TechSpot

WinMgmt.exe Program Error

By Rev3ng3
Sep 19, 2004
  1. Hello, I was wondering if someone could take a look at my hijack this output and tell me why I keep on getting the error:
    WinMgmt.exe has generated errors and will be closed by windows. You will need to restart the program. An error log has been created. Thanks in advance for the help.

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINNT\system32\spoolsv.exe
    C:\Program Files\Symantec AntiVirus\DefWatch.exe
    C:\WINNT\DNSerSvc.exe
    C:\WINNT\system32\svchost.exe
    c:\sdwork\issimsvc.exe
    C:\PROGRA~1\AT&TNE~2\NETCFGSV.EXE
    C:\Program Files\Norton Utilities\NPROTECT.EXE
    C:\WINNT\system32\nvsvc32.exe
    C:\WINNT\system32\regsvc.exe
    C:\WINNT\Explorer.EXE
    C:\WINNT\system32\r_server.exe
    C:\WINNT\system32\MSTask.exe
    C:\Program Files\Speed Disk\nopdb.exe
    C:\WINNT\system32\stisvc.exe
    C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb03.exe
    C:\Program Files\TightVNC\WinVNC.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINNT\system32\mspmspsv.exe
    C:\PROGRA~1\SYMANT~1\VPTray.exe
    C:\WINNT\system32\RUNDLL32.EXE
    C:\WINNT\system32\svchost.exe
    C:\Program Files\mozilla.org\Mozilla\mozilla.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\WINNT\system32\drwtsn32.exe
    I:\HijackThis\HijackThis.exe

    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb03.exe
    O4 - HKLM\..\Run: [TaskMan] C:\WINNT\system32\dllcache\rundll32.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ISSI EZUpdate Service] "c:\sdwork\issimsvc.exe"
    O4 - HKLM\..\Run: [stgclean] c:\sdwork\w32main2.exe /cleanup
    O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\\NeroCheck.exe
    O4 - HKLM\..\Run: [DIGStream] C:\Program Files\DIGStream\digstream.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
    O4 - HKLM\..\Run: [WinVNC] "C:\Program Files\TightVNC\WinVNC.exe" -servicehelper
    O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
    O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NVMCTRAY.DLL,NvTaskbarInit
    O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
    O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundler/CAB/RealArcadeRdxIE.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/zuma/default/popcaploader_v5.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{61A4E75C-F560-46FD-809E-FE7D3974B204}: Domain = ibm.com
    O17 - HKLM\System\CCS\Services\Tcpip\..\{61A4E75C-F560-46FD-809E-FE7D3974B204}: NameServer = 216.148.227.68,204.127.202.4
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = ibm.com
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = ibm.com
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = ibm.com
     
  2. Goalie

    Goalie TS Booster Posts: 616

    Can you be a little more specific about when this error occurs??

    If you go into the event viewer, do you see any failure events for the Application or System sections that appear relevant?? (Control Panel, Administrative Tools if you don't already know..)

    btw- Welcome to Techspot!! :wave:
     
  3. Rev3ng3

    Rev3ng3 TS Rookie Topic Starter

    More Info

    Thanks Goalie
    okay, I got this message after I had found that my IE browser was getting hijacked. I got rid of that and ever since then I get that system message every 15-45 seconds. The event viewer log has a very general entry refering to this problem:
    The Windows Management Instrumentation service terminated unexpectedly. It has done this 98 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

    And for some reason the computer is acting the same....slow boot times, apps slow to pull....I think I didn't get all of that nasty hijacker but I am not sure. I am about to reinstall windows and say forget it. Any help would be much appreciated! Thanks =D
     
  4. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    In Computer Management/Services, you can set both WMIservices to start Manual.
    See if that helps.
     
  5. Rev3ng3

    Rev3ng3 TS Rookie Topic Starter

    Thaks realblackstuff, that seemed to clear the error message. Do you know what those services did? Do I need them?

    Thanks
     
  6. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    They provide System Management Information. Other than that I don't know much about them. Just found somewhere that, when set to start Manual, you have less system-errors.
    If Windows needs a (manual) service, it will start it, otherwise it will leave you in peace.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...