BleepingComputer.com: wmiprvse.exe using 100% CPU/ how to fix?

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

wmiprvse.exe using 100% CPU/ how to fix?

#1 User is offline   JUICYboy 

  • Senior Member
  • PipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 516
  • Joined: 26-January 10
  • Gender:Male
  • Location:Anaheim, Ca

Posted 26 January 2010 - 08:38 PM

Okay:
The wmiprvse.exe is using 100% of CPU and it is making my computer SLOOOOOWWW, its A

Dell, Intel PDC, 4 Ram, 250GB.

I have tried removing the file but it is a sys32 file and access is denied. I will try to remove in SafeMode.

Does anyone know about this prob. and how can it be fixed?

P.s. I will post up my results of DEL file in safemode// :thumbsup:

#2 User is offline   Stang777 

  • Just Hoping To Help
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 1,757
  • Joined: 30-December 08
  • Location:Utah

Posted 26 January 2010 - 08:43 PM

I do not know how to fix your problem but unless that file is not located in the Windows/System32 folder I do not recommend that you remove that file, it is needed

This post has been edited by Stang777: 26 January 2010 - 08:46 PM


#3 User is offline   JUICYboy 

  • Senior Member
  • PipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 516
  • Joined: 26-January 10
  • Gender:Male
  • Location:Anaheim, Ca

Posted 26 January 2010 - 08:56 PM

Yea it you are right it can't be done that way. But I found more info it is
Called
The Sasser Warm
Now I got to find out how to remove.

#4 User is offline   hamluis 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 31,433
  • Joined: 03-September 05
  • Gender:Male
  • Location:Killeen, TX

Posted 26 January 2010 - 09:27 PM

I believe that size and location...are the only two criteria that allow a user to determine if a a file is what it appears to be.

http://www.neuber.com/taskmanager/process/wmiprvse.exe.html

Louis

#5 User is offline   Stang777 

  • Just Hoping To Help
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 1,757
  • Joined: 30-December 08
  • Location:Utah

Posted 26 January 2010 - 09:55 PM

Where on your system are you finding the wmiprvse.exe file?

What is making you think that it is the Sasser worm?

Have you scanned for malware/spyware using Malwarebytes or SuperAntiSpyware and have you ran any virus scans? If not, you should do that next.

There are reasons other than virus/malware for it to be using that much of your CPU. Have you recently done any updates to Windows?

#6 User is offline   Stang777 

  • Just Hoping To Help
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 1,757
  • Joined: 30-December 08
  • Location:Utah

Posted 26 January 2010 - 09:59 PM

Louis, all I see on the page you linked to are basically ads, is there suppose to be more information on it?

It shows to run a registry booster, spyware doctor and some other program and I find it hard to believe that is what you intended to be done, is it?

#7 User is offline   JUICYboy 

  • Senior Member
  • PipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 516
  • Joined: 26-January 10
  • Gender:Male
  • Location:Anaheim, Ca

Posted 27 January 2010 - 11:51 AM

Yea I ran the MalBites Software and No infections found.\

I research on Microsoft they have a patch out there for this type of issue. So I will try updates today I don't think is a Sasser Warm but I will Run a scan for it anyways because wmiprvse.exe is the folder that is giving me issues, and research shows that from the same place a Sasser Warm lurks.
So it leads me to conclude there might be a Sasser Warm in that Sys32/Wbem file.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users