• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 973
  • Last Modified:

Frequent reboots following a "The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus and Firewall." event error

My system (WinXP Pro (SP3)), running on a Lenovo M55e desktop keeps once in a while self rebooting.  The last 3 reboot occurred during 28 hours.
The only log report I can relate to these reboots is the following event log report:

"The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus and Firewall."

Source: Security Center
Category: None
Event ID: 1802.

What's wrong?
  • 3
  • 2
2 Solutions
What AntiVirus and Firewall products are you using?

In some cases, there might be an overlap whereby the AntiVirus products also functions as a firewall, then thus could lead to conflicts.

To isolate the issue with the reboots, try uninstalling your Firewall first. If the problem still persists, uninstal the AV. If still the problem persists, then it most likely is an OS issue rather than a problem with the security products.
Are you by chance using Bit Defender?  If you are check BitDefender Support Solution ID: 128   (per event ID.net)

Is the WMI service started and working on the laptop that seems to be rebooting its self?
chermeshAuthor Commented:
To Kelvin_King: My firewall is the MS one and my AV - Kaspersky. I kind of hesitate to stop them. A possible option is to cut myself from the net and then stop them (or one after the other). What do you think?

To Azyre:: No, I'm not using Bit Defender.
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

I have read that Kaspersky has such issues.

One quick test would be to reinstall Kaspersky.

And then see if the problem still persists.

Hope that helps!
chermeshAuthor Commented:
To Kelvin_King::
I checked the net' looking for clues for the WMI-Kaspersky connection. Some posting described a problem with the Windows\System32\WBEM directory, and suggested deleting and recreating it.
I tried this option. Let's see if we're on the right direction.
chermeshAuthor Commented:
Thanks, Kelvin, for pointing the connection between my Kaspersky-MS firewall and my frequent reboots. I stopped the MS firewall and the reboots disappeared. Getting into the details of the Kaspersky menus, I understood why - both my Internet Security program and my MS OS provided an option of a firewall, These two running processes seem to be incompatible.

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now