arkadaşlar system 32 wbem logs dosyasını nedir msnde dün baya bir ağırlık oldu ve bilgisayarımda bu dosyada uzunca msnle ilgili yazılar fark ettim ilk kez wbemess.lo_ bölümünde nedir bilginiz varmı?teşekkürler
bilginiz yokmu arkadaşlar msni her açtığımda bu dosyada buna benzer şeyler yazıyor
Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription Unable to register event source 'Service Control Manager' on server ''. Error code: 6B5 Failed the first attempt to retrieve the sink to deliver an event to event consumer SCM Event Log Consumer" with error code 80041001. WMI will reload and retry. Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription NT Event Log Consumer: could not retrieve sid, 0x80041002
o dedigin data Protokol data si zararli degil sadece kayit aliyor. Asil problem baska yerde zararli program arastirmasi yap bakalim.
nasıl başka yerde arkadaşım neye bağlı olarak bu çıkıyor acaba zararlı program araştırması??
Ingilizcen varsa iste cevabi (galiba) : Have you checked the security settings for the ACT namespace in WMI?
To do so, go to Start, Run, and type wmimgmt.msc Right Click on WMI Control (Local) and select Properties. Select the Security Tab. Find the ACT namespace: Root\CIMV2\Applications\MicrosoftACT Select the MicrosoftACT namespace Click the Security Button
I am running ACT in a Windows Server 2003 and my permissions are:
Administrators (Full Control) Application Center Test Account AKA ACTUser (Full Control) Everyone (Execute Methods, Provider Write, Enable Account) Local Service (Execute Methods, Provider Write, Enable Account) Network Service (Execute Methods, Provider Write, Enable Account)
(Note the last 2 accounts I don't think exist on Windows 2000 or XP.
You could also try to generate more verbose WMI logging, and reproduce the problem to see if it gives more information about what is going on.
To do so, go to Start, Run, and type wmimgmt.msc Right Click on WMI Control (Local) and select Properties. Select the Logging tab Change the Logging Level to Verbose, and click ok. Reproduce the problem, and find your WMI logs at %System Folder%\System32\wbem\logs\ The most useful here will probably be wbemess.log
Don't keep the logging level at verbose for longer than you need to troubleshoot. Set it back to Errors only when you're done.