| Event Id | 9104 |
| Source | CDOEXM |
| Description | The MAD Monitoring thread was unable to read the CPU usage information, error <error code>. |
| Event Information | "According to Microsoft: Explanation : This event indicates that the monitoring thread of the System Attendant process (Mad.EXE) was unable to query WMI for CPU Usage Information. If this event appears occasionally, it can be safely ignored. If it happens every five minutes, then the causes need to be investigated. The causes can be varied, and the error code in the Description section will provide information. For example, in the Sample Event shown below, error 0x80010108 translates to RPC_E_DISCONNECTED, which means the remote procedure call (RPC) connection was lost, possibly due to a network interruption. This error can occur because of a corruption in the WMI infrastructure, other transient problems with the WMI infrastructure, or network connectivity issues. See the error code in the Description section of the event to understand the underlying cause. User Action : a. Verify that WMI is installed correctly. b. Check network connectivity. c. Use WBEMTEST.EXE to verify if WMI is responding, if the Exchange name space still exists, if the appropriate class exists, and if the Exchange WMI provider can enumerate instances of that class. d. Proceed based on the error code. " |
| Reference Links | Event id 9104 from source CDOEXM |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.