JSI Tip 2526. Resolving WinMgmt errors relating to performance counters.


The System event log may contain either or both of the following:

Event Type: Error
Event Source: WinMgmt
Event Category: None
Event ID: 37

Event Type: Error
Event Source: WinMgmt
Event Category: None
Event ID: 61
If winmgmt /clearadap doesn't fix it, your performance counter registry entries may be corrupted.

Every time you install an extensible performance counter, files like PerfStringBackup_nnn.ini are created in the %SystemRoot%\System32 folder, before the registry entries are updated. If you suspect that your performance counter registry entries are corrupt:

1. Use Dir /ON %SystemRoot%\System32\PerfStringBackup*.ini to provide a chronological list of installed counters.

2. Look for an significant change in the size of these files. The file prior to the change is probably good. Restore the performance counter registry entries to this good state by opening a CMD prompt, switching to the %SystemRoot%\System32 folder, and typing lodctr /r:filename, where filename is the last good .ini file.

NOTE: This will remove any performance counters added after the PerfStringBackup_nnn.ini snapshot. You will need to reinstall the counters, or the programs that installed them. If you must resinstall the counter that caused the corruption, monitor the process.


Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish