| Kommentare über winmgmt.exe: |
 Alex | Windows Management Service, contains the WMI repository |
| john smith 3rd |  core file |
 Bully | Thsi Program try to connect to the following IP "67.19.131.36" with that Name "36.67-19-131.reverse.theplanet.com" on Port "6667". I see it on my Firewall. I research that there are two Task running with the same Name but ist was a bit different. One is called "WinMgmt.exe" an the other is called "winmgmt.exe" The once with the uppercase m is the Systemtask that was explained from Alex. But the other one do that what I say above. |
 hermannado@yahoo.de | bringt mir immer nur fehlermeldungen? |
 Rob | Without it system info will not work, MSINFO32.EXE is disabled, it is required if you want system info to work. Why it pops on, it is collecting info about the system. It can also be used to manage remotely on a network. It changed a lot since W95. |
| vincent | This file is safe if within windows\system32 if you have a problem with it try uninstalling recently installed programs because it can be launched automatically by windows if your application requests access to the WMI |
| Rini | Was suddenly running in my system after installing 'Windows Install Clean Up', from the MicroSoftWebside. It slowed down process-speed dramatically. After removing it via regedit and a restart, all's ok. It seems I don't need WINMGMT.EXE in WIN98! |
 Bear | all i know is i downloaded microsoft antispyware and didnt validate my windows after install WinMgmt.exe is trying to connect to the internet, i believe this microsoft seeing if you have a cracked copy of windows. anyhow im not letting it access the internet. |
| The Minus One | It shows up in a Xoftspy scan as a worm. I looked it up in Google and it shows it as something created by sun java. Webm is the folder it is in, web business management or something like that. I am not sure weather or not to have Xoftspy remove it, going to ask my bro who woks at M. |
| kathi | seems to be same as above just pops up and says it has generated an error and i must close down the computer but when i do it doesn't change ... when i leave the computer on overnight it the message pop upquits popping up but I don't like leaving the computer on all night. |
| micele9 | WBEMCNTL.exe aufrufen und restart abstellen |
| escudo | Some additional files seem associated with winmgmt.exe. There is an winmgmtr.dll. Also, these files are located in "SYSTEM" not "SYSTEM32" on my computer. SYSTEM32 appears to contain mostly drivers, and the ONLY .exe application in SYSTEM32 is regsvr32.exe. I'm running WinME on this computer. |
| [ARB1D3_[00L3R | HERE IT IS! All of you have seperately pieced together the "WinMgmt.exe" Microsoft blowhole. Yep, you won't find much on this thingie because it utilizes Java ( The Minus One ) to port your file system tree to a Microsoft server. This introduced the idea of the next Microsoft OS- codename LONGHORN. Download Jetico Personal ( my fave ) or any other firewall to interrupt traffic - and, yes, it is integrated into the os (2000) so that if it is removed, the os must reboot- retrieving the file from a *.cab( like a zip ) file on your hard drive. Delete the .cab file and imagine having to reload W2k. |
| Greg Fox | The file is used to generate management scripts, ostensibly by system admins. It appears some trojans/viruses can manipulate it, so if you see it loaded for no apparent reason, you have a problem. If you're not on a network or if you're running Win-9x, I'd personally rename the file to c:\windows\system\wbem\winmgmt.ex- ASAP then restore if you ever genuinely need it. Chances are it's helping viruses reinstall themselves "as if by magic". My money's on a CWS-variant using it to work its wonders. Siehe auch: Link |
| Greg Fox | This info relevant only to Win9x - my guess is that it's a piece of standard windows kit, not used in 9x, and some other purpose is being met using it. I would rename rather than delete, but again I stress only in 9x. Chances are a trojan IS using it to log/download/etc. but it would appear to be part of windows originally. Does not appear to cause any problems if you rename it (eg. to winmgmt.ex_) Siehe auch: Link |
| Matt G | Part of the core o\s. It often utilises high CPU. this is because of the WMI subsystem and slow I\O to the disk. Toi increase system performance, follow the link and do as suggested. Also, disable the Indexing Service. in addition, if you have an "on-Scan" virus checker, exclude the indexes from being scanned. Siehe auch: Link |
| Ben Whittaker | Microsoft monitoring activity, shut the process down then delete the corresponding files. No harm done. The files come from Windows Update or newer versions of Windows. System and System32 should be 'uncluttered' just like temp folder or recycle. |
| Volker Becker | Systemfile |
| Leo | If you don't want WMI to restart, go to Services and disable Windows Management Instrumentation service. If you want instead to switch it to Manual, go to Recovery page and select Take no Action instead of Restart the Service. |
| charles opoggen | it opens up each time i log into my system, and after a little while my system starts rebooting, i have to repeatedly close up this error messagesevery other time and before i how it the system starts rebooting |
| Rooza | i have ME as well and it appears in my c:/windows/system/Wbem folder, same as escudo. although mine appears to be called Winmgmt.exe, is it meant to have a capital w? or should i consider removing this as it may be allowing trojans to restore themselves? |
| Dale | This is part of WBEM Web-Based Enterprise Management (WBEM) is a set of management and Internet standard technologies developed to unify the management of distributed computing environments. WBEM provides the ability for the industry to deliver a well-integrated set of standard-based management tools, facilitating the exchange of data across otherwise disparate technologies and platforms |
| Nick | "A core component of client management. This process starts when the first client application connects, or when management applications request its services." "The original winmgmt.exe from Microsoft gets placed at C:WINDOWSSystem32winmgmt.exe . if you find it anywhere else then you should be suspicious for sure." Siehe auch: Link |
| David C | Have OS Microsoft Me. After adding Norton Internet Security I could not shut off winmgmt and it iterfered with defrag. Recently I downloaded "Connectivity tool" from Symantec and it entirely deleted winmgmt and everything seems to work just fine without it! |
| vanDivX | I installed VMware Player on one PC on LAN and soon after it was asking about IP of another PC and that PC's firewall poped up notice about winmgmt.exe which I allowed since I believe it is associated with the VMware Player program. |
| Tom Andrews | winmgmt.exe errors can be cleared from the repository folder, stop the service and then delete the winmgmt.cfg file, shut down your computer and then turn on...make sure it's a shut down instead of a reboot! |
| Nicholas | I found in Process Explorer that this file pops up after using Firefox for an extended period of time. When it does, CPU usage goes to 100% and commit charge skyrockets, rendering the system incredibly slow and unstable. After I terminated winmgmt.exe in Process Explorer, my system returns back to normal. |
| powermax | After installing ZoneAlarm and activating the firewall, WinMgmt .exe wanted to access the internet. Dont know why, but I disabled the access without any further problems. Still dont know why and what data the program wanted to send. |
|
|
