Solved

Dell XP1730 event error - OMCI driver failed to load

Posted on 2008-10-14
6
2,298 Views
1 Endorsement
Last Modified: 2013-12-01
hi,

I have a Dell XPS1730 laptop.

I installed the O/S from scratch.

I have been eliminating any system errors and am down to one i can't solve. This occurs on boot.

Vista 32bit - fully patched.

Log Name:      System
Source:        Service Control Manager
Date:          15/10/2008 9:12:49 AM
Event ID:      7026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      mylaptop
Description:
The following boot-start or system-start driver(s) failed to load:
OMCI
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7026</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2008-10-14T22:12:49.000Z" />
    <EventRecordID>48670</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>mylaptop</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">
OMCI</Data>
  </EventData>
</Event>
1
Comment
Question by:Valimai
  • 3
  • 3
6 Comments
 
LVL 6

Expert Comment

by:pwrBall
ID: 22717083
OpenManage Client Instrumentation (OMCI) is a software agent that is pre-installed standard on all OptiPlexTM systems and is available as an option on all Dell PrecisionTM workstations and all LatitudeTM notebooks. Used in conjunction with management console software, such as Dell OpenManage IT Assistant or third-party products, OMCI enables administrators to collect hardware inventory and configuration information, receive proactive notification of potential fault conditions and remotely perform BIOS updates on one or a group of Dell systems.

Personally I'd fry/uninstall anything Dell on a laptop that wasn't an absolute necessity, but that's just me being a rebel against "the man".

Or you could try re-installing the Dell Open Management s/w:
http://support.dell.com/support/edocs/software/smitasst/8.0.1/en/ug/install.htm
0
 
LVL 1

Author Comment

by:Valimai
ID: 22717389
Since I installed the O/S from scratch; i did not install OMCI software.

http://support.dell.com/support/edocs/software/smitasst/8.0.1/en/ug/install.htm#1054050
I checked the Add/Remove programs list and there is no mention of any Dell software. Checked Program Files folder and no dell directories. Check services and drivers lists and no dell or omci mentions.

I did install dell drivers for the various devices, so how did this "sneak" in?

Im reluctant to install the software as yet an will wait for any further opinions.
Still confused.. :)

0
 
LVL 6

Expert Comment

by:pwrBall
ID: 22723473
It wouldn't be the first time a company snuck a file in during an install.

See if you actually have the file in C:\windows\system32\drivers\omci.sys

Do a registry search and see if it is referenced.

Check Services and see if it is listed there.
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 1

Author Comment

by:Valimai
ID: 22727122
hi, thanks for those suggestions
i did a full file system search for omci*
no results

i did a full regedit scan for omci and have a result pasted in the code view.

would deleting those keys stop the event errors you think? I checked services and did not see anything starting with...
Dell
OMCI
OpenManage


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\OMCI]

"Type"=dword:00000001

"Start"=dword:00000001

"ErrorControl"=dword:00000001

"ImagePath"=hex(2):5c,00,3f,00,3f,00,5c,00,43,00,3a,00,5c,00,57,00,69,00,6e,00,\

  64,00,6f,00,77,00,73,00,5c,00,53,00,59,00,53,00,54,00,45,00,4d,00,33,00,32,\

  00,5c,00,44,00,52,00,49,00,56,00,45,00,52,00,53,00,5c,00,4f,00,4d,00,43,00,\

  49,00,2e,00,53,00,59,00,53,00,00,00

"DisplayName"="OMCI"
 

REM - Image path as a string = \??\C:\Windows\SYSTEM32\DRIVERS\OMCI.SYS
 

REM - Also found the same DWORD in 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\OMCI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OMCI]

Open in new window

0
 
LVL 6

Accepted Solution

by:
pwrBall earned 500 total points
ID: 22733959
Interesting how that got in there, maybe a fault in the install code of one of the drivers you installed from Dell.

I'd back up your registry and then delete just the OMCI references.  Obviously the file does not exist so it shouldn't hurt to remove the offending entry.   If you delete the OMCI in the CurrentControlSet, it will most likely disappear from ControlSet001 and 003, but check to be sure.

Before you do that, see if you have this in your Services: DEventAgent

If you do, disable it and reboot, then check the event viewer for the error you typically get.
0
 
LVL 1

Author Comment

by:Valimai
ID: 22736232
I checked the services list and registry for DEventAgent, zero results.

I deleted the ControlSetVersion and ControllSet001 and 003 also disappeared. No more references.

Event viewer, no more OMCI errors :)

thank you very much for your help. i learn a lot too.



0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Suggested Solutions

So who is this article for? If you are like most of the computer users out there, you probably only realize the meaning of 'System maintenance' after something goes wrong. This article is for you if you care about keeping your system working opti…
In this article we have discussed the manual scenarios to recover data from Windows 10 through some backup and recovery tools which are offered by it.
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now