none
Server 2008 R2 - WMI Problems (WBEM_E_QUOTA_VIOLATION , PROVIDER_LOAD_FAILURE, AND MORE!) RRS feed

  • Question

  • Hello,

    I have a problem I've been troubleshooting for a few days now.  It started with a basic WSQL query not working which led to troubleshooting with WMIDIAG  (The log for WMIDIAG is below).

    Basically what happens is, a few minutes after starting the winmgmt queries stop working. 

    Some of the things I've tried:

    - Adjusted memory quotas per http://blogs.technet.com/b/askperf/archive/2008/09/16/memory-and-handle-quotas-in-the-wmi-provider-service.aspx

    - Basically the same thing... but https://support.software.dell.com/foglight/kb/114299


    - Various rebuilds / hotfixes , such as what is listed here: http://itcalls.blogspot.com/2013/10/wmi-unhealthy-on-2008r2-domain.html

    - A full repository reset.....  

    - Started running through this: http://blogs.technet.com/b/askperf/archive/2014/08/08/wmi-common-symptoms-and-errors.aspx which led to going through some of the ideas here that were a repeat of some of the above http://blogs.technet.com/b/askperf/archive/2014/08/08/wmi-repository-corruption-or-not.aspx

    -  Started running through diags mentioned here: http://blogs.technet.com/b/askperf/archive/2014/08/11/wmi-high-memory-usage-by-wmi-service-or-wmiprvse-exe.aspx   .... however I don't believe there is a high memory issue as winmgmt is under 512 MB and winipvse is around 15MB

    - Reboots in between everything as needed


    In all cases.... the wmidiag log reports the same errors.

    Any help with this would be very appreciated!

    Tellis


    .5609 21:58:44 (0) ** WMIDiag v2.2 started on Saturday, May 09, 2015 at 21:56.
    .5610 21:58:44 (0) **
    .5611 21:58:44 (0) ** Copyright (c) Microsoft Corporation. All rights reserved - July 2007.
    .5612 21:58:44 (0) **
    .5613 21:58:44 (0) ** This script is not supported under any Microsoft standard support program or service.
    .5614 21:58:44 (0) ** The script is provided AS IS without warranty of any kind. Microsoft further disclaims all
    .5615 21:58:44 (0) ** implied warranties including, without limitation, any implied warranties of merchantability
    .5616 21:58:44 (0) ** or of fitness for a particular purpose. The entire risk arising out of the use or performance
    .5617 21:58:44 (0) ** of the scripts and documentation remains with you. In no event shall Microsoft, its authors,
    .5618 21:58:44 (0) ** or anyone else involved in the creation, production, or delivery of the script be liable for
    .5619 21:58:44 (0) ** any damages whatsoever (including, without limitation, damages for loss of business profits,
    .5620 21:58:44 (0) ** business interruption, loss of business information, or other pecuniary loss) arising out of
    .5621 21:58:44 (0) ** the use of or inability to use the script or documentation, even if Microsoft has been advised
    .5622 21:58:44 (0) ** of the possibility of such damages.
    .5623 21:58:44 (0) **
    .5624 21:58:44 (0) **
    .5625 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5626 21:58:44 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------
    .5627 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5628 21:58:44 (0) **
    .5629 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5630 21:58:44 (0) ** Windows Server 2008 R2 - Service pack 1 - 64-bit (7601)
    .5631 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5632 21:58:44 (0) ** Environment: ........................................................................................................ OK.
    .5633 21:58:44 (0) ** There are no missing WMI system files: .............................................................................. OK.
    .5634 21:58:44 (0) ** There are no missing WMI repository files: .......................................................................... OK.
    .5635 21:58:44 (0) ** WMI repository state: ............................................................................................... N/A.
    .5636 21:58:44 (0) ** AFTER running WMIDiag:
    .5637 21:58:44 (0) ** The WMI repository has a size of: ................................................................................... 26 MB.
    .5638 21:58:44 (0) ** - Disk free space on 'C:': .......................................................................................... 52076 MB.
    .5639 21:58:44 (0) **   - INDEX.BTR,                     6062080 bytes,      5/9/2015 9:55:38 PM
    .5640 21:58:44 (0) **   - MAPPING1.MAP,                  68652 bytes,        3/26/2015 2:07:14 AM
    .5641 21:58:44 (0) **   - MAPPING2.MAP,                  68660 bytes,        5/9/2015 9:52:27 PM
    .5642 21:58:44 (0) **   - OBJECTS.DATA,                  21102592 bytes,     5/9/2015 9:55:38 PM
    .5643 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5644 21:58:44 (2) !! WARNING: Windows Firewall: .......................................................................................... DISABLED.
    .5645 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5646 21:58:44 (0) ** DCOM Status: ........................................................................................................ OK.
    .5647 21:58:44 (2) !! WARNING: WMI registry setup: ........................................................................................ INVALID HOSTING SETUP!
    .5648 21:58:44 (0) ** => The WMI service must be configured to run as a STANDALONE service host or
    .5649 21:58:44 (0) **    as a SHARED service host but the (SvcHost) configuration contains invalid information.
    .5650 21:58:44 (0) ** => You can fix this issue by running ONE of the following commands:
    .5651 21:58:44 (0) **    - Shared service host (recommended):
    .5652 21:58:44 (0) **      i.e. 'WINMGMT.EXE /SharedHost'
    .5653 21:58:44 (0) **    - Standalone service host:
    .5654 21:58:44 (0) **      i.e. 'WINMGMT.EXE /StandaloneHost'
    .5655 21:58:44 (0) ** => Reboot the system.
    .5656 21:58:44 (0) **
    .5657 21:58:44 (0) ** INFO: WMI service has dependents: ................................................................................... 1 SERVICE(S)!
    .5658 21:58:44 (0) ** - Internet Connection Sharing (ICS) (SHAREDACCESS, StartMode='Disabled')
    .5659 21:58:44 (0) ** => If the WMI service is stopped, the listed service(s) will have to be stopped as well.
    .5660 21:58:44 (0) **    Note: If the service is marked with (*), it means that the service/application uses WMI but
    .5661 21:58:44 (0) **          there is no hard dependency on WMI. However, if the WMI service is stopped,
    .5662 21:58:44 (0) **          this can prevent the service/application to work as expected.
    .5663 21:58:44 (0) **
    .5664 21:58:44 (0) ** RPCSS service: ...................................................................................................... OK (Already started).
    .5665 21:58:44 (0) ** WINMGMT service: .................................................................................................... OK (Already started).
    .5666 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5667 21:58:44 (0) ** WMI service DCOM setup: ............................................................................................. OK.
    .5668 21:58:44 (0) ** WMI components DCOM registrations: .................................................................................. OK.
    .5669 21:58:44 (0) ** WMI ProgID registrations: ........................................................................................... OK.
    .5670 21:58:44 (0) ** WMI provider DCOM registrations: .................................................................................... OK.
    .5671 21:58:44 (0) ** WMI provider CIM registrations: ..................................................................................... OK.
    .5672 21:58:44 (0) ** WMI provider CLSIDs: ................................................................................................ OK.
    .5673 21:58:44 (0) ** WMI providers EXE/DLL availability: ................................................................................. OK.
    .5674 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5675 21:58:44 (0) ** INFO: User Account Control (UAC): ................................................................................... DISABLED.
    .5676 21:58:44 (0) ** INFO: Local Account Filtering: ...................................................................................... ENABLED.
    .5677 21:58:44 (0) ** => WMI tasks remotely accessing WMI information on this computer and requiring Administrative
    .5678 21:58:44 (0) **    privileges MUST use a DOMAIN account part of the Local Administrators group of this computer
    .5679 21:58:44 (0) **    to ensure that administrative privileges are granted. If a Local User account is used for remote
    .5680 21:58:44 (0) **    accesses, it will be reduced to a plain user (filtered token), even if it is part of the Local Administrators group.
    .5681 21:58:44 (0) **
    .5682 21:58:44 (0) ** Overall DCOM security status: ....................................................................................... OK.
    .5683 21:58:44 (0) ** Overall WMI security status: ........................................................................................ OK.
    .5684 21:58:44 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
    .5685 21:58:44 (0) ** WMI permanent SUBSCRIPTION(S): ...................................................................................... NONE.
    .5686 21:58:44 (0) ** WMI TIMER instruction(s): ........................................................................................... NONE.
    .5687 21:58:44 (0) ** WMI MONIKER CONNECTIONS: ............................................................................................ OK.
    .5688 21:58:44 (0) ** WMI CONNECTIONS: .................................................................................................... OK.
    .5689 21:58:44 (1) !! ERROR: WMI GET operation errors reported: ........................................................................... 466 ERROR(S)!
    .5690 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_HTTPServiceRequestQueues, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5691 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5692 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_HTTPServiceRequestQueues, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5693 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5694 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_HTTPServiceUrlGroups, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5695 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5696 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_HTTPServiceUrlGroups, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5697 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5698 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecDriver, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5699 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5700 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_IPsecDriver, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5701 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5702 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_WFP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5703 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5704 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_WFP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5705 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5706 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_WFPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5707 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5708 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_WFPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5709 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5710 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_WFPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5711 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5712 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_WFPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5713 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5714 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_ESENT_Database, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5715 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5716 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_ESENT_Database, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5717 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5718 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_ESENT_DatabaseInstances, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5719 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5720 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_ESENT_DatabaseInstances, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5721 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5722 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_ESENT_DatabaseTableClasses, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5723 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5724 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_ESENT_DatabaseTableClasses, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5725 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5726 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Lsa_SecurityPerProcessStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5727 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5728 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Lsa_SecurityPerProcessStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5729 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5730 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Lsa_SecuritySystemWideStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5731 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5732 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Lsa_SecuritySystemWideStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5733 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5734 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_MSDTC_DistributedTransactionCoordinator, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5735 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5736 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_MSDTC_DistributedTransactionCoordinator, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5737 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5738 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETCLRData_NETCLRData, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5739 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5740 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETCLRData_NETCLRData, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5741 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5742 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETCLRNetworking_NETCLRNetworking, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5743 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5744 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETCLRNetworking_NETCLRNetworking, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5745 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5746 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETDataProviderforOracle_NETDataProviderforOracle, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5747 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5748 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETDataProviderforOracle_NETDataProviderforOracle, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5749 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5750 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETDataProviderforSqlServer_NETDataProviderforSqlServer, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5751 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5752 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETDataProviderforSqlServer_NETDataProviderforSqlServer, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5753 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5754 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRExceptions, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5755 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5756 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRExceptions, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5757 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5758 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRInterop, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5759 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5760 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRInterop, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5761 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5762 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRJit, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5763 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5764 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRJit, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5765 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5766 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRLoading, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5767 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5768 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRLoading, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5769 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5770 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRLocksAndThreads, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5771 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5772 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRLocksAndThreads, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5773 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5774 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRMemory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5775 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5776 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRMemory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5777 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5778 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRRemoting, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5779 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5780 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRRemoting, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5781 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5782 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRSecurity, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5783 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5784 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRSecurity, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5785 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5786 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfDisk_LogicalDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5787 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5788 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfDisk_LogicalDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5789 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5790 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfDisk_PhysicalDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5791 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5792 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfDisk_PhysicalDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5793 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5794 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfNet_Browser, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5795 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5796 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfNet_Browser, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5797 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5798 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfNet_Redirector, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5799 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5800 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfNet_Redirector, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5801 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5802 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfNet_Server, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5803 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5804 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfNet_Server, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5805 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5806 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfNet_ServerWorkQueues, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5807 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5808 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfNet_ServerWorkQueues, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5809 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5810 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_Cache, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5811 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5812 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_Cache, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5813 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5814 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_Memory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5815 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5816 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_Memory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5817 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5818 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_Objects, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5819 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5820 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_Objects, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5821 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5822 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_PagingFile, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5823 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5824 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_PagingFile, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5825 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5826 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_Processor, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5827 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5828 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_Processor, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5829 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5830 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_System, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5831 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5832 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_System, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5833 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5834 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_FullImage_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5835 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5836 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_FullImage_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5837 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5838 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_Image_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5839 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5840 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_Image_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5841 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5842 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_JobObject, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5843 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5844 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_JobObject, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5845 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5846 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_JobObjectDetails, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5847 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5848 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_JobObjectDetails, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5849 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5850 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_Process, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5851 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5852 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_Process, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5853 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5854 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_ProcessAddressSpace_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5855 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5856 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_ProcessAddressSpace_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5857 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5858 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_Thread, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5859 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5860 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_Thread, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5861 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5862 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_ThreadDetails_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5863 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5864 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_ThreadDetails_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5865 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5866 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_RemoteAccess_RASPort, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5867 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5868 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_RemoteAccess_RASPort, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5869 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5870 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_RemoteAccess_RASTotal, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5871 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5872 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_RemoteAccess_RASTotal, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5873 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5874 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Spooler_PrintQueue, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5875 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5876 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Spooler_PrintQueue, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5877 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5878 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_TapiSrv_Telephony, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5879 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5880 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_TapiSrv_Telephony, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5881 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5882 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_ICMP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5883 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5884 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_ICMP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5885 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5886 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_ICMPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5887 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5888 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_ICMPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5889 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5890 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_IPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5891 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5892 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_IPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5893 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5894 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_IPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5895 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5896 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_IPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5897 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5898 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_NBTConnection, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5899 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5900 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_NBTConnection, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5901 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5902 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_NetworkInterface, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5903 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5904 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_NetworkInterface, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5905 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5906 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_TCPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5907 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5908 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_TCPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5909 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5910 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_TCPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5911 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5912 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_TCPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5913 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5914 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_UDPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5915 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5916 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_UDPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5917 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5918 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_UDPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5919 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5920 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_UDPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5921 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5922 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_TermService_TerminalServicesSession, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5923 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5924 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_TermService_TerminalServicesSession, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5925 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5926 21:58:44 (0) ** - Root/WMI, Win32_PrivilegesStatus, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5927 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5928 21:58:44 (0) ** - Root/WMI, WMIEvent, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5929 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5930 21:58:44 (0) ** - Root/WMI, MSNdis_StatusMediaConnect, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5931 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5932 21:58:44 (0) ** - Root/WMI, MSNdis_StatusResetEnd, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5933 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5934 21:58:44 (0) ** - Root/WMI, MSNdis_NotifyAdapterArrival, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5935 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5936 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11ConnectionCompletion, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5937 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5938 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11PhyStateChange, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5939 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5940 21:58:44 (0) ** - Root/WMI, MSNdis_StatusResetStart, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5941 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5942 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11RoamingStart, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5943 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5944 21:58:44 (0) ** - Root/WMI, MSNdis_StatusPortState, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5945 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5946 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11RoamingCompletion, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5947 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5948 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11PmkidCandidateList, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5949 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5950 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11AssociationCompletion, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5951 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5952 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11ScanConfirm, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5953 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5954 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11ConnectionStart, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5955 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5956 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDevicePowerOn, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5957 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5958 21:58:44 (0) ** - Root/WMI, MSNdis_StatusTaskOffloadChange, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5959 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5960 21:58:44 (0) ** - Root/WMI, MSNdis_StatusProtocolBind, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5961 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5962 21:58:44 (0) ** - Root/WMI, MSNdis_StatusProtocolUnbind, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5963 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5964 21:58:44 (0) ** - Root/WMI, MSNdis_StatusLinkState, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5965 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5966 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11TkipmicFailure, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5967 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5968 21:58:44 (0) ** - Root/WMI, MSNdis_NotifyAdapterRemoval, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5969 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5970 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDevicePowerOff, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5971 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5972 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11MPDUMaxLengthChange, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5973 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'

    Sunday, May 10, 2015 3:25 AM

Answers

  • Hi Tellis,

    To trace the incoming WMI query, you can parse the event log after enable wmi activity log, and refer to this vbscript to get these columns "Computer","TimeCreated","Query","ClientMachine","User","ClientProcessId","Namespace":

    An Easier Way to View Incoming WMI Queries

    This is the result:

    If there is anything else regarding this issue, please feel free to post back.

    Best Regards,

    Anna Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Monday, May 11, 2015 6:01 AM
    Moderator

All replies

  • Hello,

    I have a problem I've been troubleshooting for a few days now.  It started with a basic WSQL query not working which led to troubleshooting with WMIDIAG  (The log for WMIDIAG is below).

    Basically what happens is, a few minutes after starting the winmgmt queries stop working. 

    Some of the things I've tried:

    - Adjusted memory quotas per http://blogs.technet.com/b/askperf/archive/2008/09/16/memory-and-handle-quotas-in-the-wmi-provider-service.aspx

    - Basically the same thing... but https://support.software.dell.com/foglight/kb/114299


    - Various rebuilds / hotfixes , such as what is listed here: http://itcalls.blogspot.com/2013/10/wmi-unhealthy-on-2008r2-domain.html

    - A full repository reset.....  

    - Started running through this: http://blogs.technet.com/b/askperf/archive/2014/08/08/wmi-common-symptoms-and-errors.aspx which led to going through some of the ideas here that were a repeat of some of the above http://blogs.technet.com/b/askperf/archive/2014/08/08/wmi-repository-corruption-or-not.aspx

    -  Started running through diags mentioned here: http://blogs.technet.com/b/askperf/archive/2014/08/11/wmi-high-memory-usage-by-wmi-service-or-wmiprvse-exe.aspx   .... however I don't believe there is a high memory issue as winmgmt is under 512 MB and winipvse is around 15MB

    - Reboots in between everything as needed


    In all cases.... the wmidiag log reports the same errors.

    Any help with this would be very appreciated!

    Tellis

    ///
    .5609 21:58:44 (0) ** WMIDiag v2.2 started on Saturday, May 09, 2015 at 21:56.
    .5610 21:58:44 (0) **
    .5611 21:58:44 (0) ** Copyright (c) Microsoft Corporation. All rights reserved - July 2007.
    .5612 21:58:44 (0) **
    .5613 21:58:44 (0) ** This script is not supported under any Microsoft standard support program or service.
    .5614 21:58:44 (0) ** The script is provided AS IS without warranty of any kind. Microsoft further disclaims all
    .5615 21:58:44 (0) ** implied warranties including, without limitation, any implied warranties of merchantability
    .5616 21:58:44 (0) ** or of fitness for a particular purpose. The entire risk arising out of the use or performance
    .5617 21:58:44 (0) ** of the scripts and documentation remains with you. In no event shall Microsoft, its authors,
    .5618 21:58:44 (0) ** or anyone else involved in the creation, production, or delivery of the script be liable for
    .5619 21:58:44 (0) ** any damages whatsoever (including, without limitation, damages for loss of business profits,
    .5620 21:58:44 (0) ** business interruption, loss of business information, or other pecuniary loss) arising out of
    .5621 21:58:44 (0) ** the use of or inability to use the script or documentation, even if Microsoft has been advised
    .5622 21:58:44 (0) ** of the possibility of such damages.
    .5623 21:58:44 (0) **
    .5624 21:58:44 (0) **
    .5625 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5626 21:58:44 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------
    .5627 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5628 21:58:44 (0) **
    .5629 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5630 21:58:44 (0) ** Windows Server 2008 R2 - Service pack 1 - 64-bit (7601)
    .5631 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5632 21:58:44 (0) ** Environment: ........................................................................................................ OK.
    .5633 21:58:44 (0) ** There are no missing WMI system files: .............................................................................. OK.
    .5634 21:58:44 (0) ** There are no missing WMI repository files: .......................................................................... OK.
    .5635 21:58:44 (0) ** WMI repository state: ............................................................................................... N/A.
    .5636 21:58:44 (0) ** AFTER running WMIDiag:
    .5637 21:58:44 (0) ** The WMI repository has a size of: ................................................................................... 26 MB.
    .5638 21:58:44 (0) ** - Disk free space on 'C:': .......................................................................................... 52076 MB.
    .5639 21:58:44 (0) **   - INDEX.BTR,                     6062080 bytes,      5/9/2015 9:55:38 PM
    .5640 21:58:44 (0) **   - MAPPING1.MAP,                  68652 bytes,        3/26/2015 2:07:14 AM
    .5641 21:58:44 (0) **   - MAPPING2.MAP,                  68660 bytes,        5/9/2015 9:52:27 PM
    .5642 21:58:44 (0) **   - OBJECTS.DATA,                  21102592 bytes,     5/9/2015 9:55:38 PM
    .5643 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5644 21:58:44 (2) !! WARNING: Windows Firewall: .......................................................................................... DISABLED.
    .5645 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5646 21:58:44 (0) ** DCOM Status: ........................................................................................................ OK.
    .5647 21:58:44 (2) !! WARNING: WMI registry setup: ........................................................................................ INVALID HOSTING SETUP!
    .5648 21:58:44 (0) ** => The WMI service must be configured to run as a STANDALONE service host or
    .5649 21:58:44 (0) **    as a SHARED service host but the (SvcHost) configuration contains invalid information.
    .5650 21:58:44 (0) ** => You can fix this issue by running ONE of the following commands:
    .5651 21:58:44 (0) **    - Shared service host (recommended):
    .5652 21:58:44 (0) **      i.e. 'WINMGMT.EXE /SharedHost'
    .5653 21:58:44 (0) **    - Standalone service host:
    .5654 21:58:44 (0) **      i.e. 'WINMGMT.EXE /StandaloneHost'
    .5655 21:58:44 (0) ** => Reboot the system.
    .5656 21:58:44 (0) **
    .5657 21:58:44 (0) ** INFO: WMI service has dependents: ................................................................................... 1 SERVICE(S)!
    .5658 21:58:44 (0) ** - Internet Connection Sharing (ICS) (SHAREDACCESS, StartMode='Disabled')
    .5659 21:58:44 (0) ** => If the WMI service is stopped, the listed service(s) will have to be stopped as well.
    .5660 21:58:44 (0) **    Note: If the service is marked with (*), it means that the service/application uses WMI but
    .5661 21:58:44 (0) **          there is no hard dependency on WMI. However, if the WMI service is stopped,
    .5662 21:58:44 (0) **          this can prevent the service/application to work as expected.
    .5663 21:58:44 (0) **
    .5664 21:58:44 (0) ** RPCSS service: ...................................................................................................... OK (Already started).
    .5665 21:58:44 (0) ** WINMGMT service: .................................................................................................... OK (Already started).
    .5666 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5667 21:58:44 (0) ** WMI service DCOM setup: ............................................................................................. OK.
    .5668 21:58:44 (0) ** WMI components DCOM registrations: .................................................................................. OK.
    .5669 21:58:44 (0) ** WMI ProgID registrations: ........................................................................................... OK.
    .5670 21:58:44 (0) ** WMI provider DCOM registrations: .................................................................................... OK.
    .5671 21:58:44 (0) ** WMI provider CIM registrations: ..................................................................................... OK.
    .5672 21:58:44 (0) ** WMI provider CLSIDs: ................................................................................................ OK.
    .5673 21:58:44 (0) ** WMI providers EXE/DLL availability: ................................................................................. OK.
    .5674 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5675 21:58:44 (0) ** INFO: User Account Control (UAC): ................................................................................... DISABLED.
    .5676 21:58:44 (0) ** INFO: Local Account Filtering: ...................................................................................... ENABLED.
    .5677 21:58:44 (0) ** => WMI tasks remotely accessing WMI information on this computer and requiring Administrative
    .5678 21:58:44 (0) **    privileges MUST use a DOMAIN account part of the Local Administrators group of this computer
    .5679 21:58:44 (0) **    to ensure that administrative privileges are granted. If a Local User account is used for remote
    .5680 21:58:44 (0) **    accesses, it will be reduced to a plain user (filtered token), even if it is part of the Local Administrators group.
    .5681 21:58:44 (0) **
    .5682 21:58:44 (0) ** Overall DCOM security status: ....................................................................................... OK.
    .5683 21:58:44 (0) ** Overall WMI security status: ........................................................................................ OK.
    .5684 21:58:44 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
    .5685 21:58:44 (0) ** WMI permanent SUBSCRIPTION(S): ...................................................................................... NONE.
    .5686 21:58:44 (0) ** WMI TIMER instruction(s): ........................................................................................... NONE.
    .5687 21:58:44 (0) ** WMI MONIKER CONNECTIONS: ............................................................................................ OK.
    .5688 21:58:44 (0) ** WMI CONNECTIONS: .................................................................................................... OK.
    .5689 21:58:44 (1) !! ERROR: WMI GET operation errors reported: ........................................................................... 466 ERROR(S)!
    .5690 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_HTTPServiceRequestQueues, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5691 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5692 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_HTTPServiceRequestQueues, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5693 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5694 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_HTTPServiceUrlGroups, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5695 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5696 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_HTTPServiceUrlGroups, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5697 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5698 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecDriver, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5699 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5700 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_IPsecDriver, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5701 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5702 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_WFP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5703 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5704 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_WFP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5705 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5706 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_WFPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5707 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5708 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_WFPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5709 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5710 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_WFPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5711 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5712 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_WFPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5713 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5714 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_ESENT_Database, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5715 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5716 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_ESENT_Database, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5717 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5718 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_ESENT_DatabaseInstances, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5719 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5720 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_ESENT_DatabaseInstances, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5721 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5722 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_ESENT_DatabaseTableClasses, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5723 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5724 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_ESENT_DatabaseTableClasses, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5725 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5726 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Lsa_SecurityPerProcessStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5727 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5728 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Lsa_SecurityPerProcessStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5729 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5730 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Lsa_SecuritySystemWideStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5731 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5732 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Lsa_SecuritySystemWideStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5733 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5734 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_MSDTC_DistributedTransactionCoordinator, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5735 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5736 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_MSDTC_DistributedTransactionCoordinator, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5737 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5738 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETCLRData_NETCLRData, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5739 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5740 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETCLRData_NETCLRData, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5741 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5742 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETCLRNetworking_NETCLRNetworking, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5743 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5744 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETCLRNetworking_NETCLRNetworking, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5745 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5746 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETDataProviderforOracle_NETDataProviderforOracle, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5747 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5748 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETDataProviderforOracle_NETDataProviderforOracle, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5749 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5750 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETDataProviderforSqlServer_NETDataProviderforSqlServer, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5751 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5752 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETDataProviderforSqlServer_NETDataProviderforSqlServer, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5753 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5754 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRExceptions, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5755 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5756 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRExceptions, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5757 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5758 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRInterop, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5759 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5760 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRInterop, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5761 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5762 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRJit, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5763 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5764 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRJit, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5765 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5766 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRLoading, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5767 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5768 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRLoading, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5769 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5770 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRLocksAndThreads, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5771 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5772 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRLocksAndThreads, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5773 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5774 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRMemory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5775 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5776 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRMemory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5777 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5778 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRRemoting, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5779 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5780 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRRemoting, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5781 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5782 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRSecurity, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5783 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5784 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRSecurity, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5785 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5786 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfDisk_LogicalDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5787 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5788 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfDisk_LogicalDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5789 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5790 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfDisk_PhysicalDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5791 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5792 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfDisk_PhysicalDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5793 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5794 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfNet_Browser, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5795 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5796 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfNet_Browser, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5797 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5798 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfNet_Redirector, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5799 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5800 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfNet_Redirector, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5801 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5802 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfNet_Server, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5803 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5804 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfNet_Server, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5805 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5806 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfNet_ServerWorkQueues, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5807 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5808 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfNet_ServerWorkQueues, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5809 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5810 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_Cache, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5811 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5812 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_Cache, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5813 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5814 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_Memory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5815 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5816 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_Memory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5817 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5818 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_Objects, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5819 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5820 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_Objects, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5821 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5822 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_PagingFile, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5823 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5824 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_PagingFile, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5825 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5826 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_Processor, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5827 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5828 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_Processor, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5829 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5830 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_System, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5831 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5832 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_System, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5833 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5834 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_FullImage_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5835 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5836 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_FullImage_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5837 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5838 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_Image_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5839 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5840 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_Image_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5841 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5842 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_JobObject, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5843 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5844 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_JobObject, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5845 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5846 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_JobObjectDetails, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5847 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5848 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_JobObjectDetails, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5849 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5850 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_Process, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5851 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5852 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_Process, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5853 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5854 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_ProcessAddressSpace_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5855 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5856 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_ProcessAddressSpace_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5857 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5858 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_Thread, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5859 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5860 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_Thread, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5861 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5862 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_ThreadDetails_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5863 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5864 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_ThreadDetails_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5865 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5866 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_RemoteAccess_RASPort, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5867 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5868 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_RemoteAccess_RASPort, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5869 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5870 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_RemoteAccess_RASTotal, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5871 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5872 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_RemoteAccess_RASTotal, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5873 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5874 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Spooler_PrintQueue, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5875 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5876 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Spooler_PrintQueue, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5877 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5878 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_TapiSrv_Telephony, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5879 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5880 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_TapiSrv_Telephony, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5881 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5882 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_ICMP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5883 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5884 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_ICMP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5885 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5886 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_ICMPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5887 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5888 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_ICMPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5889 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5890 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_IPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5891 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5892 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_IPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5893 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5894 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_IPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5895 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5896 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_IPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5897 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5898 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_NBTConnection, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5899 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5900 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_NBTConnection, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5901 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5902 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_NetworkInterface, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5903 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5904 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_NetworkInterface, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5905 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5906 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_TCPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5907 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5908 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_TCPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5909 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5910 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_TCPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5911 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5912 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_TCPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5913 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5914 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_UDPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5915 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5916 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_UDPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5917 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5918 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_UDPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5919 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5920 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_UDPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5921 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5922 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_TermService_TerminalServicesSession, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5923 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5924 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_TermService_TerminalServicesSession, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5925 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5926 21:58:44 (0) ** - Root/WMI, Win32_PrivilegesStatus, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5927 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5928 21:58:44 (0) ** - Root/WMI, WMIEvent, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5929 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5930 21:58:44 (0) ** - Root/WMI, MSNdis_StatusMediaConnect, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5931 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5932 21:58:44 (0) ** - Root/WMI, MSNdis_StatusResetEnd, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5933 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5934 21:58:44 (0) ** - Root/WMI, MSNdis_NotifyAdapterArrival, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5935 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5936 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11ConnectionCompletion, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5937 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5938 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11PhyStateChange, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5939 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5940 21:58:44 (0) ** - Root/WMI, MSNdis_StatusResetStart, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5941 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5942 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11RoamingStart, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5943 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5944 21:58:44 (0) ** - Root/WMI, MSNdis_StatusPortState, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5945 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5946 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11RoamingCompletion, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5947 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5948 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11PmkidCandidateList, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5949 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5950 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11AssociationCompletion, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5951 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5952 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11ScanConfirm, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5953 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5954 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11ConnectionStart, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5955 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5956 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDevicePowerOn, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5957 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5958 21:58:44 (0) ** - Root/WMI, MSNdis_StatusTaskOffloadChange, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5959 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5960 21:58:44 (0) ** - Root/WMI, MSNdis_StatusProtocolBind, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5961 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5962 21:58:44 (0) ** - Root/WMI, MSNdis_StatusProtocolUnbind, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5963 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5964 21:58:44 (0) ** - Root/WMI, MSNdis_StatusLinkState, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5965 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5966 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11TkipmicFailure, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5967 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5968 21:58:44 (0) ** - Root/WMI, MSNdis_NotifyAdapterRemoval, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5969 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5970 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDevicePowerOff, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5971 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5972 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11MPDUMaxLengthChange, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5973 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'

    Sunday, May 10, 2015 3:29 AM

  • Hello,

    I have a problem I've been troubleshooting for a few days now.  It started with a basic WSQL query not working which led to troubleshooting with WMIDIAG  (The log for WMIDIAG is below).

    Basically what happens is, a few minutes after starting the winmgmt , anything with WMI has issues working... to the point where I can't even run a tasklist cmd unless I restart winmgmt.

    Some of the things I've tried:

    - Adjusted memory quotas per http://blogs.technet.com/b/askperf/archive/2008/09/16/memory-and-handle-quotas-in-the-wmi-provider-service.aspx

    - Basically the same thing... but https://support.software.dell.com/foglight/kb/114299


    - Various rebuilds / hotfixes , such as what is listed here: http://itcalls.blogspot.com/2013/10/wmi-unhealthy-on-2008r2-domain.html

    - A full repository reset.....  

    - Started running through this: http://blogs.technet.com/b/askperf/archive/2014/08/08/wmi-common-symptoms-and-errors.aspx which led to going through some of the ideas here that were a repeat of some of the above http://blogs.technet.com/b/askperf/archive/2014/08/08/wmi-repository-corruption-or-not.aspx

    -  Started running through diags mentioned here: http://blogs.technet.com/b/askperf/archive/2014/08/11/wmi-high-memory-usage-by-wmi-service-or-wmiprvse-exe.aspx   .... however I don't believe there is a high memory issue as winmgmt is under 512 MB and winipvse is around 15MB

    - Reboots in between everything as needed


    In all cases.... the wmidiag log reports the same types of errors.

    Any help with this would be very appreciated!

    Tellis


    Sunday, May 10, 2015 3:29 AM

  • .5609 21:58:44 (0) ** WMIDiag v2.2 started on Saturday, May 09, 2015 at 21:56.
    .5610 21:58:44 (0) **
    .5611 21:58:44 (0) ** Copyright (c) Microsoft Corporation. All rights reserved - July 2007.
    .5612 21:58:44 (0) **
    .5613 21:58:44 (0) ** This script is not supported under any Microsoft standard support program or service.
    .5614 21:58:44 (0) ** The script is provided AS IS without warranty of any kind. Microsoft further disclaims all
    .5615 21:58:44 (0) ** implied warranties including, without limitation, any implied warranties of merchantability
    .5616 21:58:44 (0) ** or of fitness for a particular purpose. The entire risk arising out of the use or performance
    .5617 21:58:44 (0) ** of the scripts and documentation remains with you. In no event shall Microsoft, its authors,
    .5618 21:58:44 (0) ** or anyone else involved in the creation, production, or delivery of the script be liable for
    .5619 21:58:44 (0) ** any damages whatsoever (including, without limitation, damages for loss of business profits,
    .5620 21:58:44 (0) ** business interruption, loss of business information, or other pecuniary loss) arising out of
    .5621 21:58:44 (0) ** the use of or inability to use the script or documentation, even if Microsoft has been advised
    .5622 21:58:44 (0) ** of the possibility of such damages.
    .5623 21:58:44 (0) **
    .5624 21:58:44 (0) **
    .5625 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5626 21:58:44 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------
    .5627 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5628 21:58:44 (0) **
    .5629 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5630 21:58:44 (0) ** Windows Server 2008 R2 - Service pack 1 - 64-bit (7601)
    .5631 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5632 21:58:44 (0) ** Environment: ........................................................................................................ OK.
    .5633 21:58:44 (0) ** There are no missing WMI system files: .............................................................................. OK.
    .5634 21:58:44 (0) ** There are no missing WMI repository files: .......................................................................... OK.
    .5635 21:58:44 (0) ** WMI repository state: ............................................................................................... N/A.
    .5636 21:58:44 (0) ** AFTER running WMIDiag:
    .5637 21:58:44 (0) ** The WMI repository has a size of: ................................................................................... 26 MB.
    .5638 21:58:44 (0) ** - Disk free space on 'C:': .......................................................................................... 52076 MB.
    .5639 21:58:44 (0) **   - INDEX.BTR,                     6062080 bytes,      5/9/2015 9:55:38 PM
    .5640 21:58:44 (0) **   - MAPPING1.MAP,                  68652 bytes,        3/26/2015 2:07:14 AM
    .5641 21:58:44 (0) **   - MAPPING2.MAP,                  68660 bytes,        5/9/2015 9:52:27 PM
    .5642 21:58:44 (0) **   - OBJECTS.DATA,                  21102592 bytes,     5/9/2015 9:55:38 PM
    .5643 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5644 21:58:44 (2) !! WARNING: Windows Firewall: .......................................................................................... DISABLED.
    .5645 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5646 21:58:44 (0) ** DCOM Status: ........................................................................................................ OK.
    .5647 21:58:44 (2) !! WARNING: WMI registry setup: ........................................................................................ INVALID HOSTING SETUP!
    .5648 21:58:44 (0) ** => The WMI service must be configured to run as a STANDALONE service host or
    .5649 21:58:44 (0) **    as a SHARED service host but the (SvcHost) configuration contains invalid information.
    .5650 21:58:44 (0) ** => You can fix this issue by running ONE of the following commands:
    .5651 21:58:44 (0) **    - Shared service host (recommended):
    .5652 21:58:44 (0) **      i.e. 'WINMGMT.EXE /SharedHost'
    .5653 21:58:44 (0) **    - Standalone service host:
    .5654 21:58:44 (0) **      i.e. 'WINMGMT.EXE /StandaloneHost'
    .5655 21:58:44 (0) ** => Reboot the system.
    .5656 21:58:44 (0) **
    .5657 21:58:44 (0) ** INFO: WMI service has dependents: ................................................................................... 1 SERVICE(S)!
    .5658 21:58:44 (0) ** - Internet Connection Sharing (ICS) (SHAREDACCESS, StartMode='Disabled')
    .5659 21:58:44 (0) ** => If the WMI service is stopped, the listed service(s) will have to be stopped as well.
    .5660 21:58:44 (0) **    Note: If the service is marked with (*), it means that the service/application uses WMI but
    .5661 21:58:44 (0) **          there is no hard dependency on WMI. However, if the WMI service is stopped,
    .5662 21:58:44 (0) **          this can prevent the service/application to work as expected.
    .5663 21:58:44 (0) **
    .5664 21:58:44 (0) ** RPCSS service: ...................................................................................................... OK (Already started).
    .5665 21:58:44 (0) ** WINMGMT service: .................................................................................................... OK (Already started).
    .5666 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5667 21:58:44 (0) ** WMI service DCOM setup: ............................................................................................. OK.
    .5668 21:58:44 (0) ** WMI components DCOM registrations: .................................................................................. OK.
    .5669 21:58:44 (0) ** WMI ProgID registrations: ........................................................................................... OK.
    .5670 21:58:44 (0) ** WMI provider DCOM registrations: .................................................................................... OK.
    .5671 21:58:44 (0) ** WMI provider CIM registrations: ..................................................................................... OK.
    .5672 21:58:44 (0) ** WMI provider CLSIDs: ................................................................................................ OK.
    .5673 21:58:44 (0) ** WMI providers EXE/DLL availability: ................................................................................. OK.
    .5674 21:58:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .5675 21:58:44 (0) ** INFO: User Account Control (UAC): ................................................................................... DISABLED.
    .5676 21:58:44 (0) ** INFO: Local Account Filtering: ...................................................................................... ENABLED.
    .5677 21:58:44 (0) ** => WMI tasks remotely accessing WMI information on this computer and requiring Administrative
    .5678 21:58:44 (0) **    privileges MUST use a DOMAIN account part of the Local Administrators group of this computer
    .5679 21:58:44 (0) **    to ensure that administrative privileges are granted. If a Local User account is used for remote
    .5680 21:58:44 (0) **    accesses, it will be reduced to a plain user (filtered token), even if it is part of the Local Administrators group.
    .5681 21:58:44 (0) **
    .5682 21:58:44 (0) ** Overall DCOM security status: ....................................................................................... OK.
    .5683 21:58:44 (0) ** Overall WMI security status: ........................................................................................ OK.
    .5684 21:58:44 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
    .5685 21:58:44 (0) ** WMI permanent SUBSCRIPTION(S): ...................................................................................... NONE.
    .5686 21:58:44 (0) ** WMI TIMER instruction(s): ........................................................................................... NONE.
    .5687 21:58:44 (0) ** WMI MONIKER CONNECTIONS: ............................................................................................ OK.
    .5688 21:58:44 (0) ** WMI CONNECTIONS: .................................................................................................... OK.
    .5689 21:58:44 (1) !! ERROR: WMI GET operation errors reported: ........................................................................... 466 ERROR(S)!
    .5690 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_HTTPServiceRequestQueues, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5691 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5692 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_HTTPServiceRequestQueues, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5693 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5694 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_HTTPServiceUrlGroups, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5695 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5696 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_HTTPServiceUrlGroups, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5697 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5698 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecDriver, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5699 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5700 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_IPsecDriver, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5701 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5702 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_WFP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5703 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5704 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_WFP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5705 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5706 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_WFPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5707 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5708 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_WFPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5709 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5710 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_WFPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5711 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5712 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_WFPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5713 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5714 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_ESENT_Database, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5715 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5716 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_ESENT_Database, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5717 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5718 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_ESENT_DatabaseInstances, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5719 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5720 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_ESENT_DatabaseInstances, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5721 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5722 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_ESENT_DatabaseTableClasses, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5723 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5724 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_ESENT_DatabaseTableClasses, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5725 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5726 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Lsa_SecurityPerProcessStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5727 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5728 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Lsa_SecurityPerProcessStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5729 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5730 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Lsa_SecuritySystemWideStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5731 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5732 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Lsa_SecuritySystemWideStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5733 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5734 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_MSDTC_DistributedTransactionCoordinator, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5735 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5736 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_MSDTC_DistributedTransactionCoordinator, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5737 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5738 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETCLRData_NETCLRData, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5739 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5740 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETCLRData_NETCLRData, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5741 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5742 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETCLRNetworking_NETCLRNetworking, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5743 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5744 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETCLRNetworking_NETCLRNetworking, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5745 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5746 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETDataProviderforOracle_NETDataProviderforOracle, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5747 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5748 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETDataProviderforOracle_NETDataProviderforOracle, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5749 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5750 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETDataProviderforSqlServer_NETDataProviderforSqlServer, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5751 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5752 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETDataProviderforSqlServer_NETDataProviderforSqlServer, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5753 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5754 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRExceptions, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5755 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5756 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRExceptions, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5757 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    Sunday, May 10, 2015 3:30 AM
  • .5758 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRInterop, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5759 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'

    .5760 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRInterop, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5761 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5762 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRJit, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5763 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5764 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRJit, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5765 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5766 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRLoading, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5767 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5768 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRLoading, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5769 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5770 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRLocksAndThreads, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5771 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5772 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRLocksAndThreads, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5773 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5774 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRMemory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5775 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5776 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRMemory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5777 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5778 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRRemoting, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5779 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5780 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRRemoting, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5781 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5782 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRSecurity, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5783 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5784 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRSecurity, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5785 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5786 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfDisk_LogicalDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5787 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5788 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfDisk_LogicalDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5789 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5790 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfDisk_PhysicalDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5791 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5792 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfDisk_PhysicalDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5793 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5794 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfNet_Browser, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5795 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5796 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfNet_Browser, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5797 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5798 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfNet_Redirector, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5799 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5800 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfNet_Redirector, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5801 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5802 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfNet_Server, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5803 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5804 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfNet_Server, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5805 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5806 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfNet_ServerWorkQueues, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5807 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5808 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfNet_ServerWorkQueues, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5809 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5810 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_Cache, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5811 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5812 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_Cache, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5813 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5814 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_Memory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5815 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5816 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_Memory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5817 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5818 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_Objects, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5819 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5820 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_Objects, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5821 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5822 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_PagingFile, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5823 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5824 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_PagingFile, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5825 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5826 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_Processor, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5827 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5828 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_Processor, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5829 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5830 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfOS_System, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5831 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5832 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfOS_System, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5833 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5834 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_FullImage_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5835 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5836 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_FullImage_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5837 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5838 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_Image_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5839 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5840 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_Image_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5841 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5842 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_JobObject, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5843 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5844 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_JobObject, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5845 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5846 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_JobObjectDetails, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5847 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5848 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_JobObjectDetails, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5849 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5850 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_Process, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5851 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5852 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_Process, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5853 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5854 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_ProcessAddressSpace_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5855 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5856 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_ProcessAddressSpace_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5857 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5858 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_Thread, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5859 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5860 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_Thread, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5861 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5862 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_PerfProc_ThreadDetails_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5863 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5864 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_PerfProc_ThreadDetails_Costly, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5865 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5866 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_RemoteAccess_RASPort, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5867 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5868 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_RemoteAccess_RASPort, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5869 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5870 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_RemoteAccess_RASTotal, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5871 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5872 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_RemoteAccess_RASTotal, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5873 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5874 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Spooler_PrintQueue, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5875 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5876 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Spooler_PrintQueue, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5877 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5878 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_TapiSrv_Telephony, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5879 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5880 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_TapiSrv_Telephony, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5881 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5882 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_ICMP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5883 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5884 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_ICMP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5885 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5886 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_ICMPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5887 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5888 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_ICMPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5889 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5890 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_IPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5891 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5892 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_IPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5893 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5894 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_IPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5895 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5896 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_IPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5897 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5898 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_NBTConnection, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5899 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5900 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_NBTConnection, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5901 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5902 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_NetworkInterface, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5903 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5904 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_NetworkInterface, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5905 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5906 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_TCPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5907 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5908 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_TCPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5909 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5910 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_TCPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5911 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5912 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_TCPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5913 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5914 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_UDPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5915 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5916 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_UDPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5917 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5918 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Tcpip_UDPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5919 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5920 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_Tcpip_UDPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5921 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5922 21:58:44 (0) ** - Root/CIMV2, Win32_PerfFormattedData_TermService_TerminalServicesSession, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5923 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5924 21:58:44 (0) ** - Root/CIMV2, Win32_PerfRawData_TermService_TerminalServicesSession, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    .5925 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5926 21:58:44 (0) ** - Root/WMI, Win32_PrivilegesStatus, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5927 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5928 21:58:44 (0) ** - Root/WMI, WMIEvent, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5929 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5930 21:58:44 (0) ** - Root/WMI, MSNdis_StatusMediaConnect, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5931 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5932 21:58:44 (0) ** - Root/WMI, MSNdis_StatusResetEnd, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5933 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5934 21:58:44 (0) ** - Root/WMI, MSNdis_NotifyAdapterArrival, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5935 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5936 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11ConnectionCompletion, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5937 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5938 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11PhyStateChange, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5939 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5940 21:58:44 (0) ** - Root/WMI, MSNdis_StatusResetStart, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5941 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5942 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11RoamingStart, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5943 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5944 21:58:44 (0) ** - Root/WMI, MSNdis_StatusPortState, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5945 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5946 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11RoamingCompletion, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5947 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5948 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11PmkidCandidateList, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5949 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5950 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11AssociationCompletion, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5951 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5952 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11ScanConfirm, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5953 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5954 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11ConnectionStart, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5955 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5956 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDevicePowerOn, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5957 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5958 21:58:44 (0) ** - Root/WMI, MSNdis_StatusTaskOffloadChange, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5959 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5960 21:58:44 (0) ** - Root/WMI, MSNdis_StatusProtocolBind, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5961 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5962 21:58:44 (0) ** - Root/WMI, MSNdis_StatusProtocolUnbind, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5963 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5964 21:58:44 (0) ** - Root/WMI, MSNdis_StatusLinkState, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5965 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5966 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11TkipmicFailure, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5967 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5968 21:58:44 (0) ** - Root/WMI, MSNdis_NotifyAdapterRemoval, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5969 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5970 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDevicePowerOff, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5971 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5972 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11MPDUMaxLengthChange, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5973 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'

    Sunday, May 10, 2015 3:31 AM
  • Has service pack one and updates been applied? Also please run the system update readiness tool.

    http://windows.microsoft.com/en-us/windows7/What-is-the-System-Update-Readiness-Tool?SignedIn=1

    Then post the complete contents of;
    %SYSTEMROOT%\Logs\CBS\CheckSUR.log  

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Sunday, May 10, 2015 3:32 AM
  • .5974 21:58:44 (0) ** - Root/WMI, MSNdis_NotifyVcRemoval, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5975 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5976 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11Disassociation, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5977 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5978 21:58:44 (0) ** - Root/WMI, MSNdis_StatusPacketFilterChange, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5979 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5980 21:58:44 (0) ** - Root/WMI, MSNdis_StatusNetworkChange, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5981 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5982 21:58:44 (0) ** - Root/WMI, MSNdis_NotifyFilterRemoval, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5983 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5984 21:58:44 (0) ** - Root/WMI, MSNdis_StatusOperationalStatus, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5985 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5986 21:58:44 (0) ** - Root/WMI, MSNdis_StatusMediaSpecificIndicationEx, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5987 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5988 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11LinkQuality, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5989 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5990 21:58:44 (0) ** - Root/WMI, MSNdis_StatusDot11AssociationStart, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5991 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5992 21:58:44 (0) ** - Root/WMI, MSNdis_StatusLinkSpeedChange, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5993 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5994 21:58:44 (0) ** - Root/WMI, MSNdis_NotifyVcArrival, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5995 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5996 21:58:44 (0) ** - Root/WMI, MSNdis_StatusMediaSpecificIndication, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5997 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .5998 21:58:44 (0) ** - Root/WMI, MSNdis_NotifyFilterArrival, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .5999 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6000 21:58:44 (0) ** - Root/WMI, MSNdis_StatusMediaDisconnect, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6001 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6002 21:58:44 (0) ** - Root/WMI, MSDiskDriver, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6003 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6004 21:58:44 (0) ** - Root/WMI, MSDiskDriver_Performance, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6005 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6006 21:58:44 (0) ** - Root/WMI, MSDiskDriver_PerformanceData, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6007 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6008 21:58:44 (0) ** - Root/WMI, MSDiskDriver_Geometry, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6009 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6010 21:58:44 (0) ** - Root/WMI, MSChangerDriver, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6011 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6012 21:58:44 (0) ** - Root/WMI, MSChangerParameters, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6013 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6014 21:58:44 (0) ** - Root/WMI, MSChangerProblemDeviceError, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6015 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6016 21:58:44 (0) ** - Root/WMI, BcdStore, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6017 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6018 21:58:44 (0) ** - Root/WMI, BcdElement, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6019 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6020 21:58:44 (0) ** - Root/WMI, BcdObjectElement, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6021 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6022 21:58:44 (0) ** - Root/WMI, BcdDeviceElement, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6023 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6024 21:58:44 (0) ** - Root/WMI, BcdStringElement, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6025 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6026 21:58:44 (0) ** - Root/WMI, BcdBooleanElement, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6027 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6028 21:58:44 (0) ** - Root/WMI, BcdIntegerElement, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6029 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6030 21:58:44 (0) ** - Root/WMI, BcdObjectListElement, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6031 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6032 21:58:44 (0) ** - Root/WMI, MSProcessorClass, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6033 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6034 21:58:44 (0) ** - Root/WMI, ProcessorBiosInfo, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6035 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6036 21:58:44 (0) ** - Root/WMI, ProcessorStatus, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6037 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6038 21:58:44 (0) ** - Root/WMI, WDMClassesOfDriver, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6039 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6040 21:58:44 (0) ** - Root/WMI, PerformanceState, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6041 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6042 21:58:44 (0) ** - Root/WMI, MSPower, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6043 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6044 21:58:44 (0) ** - Root/WMI, MSPower_DeviceWakeEnable, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6045 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6046 21:58:44 (0) ** - Root/WMI, MSPower_DeviceEnable, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6047 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6048 21:58:44 (0) ** - Root/WMI, MSMouse, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6049 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6050 21:58:44 (0) ** - Root/WMI, MSMouse_ClassInformation, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6051 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6052 21:58:44 (0) ** - Root/WMI, MSMouse_PortInformation, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6053 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6054 21:58:44 (0) ** - Root/WMI, MSStorageDriver_ScsiRequestBlock, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6055 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6056 21:58:44 (0) ** - Root/WMI, MSRedbook_Performance, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6057 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6058 21:58:44 (0) ** - Root/WMI, MSDeviceUI, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6059 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6060 21:58:44 (0) ** - Root/WMI, MSDeviceUI_FirmwareRevision, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6061 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6062 21:58:44 (0) ** - Root/WMI, MSSerial, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6063 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6064 21:58:44 (0) ** - Root/WMI, MSSerial_PerformanceInformation, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6065 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6066 21:58:44 (0) ** - Root/WMI, MSSerial_PortName, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6067 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6068 21:58:44 (0) ** - Root/WMI, MSSerial_CommInfo, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6069 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6070 21:58:44 (0) ** - Root/WMI, MSSerial_HardwareConfiguration, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6071 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6072 21:58:44 (0) ** - Root/WMI, MSSerial_CommProperties, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6073 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6074 21:58:44 (0) ** - Root/WMI, MSKeyboard, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6075 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6076 21:58:44 (0) ** - Root/WMI, MSKeyboard_ExtendedID, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6077 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6078 21:58:44 (0) ** - Root/WMI, MSKeyboard_PortInformation, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6079 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6080 21:58:44 (0) ** - Root/WMI, MSKeyboard_ClassInformation, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6081 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6082 21:58:44 (0) ** - Root/WMI, MSStorageDriver_ClassErrorLogEntry, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6083 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6084 21:58:44 (0) ** - Root/WMI, MSTapeDriver, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6085 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6086 21:58:44 (0) ** - Root/WMI, MSTapeDriveParam, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6087 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6088 21:58:44 (0) ** - Root/WMI, MSTapeSymbolicName, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6089 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6090 21:58:44 (0) ** - Root/WMI, MSTapeMediaCapacity, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6091 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6092 21:58:44 (0) ** - Root/WMI, MSTapeProblemDeviceError, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6093 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6094 21:58:44 (0) ** - Root/WMI, MSTapeProblemIoError, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6095 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6096 21:58:44 (0) ** - Root/WMI, MSStorageDriver, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6097 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6098 21:58:44 (0) ** - Root/WMI, MSStorageDriver_FailurePredictFunction, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6099 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6100 21:58:44 (0) ** - Root/WMI, MSStorageDriver_FailurePredictData, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6101 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6102 21:58:44 (0) ** - Root/WMI, MSStorageDriver_ScsiInfoExceptions, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6103 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6104 21:58:44 (0) ** - Root/WMI, MSStorageDriver_ATAPISmartData, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6105 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6106 21:58:44 (0) ** - Root/WMI, MSStorageDriver_FailurePredictThresholds, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6107 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6108 21:58:44 (0) ** - Root/WMI, MSStorageDriver_FailurePredictStatus, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6109 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6110 21:58:44 (0) ** - Root/WMI, MSWmi_Guid, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6111 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6112 21:58:44 (0) ** - Root/WMI, MSNdis, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6113 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6114 21:58:44 (0) ** - Root/WMI, MSNdis_CoDriverVersion, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6115 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6116 21:58:44 (0) ** - Root/WMI, MSNdis_DriverVersion, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6117 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6118 21:58:44 (0) ** - Root/WMI, MSNdis_80211_ReceiveAntennaSelected, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6119 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6120 21:58:44 (0) ** - Root/WMI, MSNdis_EthernetPermanentAddress, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6121 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6122 21:58:44 (0) ** - Root/WMI, MSNdis_FddiLongPermanentAddress, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6123 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6124 21:58:44 (0) ** - Root/WMI, MSNdis_FddiLemRejects, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6125 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6126 21:58:44 (0) ** - Root/WMI, MSNdis_80211_RTSThreshold, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6127 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6128 21:58:44 (0) ** - Root/WMI, MSNdis_EthernetCurrentAddress, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6129 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6130 21:58:44 (0) ** - Root/WMI, MSNdis_EthernetMacOptions, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6131 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6132 21:58:44 (0) ** - Root/WMI, MSNdis_AtmMaxAal34PacketSize, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6133 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6134 21:58:44 (0) ** - Root/WMI, MSNdis_CoMediaInUse, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6135 21:58:44 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6136 21:58:44 (0) ** - Root/WMI, MSNdis_EthernetMulticastList, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6137 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6138 21:58:45 (0) ** - Root/WMI, MSNdis_EthernetReceiveErrorAlignment, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6139 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6140 21:58:45 (0) ** - Root/WMI, MSNdis_80211_AddWEP, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6141 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6142 21:58:45 (0) ** - Root/WMI, MSNdis_80211_ConfigurationInfo, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6143 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6144 21:58:45 (0) ** - Root/WMI, MSNdis_FddiShortMaximumListSize, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6145 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6146 21:58:45 (0) ** - Root/WMI, MSNdis_AtmMaxAal1PacketSize, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6147 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6148 21:58:45 (0) ** - Root/WMI, MSNdis_FddiRingManagmentState, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6149 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6150 21:58:45 (0) ** - Root/WMI, MSNdis_CoLinkSpeed, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6151 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6152 21:58:45 (0) ** - Root/WMI, MSNdis_TokenRingLastOpenStatus, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6153 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6154 21:58:45 (0) ** - Root/WMI, MSNdis_80211_ReloadDefaults, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6155 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6156 21:58:45 (0) ** - Root/WMI, MSNdis_FddiFrameErrors, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6157 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6158 21:58:45 (0) ** - Root/WMI, MSNdis_TransmitsError, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6159 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6160 21:58:45 (0) ** - Root/WMI, MSNdis_FddiAttachmentType, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6161 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6162 21:58:45 (0) ** - Root/WMI, MSNdis_CoMediaConnectStatus, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6163 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6164 21:58:45 (0) ** - Root/WMI, MSNdis_80211_BssIdListScan, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6165 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6166 21:58:45 (0) ** - Root/WMI, MSNdis_80211_InfrastructureMode, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6167 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6168 21:58:45 (0) ** - Root/WMI, MSNdis_80211_ConfigurationFH, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6169 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6170 21:58:45 (0) ** - Root/WMI, MSNdis_VendorDescription, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6171 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6172 21:58:45 (0) ** - Root/WMI, MSNdis_CoHardwareStatus, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6173 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6174 21:58:45 (0) ** - Root/WMI, MSNdis_FddiShortPermanentAddress, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6175 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6176 21:58:45 (0) ** - Root/WMI, MSNdis_TransmitBufferSpace, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6177 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6178 21:58:45 (0) ** - Root/WMI, MSNdis_80211_BaseServiceSetIdentifier, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6179 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6180 21:58:45 (0) ** - Root/WMI, MSNdis_TokenRingLostFrames, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6181 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6182 21:58:45 (0) ** - Root/WMI, MSNdis_ReceiveBlockSize, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6183 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6184 21:58:45 (0) ** - Root/WMI, MSNdis_AtmTransmitCellsOk, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6185 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6186 21:58:45 (0) ** - Root/WMI, MSNdis_AtmReceiveCellsOk, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6187 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6188 21:58:45 (0) ** - Root/WMI, MSNdis_FddiLConnectionState, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6189 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6190 21:58:45 (0) ** - Root/WMI, MSNdis_CurrentLookahead, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6191 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6192 21:58:45 (0) ** - Root/WMI, MSNdis_VendorID, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6193 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6194 21:58:45 (0) ** - Root/WMI, MSNdis_VendorDriverVersion, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6195 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6196 21:58:45 (0) ** - Root/WMI, MSNdis_TransmitBlockSize, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6197 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6198 21:58:45 (0) ** - Root/WMI, MSNdis_MaximumFrameSize, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6199 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6200 21:58:45 (0) ** - Root/WMI, MSNdis_AtmMaxAal0PacketSize, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6201 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6202 21:58:45 (0) ** - Root/WMI, MSNdis_MediaSupported, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6203 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6204 21:58:45 (0) ** - Root/WMI, MSNdis_TransmitsOk, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6205 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6206 21:58:45 (0) ** - Root/WMI, MSNdis_EthernetOneTransmitCollision, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6207 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6208 21:58:45 (0) ** - Root/WMI, MSNdis_TokenRingPermanentAddress, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6209 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6210 21:58:45 (0) ** - Root/WMI, MSNdis_ReceiveBufferSpace, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6211 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6212 21:58:45 (0) ** - Root/WMI, MSNdis_80211_ReceivedSignalStrength, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6213 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6214 21:58:45 (0) ** - Root/WMI, MSNdis_AtmMaxActiveVciBits, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6215 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6216 21:58:45 (0) ** - Root/WMI, MSNdis_HardwareStatus, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6217 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6218 21:58:45 (0) ** - Root/WMI, MSNdis_AtmSupportedAalTypes, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6219 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6220 21:58:45 (0) ** - Root/WMI, MSNdis_FddiFramesLost, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6221 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6222 21:58:45 (0) ** - Root/WMI, MSNdis_80211_NetworkType, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6223 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6224 21:58:45 (0) ** - Root/WMI, MSNdis_80211_PrivacyFilter, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6225 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6226 21:58:45 (0) ** - Root/WMI, MSNdis_80211_TransmitPowerLevel, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6227 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6228 21:58:45 (0) ** - Root/WMI, MSNdis_PhysicalMediumType, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6229 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6230 21:58:45 (0) ** - Root/WMI, MSNdis_EthernetMaximumMulticastListSize, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6231 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6232 21:58:45 (0) ** - Root/WMI, MSNdis_CoTransmitPduErrors, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6233 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6234 21:58:45 (0) ** - Root/WMI, MSNdis_80211_NetworkInfrastructure, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6235 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6236 21:58:45 (0) ** - Root/WMI, MSNdis_VlanIdentifier, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6237 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6238 21:58:45 (0) ** - Root/WMI, MSNdis_80211_WLanBssId, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6239 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6240 21:58:45 (0) ** - Root/WMI, MSNdis_TokenRingCurrentRingStatus, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6241 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6242 21:58:45 (0) ** - Root/WMI, MSNdis_ReceivesOk, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6243 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6244 21:58:45 (0) ** - Root/WMI, MSNdis_FddiLongCurrentAddress, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6245 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6246 21:58:45 (0) ** - Root/WMI, MSNdis_80211_NetworkTypesSupported, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6247 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6248 21:58:45 (0) ** - Root/WMI, MSNdis_EnumerateAdapter, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6249 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6250 21:58:45 (0) ** - Root/WMI, MSNdis_MediaConnectStatus, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6251 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6252 21:58:45 (0) ** - Root/WMI, MSNdis_MaximumLookahead, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6253 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6254 21:58:45 (0) ** - Root/WMI, MSNdis_FddiDownstreamNodeLong, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6255 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6256 21:58:45 (0) ** - Root/WMI, MSNdis_AtmSupportedVcRates, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    Sunday, May 10, 2015 3:33 AM

  • .6426 21:58:45 (0) ** - Root/WMI, WinLogon, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6427 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6428 21:58:45 (0) ** - Root/WMI, MSNT_SystemTrace, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6429 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6430 21:58:45 (0) ** - Root/WMI, StackWalk, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6431 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6432 21:58:45 (0) ** - Root/WMI, StackWalk_Event, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6433 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6434 21:58:45 (0) ** - Root/WMI, PerfInfo, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6435 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6436 21:58:45 (0) ** - Root/WMI, EventTraceEvent, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6437 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6438 21:58:45 (0) ** - Root/WMI, EventTrace_Header, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6439 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6440 21:58:45 (0) ** - Root/WMI, MMCSSTrace, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6441 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6442 21:58:45 (0) ** - Root/WMI, MMCSSEvent, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6443 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6444 21:58:45 (0) ** - Root/WMI, MMCSSWakeup, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6445 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6446 21:58:45 (0) ** - Root/WMI, MMCSS_TypeGroup, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6447 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6448 21:58:45 (0) ** - Root/WMI, SystemConfig_V1, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6449 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6450 21:58:45 (0) ** - Root/WMI, SystemConfig_V1_LogDisk, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6451 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6452 21:58:45 (0) ** - Root/WMI, SystemConfig_V1_PhyDisk, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6453 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6454 21:58:45 (0) ** - Root/WMI, SystemConfig_V1_IRQ, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6455 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6456 21:58:45 (0) ** - Root/WMI, SystemConfig_V1_CPU, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6457 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6458 21:58:45 (0) ** - Root/WMI, SystemConfig_V1_Power, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6459 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6460 21:58:45 (0) ** - Root/WMI, SystemConfig_V1_Video, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6461 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6462 21:58:45 (0) ** - Root/WMI, SystemConfig_V1_Services, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6463 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6464 21:58:45 (0) ** - Root/WMI, SystemConfig_V1_PnP, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6465 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6466 21:58:45 (0) ** - Root/WMI, SystemConfig_V1_NIC, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6467 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6468 21:58:45 (0) ** - Root/WMI, Registry, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6469 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6470 21:58:45 (0) ** - Root/WMI, Registry_TypeGroup1, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6471 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6472 21:58:45 (0) ** - Root/WMI, Process_V1, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6473 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6474 21:58:45 (0) ** - Root/WMI, Process_V1_TypeGroup1, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6475 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6476 21:58:45 (0) ** - Root/WMI, HeapTrace, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6477 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6478 21:58:45 (0) ** - Root/WMI, HeapCreate, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6479 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6480 21:58:45 (0) ** - Root/WMI, HeapAlloc, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6481 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6482 21:58:45 (0) ** - Root/WMI, HeapFree, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6483 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6484 21:58:45 (0) ** - Root/WMI, HeapRealloc, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6485 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6486 21:58:45 (0) ** - Root/WMI, HeapSnapShot, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6487 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6488 21:58:45 (0) ** - Root/WMI, HeapContract, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6489 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6490 21:58:45 (0) ** - Root/WMI, Heap_TypeGroup1, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6491 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6492 21:58:45 (0) ** - Root/WMI, HeapExpand, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6493 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6494 21:58:45 (0) ** - Root/WMI, Thread, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6495 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6496 21:58:45 (0) ** - Root/WMI, FileIo, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6497 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6498 21:58:45 (0) ** - Root/WMI, FileIo_ReadWrite, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6499 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6500 21:58:45 (0) ** - Root/WMI, FileIo_Create, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6501 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6502 21:58:45 (0) ** - Root/WMI, FileIo_Name, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6503 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6504 21:58:45 (0) ** - Root/WMI, FileIo_Info, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6505 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6506 21:58:45 (0) ** - Root/WMI, FileIo_SimpleOp, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6507 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6508 21:58:45 (0) ** - Root/WMI, FileIo_DirEnum, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6509 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6510 21:58:45 (0) ** - Root/WMI, FileIo_OpEnd, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6511 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6512 21:58:45 (0) ** - Root/WMI, SplitIo, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6513 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6514 21:58:45 (0) ** - Root/WMI, SplitIo_Info, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6515 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6516 21:58:45 (0) ** - Root/WMI, SystemConfig, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6517 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6518 21:58:45 (0) ** - Root/WMI, SystemConfig_PnP, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6519 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6520 21:58:45 (0) ** - Root/WMI, Process, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6521 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6522 21:58:45 (0) ** - Root/WMI, DiskIo, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6523 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6524 21:58:45 (0) ** - Root/WMI, DriverMajorFunctionReturn, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6525 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6526 21:58:45 (0) ** - Root/WMI, DriverMajorFunctionCall, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6527 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6528 21:58:45 (0) ** - Root/WMI, DriverCompleteRequestReturn, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6529 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6530 21:58:45 (0) ** - Root/WMI, DriverCompleteRequest, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6531 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6532 21:58:45 (0) ** - Root/WMI, Lost_Event, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6533 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6534 21:58:45 (0) ** - Root/WMI, RT_LostEvent, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6535 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6536 21:58:45 (0) ** - Root/WMI, Image, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6537 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6538 21:58:45 (0) ** - Root/WMI, Image_Load, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6539 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6540 21:58:45 (0) ** - Root/WMI, RFSMon, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6541 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6542 21:58:45 (0) ** - Root/WMI, NtlmValidateUser, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6543 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6544 21:58:45 (0) ** - Root/WMI, NtlmValidateUser_End, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6545 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6546 21:58:45 (0) ** - Root/WMI, NtlmValidateUser_Start, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6547 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6548 21:58:45 (0) ** - Root/WMI, NtlmServerAccept, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6549 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6550 21:58:45 (0) ** - Root/WMI, NtlmServerAccept_End, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6551 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6552 21:58:45 (0) ** - Root/WMI, NtlmServerAccept_Info, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6553 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6554 21:58:45 (0) ** - Root/WMI, NtlmServerAccept_Start, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6555 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6556 21:58:45 (0) ** - Root/WMI, NtlmClientInitialize, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6557 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6558 21:58:45 (0) ** - Root/WMI, NtlmClientInitialize_End, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6559 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6560 21:58:45 (0) ** - Root/WMI, NtlmClientInitialize_Start, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6561 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6562 21:58:45 (0) ** - Root/WMI, NtlmLogonUser, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6563 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6564 21:58:45 (0) ** - Root/WMI, NtlmLogonUser_Start, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6565 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6566 21:58:45 (0) ** - Root/WMI, NtlmLogonUser_End, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6567 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6568 21:58:45 (0) ** - Root/WMI, MuiTrace, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6569 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6570 21:58:45 (0) ** - Root/WMI, MuiTraceData, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6571 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6572 21:58:45 (0) ** - Root/WMI, MuiTraceData_String, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6573 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6574 21:58:45 (0) ** - Root/WMI, VideoModeDescriptor, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6575 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6576 21:58:45 (0) ** - Root/WMI, Win32_Perf, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6577 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6578 21:58:45 (0) ** - Root/WMI, Win32_PerfRawData, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6579 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6580 21:58:45 (0) ** - Root/WMI, ProcessorPerformance, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6581 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6582 21:58:45 (0) ** - Root/WMI, Win32_PerfFormattedData, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6583 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6584 21:58:45 (0) ** - Root/WMI, MSMonitorClass, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6585 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6586 21:58:45 (0) ** - Root/WMI, MSStorageDriver_SenseData, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6587 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6588 21:58:45 (0) ** - Root/WMI, MSStorageDriver_ClassErrorLog, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6589 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6590 21:58:45 (0) ** - Root/WMI, BcdDeviceData, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6591 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6592 21:58:45 (0) ** - Root/WMI, BcdDeviceFileData, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6593 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6594 21:58:45 (0) ** - Root/WMI, BcdDevicePartitionData, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6595 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6596 21:58:45 (0) ** - Root/WMI, BcdDeviceUnknownData, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6597 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6598 21:58:45 (0) ** - Root/WMI, PerformanceStates, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6599 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6600 21:58:45 (0) ** - Root/WMI, MSVerifierIrpLogEntry, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6601 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6602 21:58:45 (0) ** - Root/WMI, MS_SystemInformation, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6603 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6604 21:58:45 (0) ** - Root/WMI, MSParallel, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6605 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6606 21:58:45 (0) ** - Root/WMI, MSParallel_AllocFreeCounts, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6607 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6608 21:58:45 (0) ** - Root/WMI, MSParallel_DeviceBytesTransferred, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6609 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6610 21:58:45 (0) ** - Root/WMI, MSAcpi, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6611 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6612 21:58:45 (0) ** - Root/WMI, MSAcpi_ThermalZoneTemperature, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6613 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6614 21:58:45 (0) ** - Root/WMI, MS_SmBios, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6615 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6616 21:58:45 (0) ** - Root/WMI, MSRedbook, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6617 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6618 21:58:45 (0) ** - Root/WMI, BcdObject, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6619 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6620 21:58:45 (0) ** - Root/WMI, MSNdis_MediaConnectStatus, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6621 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6622 21:58:45 (0) **
    .6623 21:58:45 (0) ** WMI MOF representations: ............................................................................................ OK.
    .6624 21:58:45 (0) ** WMI QUALIFIER access operations: .................................................................................... OK.
    .6625 21:58:45 (1) !! ERROR: WMI ENUMERATION operation errors reported: ................................................................... 7 ERROR(S)!
    .6626 21:58:45 (0) ** - ROOT, InstancesOf, '__CIMOMIdentification', 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6627 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6628 21:58:45 (0) ** - Root, SubClassesOf, '*', 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6629 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6630 21:58:45 (0) ** - Root/CIMV2, InstancesOf, 'Win32_ComputerSystem', 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6631 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6632 21:58:45 (0) ** - Root/CIMV2, InstancesOf, 'Win32_Service', 0x80041013 - (WBEM_E_PROVIDER_LOAD_FAILURE) COM cannot locate a provider referenced in the schema.
    .6633 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6634 21:58:45 (0) ** - Root/CIMV2, InstancesOf, 'Win32_Process', 0x80041013 - (WBEM_E_PROVIDER_LOAD_FAILURE) COM cannot locate a provider referenced in the schema.
    .6635 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6636 21:58:45 (0) ** - Root/CIMV2, InstancesOf, 'Win32_OperatingSystem', 0x80041013 - (WBEM_E_PROVIDER_LOAD_FAILURE) COM cannot locate a provider referenced in the schema.
    .6637 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6638 21:58:45 (0) ** - Root/CIMV2, InstancesOf, 'Win32_BIOS', 0x80041013 - (WBEM_E_PROVIDER_LOAD_FAILURE) COM cannot locate a provider referenced in the schema.
    .6639 21:58:45 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
    .6640 21:58:45 (0) **
    .6641 21:58:45 (1) !! ERROR: WMI EXECQUERY operation errors reported: ..................................................................... 17 ERROR(S)!
    .6642 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_LogicalDisk WHERE FreeSpace > 10000000 AND DriveType = 3, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6643 21:58:45 (0) ** - Root/CIMV2, Select DriveType From Win32_LogicalDisk WHERE Name='C:', 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6644 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_Service, 0x80041013 - (WBEM_E_PROVIDER_LOAD_FAILURE) COM cannot locate a provider referenced in the schema.
    .6645 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_PageFileUsage, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6646 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_BIOS WHERE Version IS NOT NULL, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6647 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_NetworkAdapter WHERE AdapterType IS NOT NULL AND AdapterType != "Wide Area Network (WAN)" AND Description != "Packet Scheduler Miniport", 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6648 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_Processor WHERE Name IS NOT NULL, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6649 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_DiskDrive, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6650 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_ComputerSystem, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6651 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_DiskPartition, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6652 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_LogicalDisk WHERE Description != "Network Connection", 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6653 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_VideoController, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6654 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_USBController, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6655 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_DesktopMonitor, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6656 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_PointingDevice WHERE Status = "OK", 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6657 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_Keyboard, 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6658 21:58:45 (0) ** - Root/CIMV2, Select * From Win32_SystemDriver WHERE StartMode != "Disabled", 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory.
    .6659 21:58:45 (0) **
    .6660 21:58:45 (2) !! WARNING: WMI GET VALUE operation errors reported: ................................................................... 1 WARNING(S)!
    .6661 21:58:45 (0) ** - Root, Instance: __ProviderHostQuotaConfiguration=@, Property: MemoryPerHost='1073741824' (Expected default='536870912').
    .6662 21:58:45 (0) **
    .6663 21:58:45 (0) ** WMI WRITE operations: ............................................................................................... NOT TESTED.
    .6664 21:58:45 (0) ** WMI PUT operations: ................................................................................................. NOT TESTED.
    .6665 21:58:45 (0) ** WMI DELETE operations: .............................................................................................. NOT TESTED.
    .6666 21:58:45 (0) ** WMI static instances retrieved: ..................................................................................... 0.
    .6667 21:58:45 (0) ** WMI dynamic instances retrieved: .................................................................................... 0.
    .6668 21:58:45 (0) ** WMI instance request cancellations (to limit performance impact): ................................................... 0.
    .6669 21:58:45 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .6670 21:58:45 (0) ** # of Event Log events BEFORE WMIDiag execution since the last 20 day(s):
    .6671 21:58:45 (0) **   DCOM: ............................................................................................................. 0.
    .6672 21:58:45 (0) **   WINMGMT: .......................................................................................................... 0.
    .6673 21:58:45 (0) **   WMIADAPTER: ....................................................................................................... 0.
    .6674 21:58:45 (0) **
    .6675 21:58:45 (0) ** # of additional Event Log events AFTER WMIDiag execution:
    .6676 21:58:45 (0) **   DCOM: ............................................................................................................. 0.
    .6677 21:58:45 (0) **   WINMGMT: .......................................................................................................... 0.
    .6678 21:58:45 (0) **   WMIADAPTER: ....................................................................................................... 0.
    .6679 21:58:45 (0) **
    .6680 21:58:45 (0) ** 118 error(s) 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found
    .6681 21:58:45 (0) ** => This error is typically a WMI error. This WMI error is due to:
    .6682 21:58:45 (0) **    - a missing WMI class definition or object.
    .6683 21:58:45 (0) **      (See any GET, ENUMERATION, EXECQUERY and GET VALUE operation failures).
    .6684 21:58:45 (0) **      You can correct the missing class definitions by:
    .6685 21:58:45 (0) **      - Manually recompiling the MOF file(s) with the 'MOFCOMP <FileName.MOF>' command.
    .6686 21:58:45 (0) **      Note: You can build a list of classes in relation with their WMI provider and MOF file with WMIDiag.
    .6687 21:58:45 (0) **            (This list can be built on a similar and working WMI Windows installation)
    .6688 21:58:45 (0) **            The following command line must be used:
    .6689 21:58:45 (0) **            i.e. 'WMIDiag CorrelateClassAndProvider'
    .6690 21:58:45 (0) **      Note: When a WMI performance class is missing, you can manually resynchronize performance counters
    .6691 21:58:45 (0) **            with WMI by starting the ADAP process.
    .6692 21:58:45 (0) **    - a WMI repository corruption.
    .6693 21:58:45 (0) **      In such a case, you must rerun WMIDiag with 'WriteInRepository' parameter
    .6694 21:58:45 (0) **      to validate the WMI repository operations.
    .6695 21:58:45 (0) **    Note: ENSURE you are an administrator with FULL access to WMI EVERY namespaces of the computer before
    .6696 21:58:45 (0) **          executing the WriteInRepository command. To write temporary data from the Root namespace, use:
    .6697 21:58:45 (0) **          i.e. 'WMIDiag WriteInRepository=Root'
    .6698 21:58:45 (0) **    - If the WriteInRepository command fails, while being an Administrator with ALL accesses to ALL namespaces
    .6699 21:58:45 (0) **      the WMI repository must be reconstructed.
    .6700 21:58:45 (0) **    Note: The WMI repository reconstruction requires to locate all MOF files needed to rebuild the repository,
    .6701 21:58:45 (0) **          otherwise some applications may fail after the reconstruction.
    .6702 21:58:45 (0) **          This can be achieved with the following command:
    .6703 21:58:45 (0) **          i.e. 'WMIDiag ShowMOFErrors'
    .6704 21:58:45 (0) **    Note: The repository reconstruction must be a LAST RESORT solution and ONLY after executing
    .6705 21:58:45 (0) **          ALL fixes previously mentioned.
    .6706 21:58:45 (2) !! WARNING: Static information stored by external applications in the repository will be LOST! (i.e. SMS Inventory)
    .6707 21:58:45 (0) **
    .6708 21:58:45 (0) **
    .6709 21:58:45 (0) ** 367 error(s) 0x8004106C - (WBEM_E_QUOTA_VIOLATION) WMI is taking up too much memory
    .6710 21:58:45 (0) ** => This error is typically due to the following major reasons:
    .6711 21:58:45 (0) **    - The requested WMI operation is extremely costly in terms of resources and
    .6712 21:58:45 (0) **      the WMI provider handling this operation has exceeded the authorized limits.
    .6713 21:58:45 (0) ** => You can either:
    .6714 21:58:45 (0) **    - Review the scope of the requested WMI operation.
    .6715 21:58:45 (0) **    - Eventually review the WMI default quota limits defined at root:__ProviderHostQuotaConfiguration=@
    .6716 21:58:45 (0) **    Note: Not recommended.
    .6717 21:58:45 (0) **
    .6718 21:58:45 (0) **
    .6719 21:58:45 (0) ** 5 error(s) 0x80041013 - (WBEM_E_PROVIDER_LOAD_FAILURE) COM cannot locate a provider referenced in the schema
    .6720 21:58:45 (0) ** => This error is typically due to the following major reasons:
    .6721 21:58:45 (0) **    - The application queried by the WMI provider is not installed, not available or not running
    .6722 21:58:45 (0) **      at the time of the request was made. This error can also be generated because
    .6723 21:58:45 (0) **      the application supporting the providers has been uninstalled.
    .6724 21:58:45 (0) **    - Some WMI providers (i.e. RSOP Planning Mode, Exchange 2003) are implemented as a WMI service.
    .6725 21:58:45 (0) **      Make sure the required services are successfully started.
    .6726 21:58:45 (0) **    - The WMI provider binary files are not accessible (i.e. access denied ACL).
    .6727 21:58:45 (0) **    - A WMI provider registration problem at the CIM level (MOFCOMP.EXE) or at the COM level (REGSVR32.EXE).
    .6728 21:58:45 (0) **      You must re-register the WMI provider by recompiling its associated MOF file with MOFCOMP.EXE
    .6729 21:58:45 (0) **    Note: - If the WMI provider DLL CIM and COM registrations are correct, this error can
    .6730 21:58:45 (0) **            be returned because the provider has a dependency on another DLL that cannot be
    .6731 21:58:45 (0) **            loaded (missing or bad DLL)
    .6732 21:58:45 (0) **          - Dependencies can be found with the DEPENDS.EXE tool coming with the
    .6733 21:58:45 (0) **            Windows XP and Windows 2003 Support Tools. The command line is as follows:
    .6734 21:58:45 (0) **            i.e. DEPENDS.EXE <PATH><Provider.DLL>
    .6735 21:58:45 (0) ** => When a WMI provider fails to load, it is possible to trace the provider load process by
    .6736 21:58:45 (0) **    submitting, via WBEMTEST and asynchronously, the following WMI event query:
    .6737 21:58:45 (0) **    'Select * From MSFT_WmiSelfEvent'
    .6738 21:58:45 (0) **    Then you can trace the following WMI events:
    .6739 21:58:45 (0) **    - Msft_WmiProvider_ComServerLoadOperationEvent
    .6740 21:58:45 (0) **    - Msft_WmiProvider_InitializationOperationEvent
    .6741 21:58:45 (0) **    - Msft_WmiProvider_LoadOperationEvent
    .6742 21:58:45 (0) **    and depending on the WMI operation executed, you can trace the following WMI events:
    .6743 21:58:45 (0) **    i.e. for an enumeration:
    .6744 21:58:45 (0) **    - Msft_WmiProvider_CreateInstanceEnumAsyncEvent_Pre and Msft_WmiProvider_CreateInstanceEnumAsyncEvent_Post
    .6745 21:58:45 (0) **    i.e. for a put operation:
    .6746 21:58:45 (0) **    - Msft_WmiProvider_PutInstanceAsyncEvent_Pre and Msft_WmiProvider_PutInstanceAsyncEvent_Post
    .6747 21:58:45 (0) **
    .6748 21:58:45 (0) ** => If the software has been de-installed intentionally, then this information must be
    .6749 21:58:45 (0) **    removed from the WMI repository. You can use the 'WMIC.EXE' command to remove the provider
    .6750 21:58:45 (0) **    registration data and its set of associated classes.
    .6751 21:58:45 (0) ** => To correct this situation, you can:
    .6752 21:58:45 (0) **    - Install or start the application supporting these providers.
    .6753 21:58:45 (0) **    - Register the providers in CIM (MOFCOMP) or DCOM (REGSVR32).
    .6754 21:58:45 (0) **    Note: In this case the provider should also be listed in the 'missing WMI
    .6755 21:58:45 (0) **          provider DCOM registrations' or in the 'missing WMI provider files' section.
    .6756 21:58:45 (2) !! WARNING: Re-registering with REGSVR32.EXE all DLL from 'C:\WINDOWS\SYSTEM32\WBEM\'
    .6757 21:58:45 (0) **          may not solve the problem as the DLL supporting the WMI class(es)
    .6758 21:58:45 (0) **          can be located in a different folder.
    .6759 21:58:45 (0) **          You must refer to the class name to determine the software delivering the related DLL.
    .6760 21:58:45 (0) **
    .6761 21:58:45 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .6762 21:58:45 (0) ** Unexpected, wrong or missing registry key values: ................................................................... 1 KEY(S)!
    .6763 21:58:45 (2) !! WARNING: Unexpected registry key value:
    .6764 21:58:45 (0) **   - Current:  HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\ImagePath (REG_EXPAND_SZ) -> %systemroot%\system32\wmisvchost.exe -k netsvcs
    .6765 21:58:45 (0) **   - Expected: HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\ImagePath (REG_EXPAND_SZ) -> %systemroot%\system32\svchost.exe -k netsvcs
    .6766 21:58:45 (0) **     From the command line, the registry configuration can be corrected with the following command:
    .6767 21:58:45 (0) **
    .6768 21:58:45 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .6769 21:58:45 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .6770 21:58:45 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .6771 21:58:45 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .6772 21:58:45 (0) **
    .6773 21:58:45 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    .6774 21:58:45 (0) ** ------------------------------------------------------ WMI REPORT: END -----------------------------------------------------------
    .6775 21:58:45 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

    Sunday, May 10, 2015 3:35 AM
  • First off, thanks for taking a look at this with me.

    2008 R2 , SP1 installed, log above was a relatively up to date machine (didn't install this month's update yet.)

    I installed all remaining updates after running the SUR tool, tested, same results.

    Log:


    =================================
    Checking System Update Readiness.
    Binary Version 6.1.7601.22471
    Package Version 26.0
    2015-05-09 23:26

    Checking Windows Servicing Packages

    Checking Package Manifests and Catalogs

    Checking Package Watchlist

    Checking Component Watchlist

    Checking Packages

    Checking Component Store

    Summary:
    Seconds executed: 776
     No errors detected

    Sunday, May 10, 2015 5:29 AM
  • Checksur looks good. Assume you probably found and applied all the hotfixes I found. Was this one also fixed?

    INVALID HOSTING SETUP!
     .5648 21:58:44 (0) ** => The WMI service must be configured to run as a STANDALONE service host or
     .5649 21:58:44 (0) **    as a SHARED service host but the (SvcHost) configuration contains invalid information.
     .5650 21:58:44 (0) ** => You can fix this issue by running ONE of the following commands:
     .5651 21:58:44 (0) **    - Shared service host (recommended):
     .5652 21:58:44 (0) **      i.e. 'WINMGMT.EXE /SharedHost'
     .5653 21:58:44 (0) **    - Standalone service host:
     .5654 21:58:44 (0) **      i.e. 'WINMGMT.EXE /StandaloneHost'
     .5655 21:58:44 (0) ** => Reboot the system.

    If so I'd probably try the repair install. Of course you'll need to patch and apply any hotfixes again.

    How to Perform an In-Place Upgrade on Windows Vista, Windows 7, Windows Server 2008 & Windows Server 2008 R2

     

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Sunday, May 10, 2015 2:45 PM
  • So,

    The Hosting setup is more of a warning.  It was originally configured like it describes prior to troubleshooting.  I separated it as part of my troubleshooting process per one of the articles I linked.  Was hoping it would reveal something, it did not.  I still have it left like that as it looks like it might be necessary for debugging tools.

    This is a DC in a single DC environment, so, not sure if a repair install is a good option.  With so many visible errors , I'd really like to be able to fix what is going on in the event this happens elsewhere with other customers.  Especially with errors so clearly saying what is wrong, it seems like there is a solution just waiting to be found.

    Definitely a tough one...

    Tellis

    Sunday, May 10, 2015 3:00 PM
  • In that case I'd just call it in to Microsoft product support.

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Sunday, May 10, 2015 3:05 PM
  • Yep,  I figure that's likely going to have to be the route I take.  Figured it wouldn't hurt to check here first. :)

    Sunday, May 10, 2015 3:08 PM
  • Also... in addition to this being a post for help about the issue. One thing I was thinking would be to see if there is a process going haywire by overloading WMI with queries. Is there a tool out there that can show what processes are querying WMI? I enabled tracing, but that doesn't really show who is using it.

    I don't have any evidence to support the hunch yet, but...  one path of logic is that WMI is actually working properly but something is overloading it...  I haven't anything yet....

    Sunday, May 10, 2015 3:59 PM
  • Double post. Mods please merge.

    https://social.msdn.microsoft.com/Forums/en-US/1ccc0a3a-4472-4627-b46f-5aa6e851a172/server-2008-r2-wmi-problems-wbemequotaviolation-providerloadfailure-and-more?forum=winserverManagement

     

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Sunday, May 10, 2015 5:47 PM
  • Hi Tellis,

    To trace the incoming WMI query, you can parse the event log after enable wmi activity log, and refer to this vbscript to get these columns "Computer","TimeCreated","Query","ClientMachine","User","ClientProcessId","Namespace":

    An Easier Way to View Incoming WMI Queries

    This is the result:

    If there is anything else regarding this issue, please feel free to post back.

    Best Regards,

    Anna Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Monday, May 11, 2015 6:01 AM
    Moderator
  • That is one awesome script!

    I'm going to review the output later today, but in case this stands out to anyone...  Here's what is shows (I replaced their name with DOMAIN)


    Computer    TimeCreated    Query    ClientMachine    User    ClientProcessId    Namespace
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     SELECT Name,Domain FROM Win32_ComputerSystem    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     Select * from __ClassProviderRegistration    Local    .\SYSTEM    0    \\.\root
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     SELECT Name,Domain FROM Win32_ComputerSystem    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     Select * from __ClassProviderRegistration    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     Select * from __ClassProviderRegistration    Local    .\SYSTEM    0    \\.\root\subscription
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     references of {__Win32Provider.Name="WmiPerfClass"}    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     Select * from __ClassProviderRegistration    Local    .\SYSTEM    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     references of {__Win32Provider.Name="WmiPerfClass"}    Local    .\SYSTEM    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     references of {__Win32Provider.Name="CIMWin32"}    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     references of {__Win32Provider.Name="SCM Event Provider"}    Local    .\SYSTEM    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     references of {__Win32Provider.Name="SCM Event Provider"}    Local    .\SYSTEM    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     references of {__Win32Provider.Name="CIMWin32"}    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     references of {__Win32Provider.Name="MS_NT_EVENTLOG_PROVIDER"}    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     references of {__Win32Provider.Name="MS_NT_EVENTLOG_PROVIDER"}    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:34 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     Select * from __ClassProviderRegistration    Local    NT AUTHORITY\SYSTEM    0    \\.\Root\policy
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     references of {__Win32Provider.Name="PolicSOM"}    Local    NT AUTHORITY\SYSTEM    0    \\.\Root\policy
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     references of {__Win32Provider.Name="PolicSOM"}    Local    NT AUTHORITY\SYSTEM    0    \\.\Root\policy
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768) AND RecordNumber > -552103902    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     Select * from WIN32_OperatingSystem where ServicePackMajorVersion>=2 and Version='5.1.2600'    DOMAIN-SBS11    NT AUTHORITY\SYSTEM    18392    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     Select * from __ClassProviderRegistration    Local    NT AUTHORITY\SYSTEM    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     references of {__Win32Provider.Name="WmiPerfClass"}    Local    NT AUTHORITY\SYSTEM    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT __RELPATH FROM Win32_Process    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     Select * from WIN32_OperatingSystem where ServicePackMajorVersion<=1 and Version='5.1.2600'    DOMAIN-SBS11    NT AUTHORITY\SYSTEM    18392    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT __RELPATH FROM Win32_Process    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     Select * from WIN32_OperatingSystem where ServicePackMajorVersion>=2 and Version='5.1.2600'    DOMAIN-SBS11    NT AUTHORITY\SYSTEM    18392    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT __RELPATH FROM Win32_Process    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     Select * from __ClassProviderRegistration    Local    NT AUTHORITY\SYSTEM    0    \\.\root\rsop
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     Select * from WIN32_OperatingSystem where ServicePackMajorVersion>=2 and Version='5.1.2600'    DOMAIN-SBS11    NT AUTHORITY\SYSTEM    18392    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT __RELPATH FROM Win32_Process    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     Select * from WIN32_OperatingSystem where ServicePackMajorVersion<=1 and Version='5.1.2600'    DOMAIN-SBS11    NT AUTHORITY\SYSTEM    18392    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT __RELPATH FROM Win32_Process    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     Select * from WIN32_OperatingSystem where ServicePackMajorVersion>=2 and Version='5.1.2600'    DOMAIN-SBS11    NT AUTHORITY\SYSTEM    18392    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT __RELPATH FROM Win32_Process    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT Name,Domain FROM Win32_ComputerSystem    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768) AND RecordNumber > -552103588    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT Name,Domain FROM Win32_ComputerSystem    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768) AND RecordNumber > -552103569    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     Select * from __ClassProviderRegistration    Local    .\SYSTEM    0    \\.\root
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT Name,Domain FROM Win32_ComputerSystem    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     Select * from __ClassProviderRegistration    Local    .\SYSTEM    0    \\.\root\subscription
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     Select * from __ClassProviderRegistration    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     Select * from __ClassProviderRegistration    Local    .\SYSTEM    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     references of {__Win32Provider.Name="WmiPerfClass"}    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     references of {__Win32Provider.Name="WmiPerfClass"}    Local    .\SYSTEM    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     references of {__Win32Provider.Name="CIMWin32"}    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     references of {__Win32Provider.Name="SCM Event Provider"}    Local    .\SYSTEM    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     references of {__Win32Provider.Name="SCM Event Provider"}    Local    .\SYSTEM    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     references of {__Win32Provider.Name="CIMWin32"}    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     references of {__Win32Provider.Name="MS_NT_EVENTLOG_PROVIDER"}    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     references of {__Win32Provider.Name="MS_NT_EVENTLOG_PROVIDER"}    Local    DOMAIN\ADMadmin    0    \\.\root\CIMV2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768) AND RecordNumber > -552103537    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT Name,Domain FROM Win32_ComputerSystem    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768) AND RecordNumber > -552103522    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT Name,Domain FROM Win32_ComputerSystem    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:35 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768) AND RecordNumber > -552103501    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT Name,Domain FROM Win32_ComputerSystem    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768) AND RecordNumber > -552103459    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT Name,Domain FROM Win32_ComputerSystem    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768) AND RecordNumber > -552103439    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT Name,Domain FROM Win32_ComputerSystem    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768) AND RecordNumber > -552103415    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT Name,Domain FROM Win32_ComputerSystem    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768)    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2
    DOMAIN-SBS11.DOMAINcity.local    5/11/15 2:36 PM     SELECT EventCode,InsertionStrings,RecordNumber FROM Win32_NTLogEvent WHERE Logfile = 'Security' AND Type LIKE '%Success%' AND (EventCode=540 OR EventCode=672 OR EventCode=4624 OR EventCode=4768) AND RecordNumber > -552103386    Local    DOMAIN\ADMadmin    0    \\.\root\cimv2

    Monday, May 11, 2015 2:45 PM
  • Progress!!!!!!

    So after reviewing the queries used... looks like those security queries were actually coming from our Meraki MX firewall!  I disabled Active Directory integration to confirm this....  then tested.... problems go away!

    I'm very happy to confidently say that WMI is no longer the the suspect, will be troubleshooting the Meraki next.  (Their support is usually excellent, so they will likely patch it pretty quickly if it is a bug :) )

    Also, found that others were having the same problem at some point in time after doing research on the query: http://community.spiceworks.com/topic/436539-meraki-and-wmi-queries

    Thanks everyone!


    Monday, May 11, 2015 3:37 PM