wmiprvse.exe, Slowing down other applications

[Guest]

Hi,
I have a Intel P4, 2.4 PC with 512MB Ram and 256MB AGP, 80GB SATA and 40 GB
ATA HDD, almost 80 GB free space is available. PC is running on WindowsXP
SP2, with all the available updates.

Now, whenever I connect to Internet, through ADSL modem, and try to start
any applications such as yahoo masnger, Windows live msnger, ICQ or web
browsers, it takes a long time to start, when I tried to see through Task
Manager , which application is delaying the starting, I saw wmiprvse.exe
running.

As soon as I terminate this application(wmiprvse.exe), all other desired
application start. but again wmiprvse.exe restarts and slows down other
applications
Is there any solution..?

Regards and thanks

SAT

 

[Guest]

In earlier versions of Windows, providers were loaded in-process with the
Windows Management service (WinMgmt.exe), running under the LocalSystem
security account. Failure of a provider caused the entire WMI service to
fail. The next request to WMI restarted the service.
Beginning with Windows XP, WMI resides in a shared service host with several
other services. To avoid stopping all the services when a provider fails,
providers are loaded into a separate host process named Wmiprvse.exe.
Multiple instances of Wmiprvse.exe can run at the same time under different
accounts: LocalSystem, NetworkService, or LocalService. The WMI core
WinMgmt.exe is loaded into the shared Local Service host named Svchost.exe.

 

[Guest]

Dear Mr. Mark,
Thanx,

But I can't gather from your elaborated response as what should I do to
overcome my problem..

Can U please suggest anything..?

regards

SAT

 

[Guest]

Did you solve this problem? I am experiencing the exact same problem!!!!

 

[Guest]

MArk I do not understand this reply... so how do we fix the problem of this
program constantly running?

 

[Wesley Vogel]

Make sure that the wmiprvse.exe that's running is a legitimate XP file and
not malware.

C:\WINDOWS\system32\wbem\wmiprvse.exe is usually the legit file.

There may be a backup copy used for Windows File Protection in
C:\WINDOWS\system32\dllcache
or
C:\WINDOWS\ServicePackFiles\i386

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a full
system scan with each one.

You might want to start in Safe Mode to run your antivirus and anti-spyware
software.

Running a full system antivirus scan or anti-spyware scan in Safe Mode can
be a good idea. Some viruses and other malware like to conceal themselves
in areas Windows protects while using them. Safe mode can prevent those
applications access and therefore unprotect the viruses or other malware
allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start Windows.''

Because of that some malware does not load in Safe Mode and is easier to get
rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Ran all the virus scans and wmiprvse.exe is still running!

 

[Wesley Vogel]

I have absolutely no earthly idea if this applies or not.

The Wmiprvse.exe process may experience a memory leak when WMI services and
RPC services are extensively used in Windows XP with Service Pack 2
http://support.microsoft.com/kb/925623

"In computer science, a memory leak is a particular kind of unintentional
memory consumption by a computer program where the program fails to release
memory when no longer needed. The term is meant as a humorous misnomer,
since memory is not physically lost from the computer. Rather, memory is
allocated to a program, and that program subsequently loses the ability to
access it due to program logic flaws."

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In