Nope , the dial a fix is just part of the complete fix and the other instructions are also needed. But on the other hand , if the first part works then you dont need the dial a fix tool though.

Thanks, Joe5,
I followed your instructions (with some modifications - see below) and finally I got the WMI started!

Here is what I did:
I wasn't sure about extracting wbemoc.in_ , had some problems with winzip. Anyway, I extracted it to a folder on Desktop (winzip wasn't showing INF folder!??) and then copied the file to INF directory. By the way, the file to download from the Net wasn't free - about $10 - so I tried to do as you wrote. Still, I expected 10MB, but it was a smal file about 5-6KB, I think. So I wasn't sure if I did it correctly, but typed in the rundll32 advpack...etc command and something started to work in the computer - the files were being copied, but I got a message - strange - the target file exists and is newer than the source. Overwrite the newer file? I chose "No to all"...
After that I rebooted the machine and checked via My Computer>Manage>Services if WMI is back.
Unfortunately, it wasn't - still it wasn't started and didn't want to start (I got error message again).

I was scared of trying the dial-a-fix thing and possibly the registry changes, so I went on the Internet to look for more info on wbemoc and WMI.
I downloaded WMIDiagnostic tool and did the test. Got huge log with lots of errors (too many to show them, but if youre interested I can send you a log).
Then I found Ramesh's site - http://windowsxp.mvps.org/repairwmi.htm
and tried what he sais there:
I did CMD - net stop winmgmt, tried to delete Repository folder (.old) and then:
net start winmgmt - it didn't help - still no WMI

But then I tried to re-register the WMI components!
I ran 3 commands:
cd /d...
for %i...
for %i...
and got kind of error regarding WMOF when doing the 3rd one, but in general it looked OK.

After rebooting I checked if the WMI was started and IT WAS there!!!
Current status is Started, Automatic.

So I think we did a lot of work and got some results.
Still, Ramesh says there that it wasn't full rebuild of the WMI, but I don't know. What do you think - should I still do something else about that?
Now I'm starting to work on my network again and count on your help again.

Please comment on my results described above and on the HJT log I enclose.

Thanks a lot,
Stan
PS. When I reboot, I get an error message re End program - hpcmpmgr.exe - can I fix it in the HJT?

Attached Files

hijackthis.log (8.2 KB, 1 views)

Looks pretty good to me , how is it going with the home network , is that working now?

And you could always also try the last option to be sure nothing is missing from the WMI service:



Comprehensive rebuild method

• Insert your Windows XP CD into the drive.

Important note: If you've installed Service Pack 1 or 2, you need to insert your Windows XP CD (with Service Pack integration, called as the Slipstreamed Windows XP CD). If you don't have one, you may point to the %Windir%\ServicePackFiles\i386 folder for the updated DLLs required during WMI repair. Or, you may create a Slipstreamed XP CD, and insert it when prompted.

• Click Start, Run and type the following command, and press enter:

rundll32.exe setupapi,InstallHinfSection WBEM 132 %windir%\inf\wbemoc.inf

• Repair process should take few minutes to complete. Then, restart Windows for the changes to take effect.

And youre hjt log is clean. But is the "hpcmpmgr.exe" end programm comming up when shutting down , or when booting up?

Thanks, Joe5

I will try to do more with the WMI, although it still looks good - Started/Automatic.

My answer about the "hpcmpmgr.exe" --

the end programm error message is comming up when I'm shutting down the PC. I just click "end now". But I saw the line about that in the HJT and thought it could be possible to get rid of that, but I'm not sure if it's safe. Please advise.

Another thing - after I "demoted" that PC to remote role and when it's no longer the host PC, I have an impression that it takes much longer to start up the computer. There is a lot of murmor coming from the inside, lots of the hard drive activity. Is it possible that it's because I have SpyGuard installed (after my previous fights with viruses)? What do you think can cause such long start up (usually more than 5 minutes)?

Now - my networking.
It's getting better, there is significant improvement, but still some problems. I'll tell you what's better and what still needs attention.

Good thing - I was able yesterday to send a document from that remote PC (Game) to the printer attached to the new host PC (HPHost). I also see all shared folder, documents and printers at all 3 computers when I go to Network Places at the remote PC (Game) and am able to send (copy paste)files from one to the other.

But I still have one or two problems with accessing/seeing properties of the Game PC from the new host and from the laptop.

In both cases (i.e. when I'm at the host or laptop), when I go to Control Panel>Internet and Network Connections>Network Connections and see LAN or High-Speed Internet, then go to My network Places there are shown My Documents and SharedDocs on HpHost and Laptop - but not Game. By the way, they all open up nicely and I have access to all of the files.

But the shared files from the third computer - Game PC are not listed there.
However, when I click on the "View workgroup computers" - either when I'm at the laptop or at the HPHost, the info on both laptop and HPHost appears, but when I click on the icon for the Game PC, I get this error message:
"You don't have the appropriate access rights to the server. For more information, contact your network administrators". When I click on the OK, I get the Properties window, but incomplete - there is the Name of remote: Game, BUT no Comment, no Workgroup, no Type - which I get all for the other computers in my network.

Strange thing is that I'm the administrator of this small network.

Please help. Thanks in advance.

Stan

At the moment you have Ewido , Spybot and SpywareGuard running at the same time. It is always adviced to use only one at a time. Since Ewido is a demo i would disable/uninstall that one , plus one of the others.


But i'll leave the network part to Gromit , he is our networking guy and knows alot more about that then me. I'll send him a PM to be sure he sees this thread.

Thanks, Joe5, I'll be waiting for more help from your friend (Gromit).

Can you please tell me how to disble the hp stuff via Start>Run (remember, I'm not a PC guy although can do simple things... but need help - thanks again for lots of it!!!)

Also, would it be enough to run only Ewido? Close Spybot and SpywareGuard? I also have Adware SE - should it be gone too?
By the way, I registered as Ewido tester and have full beta version of their Ewido at my host; I think I can use it also on the remote - it really does excellent job.

Thanks again,

Stan

Sure , no prob. first go to youre startmenu and click on "run" , then in that box type "msconfig" and press enter. Then in the window that comes up select the "startup" tap and/or the "services" tap. Look there for the "hpcmpmgr.exe" entry and remove the tick in front of it. and press apply , ok , and reboot youre pc.

And if you have a full version of Ewido then i would only keep that running as realtime malware protection. No need to uninstall/delete the others though , you can still use them to manually scan with , but just disable there autoprotect.