Failover cluster wmi provider detected an invalid character

Question

We are getting this recurring error in our two node hyper-v cluster:
ID: 6237 Source: FailoverClustering-WMIProvider
Logs anywhere from 1- 15 of these errors every half hour. We are running on Server 2008 R2 SP1 with Hyper-V role and management done by VMM 2012. Hosts are identical hardware (Intel Board, dual quad-core Xeon, 48gb ram) and VMs running on EMC VNXe 3100 shared
storage via iSCSI.
Log Name:      Microsoft-Windows-FailoverClustering-WMIProvider/Admin
Source:        Microsoft-Windows-FailoverClustering-WMIProvider
Date:          5/6/2013 5:02:11 AM
Event ID:      6237
Task Category: Failover Cluster WMI Provider
Level:         Error
Keywords:     
User:          COASCADA\msscvmm
Computer:      wwpsvrhypv02.coascada.local
Description:
Failover Cluster WMI Provider detected an invalid character. The private property name 'PreviousOfflineAction' had an invalid character but the provider failed to change it to a valid property name. Property names must start with A-Z or a-z, and valid characters
for WMI property names are A-Z, a-z, 0-9, and '_'.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-FailoverClustering-WMIProvider" Guid="{0461BE3C-BC15-4BAD-9A9E-51F3FADFEC75}" />
    <EventID>6237</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>1</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2013-05-06T12:02:11.390560300Z" />
    <EventRecordID>8301</EventRecordID>
    <Correlation />
    <Execution ProcessID="6900" ThreadID="5376" />
    <Channel>Microsoft-Windows-FailoverClustering-WMIProvider/Admin</Channel>
    <Computer>wwpsvrhypv02.coascada.local</Computer>
    <Security UserID="S-1-5-21-3378633525-1537071075-772992230-3177" />
  </System>
  <EventData>
    <Data Name="Parameter1">PreviousOfflineAction</Data>
  </EventData>
</Event>

Answer 1

Hi,
You may try the hotfix in KB 974930:
An application or service that queries information about a failover cluster by using the WMI provider may experience low performance or a time-out exception
http://support.microsoft.com/kb/974930
Cause:
This problem occurs because the WMI provider responds to the query requests very slowly. The time that the WMI provider takes to complete the query requests affects the following performance measurements:
The ability and reliability of the service or application
The speed of generating a status report about the failover cluster
Therefore, a slow response of the WMI provider may cause the application or service to function abnormally.
For more information please refer to following MS articles:
Event ID 6237: Failover Cluster WMI Provider detected an invalid character
http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2highavailability/thread/bae84aea-5a80-4637-989b-c31bbc1aa55a/
Lawrence
TechNet Community Support