strange entries in the wbemess.log

Hi
I was scanning the logs on my machine, and fond this log. I have no clue
what it is, how to kill it, is it necessary? Al I know is that its adding
entries every couple of minutes. I am also getting error in other logs-see
below:
========
wbemess.log
(Mon Feb 21 00:06:06 2005.24293672) : Unable to register event source
'Service Control Manager' on server ''. Error code: 6B5
(Mon Feb 21 00:06:06 2005.24293682) : Event consumer provider is unable to
instantiate event consumer NTEventLogEventConsumer="SCM Event Log Consumer":
error code 0x80041001
(Mon Feb 21 00:06:06 2005.24293692) : Failed the first attempt to retrieve
the sink to deliver an event to event consumer NTEventLogEventConsumer="SCM
Event Log Consumer" with error code 80041001.
WMI will reload and retry.
(Mon Feb 21 00:06:06 2005.24293702) : Failed the second attempt to deliver
an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer"
with error code 80041012.
This event is dropped for this consumer.
(Mon Feb 21 00:06:06 2005.24293712) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293732) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293742) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293742) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293752) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 07:55:00 2005.71823) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Mon Feb 21 07:55:00 2005.71943) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
================
FrameWork.log :
ERROR CInstance(Win32_Desktop)::SetDWORD(IconHorizontalS pacing) FAILED!
error# 80041002 02/21/2005
00:03:32.852 thread:920 [d:\xpsprtm\admin\wmi\wbem\sdk\framedyn\instance.cp p.2440]
======
wmiprov.log
(Mon Feb 21 07:58:51 2005.303436) : WDM call returned error: 4200


Thank you for the help!
Rene



I posted this in another help forum and got no responses

The Wbemess.log file contains all warning and error messages related to the
WMI event subsystem. Those errors that require administrator attention are
also logged in the Windows NT Event log. Only administrators have read
access to the WMI log folder found at %windir%\system32\wbem\logs.

Under the WMI Control Properties/Logging Tab, uncheck Verbose.

--
All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com


"Patti" wrote in message
...
Hi
I was scanning the logs on my machine, and fond this log. I have no clue
what it is, how to kill it, is it necessary? Al I know is that its adding
entries every couple of minutes. I am also getting error in other logs-see
below:
========
wbemess.log
(Mon Feb 21 00:06:06 2005.24293672) : Unable to register event source
'Service Control Manager' on server ''. Error code: 6B5
(Mon Feb 21 00:06:06 2005.24293682) : Event consumer provider is unable to
instantiate event consumer NTEventLogEventConsumer="SCM Event Log
Consumer":
error code 0x80041001
(Mon Feb 21 00:06:06 2005.24293692) : Failed the first attempt to retrieve
the sink to deliver an event to event consumer
NTEventLogEventConsumer="SCM
Event Log Consumer" with error code 80041001.
WMI will reload and retry.
(Mon Feb 21 00:06:06 2005.24293702) : Failed the second attempt to deliver
an event to event consumer NTEventLogEventConsumer="SCM Event Log
Consumer"
with error code 80041012.
This event is dropped for this consumer.
(Mon Feb 21 00:06:06 2005.24293712) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293732) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293742) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293742) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 00:06:06 2005.24293752) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Mon Feb 21 07:55:00 2005.71823) : NT Event Log Consumer: could not
retrieve
sid, 0x80041002
(Mon Feb 21 07:55:00 2005.71943) : NT Event Log Consumer: could not
retrieve
sid, 0x80041002
================
FrameWork.log :
ERROR CInstance(Win32_Desktop)::SetDWORD(IconHorizontalS pacing) FAILED!
error# 80041002 02/21/2005
00:03:32.852 thread:920
[d:\xpsprtm\admin\wmi\wbem\sdk\framedyn\instance.cp p.2440]
======
wmiprov.log
(Mon Feb 21 07:58:51 2005.303436) : WDM call returned error: 4200


Thank you for the help!
Rene



I posted this in another help forum and got no responses