HP Insight NIC Agent

[Richard Zeigler]

We have been noting the following message in the WBEM logs:

(Thu Feb 08 13:55:26 2007) : CAsyncReq_ExecNotificationQueryAsync, Query= select * from HPQ_VT_STATUS_VIRUS_LIKE_ACTIVITY_HAS_STOPPED in namespace root\wmi using flags 0x0
(Thu Feb 08 13:57:26 2007) : Error 80041002 occured executing queued request
(Thu Feb 08 13:57:26 2007) : CAsyncReq_ExecNotificationQueryAsync, Query= select * from HPQ_VT_STATUS_VIRUS_LIKE_ACTIVITY_IS_OCCURRING in namespace root\wmi using flags 0x0
(Thu Feb 08 13:57:26 2007) : Error 80041002 occured executing queued request

This appears to be an indicator for some IP traffic to be dropped. The HP Virus Throttle is not installed. However, it appears that these messages are no longer reported and the IP traffic is restored to normal levels when the HP Insight NIC Agent (v 7.60) is disabled (cpqnimgt.exe).

Is there a Virus Throttle embedded in this agent?

Is there some way to disable any Virus Throttle subcomponents for this agent?

Has anyone else noted this type of behavior with this agent?

Thanks in advance for any assistance.

[David Claypool]

Don't shoot the messenger :) That's what the NIC Agent is. The source of what it is reporting is the NIC driver itself, and the virus throttle code is resident there, although to use it you must license it. This sounds like something to report to customer services and to get escalated to the developers...