Share via

Event Manager Errors

Anonymous
2020-02-19T02:32:03+00:00

Hi folks,

These all started mid January 2020. Multiple error codes (2002, 2003, 3002, etc) that say the Microsoft Security Client cannot be found. They repeat roughly every 10 days to two weeks. After they happen there is a .net Runtime error and an application error in wmiprvse.exe.

I use Eset NOD 32 if that matters. Have run SFC. Have Googled and read dozens of thread. No changes.

Any insight into these errors and what to do if anything? And see the bottom for a System error that occurs just before these and could be a coin****ence - or not.

Thanks!

~Bob

Win 10 latest updated version. 1909 18363.592

Here are samples:

Log Name:      Application

Source:        NVWMI

Date:          2/18/2020 1:51:19 AM

Event ID:      3

Task Category: (16)

Level:         Warning

Keywords:      Classic

User:          N/A

Computer:      P51S

Description:

display profile manager not initialized

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="NVWMI" />

    <EventID Qualifiers="16640">3</EventID>

    <Level>3</Level>

    <Task>16</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2020-02-18T09:51:19.595176600Z" />

    <EventRecordID>17730</EventRecordID>

    <Channel>Application</Channel>

    <Computer>P51S</Computer>

    <Security />

  </System>

  <EventData>

    <Data>display profile manager not initialized

</Data>

  </EventData>

</Event>

Log Name:      Application

Source:        Microsoft Security Client

Date:          2/18/2020 1:52:05 AM

Event ID:      2002

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      P51S

Description:

The description for Event ID 2002 from source Microsoft Security Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

0x80041003

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Microsoft Security Client" />

    <EventID Qualifiers="0">2002</EventID>

    <Level>2</Level>

    <Task>0</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2020-02-18T09:52:05.107166100Z" />

    <EventRecordID>17731</EventRecordID>

    <Channel>Application</Channel>

    <Computer>P51S</Computer>

    <Security />

  </System>

  <EventData>

    <Data>0x80041003</Data>

  </EventData>

</Event>

Log Name:      Application

Source:        Microsoft Security Client

Date:          2/18/2020 1:52:05 AM

Event ID:      2003

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      P51S

Description:

The description for Event ID 2003 from source Microsoft Security Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

0x80041003

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Microsoft Security Client" />

    <EventID Qualifiers="0">2003</EventID>

    <Level>2</Level>

    <Task>0</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2020-02-18T09:52:05.107166100Z" />

    <EventRecordID>17732</EventRecordID>

    <Channel>Application</Channel>

    <Computer>P51S</Computer>

    <Security />

  </System>

  <EventData>

    <Data>0x80041003</Data>

  </EventData>

</Event>

Log Name:      Application

Source:        Microsoft Security Client

Date:          2/18/2020 1:52:05 AM

Event ID:      3002

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      P51S

Description:

The description for Event ID 3002 from source Microsoft Security Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

0x80041001

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Microsoft Security Client" />

    <EventID Qualifiers="0">3002</EventID>

    <Level>2</Level>

    <Task>0</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2020-02-18T09:52:05.107166100Z" />

    <EventRecordID>17733</EventRecordID>

    <Channel>Application</Channel>

    <Computer>P51S</Computer>

    <Security />

  </System>

  <EventData>

    <Data>0x80041001</Data>

  </EventData>

</Event>

Log Name:      Application

Source:        .NET Runtime

Date:          2/18/2020 1:52:05 AM

Event ID:      1025

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      P51S

Description:

Application: wmiprvse.exe

Framework Version: v4.0.30319

Description: The application requested process termination through System.Environment.FailFast(string message).

Message: Unexpected exception thrown from the provider:

 System.IO.FileLoadException:

File name: 'Microsoft.AppV.AppvClientComConsumer, Version=10.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35'

   at Microsoft.AppV.AppvPublishingServerWMI.AppvPublishingServer.EnumeratePublishingServers()

Stack:

   at System.Environment.FailFast(System.String)

   at WmiNative.WbemProvider.WmiNative.IWbemServices.CreateInstanceEnumAsync(System.String, Int32, WmiNative.IWbemContext, WmiNative.IWbemObjectSink)

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name=".NET Runtime" />

    <EventID Qualifiers="0">1025</EventID>

    <Level>2</Level>

    <Task>0</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2020-02-18T09:52:05.843657400Z" />

    <EventRecordID>17741</EventRecordID>

    <Channel>Application</Channel>

    <Computer>P51S</Computer>

    <Security />

  </System>

  <EventData>

    <Data>Application: wmiprvse.exe

Framework Version: v4.0.30319

Description: The application requested process termination through System.Environment.FailFast(string message).

Message: Unexpected exception thrown from the provider:

 System.IO.FileLoadException:

File name: 'Microsoft.AppV.AppvClientComConsumer, Version=10.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35'

   at Microsoft.AppV.AppvPublishingServerWMI.AppvPublishingServer.EnumeratePublishingServers()

Stack:

   at System.Environment.FailFast(System.String)

   at WmiNative.WbemProvider.WmiNative.IWbemServices.CreateInstanceEnumAsync(System.String, Int32, WmiNative.IWbemContext, WmiNative.IWbemObjectSink)

</Data>

  </EventData>

</Event>

Log Name:      Application

Source:        Application Error

Date:          2/18/2020 1:52:05 AM

Event ID:      1000

Task Category: (100)

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      P51S

Description:

 version: 10.0.18362.1, time stamp: 0x2b37314e

Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

Exception code: 0x80131623

Fault offset: 0x00007ffc7ace200f

Faulting process id: 0x2904

Faulting application start time: 0x01d5e6410ef1e31b

Faulting application path: C:\WINDOWS\system32\wbem\wmiprvse.exe

Faulting module path: unknown

Report Id: 3e52ae85-ad8d-4605-b05a-df08f249a48c

Faulting package full name:

Faulting package-relative application ID:

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Application Error" />

    <EventID Qualifiers="0">1000</EventID>

    <Level>2</Level>

    <Task>100</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2020-02-18T09:52:05.968631300Z" />

    <EventRecordID>17742</EventRecordID>

    <Channel>Application</Channel>

    <Computer>P51S</Computer>

    <Security />

  </System>

  <EventData>

    <Data>wmiprvse.exe</Data>

    <Data>10.0.18362.1</Data>

    <Data>2b37314e</Data>

    <Data>unknown</Data>

    <Data>0.0.0.0</Data>

    <Data>00000000</Data>

    <Data>80131623</Data>

    <Data>00007ffc7ace200f</Data>

    <Data>2904</Data>

    <Data>01d5e6410ef1e31b</Data>

    <Data>C:\WINDOWS\system32\wbem\wmiprvse.exe</Data>

    <Data>unknown</Data>

    <Data>3e52ae85-ad8d-4605-b05a-df08f249a48c</Data>

    <Data>

    </Data>

    <Data>

    </Data>

  </EventData>

</Event>

*****Just before this happens, there are 3 or 4 of this system event:

Log Name:      System

Source:        Application Popup

Date:          2/18/2020 1:52:05 AM

Event ID:      26

Task Category: None

Level:         Information

Keywords:     

User:          SYSTEM

Computer:      P51S

Description:

Application popup: Windows - Application Error : The instruction at 0x00007FFCEF66A0C2 referenced memory at 0x0000000000000000. The memory could not be read.

Click on OK to terminate the program

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Application Popup" Guid="{47bfa2b7-bd54-4fac-b70b-29021084ca8f}" />

    <EventID>26</EventID>

    <Version>0</Version>

    <Level>4</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x8000000000000000</Keywords>

    <TimeCreated SystemTime="2020-02-18T09:52:05.445439000Z" />

    <EventRecordID>10440</EventRecordID>

    <Correlation />

    <Execution ProcessID="640" ThreadID="1440" />

    <Channel>System</Channel>

    <Computer>P51S</Computer>

    <Security UserID="S-1-5-18" />

  </System>

  <EventData>

    <Data Name="Caption">Windows - Application Error</Data>

    <Data Name="Message">The instruction at 0x00007FFCEF66A0C2 referenced memory at 0x0000000000000000. The memory could not be read.

Click on OK to terminate the program</Data>

  </EventData>

</Event>

   I never see a popup. And Windows manages virtual memory - and in a odd way if I must say. 16MB min, currently used 16GB!     

Thanks.

Windows for home | Windows 10 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

8 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. _AW_ 67,676 Reputation points Volunteer Moderator
    2020-05-30T02:40:41+00:00

    FWIW - these errors are caused by ESET when it scans the WMI database.

    Was this answer helpful?

    4 people found this answer helpful.
    0 comments
  2. Anonymous
    2020-05-30T02:52:11+00:00

    Thanks so much for replying. I thought it could be an ESET issue. Likely because ESET turns off Defender now creating the error.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  3. Anonymous
    2020-03-15T02:50:03+00:00

    And all the same ran again. What is calling the security client that is not installed and never has been????????

    Was this answer helpful?

    0 comments
  4. Anonymous
    2020-03-05T07:05:39+00:00

    Just ran again, all the same errors. Is there someplace better to ask this question and get some help?

    Thanks.

    Was this answer helpful?

    0 comments
  5. Anonymous
    2020-02-26T00:37:20+00:00

    Not even one comment or idea?

    Was this answer helpful?

    0 comments