Solved

Exception thrown when start listening to window event

Posted on 2009-07-15
1
1,558 Views
Last Modified: 2013-12-17
Hi Experts,

I am trying to get the event everytime user invokes a window application.  For example, my application should get the event when user runs notepad.exe

I am using WMI to capture the windows event asynchronously, however, I got exception thrown (Exception from HRESULT: 0x80042002) everytime I starts to listen to the window event.

I would like to seek for your advice and guidence on solving this issue.
Thank you!



I am using C# 2005 and .Net Framework 2.0.

The following are the exception detail:
System.Runtime.InteropServices.COMException was unhandled
  Message="Exception from HRESULT: 0x80042002"
  Source="mscorlib"
  ErrorCode=-2147213310
  StackTrace:
       at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo)
       at System.Management.ManagementEventWatcher.Start()
       at EventMonitoring.WindowEventWatcher.Start() in C:\Projects\AppMonitoring\WindowEventWatcher.cs:line 54
       at EventMonitoring.FrmAppSelect..ctor() in C:\Projects\AppMonitoring\FrmAppSelect.cs:line 29
       at EventMonitoring.Program.Main() in C:\Projects\AppMonitoring\Program.cs:line 17
       at System.AppDomain._nExecuteAssembly(Assembly assembly, String[] args)
       at System.AppDomain.ExecuteAssembly(String assemblyFile, Evidence assemblySecurity, String[] args)
       at Microsoft.VisualStudio.HostingProcess.HostProc.RunUsersAssembly()
       at System.Threading.ThreadHelper.ThreadStart_Context(Object state)
       at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
       at System.Threading.ThreadHelper.ThreadStart()

WqlEventQuery m_eventQuery = new WqlEventQuery("__InstanceCreationEvent", "TargetInstance isa \"Win32_Process\"");
private ManagementEventWatcher m_eventWatcher = new ManagementEventWatcher(m_eventQuery);
m_eventWatcher.EventArrived += new EventArrivedEventHandler(HandleEvent);
 
m_eventWatcher.Start();            // Exception thrown!!! (Exception from HRESULT: 0x80042002)

Open in new window

0
Comment
Question by:cskiong
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 86

Accepted Solution

by:
Mike Tomlinson earned 250 total points
ID: 24866704
Not sure...this works for me (I'm definitely no WMI expert!).  Note the extra parameter of a TimeSpan to the constructor of WqlEventQuery.
See: http://msdn.microsoft.com/en-us/library/6s90836x(VS.80).aspx
    public partial class Form1 : Form
    {
 
        private delegate void CreatedDelegate(EventArrivedEventArgs e);
        private ManagementEventWatcher watcherCreation;
 
        public Form1()
        {
            InitializeComponent();
        }
 
        private void Form1_Load(object sender, EventArgs e)
        {
            WqlEventQuery queryCreation = new WqlEventQuery("__InstanceCreationEvent",
                new TimeSpan(0, 0, 1), "TargetInstance isa \"Win32_Process\"");
            watcherCreation = new ManagementEventWatcher(queryCreation);
            watcherCreation.EventArrived += new EventArrivedEventHandler(watcherCreation_EventArrived);
            watcherCreation.Start();
        }
 
        void watcherCreation_EventArrived(object sender, EventArrivedEventArgs e)
        {
            if (this.InvokeRequired)
                this.Invoke(new CreatedDelegate(ProcessStarted), new Object[] { e });
            else
                ProcessStarted(e);
        }
 
        private void ProcessStarted(EventArrivedEventArgs e)
        {
            // do something in here...
            Console.WriteLine("Process Started @ " + DateTime.Now.ToString());
        }
 
        private void Form1_FormClosing(object sender, FormClosingEventArgs e)
        {
            watcherCreation.Stop();
        }
 
    }

Open in new window

0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Whether you've completed a degree in computer sciences or you're a self-taught programmer, writing your first lines of code in the real world is always a challenge. Here are some of the most common pitfalls for new programmers.
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question