F}" />
<EventID>63</EventID>
<Version>2</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-11-16T22:36:51.452232000Z" />
<EventRecordID>20520</EventRecordID>
<Correlation ActivityID="{D7E9E239-7DFC-0006-53E2-E9D7FC7DD401}" />
<Execution ProcessID="888" ThreadID="896" />
<Channel>Application</Channel>
<Computer>Acer</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<data_0x8000003F xmlns="http://manifests.microsoft.com/win/2006/windows/WMI">
<Provider>dsccore</Provider>
<Namespace>root\Microsoft\Windows\DesiredStateConfiguration</Namespace>
</data_0x8000003F>
</UserData>
</Event> x5
########################################

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 16/11/2018 22:36:51
Event ID: 4
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Acer
Description:
Error 0x80041002 encountered when trying to load MOF C:\WINDOWS\SYSTEM32\WBEM\EN-GB\FILETRACE.MFL while recovering .MOF file marked with autorecover.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1EDEEE53-0AFE-4609-B846-D8C0B2075B1F}" />
<EventID>4</EventID>
<Version>2</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-11-16T22:36:51.186591600Z" />
<EventRecordID>20515</EventRecordID>
<Correlation ActivityID="{D7E9E239-7DFC-0006-53E2-E9D7FC7DD401}" />
<Execution ProcessID="888" ThreadID="896" />
<Channel>Application</Channel>
<Computer>Acer</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<data_0x8000003F xmlns="http://manifests.microsoft.com/win/2006/windows/WMI">
<Error>0x80041002</Error>
<MOF>C:\WINDOWS\SYSTEM32\WBEM\EN-GB\FILETRACE.MFL</MOF>
</data_0x8000003F>
</UserData>
</Event>
''''''''''''''''
+ System

- Provider

[ Name] Microsoft-Windows-WMI
[ Guid] {1EDEEE53-0AFE-4609-B846-D8C0B2075B1F}

EventID 4

Version 2

Level 2

Task 0

Opcode 0

Keywords 0x8000000000000000

- TimeCreated

[ SystemTime] 2018-11-16T22:36:51.186591600Z

EventRecordID 20515

- Correlation

[ ActivityID] {D7E9E239-7DFC-0006-53E2-E9D7FC7DD401}

- Execution

[ ProcessID] 888
[ ThreadID] 896

Channel Application

Computer Acer

- Security

[ UserID] S-1-5-18

- UserData

- data_0x8000003F

Error 0x80041002

MOF C:\WINDOWS\SYSTEM32\WBEM\EN-GB\FILETRACE.MFL

#################################################

onwards...

Boggin:
My error in joining up these cmds -

cd %windir%\system32\wbem for /f %s in ('dir /b *.mof *.mfl') do mofcomp %s

Which should have been split as -

cd %windir%\system32\wbem

for /f %s in ('dir /b *.mof *.mfl') do mofcomp %s

But jpm has found a more precise solution for you to try.

mrwoof:
ran the full new improved cmds, sadly,the repair tool froze in safe mode., this time it got up to Repair Job 7 (previously never past 3) up to "Running Repair under user a/c.
In the cmd box last entries read:
Registering 340 files
ERROR: The system was unable to find the specified registry key or value. this is repeated 5 times then all still.

Don't know if this detail means anything to you !!!
Looking for my prayer mat to enjoy jmp's input.
I'l run repair again meanwhile.

Navigation

[0] Message Index

[#] Next page

[*] Previous page

Go to full version