| Kommentare über wmiprvse.exe: |
 | Windows Management Instrumentation (services.msc) Siehe auch: Link Alex |
 | win 2000 in winmgmt.exe use search feature text only then you will see the winmgt.exe if you have mor than one delete capital letter one.then open goto properties type in do not load then admin in pharentacies this should do the trick. |
 | If found in windows\system32 then delete it and search for other viruses and Trojans, if its in windows\system32\wbem then check the version and that its a Microsoft file (check the properties) and this should be left where it is. Russ |
 | This program allows you to query/update information from the Common Information Model. It's basically a standardized database with standard namespaces which can be found across multiple OS's. It allows programmers/System Administrators to inventory/debug/etc. SMS 2K3 has inventory tools which use WMI to monitor your computer. It's not *that* dangerous. It has built-in security to make you authenticate to windows but... I included a link to Microsoft's website that gives much more information on WMI Siehe auch: Link -=(TherMite)=- |
| causing problems Bill Haughee |
 | This file (or something else related to a folder on my system called srchasst) is causing ads to pop up when im doing searches on google. Like, something about freedictonary.com and it just uses whatever you searched for in the title of the ad. also its slowing my ie down to almost stopping point and im on cable. HELP? slinky |
| On my PC, it's the Win XP one - but its run for no good reason, getting caught by my firewall: wmiprvse.exe (cnmub5i.dll). I don't trust it, and have no problems terminating it. More info on WHY or for what its needed would be appreciated. AlleyKat |
| I hate it! It keeps lagging my connection! It causes a two to five second connection lag. It's not much, but it makes me keep loosing connection in certain MMORPGs. Very annoying, and is more persistent than a virus. |
| Big Brother software AB |
| Seit "Cole2k Media Codec Pack". NAV meint das es kein Virus ist .... mAd |
| ok, I know for sure it isn't part of xp2 cause I don't have xp2 on ths machine and I have WMIPRVSE.EXE running in the background. Just goes to show that you can't really trust anything on these boards. Jesseq |
| all I know is I have never seen it running before in task manager... I noticed this 6 hrs after alarm clock was due to go off (I use WMP and Task Scheduler to run MP3s as an alarm clock). but... if wmiprvse.exe is indeed a virus, it's very very very freakin annoying Rick |
| wird bei Neustart ausgeführt, Netzwerkdienst aber in lokale Dienste nicht aufgeführt Axel |
| DCOM-Server Siehe auch: Link AxelC |
| i know i disabled it in the services and nothing happend. also i never did notice it there till today when i got a worm and it even started to show up in the processes.. killed it and everything fine. Nate |
| Windows Management Instrumentation. On XP SP2, the Windows Firewall + Connection Sharing Service depends on this one. Very annoying. Disable both in Adminstrative Tools/Services but first install a couple of real firewalls! |
| Windows® Management Instrumentation (WMI) is a component of the Microsoft® Windows® operating system that provides management information and control in an enterprise environment. By using industry standards, managers can use WMI to query and set information on desktop systems, applications, networks, and other enterprise components. Developers can use WMI to create event monitoring applications that alert users when important incidents occur. DNA9000 |
| "This .exe was stopping admin shares, sharing, access to registry, command prompt and other applications. stop the process and clear the 'kernel checker' from the run key in the regsrty" ??? Ignore this info, you don't want to be doing that trust me. If there is a masquerading virus with this file. trust your antivirus to spot it. 80kConsultant |
| Not really know what it's for but it starts up with XP and then it dissapears but when it's running it shurely hogs up alot of resources I wonder if this is the cause of my online gaming problems and causes my connection to freeze if i were you guys I would google it extensively and make sure if it's ok to delete otherwise you would be up a creek without a paddle if you do and your system could go apeshit |
| Only causes problems when the is more than one copy in system. For Winsdows XP, It should be located in: C\windows\system32\wbem. Delete all other copies and it shopuld fix the hangups. Multipble copies are usually caused by downloading of music, pictures and ebooks. Note: wmiprvsw.exe is the Sasser worm! The wmiprvse.exe file is located in the c:\windows\System32 folder. Novawatcher |
| i dont have sp2 - but it loaded after i installed microsoft software - it is a microsoft monitor of some kind - if you installed anything new that is from microsoft or uses microsoft software in any way it will load - takes 4k of mem usage even when not using any MS products voodoolady |
| where is the original wmiprvse.exe genuine windo2ws file spose to live as above you say Note: The wmiprvse.exe file is located in the c:\windows\System32 folder. In other cases, wmiprvse.exe is a virus then tarence below writes W32/Sonebot-B drops a copy of itself to the Windows System32 folder with the filename WMIPRVSE.EXE i have it running in my taskmananger but its not in system32 folder . I think mine is the normal windows and not a virus found the virus i was looking for hotkeysvc.exe came from a link in the new msn beta when i ran it sent itself to my whole address book. Jason |
| Puede causar problemas si es infectado por un virus, ya que se inicia al principio de la carga de windows y después debe desaparecer, si se mantiene, es porque algo raro está sucediendo y debe ser revisado con un antivirus actualizado. Rodrigo |
| I do not have sp2 and I run a process management software (It asks me whenever a process want to start or if it has been modified) I do not alow windows update to install anything (I don't trust it). Well my management software warned me that this file wanted to start and since i have not installed anything that would bring this file along I count it as a virus and didn't allow it to start and I have'nt experienced any problems. |
| This file took my dinner pizza and ate it. Then, it attacked my girlfriend and gave her Trojans. Then, it stole my car. Sheesh! At least, it is not that much of a problem like some viruses. I don't like my girlfriend that much anyway. The car, well, it is old. But the Pizza, now, that was a problem! diowrite |
 | system process thor |
| This loads and unloads itself automatically in Windows XP, because it is a separate process used just to handle management requests. 100% safe on uninfected systems. If it seems to stay loaded for ever, eating memory or CPU, then your version of wmiprvse is probably not the original Microsoft version (i.e. your file has been replaced by a virus) stripwax |
| Used by built in Windows XP firewall, ICS (internet connection sharing), Security Centre, etc, among other things. Stopping the Windows Management Instrumentation service should stop wmiprvse from running- but might also prevent firewall, ICS and Security Centre for working to. Disable it at your own risk. windowsxp |
| After reading all of the above posts I have no doubt in my mind that it is messing with my online gaming, it keeps shutting me down. I have never seen it before in task manager and do not know where it has come from. I try and delete it but it keeps reappearing. Please help!!! CyD3r_DrYnK3r |
| "technology for accessing management information in an enterprise environment" "most useful in enterprise applications." To turn it off, Start - Run - services.msc - double-click on "Windows Management Instrumentation" and set disabled Siehe auch: Link Maya75 |
| Loaded by any programs which use WMI. This is basically anything that polls hardware devices on windows these days. Like all processes, viruses occasionally use this file name. You need to check that its in %system32%\wbem ad13 |
| Windows Management Instrumentation nEopSYkO |
| Malicious Software detector Frenulum |
| found in system32\wbem\ folder. Unsure Adam |
| Standard MS process Hammer92 |
| Wird u.a. geladen, wenn man die Windows UpDate Site besucht. Harmlos. developer |
| Wird mit VNCViewer ausgeführt. |
| Bei dem Versuch msinfo32 aufzurufen um dort auf signierte Treiber zu klicken, versuchte wmiprvse.exe eine Verbindung herzustellen zu crl.microsoft.com (131.107.115.28) über den Port 80. Warum weiß ich leider selbst nicht. Markus |
| HIGH CPU USAGE! Solution: Diese Datei ist normalerweise harmlos, wird aber wie hier schon oft erwähnt wurde als Virus-Plattform missbraucht. Ein häufiges Problem ist die enorme CPU-Auslastung 50%-80% die sie gerne in Anspruch nimmt. Wenn Sie Drucker installiert haben, die sie gar nicht mehr verwenden kann es sein, dass diese Drucker NONSTOP gesucht werden (kokrektes Beispiel: USB Drucker von HP die zB mittlerweile als Netzdrucker genutzt werden usw.) und damit das System extrem belasten. Löschen Sie bitte ungenutzte Drucker aus "Start- Einstellungen- Drucker"! Siehe auch: Link Norman |
| Für die Einen ist es Windows - für die Anderen der längste BootVirus aller Zeiten no-security |
| Ich keine Ahnung, es befindet sich aber im Ordner C:\WINDOWS\system32\wbem,..jemand hat über eina LAn-Verbendungsaufbau..ich finde das selber gefährlich..ich habes uninstalliert..ciao Amer |
| Im Gegensatz zu dem Geschriebenen, die Datei kommt öfter vor durch das das Servicepack3 und so. A.P. Spin |
| Harmless process BoBy |
| von MS benötigt cfgodw |
| Windows Management Instrumentation Egal |
| Die Datei ist harmlos.....den Prozess kann man beenden. SuperNuke |
| Die Datei kann durchaus mehrfach vorkommen. In meinem Fall findet sie sich in C.\WINDOWS\ServicePackFiles\i386, C:\WINDOWS\system32\wbem, sowie in C:\WINDOWS\$hf_mig$\KB956572\SP3QFE. Startet, wie bereits erwähnt, mit Windows und wird kurz darauf beendet. Der Prozess ist kein Schädling, aber sehr wohl eine Systemdatei, die, wie ebenfalls bereits erwähnt, wie andere Dateien auch, als Schädlingsplattform mißbraucht werden kann. Die in der Erklärung suggerierte Gefahr halte ich persönlich für übertrieben. Michael |
| vital process |
| wmiprvse.exe? Ist von NERO backup datei !!!!!!!!!!!!!! |
| Erschreckend was hier andere für unausgegorenes Zeug schreiben. WMI ist ein ganz normales und von MS sogar gut dokumentiertes Verwaltungswerkzeug. ThommyHommy |
| windows XD celmairauu |
| total harmlos |
| Bei der Datei kann es sich auch um den Trojaner "Trojan-Downloader.Win32.Small.apzd!A2" handeln!!! w6!7eH |
| Wo ich im HijackThis das "URLSearchHook: (no name) (no file)" gefixt habe ist dieses Prozess auch aus dem TaskManager jetzt verschwunden. In meinen Augen könnte dies eine Bedrohung sein! Martin |
| Windows file |
| Absolut ungefährlich!!!, solange er in dem oben genannten Ordner befindet. M |
| Windows Firewall component |
| Der Dienst lässt sich über den Task Manager nicht deaktivieren und frisst 50% Computerleistung! DooManiC |
| Win 7 ulti. Habe bei den Autostart Programmen NERO Backitup und Epson Status Monitor auf aus gestellt, dann im TaskManager wmiprvse.exe prozess beendet.Es startete nicht wieder mit CPU-Auslastung 50% sonern normal. Fazit:NERO Backitup oder Epson Status Monitor verursachen den Vorgang wie einige schon schrieben. zuwa |
| Windows Management Instrumentation Siehe auch: Link Reconix |
| CPU-Auslastung 15 % nervt XD kurwa |
| früher nicht unter den Diensten vorhanden, dann plötzlich aufgetaucht, ist nach dem Booten vorhanden, Dienst beenden mit dem Task Manager hat keinerlei negative Beeinträchtigungen, eher umgekehrt, kann einen älteren PC mit schwacher Performance abstürzen lassen, benütze XP und IE.6 Umlandt Gerhard |
|
|
basierend auf 487 Bewertungen. Siehe auch die 62 Kommentare.