Random WMI corruption

Hi I have been getting a number of instnces where machines seem to be getting WMI corruption.  Group Policies are failing to run and Group Policy installed applications are being uninstalled from machines.  When I run a gpresult on a problem machine I get ERROR : Not found.  WMI management through the control panel is failing and the SCCM configuration manager on the client is empty.  Sometimes rebooting the machine will appear to correct the problem but often we have to repair the WMI or reimage the PC.  Also some machines seem to be more corrupt than others.  We are running XP SP3. Is there a way to work out what might be causing the corruption ?  This is happening on quite a few machines now.  Sometimes the corruption seems to happen right after we have imaged a machine (We use SCCM 2007 R3) and sometimes it happens on machines which have been in circulation for a while. Recently a machine was given to me which had WMI corruption.  I ran a WMIDIAG on it and it reported the following errors : WMIDIAG .1885 16:30:42 (1) !! ERROR: WMI MONIKER CONNECTION errors occured for the following namespaces: .......................................... 1 ERROR(S)! .1886 16:30:42 (0) ** - Root, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1887 16:30:42 (0) ** .1888 16:30:42 (1) !! ERROR: WMI CONNECTION errors occured for the following namespaces: .................................................. 35 ERROR(S)! .1889 16:30:42 (0) ** - Root, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1890 16:30:42 (0) ** - Root, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1891 16:30:42 (0) ** - Root/Default, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1892 16:30:42 (0) ** - Root/CIMv2, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1893 16:30:42 (0) ** - Root/WMI, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1894 16:30:42 (0) ** - root/ccm/Messaging, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1895 16:30:42 (0) ** - root/ccm/ContentTransferManager, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1896 16:30:42 (0) ** - root/ccm/DataTransferService, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1897 16:30:42 (0) ** - root/ccm/LocationServices, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1898 16:30:42 (0) ** - root/ccm/SoftMgmtAgent, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1899 16:30:42 (0) ** - root/ccm/events, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1900 16:30:42 (0) ** - root/ccm/Policy, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1901 16:30:42 (0) ** - root/ccm/policy/defaultmachine, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1902 16:30:42 (0) ** - root/ccm/policy/defaultmachine/requestedconfig, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1903 16:30:42 (0) ** - root/ccm/policy/defaultmachine/actualconfig, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1904 16:30:42 (0) ** - root/ccm/policy/defaultuser, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1905 16:30:42 (0) ** - root/ccm/policy/defaultuser/requestedconfig, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1906 16:30:42 (0) ** - root/ccm/policy/defaultuser/actualconfig, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1907 16:30:42 (0) ** - root/ccm/policy/machine/actualconfig, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1908 16:30:42 (0) ** - root/ccm/Scheduler, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1909 16:30:42 (0) ** - root/ccm/SoftwareMeteringAgent, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1910 16:30:42 (0) ** - root/ccm/Policy/machine, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1911 16:30:42 (0) ** - root/cimv2, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1912 16:30:42 (0) ** - root/cimv2/sms, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1913 16:30:42 (0) ** - root/ccm/invagt, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1914 16:30:42 (0) ** - root/ccm, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1915 16:30:42 (0) ** - root/ccm/statemsg, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1916 16:30:42 (0) ** - root/ccm/smsnapagent, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1917 16:30:42 (0) ** - root/ccm/SoftwareUpdates/Handler, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1918 16:30:42 (0) ** - root/ccm/SoftwareUpdates/DeploymentAgent, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1919 16:30:42 (0) ** - root/ccm/SoftwareUpdates/WUAHandler, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1920 16:30:42 (0) ** - root/ccm/SoftwareUpdates/UpdatesStore, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1921 16:30:42 (0) ** - root/ccm/peerdpagent, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1922 16:30:42 (0) ** - root/ccm/scanagent, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1923 16:30:42 (0) ** - root/ccm/xmlstore, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found. .1924 16:30:42 (0) ** .1925 16:30:42 (0) ** WMI GET operations: ................................................................................................. OK. .1926 16:30:42 (0) ** WMI MOF representations: ............................................................................................ OK. .1927 16:30:42 (0) ** WMI QUALIFIER access operations: .................................................................................... OK. .1928 16:30:42 (0) ** WMI ENUMERATION operations: ......................................................................................... OK. .1929 16:30:42 (0) ** WMI EXECQUERY operations: ........................................................................................... OK. .1930 16:30:42 (0) ** WMI GET VALUE operations: ........................................................................................... OK. .1931 16:30:42 (0) ** WMI WRITE operations: ............................................................................................... NOT TESTED. .1932 16:30:42 (0) ** WMI PUT operations: ................................................................................................. NOT TESTED. .1933 16:30:42 (0) ** WMI DELETE operations: .............................................................................................. NOT TESTED. .1934 16:30:42 (0) ** WMI static instances retrieved: ..................................................................................... 0. .1935 16:30:42 (0) ** WMI dynamic instances retrieved: .................................................................................... 0. .1936 16:30:42 (0) ** WMI instance request cancellations (to limit performance impact): ................................................... 0. A lot of the SCCM logs stop at 15:01 so I assume that this was when the corruption occured.  The CcmExec log shows a string of random characters at this time and then fails to contact the WMI namespace. We don't use SCCM powermanagement on the machines so not sure why this is being logged. CcmExec.Log <![LOG[BEGIN ExecuteSystemTasks('PowerChanged')]LOG]!><time="15:01:18.354+000" <![LOG[Invoking system task 'PowerStateManager_PowerChanged' via ICcmSystemTask2 interface.]LOG]!><time="15:01:18.401+000" <![LOG[Power status - AC: 0 Battery: 1]LOG]!><time="15:01:18.401+000" <![LOG[Invoking system task 'PwrMgmtPowerChanged' via ICcmSystemTask2 interface.]LOG]!><time="15:01:18.401+000" <![LOG[END ExecuteSystemTasks('PowerChanged')]LOG]!><time="15:01:18.401+000" lÌ?¹qÝ{:13Cgù>S/jRH$‘–»îf#㓆Œx™äds 1Õϼ1j¶cè”G10ˆç·ËŠˆ[‰=•ìž1Œ¼Y¬Õí¨WQÒ=5®|Æ[\ÿ r ûäøøñŒeͼ¢ ô´(ÏÄdY©þºüÜŽØQ9y‚
žBˆ! [LOG[Starting CCMEXEC service...]LOG]!><time="15:02:30.156+000" <![LOG[Running on machine PC123456 as user SYSTEM.]LOG]!><time="15:02:30.250+000" <![LOG[Initializing COM.]LOG]!><time="15:02:30.250+000" <![LOG[Registering for logging change notifications.]LOG]!><time="15:02:30.250+000" <![LOG[Setting default logging component for process.]LOG]!><time="15:02:30.250+000" <![LOG[Setting service status to RUNNING.]LOG]!><time="15:02:30.250+000" <![LOG[Checking configuration.]LOG]!><time="15:02:30.250+000" <![LOG[Successfully Created Thread for CheckConfiguration. Waiting for Configuration to Complete]LOG]!><time="15:02:30.250+000" <![LOG[Failed to open to WMI namespace '\\.\root\ccm' (80041002)]LOG]!><time="15:02:36.031+000" date="12-04-2012" component="CCMEXEC" context="" type="3" thread="1512" file="wminamespace.cpp:231"> I have been looking at the system and application logs for that any events which occured at that time but The Application.log shows quite a few msiinstaller events (installations and reconfigurations), winmgmt (ID 63), wmi impersination warnings a few days before so I am not sure if there was an issue before the 15:01 time when many of the logs stopped.  We use Group Policy filtering (which I have read might cause problems). I have spent a long time looking into this but every thing I read has me going in circles until I end back up at WMI corruption.  I already know this, what I want to work out is what is causing it ?  If it is a Group Policy problem or a piece of software writing incorrectly to the WMI then why isn't it happening on all machines ?  Any advice would be greatly appreciated. Thanks G