wmiprvse.exe and Java 2

[Lanfo]

Hello,

I have been having a problem with wmiprvse.exe and Java lately.

Whenever I have Java Runtime(JRE 6) installed it causes wmiprvse.exe to constantly query something continuously.

This causes the load on my CPU to constantly jump from 1% to 14%, and will do this the whole time windows is running.
(Does not matter if IE7 or Firefox2.0 are running or not)

Ending the process on wmiprvse.exe will stop this for a few seconds and sometimes a few minutes, but wmiprvse.exe will restart and go back to the cycling query.

Uninstalling JRE will make it go away completely.

I have done virus and spyware scans with:
AVG Free
Pcillin
SUPERantiSpyware
AdawareSE
Spybot
HijackThis
RegScrubXP
CCleaner

I made sure all the above software was the latest version with the latest definition files. And I try to do my scanning in safemode (at least when I'm having a problem I do).

So I think that I'm clean of virus/spyware, I really try to stay on top of that stuff, and almost 60% of my internet activity is online gaming, looking at a select few gaming sites and 40% looking at a few tech and hardware review sites, plus TigerDirect and Newegg.

I rarely find more than tracking cookies on this PC.

I have another PC that I use for surfing in the less safe areas of the net.

Anyway this causes a problem in some games that are resource hogs, like Vanguard:SOH, Oblivion, ECT.

Some of the gaming sites I visit use Java for stat tracking apps and it can cause problems when I try to use Firefox without JRE installed.

But with JRE installed I get the constant CPU hits every 2 seconds.

I have tried setting some of the WMI related services to manual and shutting down the service, but that did not seem to have any affect.

Any help with this would be great, just let me know if you need anymore info and I'll try to provide it.

Thank you.


System:
Windows XP PRO SP2 IE7 FireFox2.0
Asus A8N32 Motherboard BIOS=1405
AMD-X2+4200 Toledo(939)
3gb Corsair XMS DDR-3200(CMX1024-3200C2)
XFX Geforce 8800GTS 640mb | Drv=97.94
SB Audigy-2ZS DRV=02.09.0016
Optical Lite-ON DVD-RW
2xHDD-WD Raptor 74gb(Sata)
1xHDD-WD CaviarSE 60gb(IDE)




Win2K Sp4, IE6 (all hotfixes)
Asus A7N8X-E Dlx.BIOS-1014
AXP 3200 Barton@400mhz
2x512mb 3200ddr Corsair RAM
XFX GF 6600GT AGP drv66.93/DX9.0c
SB Audigy2 ZX
SATA-74gb WD Raptor
IDE-60gbWD CaviarSE/DVD16x/CDRW52x/
Allied 500w PSU

 

[xwb]

According to

http://www.neuber.com/taskmanager/process/wmiprvse.exe.html

wmiprvse could be a disguised worm, trojan, virus etc. Have a check - it should be in windows\system32\wbem and 218112 bytes in size.

 

[linney]

Is there anything in this location, in some of the logs, C:\Windows\System32\WBEM\Logs, or in your Event Viewer logs

CPU running at 100% - wmiprvse.exe eating up CPU
thread779-1244670

To reinstall wmi into the registry:

Go to Start/Run and type in: CMD, then Winmgmt/? for information. Then run each of these hitting enter after each:

winmgmt/clearadap
winmgmt/kill
winmgmt/unregserver
winmgmt/regserver
winmgmt/resyncperf

Windows WMI - How to repair this problem?
thread779-1339429

You experience slow system performance when you run a program that uses the WMI service on a Windows XP SP2-based computer or a Windows Server 2003 SP1-based computer

http://support.microsoft.com/?kbid=911262

Error Message: The Windows Management Instrumentation (WMI) Information Might Be Corrupted

http://support.microsoft.com/default.aspx?scid=kb;en-us;823775&FR=1&PA=1&SD=HSCH

How to troubleshoot WMI-related issues in Windows XP SP2

http://support.microsoft.com/kb/875605

The WMI Diagnosis Utility -- Version 2.0

http://www.microsoft.com/downloads/...d6-18d1-4d05-b11e-4c64192ae97d&displaylang=en

 

[Lanfo]

Xwb,

Thanks for the reply my version of wmiprvse.exe is 213 KB (218,112 bytes).

Atleast it does not seem to be infected.

linney,

Thank you for responding.

Thank you for the links, I will let you know how it goes.

And here is the log info if you would like to take a look at it.

wmiprov.log

(Wed Apr 11 00:57:38 2007.6500765) : WDM call returned error: 4200
(Wed Apr 11 00:57:43 2007.6505500) : WDM call returned error: 4200
(Wed Apr 11 00:57:46 2007.6509000) : WDM call returned error: 4200
(Wed Apr 11 00:57:56 2007.6519140) : WDM call returned error: 4200
(Wed Apr 11 03:43:22 2007.16444984) : WDM call returned error: 4200
(Wed Apr 11 03:43:33 2007.16455812) : WDM call returned error: 4200
(Wed Apr 11 03:50:54 2007.63890) : WDM call returned error: 4200
(Wed Apr 11 03:54:24 2007.273812) : WDM call returned error: 4200
(Wed Apr 11 05:02:02 2007.4331968) : Received Event
(Wed Apr 11 06:32:05 2007.9735296) : WDM call returned error: 4200
(Wed Apr 11 06:32:11 2007.9741000) : WDM call returned error: 4200
(Wed Apr 11 06:32:15 2007.9745578) : WDM call returned error: 4200
(Wed Apr 11 06:32:21 2007.9751312) : WDM call returned error: 4200
(Wed Apr 11 06:32:35 2007.9764890) : WDM call returned error: 4200
(Wed Apr 11 06:32:43 2007.9772953) : WDM call returned error: 4200
(Wed Apr 11 07:37:53 2007.63500) : WDM call returned error: 4200
(Wed Apr 11 07:41:23 2007.273203) : WDM call returned error: 4200
(Wed Apr 11 08:23:03 2007.64015) : WDM call returned error: 4200
(Wed Apr 11 08:26:33 2007.273937) : WDM call returned error: 4200
(Wed Apr 11 09:18:26 2007.279359) : WDM call returned error: 4200

(Probably from me ending the process in task manager)

wbemess.log:

(Wed Apr 11 00:52:19 2007.6181937) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 00:54:00 2007.6283218) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 00:54:17 2007.6300250) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 00:55:56 2007.6398968) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 00:55:57 2007.6400234) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 01:01:35 2007.6737750) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 01:09:30 2007.7212687) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 01:22:55 2007.8018234) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 01:38:19 2007.8942125) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 01:45:10 2007.9352875) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 01:56:46 2007.10048750) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 02:17:27 2007.11289562) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 02:19:05 2007.11387828) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 02:29:58 2007.12040625) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 03:45:19 2007.16561703) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 03:45:42 2007.16584671) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 03:46:27 2007.16629312) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 03:46:32 2007.16635234) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 03:46:36 2007.16638546) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 03:50:24 2007.34000) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 03:50:24 2007.34000) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 03:50:27 2007.36953) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 03:50:27 2007.37062) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 03:51:13 2007.83453) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 05:02:02 2007.4332015) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 05:02:02 2007.4332015) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 05:02:03 2007.4332875) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 05:02:03 2007.4333015) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 05:02:08 2007.4338093) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 06:30:45 2007.9655093) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 06:31:19 2007.9688812) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 06:31:23 2007.9693281) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 06:32:23 2007.9753296) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 06:32:28 2007.9757875) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 06:33:28 2007.9817906) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 07:36:12 2007.13581875) : ESS unable to load consumer provider NTEventLogEventConsumer from provider subsystem: 0x80041013
(Wed Apr 11 07:36:12 2007.13581906) : Failed the first attempt to retrieve the sink to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 80041013.
WMI will reload and retry.
(Wed Apr 11 07:37:23 2007.33656) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 07:37:23 2007.33656) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 07:37:27 2007.36812) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 07:37:27 2007.37093) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 07:37:27 2007.37328) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 07:37:33 2007.43421) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 07:37:33 2007.43421) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 07:37:34 2007.43796) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 07:37:34 2007.44000) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 07:37:39 2007.49468) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 07:39:03 2007.133093) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 07:41:37 2007.287265) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 08:21:20 2007.2670234) : Unable to register event source 'Service Control Manager' on server ''. Error code: 6B5
(Wed Apr 11 08:21:20 2007.2670250) : Event consumer provider is unable to instantiate event consumer NTEventLogEventConsumer="SCM Event Log Consumer": error code 0x80041001
(Wed Apr 11 08:21:20 2007.2670250) : Failed the first attempt to retrieve the sink to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 80041001.
WMI will reload and retry.
(Wed Apr 11 08:21:20 2007.2670250) : Unable to register event source 'Service Control Manager' on server ''. Error code: 6B5
(Wed Apr 11 08:21:20 2007.2670250) : Event consumer provider is unable to instantiate event consumer NTEventLogEventConsumer="SCM Event Log Consumer": error code 0x80041001
(Wed Apr 11 08:21:20 2007.2670250) : Failed the second attempt to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 80041001.
This event is dropped for this consumer.
(Wed Apr 11 08:21:20 2007.2670250) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 08:21:20 2007.2670250) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 08:21:20 2007.2670250) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 08:21:20 2007.2670250) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 08:21:20 2007.2670250) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 08:21:20 2007.2670250) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 08:21:20 2007.2670250) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 08:21:20 2007.2670250) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 08:22:33 2007.34031) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 08:22:33 2007.34031) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 08:22:36 2007.36984) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 08:22:36 2007.37109) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 08:22:41 2007.42593) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 08:22:49 2007.50000) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 08:22:49 2007.50000) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 08:22:49 2007.50359) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 08:22:49 2007.50484) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 08:22:55 2007.56046) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:10 2007.2891218) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908406) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908406) : Failed to log an event: 1F
(Wed Apr 11 09:10:27 2007.2908406) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908406) : Failed to log an event: 1F
(Wed Apr 11 09:10:27 2007.2908406) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908406) : Failed to log an event: 1F
(Wed Apr 11 09:10:27 2007.2908406) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908406) : Failed to log an event: 1F
(Wed Apr 11 09:10:27 2007.2908421) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908515) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908515) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908515) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908515) : Failed to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 0x80041001. Dropping event.
(Wed Apr 11 09:10:27 2007.2908515) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908515) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908515) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908515) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908515) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908515) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908515) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908515) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908515) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908515) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908515) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908515) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908515) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908515) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908515) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908515) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908515) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908515) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908515) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908515) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908515) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908515) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908515) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908515) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908531) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908531) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908531) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908531) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908531) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908531) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908531) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908531) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908531) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908531) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908531) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908531) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908531) : Failed to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 0x80041001. Dropping event.
(Wed Apr 11 09:10:27 2007.2908640) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908640) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908640) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908640) : Failed to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 0x80041001. Dropping event.
(Wed Apr 11 09:10:27 2007.2908640) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908640) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908640) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908640) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908640) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:27 2007.2908640) : Failed to log an event: 6B5
(Wed Apr 11 09:10:27 2007.2908640) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908640) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908640) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:27 2007.2908640) : Failed to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 0x80041001. Dropping event.
(Wed Apr 11 09:10:28 2007.2908765) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:28 2007.2908765) : Failed to log an event: 6B5
(Wed Apr 11 09:10:28 2007.2908765) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:28 2007.2908765) : Failed to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 0x80041001. Dropping event.
(Wed Apr 11 09:10:28 2007.2908765) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:28 2007.2908765) : Failed to log an event: 6B5
(Wed Apr 11 09:10:28 2007.2908765) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:28 2007.2908765) : Failed to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 0x80041001. Dropping event.
(Wed Apr 11 09:10:28 2007.2909656) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:10:28 2007.2909671) : Failed to log an event: 6B5
(Wed Apr 11 09:10:28 2007.2909671) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:10:28 2007.2909671) : Failed to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 0x80041001. Dropping event.
(Wed Apr 11 09:11:40 2007.35421) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:11:40 2007.35453) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:11:44 2007.39203) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:11:44 2007.39203) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:11:44 2007.39375) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:11:50 2007.44640) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:11:50 2007.44781) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:11:50 2007.45171) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:11:50 2007.45312) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:11:56 2007.50687) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:12:49 2007.104421) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:12:55 2007.110593) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:08 2007.123390) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125046) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125046) : Failed to log an event: 1F
(Wed Apr 11 09:13:10 2007.125078) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Failed to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 0x80041001. Dropping event.
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125140) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125140) : Failed to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 0x80041001. Dropping event.
(Wed Apr 11 09:13:10 2007.125250) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125250) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125250) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125250) : Failed to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 0x80041001. Dropping event.
(Wed Apr 11 09:13:10 2007.125250) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125250) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125250) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125250) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125250) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125250) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125250) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125250) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125250) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125250) : Failed to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 0x80041001. Dropping event.
(Wed Apr 11 09:13:10 2007.125453) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:10 2007.125453) : Failed to log an event: 6B5
(Wed Apr 11 09:13:10 2007.125453) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:10 2007.125453) : Failed to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 0x80041001. Dropping event.
(Wed Apr 11 09:13:11 2007.126281) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:13:11 2007.126281) : Failed to log an event: 6B5
(Wed Apr 11 09:13:11 2007.126281) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Wed Apr 11 09:13:11 2007.126281) : Failed to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 0x80041001. Dropping event.
(Wed Apr 11 09:14:29 2007.42593) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:14:29 2007.42593) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:14:30 2007.42687) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 09:15:15 2007.88546) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 23:16:01 2007.50534218) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 23:16:01 2007.50534218) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 23:16:01 2007.50534593) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 23:16:02 2007.50534765) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 23:16:07 2007.50540281) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Wed Apr 11 23:17:05 2007.50598500) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Thu Apr 12 01:47:58 2007.59651078) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Thu Apr 12 01:48:00 2007.59653437) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Thu Apr 12 01:48:12 2007.59664937) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Thu Apr 12 01:48:28 2007.59681453) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Thu Apr 12 01:58:28 2007.60281437) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Thu Apr 12 02:18:07 2007.61459953) : NT Event Log Consumer: could not retrieve sid, 0x80041002
(Thu Apr 12 02:52:09 2007.63502062) : NT Event Log Consumer: could not retrieve sid, 0x80041002

wbemprox.log

(Wed Apr 11 07:36:12 2007.13581906) : ConnectViaDCOM, CoCreateInstanceEx resulted in hr = 0x80004002
(Wed Apr 11 09:10:27 2007.2908468) : ConnectViaDCOM, CoCreateInstanceEx resulted in hr = 0x80004002
(Wed Apr 11 09:10:27 2007.2908531) : ConnectViaDCOM, CoCreateInstanceEx resulted in hr = 0x80004002

Framework.log

    Login Warning - provider with that name already existed, overridden with latest provider login (root\cimv2:Win32_ComputerSystemWindowsProductActivationSetting)	04/11/2007 07:39:38.687	thread:3176	[d:\xpsprtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2252]
    Login Warning - provider with that name already existed, overridden with latest provider login (root\cimv2:Win32_ComputerSystemWindowsProductActivationSetting)	04/11/2007 07:41:24.093	thread:2892	[d:\xpsprtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2252]
    Login Warning - provider with that name already existed, overridden with latest provider login (root\cimv2:Win32_ComputerSystemWindowsProductActivationSetting)	04/11/2007 07:42:58.828	thread:2956	[d:\xpsprtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2252]

Win2K Sp4, IE6 (all hotfixes)
Asus A7N8X-E Dlx.BIOS-1014
AXP 3200 Barton@400mhz
2x512mb 3200ddr Corsair RAM
XFX GF 6600GT AGP drv66.93/DX9.0c
SB Audigy2 ZX
SATA-74gb WD Raptor
IDE-60gbWD CaviarSE/DVD16x/CDRW52x/
Allied 500w PSU

 

[Lanfo]

My problem seems to have been solved.

I uninstalled Java JRE6,>Rebooted

Ran virus/spyware/regclean.

Followed your steps for reinstalling WMI into the registry.

Re-installed Java JRE6.>Rebooted

Ran Defrag.

Now everything seems to be running good, cpu use is sitting right at 0% when idle, and I no longer get the hitching in the games I have tried so far.

Thanks for your help.

System:
Windows XP PRO SP2 IE7 FireFox2.0
Asus A8N32 Motherboard BIOS=1405
AMD-X2+4200 Toledo(939)
3gb Corsair XMS DDR-3200(CMX1024-3200C2)
XFX Geforce 8800GTS 640mb | Drv=97.94
SB Audigy-2ZS DRV=02.09.0016
Optical Lite-ON DVD-RW
2xHDD-WD Raptor 74gb(Sata)
1xHDD-WD CaviarSE 60gb(IDE)
PSU Ultra X-Finity 600w