2 running processes of wmiprvse.exe?

[Mark G.]

Should I have to of these processes running under svchost.exe? One runs on
PID 2728 and the other on 3016. Am curious as I do not remember seeing this
behavior before. Had read/heard that sometimes malcious code can do
something like this as well. And yes, all scans and whatnot are up to date.
This may be nothing, but thought I would check here. Thanks for the input!

 

[Guest]

Mark,

They are Windows Media Player services & the PID will change each time they
run

 

[Gerry]

Mark

Currently I have 7 svchost.exe processes running. This is normal.

If you wish to investigate these processes further use Process Explorer.
In Process Explorer right click on each example of svchost.exe and
select Properties and the Image tab. You will see that each process has
a different command line. Thus one will have
C:\WINDOWS\system32\svchost.exe -k imgsvc, which supports the Windows
Image Acquisition service -see the service tab. Others have different
command lines and support other services. You should understand that the
process PID number changes every time you restart your computer so
quoting a PID number has no meaning to other users.

For further information about Process Explorer see here:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

BTW so far as I can see SPAMCOP User has no basis for making the
statement regarding Windows Media Player.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~