locked
Performance monitor Dcomlaunch Disk activity RRS feed

  • Question

  • Hi all,

    On several Windows 7 Pro SP1 machines the performance monitor is showing a lot of activity regarding Dcomlaunch (see image). This appears several times a day. Think this probably causing the perfomance problems with Microsoft Office Access 2007.

    Is this activity caused by a bad driver? What is Windows 7 doing?

    I disabled the enchancement option for the audio, no result.

    How can this be resolved?

     

    Greets Jasper

    Tuesday, October 25, 2011 10:28 AM

All replies

  • I enabled the verbose logging in the registry -> HKLM\Software\Microsoft\WBEM\CIMOM\Logging = 2.

    In the event viewer i enabled the Trace for the WMI-activity.

    Where do i look for now?

    Tuesday, October 25, 2011 2:08 PM
  • The folder c:\windows\system32\wbem\logs\ like in the picture, then wbemcore.log like it says.

     

    Wednesday, October 26, 2011 1:16 AM
  • This issue can be caused by several reasons. You may refer to the following thread to troubleshoot.

    SVCHOST (DCOM LAUNCH) high cpu usage
    http://answers.microsoft.com/en-us/windows/forum/windows_vista-performance/svchost-dcom-launch-high-cpu-usage/b2ce6e27-28dd-4901-b3dd-f9bfa8af947e


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    Thursday, October 27, 2011 3:57 AM
  • On the Windows 7 computer is Symanted Endpoint Protection 12.1 installed.

    I did a scan with Malwarebytes, no results. Computer appears to be clean.

    Last week i split the combined threat Power / PlugPlay and Dcomlaunch into 3 separate theats. The problem (sometimes MS Access 2007 slow performance) is still present, but less often.

    I am still waiting for the results in wbemcore.log, but at this point wbemcore.log is not in the log directory.

    Currently:

    FrameWork.lo_

    FrameWork.log

    wmiprov.log -> This file is showing:

    (Thu Oct 27 08:05:42 2011.262580) : Could not get pointer to binary resource for file:
    (Thu Oct 27 08:05:42 2011.262580) : C:\Windows\system32\drivers\ndis.sys[MofResourceName](Thu Oct 27 08:05:42 2011.262580) :
    (Thu Oct 27 08:05:42 2011.262596) : Could not get pointer to binary resource for file:
    (Thu Oct 27 08:05:42 2011.262596) : C:\Windows\system32\drivers\nl-NL\ndis.sys.mui[MofResourceName](Thu Oct 27 08:05:42 2011.262596) :
    (Thu Oct 27 08:05:42 2011.262643) : Could not get pointer to binary resource for file:
    (Thu Oct 27 08:05:42 2011.262643) : C:\Windows\system32\drivers\wmiacpi.sys[MofResource](Thu Oct 27 08:05:42 2011.262643) :

    (Thu Oct 27 08:05:42 2011.262658) : Deleting Old Classes for Driver

    (Thu Oct 27 08:05:42 2011.262658) : C:\Windows\system32\drivers\ndis.sys[MofResourceName](Thu Oct 27 08:05:42 2011.262658) :
    (Thu Oct 27 08:05:43 2011.263033) : C:\Windows\system32\drivers\nl-NL\ndis.sys.mui[MofResourceName](Thu Oct 27 08:05:43 2011.263033) :
    (Thu Oct 27 08:05:43 2011.263064) : Deleting Old Classes for Driver
    (Thu Oct 27 08:05:43 2011.263064) : C:\Windows\system32\drivers\wmiacpi.sys[MofResource](Thu Oct 27 08:05:43 2011.263064) :

    Has this something to do with what the performance monitor is showing?

    Thursday, October 27, 2011 6:27 AM
  • This is the framework.log showing:

     

    FrameworkLogoff: Win32_LoadOrderGroupServiceMembers 11/02/2011 16:27:35.127 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_LoadOrderGroupServiceDependencies 11/02/2011 16:27:35.127 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_Keyboard 11/02/2011 16:27:35.128 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_InfraredDevice 11/02/2011 16:27:35.128 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_IRQResource 11/02/2011 16:27:35.128 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_IDEController 11/02/2011 16:27:35.129 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_GroupUser 11/02/2011 16:27:35.129 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_Group 11/02/2011 16:27:35.129 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_FloppyController 11/02/2011 16:27:35.129 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_FloppyDrive 11/02/2011 16:27:35.130 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_Environment 11/02/2011 16:27:35.130 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_UserDesktop 11/02/2011 16:27:35.130 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_DriverForDevice 11/02/2011 16:27:35.130 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_DisplayControllerConfiguration 11/02/2011 16:27:35.131 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_DisplayConfiguration 11/02/2011 16:27:35.131 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_DiskDrive 11/02/2011 16:27:35.131 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: CIM_DirectoryContainsFile 11/02/2011 16:27:35.131 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_Directory 11/02/2011 16:27:35.132 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_PNPDevice 11/02/2011 16:27:35.132 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_DeviceMemoryAddress 11/02/2011 16:27:35.132 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_DeviceBus 11/02/2011 16:27:35.132 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_DesktopMonitor 11/02/2011 16:27:35.133 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_Desktop 11/02/2011 16:27:35.133 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_DependentService 11/02/2011 16:27:35.133 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_ComputerSystem 11/02/2011 16:27:35.133 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_CodecFile 11/02/2011 16:27:35.134 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_CIMLogicalDeviceCIMDataFile 11/02/2011 16:27:35.134 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: CIM_DataFile 11/02/2011 16:27:35.134 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_Bus 11/02/2011 16:27:35.134 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_BaseService 11/02/2011 16:27:35.134 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_BootConfiguration 11/02/2011 16:27:35.135 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_BIOS 11/02/2011 16:27:35.135 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_Battery 11/02/2011 16:27:35.135 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_AutoChkSetting 11/02/2011 16:27:35.135 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_1394Controller 11/02/2011 16:27:35.136 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_MappedLogicalDisk 11/02/2011 16:27:35.136 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_SessionProcess 11/02/2011 16:27:35.136 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_LoggedOnUser 11/02/2011 16:27:35.136 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_LogonSession 11/02/2011 16:27:35.137 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: CIM_LogicalFile 11/02/2011 16:27:35.137 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_DiskPartition 11/02/2011 16:27:35.137 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: CIM_ProcessExecutable 11/02/2011 16:27:35.137 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_Process 11/02/2011 16:27:35.138 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_Registry 11/02/2011 16:27:35.138 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    FrameworkLogoff: Win32_PageFileUsage 11/02/2011 16:27:35.138 thread:5996 [d:\w7rtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2166]
    Entering ~CResourceManager 11/02/2011 16:27:35.138 thread:5996 [d:\w7rtm\admin\wmi\wbem\providers\win32provider\common\resourcemanager.cpp.52]
    Leaving ~CResourceManager 11/02/2011 16:27:35.139 thread:5996 [d:\w7rtm\admin\wmi\wbem\providers\win32provider\common\resourcemanager.cpp.61]
    Entering ~CTimerQueue 11/02/2011 16:27:35.139 thread:5996 [d:\w7rtm\admin\wmi\wbem\providers\win32provider\common\timerqueue.cpp.211]
    Leaving ~CTimerQueue 11/02/2011 16:27:35.139 thread:5996 [d:\w7rtm\admin\wmi\wbem\providers\win32provider\common\timerqueue.cpp.219]

     

    Actually a lot more, but this is the end of the file.

    Is this normal? What is going wrong?

     

    Greets Jasper

    Wednesday, November 2, 2011 4:35 PM