wbemprox.dll - Error comes up every 10 seconds

OnlineLabs · Nov 19, 2015

Hello,

I've upgraded to Windows 10, ever since then I keep getting this error when I open any program.

I've ran the following commands to try to repair it, this does nothing.

Code:

sfc /scannow
winmgmt /salvagerepository
https://www.microsoft.com/en-us/download/details.aspx?id=7684 (I've attached the log here of this tool)
regsvr32 /i shell32
regsvr32 /i urlmon.dll
regsvr32 RPCRT4.dll
regsvr32 PROPSYS.dll
regsvr32 MSCTF.dll
regsvr32 cscui.dll
regsvr32 rsaenh.dll
regsvr32 timedate.cpl
regsvr32 ATL.DLL
regsvr32 OLEACC.dll
regsvr32 actxprxy.dll
regsvr32 USERENV.dll
regsvr32 msshsq.dll
regsvr32 NaturalLanguage6.dll
regsvr32 thumbcache.dll
regsvr32 WINTRUST.dll
regsvr32 MMDevAPI.DLL
regsvr32 audioses.dll
regsvr32 audioeng.dll
regsvr32 ExplorerFrame.dll
regsvr32 msi.dll
regsvr32 FirewallAPI.dll
regsvr32 netshell.dll
regsvr32 pnidui.dll
regsvr32 QUtil.dll
regsvr32 wpdshserviceobj.dll
regsvr32 WINHTTP.dll
regsvr32 QAgent.dll
regsvr32 PortableDeviceApi.dll
regsvr32 wbemprox.dll
regsvr32 wbemsvc.dll
regsvr32 fastprox.dll
regsvr32 imapi2.dll
regsvr32 wshext.dll
regsvr32 gameux.dll
regsvr32 msxml6.dll
regsvr32 vbscript.dll
regsvr32 jscript.dll
regsvr32 wshext.dll
regsvr32 wshom.ocx
regsvr32 wshcon.dll
regsvr32 scrrun.dll

Here is the SFCFix tool output. It took about 10mins to finish.

Code:

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-11-19 19:26:41.594
Microsoft Windows 8.1  - amd64
Not using a script file.




AutoAnalysis::
SUMMARY: No corruptions were detected.
AutoAnalysis:: directive completed successfully.




Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2015-11-19 19:37:08.789
----------------------EOF-----------------------

OnlineLabs · Nov 19, 2015

This is the SFC output.

Code:

Beginning system scan.  This process will take some time.



Beginning verification phase of system scan.

Verification 0% complete.Verification 1% complete.Verification 1% complete.Verification 2% complete.Verification 2% complete.Verification 3% complete.Verification 3% complete.Verification 4% complete.Verification 5% complete.Verification 5% complete.Verification 6% complete.Verification 6% complete.Verification 7% complete.Verification 7% complete.Verification 8% complete.Verification 8% complete.Verification 9% complete.Verification 10% complete.Verification 10% complete.Verification 11% complete.Verification 11% complete.Verification 12% complete.Verification 12% complete.Verification 13% complete.Verification 13% complete.Verification 14% complete.Verification 15% complete.Verification 15% complete.Verification 16% complete.Verification 16% complete.Verification 17% complete.Verification 17% complete.Verification 18% complete.Verification 18% complete.Verification 19% complete.Verification 20% complete.Verification 20% complete.Verification 21% complete.Verification 21% complete.Verification 22% complete.Verification 22% complete.Verification 23% complete.Verification 23% complete.Verification 24% complete.Verification 25% complete.Verification 25% complete.Verification 26% complete.Verification 26% complete.Verification 27% complete.Verification 27% complete.Verification 28% complete.Verification 28% complete.Verification 29% complete.Verification 30% complete.Verification 30% complete.Verification 31% complete.Verification 31% complete.Verification 32% complete.Verification 32% complete.Verification 33% complete.Verification 33% complete.Verification 34% complete.Verification 35% complete.Verification 35% complete.Verification 36% complete.Verification 36% complete.Verification 37% complete.Verification 37% complete.Verification 38% complete.Verification 38% complete.Verification 39% complete.Verification 40% complete.Verification 40% complete.Verification 41% complete.Verification 41% complete.Verification 42% complete.Verification 42% complete.Verification 43% complete.Verification 44% complete.Verification 44% complete.Verification 45% complete.Verification 45% complete.Verification 46% complete.Verification 46% complete.Verification 47% complete.Verification 47% complete.Verification 48% complete.Verification 49% complete.Verification 49% complete.Verification 50% complete.Verification 50% complete.Verification 51% complete.Verification 51% complete.Verification 52% complete.Verification 52% complete.Verification 53% complete.Verification 54% complete.Verification 54% complete.Verification 55% complete.Verification 55% complete.Verification 56% complete.Verification 56% complete.Verification 57% complete.Verification 57% complete.Verification 58% complete.Verification 59% complete.Verification 59% complete.Verification 60% complete.Verification 60% complete.Verification 61% complete.Verification 61% complete.Verification 62% complete.Verification 62% complete.Verification 63% complete.Verification 64% complete.Verification 64% complete.Verification 65% complete.Verification 65% complete.Verification 66% complete.Verification 66% complete.Verification 67% complete.Verification 67% complete.Verification 68% complete.Verification 69% complete.Verification 69% complete.Verification 70% complete.Verification 70% complete.Verification 71% complete.Verification 71% complete.Verification 72% complete.Verification 72% complete.Verification 73% complete.Verification 74% complete.Verification 74% complete.Verification 75% complete.Verification 75% complete.Verification 76% complete.Verification 76% complete.Verification 77% complete.Verification 77% complete.Verification 78% complete.Verification 79% complete.Verification 79% complete.Verification 80% complete.Verification 80% complete.Verification 81% complete.Verification 81% complete.Verification 82% complete.Verification 82% complete.Verification 83% complete.Verification 84% complete.Verification 84% complete.Verification 85% complete.Verification 85% complete.Verification 86% complete.Verification 86% complete.Verification 87% complete.Verification 88% complete.Verification 88% complete.Verification 89% complete.Verification 89% complete.Verification 90% complete.Verification 90% complete.Verification 91% complete.Verification 91% complete.Verification 92% complete.Verification 93% complete.Verification 93% complete.Verification 94% complete.Verification 94% complete.Verification 95% complete.Verification 95% complete.Verification 96% complete.Verification 96% complete.Verification 97% complete.Verification 98% complete.Verification 98% complete.Verification 99% complete.Verification 99% complete.Verification 100% complete.


Windows Resource Protection found corrupt files but was unable to fix some 

of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For 

example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not 

supported in offline servicing scenarios.

Aura · Nov 22, 2015

Hi OnlineLabs :)

My name is Aura and I'll be assisting you with your issue. Follow the instructions below please.

SFCFix - Fix Time

WARNING! The following fix is specific to the user's system in this thread. No one else should follow the instructions below to apply that fix, as it could damage your system. If you need assistance with an issue, please start a new thread and someone will assist you shortly.

Follow the instructions below to download and execute a SFCFix fix, and provide the log.

Download SFCFix and move the executable on your Desktop;
Download the attached SFCFix.zip and move the archive to your Desktop;
Note: Make sure that the file is named SFCFix.zip, do not rename it.
Save any work you have open, and close every programs;
Drag the SFCFix.zip archive file over the SFCFix.exe executable and release it;
SFCFix will launch, let it complete;
Once done, a file will appear on your Desktop, called SFCFix.txt;
Open the file, then copy and paste its content in your next reply;

SFCFix.zip

OnlineLabs · Nov 23, 2015

SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-11-22 21:51:27.545
Microsoft Windows 8.1 - amd64
Using .zip script file at C:\Users\Glenda\Downloads\SFCFix.zip [0]

PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_10.0.10240.16384_none_55dcbf43bbc4daa2\Remote Desktop Connection.lnk
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_10.0.10240.16384_none_d7645452e0682f87\services.lnk
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-mspaint_31bf3856ad364e35_10.0.10240.16384_none_961df853893f03be\Paint.lnk
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-charmap_31bf3856ad364e35_10.0.10240.16384_none_fa5a2f0d3f08718c\Character Map.lnk
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-c..termanagementsnapin_31bf3856ad364e35_10.0.10240.16384_none_531691da110444d9\Computer Management.lnk
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-c..s-admin-compsvclink_31bf3856ad364e35_10.0.10240.16384_none_da92c3787526666b\Component Services.lnk
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_eventviewersettings_31bf3856ad364e35_10.0.10240.16384_none_fcf849b59e606ea6\Event Viewer.lnk

Successfully copied file C:\Users\Glenda\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_10.0.10240.16384_none_55dcbf43bbc4daa2\Remote Desktop Connection.lnk to C:\Windows\winsxs\amd64_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_10.0.10240.16384_none_55dcbf43bbc4daa2\Remote Desktop Connection.lnk.
Successfully copied file C:\Users\Glenda\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_10.0.10240.16384_none_d7645452e0682f87\services.lnk to C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_10.0.10240.16384_none_d7645452e0682f87\services.lnk.
Successfully copied file C:\Users\Glenda\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-mspaint_31bf3856ad364e35_10.0.10240.16384_none_961df853893f03be\Paint.lnk to C:\Windows\winsxs\amd64_microsoft-windows-mspaint_31bf3856ad364e35_10.0.10240.16384_none_961df853893f03be\Paint.lnk.
Successfully copied file C:\Users\Glenda\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-charmap_31bf3856ad364e35_10.0.10240.16384_none_fa5a2f0d3f08718c\Character Map.lnk to C:\Windows\winsxs\amd64_microsoft-windows-charmap_31bf3856ad364e35_10.0.10240.16384_none_fa5a2f0d3f08718c\Character Map.lnk.
Successfully copied file C:\Users\Glenda\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-c..termanagementsnapin_31bf3856ad364e35_10.0.10240.16384_none_531691da110444d9\Computer Management.lnk to C:\Windows\winsxs\amd64_microsoft-windows-c..termanagementsnapin_31bf3856ad364e35_10.0.10240.16384_none_531691da110444d9\Computer Management.lnk.
Successfully copied file C:\Users\Glenda\AppData\Local\niemiro\Archive\winsxs\amd64_microsoft-windows-c..s-admin-compsvclink_31bf3856ad364e35_10.0.10240.16384_none_da92c3787526666b\Component Services.lnk to C:\Windows\winsxs\amd64_microsoft-windows-c..s-admin-compsvclink_31bf3856ad364e35_10.0.10240.16384_none_da92c3787526666b\Component Services.lnk.
Successfully copied file C:\Users\Glenda\AppData\Local\niemiro\Archive\winsxs\amd64_eventviewersettings_31bf3856ad364e35_10.0.10240.16384_none_fcf849b59e606ea6\Event Viewer.lnk to C:\Windows\winsxs\amd64_eventviewersettings_31bf3856ad364e35_10.0.10240.16384_none_fcf849b59e606ea6\Event Viewer.lnk.

Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_10.0.10240.16384_none_55dcbf43bbc4daa2\Remote Desktop Connection.lnk
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_10.0.10240.16384_none_55dcbf43bbc4daa2\Remote Desktop Connection.lnk
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_10.0.10240.16384_none_d7645452e0682f87\services.lnk
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_10.0.10240.16384_none_d7645452e0682f87\services.lnk
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-mspaint_31bf3856ad364e35_10.0.10240.16384_none_961df853893f03be\Paint.lnk
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-mspaint_31bf3856ad364e35_10.0.10240.16384_none_961df853893f03be\Paint.lnk
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-charmap_31bf3856ad364e35_10.0.10240.16384_none_fa5a2f0d3f08718c\Character Map.lnk
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-charmap_31bf3856ad364e35_10.0.10240.16384_none_fa5a2f0d3f08718c\Character Map.lnk
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-c..termanagementsnapin_31bf3856ad364e35_10.0.10240.16384_none_531691da110444d9\Computer Management.lnk
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-c..termanagementsnapin_31bf3856ad364e35_10.0.10240.16384_none_531691da110444d9\Computer Management.lnk
Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-c..s-admin-compsvclink_31bf3856ad364e35_10.0.10240.16384_none_da92c3787526666b\Component Services.lnk
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-c..s-admin-compsvclink_31bf3856ad364e35_10.0.10240.16384_none_da92c3787526666b\Component Services.lnk
Successfully restored ownership for C:\Windows\winsxs\amd64_eventviewersettings_31bf3856ad364e35_10.0.10240.16384_none_fcf849b59e606ea6\Event Viewer.lnk
Successfully restored permissions on C:\Windows\winsxs\amd64_eventviewersettings_31bf3856ad364e35_10.0.10240.16384_none_fcf849b59e606ea6\Event Viewer.lnk
PowerCopy:: directive completed successfully.

Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 7 datablocks.
Finish time: 2015-11-22 21:51:28.309
Script hash: 80pK1fHEaL6+cESgv5eMWu4Rnf0FDPEtvIq45F7drwM=
----------------------EOF-----------------------

OnlineLabs · Nov 23, 2015

Hey Aura,

Thanks for taking the time to review this, I actually wanted your help.

Same error keeps coming up after this fix.

Let me know what's next, thanks!

Aura · Nov 23, 2015

Now we need to run a SFC scan to see if the replacements we made are accepted.

System File Checker (SFC)
Follow the instructions below to run a SFC scan on your system and to provide the CBS log in your next reply;

On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select

Run as Administrator
On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
Enter the command below and press on Enter;
Code:
```
sfc /scannow
```
Note: There's a space between "sfc" and "/scannow";
Once the scan is complete, enter the command below and press on Enter
Code:
```
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
```
A file called cbs.txt will have appeared on your Desktop. Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the SFC scan is completed, it won't have the information from the scan anymore. So archive it and upload it as soon as you can.

OnlineLabs · Nov 23, 2015

Hey Aura,

Please review the following link.
Also free free to provide advanced steps, I can follow them along just fine.

I made a batch file to assure the .log file is as fresh as possible.

https://www.dropbox.com/s/5ne4whni5y9szc9/cbs.txt?dl=0

Aura · Nov 23, 2015

SFC returned a clean log, let's see if DISM have anything to report.

DISM - Fixing Component Store Corruption
Follow the instructions below to run a DISM operation on your system.

On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
Enter the command below and press on Enter;
Code:
```
DISM /Online /Cleanup-Image /RestoreHealth
```
Let the scan run until the end (100%). Depending on your system, it can take some time;
Copy the C:\Windows\Logs\DISM folder and C:\Windows\Logs\CBS\CBS.log file on your Desktop, then right-click on it, go to Send to... and select Compressed .zip archive;
Upload the file on Dropbox, Google Drive or OneDrive and post the download URL for it here;

Note: Please note that the CBS.log is volatile, which means that if you don't upload it after the DISM scan is completed, it won't contains the information from the scan anymore. So archive it and upload it as soon as you can.

On a side note, are you TechnicianOnline on BC? :O

OnlineLabs · Nov 24, 2015

Hey Aura,

Yes sir, you hit the nail on the head bro!
I wasn't able to register with TechnicianOnline, someone stole it!

Here are the files in question, thanks for reviewing these man! I'm trying to avoid formatting because of all the software I have installed.
Thought of you and remembered sysnative, this is right up your alley and out of my scope! :)

https://www.dropbox.com/s/vya7j234eow194n/Round2DISM.zip?dl=1

Aura · Nov 24, 2015

The name on your Dropbox file gave it away

And are you sure you didn't register here back then with your username? :O Also, the Dropbox link you gave me returns a 404!

OnlineLabs · Nov 24, 2015

Aura,

I'm almost positive that was the case but every password and email I attempted to recover the username failed.
I've fixed the problem, please review the following, thanks man!

https://www.dropbox.com/s/vya7j234eow194n/Round2DISM.zip?dl=1

Aura · Nov 24, 2015

Well your DISM log is clean. Can you try setting up a clean boot, restart your computer then see if you still get that error message?

Search

Search

wbemprox.dll - Error comes up every 10 seconds

OnlineLabs

Member

Attachments

OnlineLabs

Member

Aura

Sysnative Staff, Security Analyst

OnlineLabs

Member

OnlineLabs

Member

Aura

Sysnative Staff, Security Analyst

OnlineLabs

Member

Aura

Sysnative Staff, Security Analyst

OnlineLabs

Member

Aura

Sysnative Staff, Security Analyst

OnlineLabs

Member

Aura

Sysnative Staff, Security Analyst