關於wmiprvse.exe
- 主題發起人 PorkLiu
- 開始日期
kool
☆ Share Moment ☆
Windows Management Instrumentation (WMI) is a component of the Microsoft Windows operating system that provides management information and control in an enterprise environment. By using industry standards, managers can use WMI to query and set information on desktop systems, applications, networks, and other enterprise components. Developers can use WMI to create event monitoring applications that alert users when important incidents occur.
In earlier versions of Windows, providers were loaded in-process with the Windows Management service (WinMgmt.exe), running under the LocalSystem security account. Failure of a provider caused the entire WMI service to fail. The next request to WMI restarted the service.
Beginning with Windows XP, WMI resides in a shared service host with several other services. To avoid stopping all the services when a provider fails, providers are loaded into a separate host process named Wmiprvse.exe. Multiple instances of Wmiprvse.exe can run at the same time under different accounts: LocalSystem, NetworkService, or LocalService. The WMI core WinMgmt.exe is loaded into the shared Local Service host named Svchost.exe.
Note: wmiprvsw.exe is the Sasser worm!
Note: The wmiprvse.exe file is located in the c:\windows\System32 folder. In other cases, wmiprvse.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager.
Virus with same name:
W32/Sonebot-B
請掃毒
In earlier versions of Windows, providers were loaded in-process with the Windows Management service (WinMgmt.exe), running under the LocalSystem security account. Failure of a provider caused the entire WMI service to fail. The next request to WMI restarted the service.
Beginning with Windows XP, WMI resides in a shared service host with several other services. To avoid stopping all the services when a provider fails, providers are loaded into a separate host process named Wmiprvse.exe. Multiple instances of Wmiprvse.exe can run at the same time under different accounts: LocalSystem, NetworkService, or LocalService. The WMI core WinMgmt.exe is loaded into the shared Local Service host named Svchost.exe.
Note: wmiprvsw.exe is the Sasser worm!
Note: The wmiprvse.exe file is located in the c:\windows\System32 folder. In other cases, wmiprvse.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager.
Virus with same name:
W32/Sonebot-B
請掃毒
最後編輯：
嗯...今天再一次確定 應該不是病毒的問題
我使用的主機板是 K8N Neo3 nVIDIA nForce4-4X 晶片組
CPU是 AMD SP3000+ 64bit的
防毒軟體是KAV 網路是第四台有線的...我一直覺得是跟防毒軟體有問題
但手邊沒有其他防毒軟體能是..之前也重灌過一次了 還是一樣的問題..
請教各位高手來解答了..
我使用的主機板是 K8N Neo3 nVIDIA nForce4-4X 晶片組
CPU是 AMD SP3000+ 64bit的
防毒軟體是KAV 網路是第四台有線的...我一直覺得是跟防毒軟體有問題
但手邊沒有其他防毒軟體能是..之前也重灌過一次了 還是一樣的問題..
請教各位高手來解答了..
kool
☆ Share Moment ☆
PorkLiu 說：
你百分之百肯定不是病毒的話
又確定你全硬碟洗掉重灌，還是有問題
那請花點心思，看完我PO的文章裡面的黑字(紅的就忽略)
假如還是擔心有病毒，線上掃毒或是掃毒程式試用版，你或許該試看看
