BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 08-24-2007, 11:23 AM   #1 (permalink)
CrackBerry Addict
 
amukhey's Avatar
 
Join Date: Sep 2004
Location: Los Angeles
Model: 9700
Carrier: T-Mobile
Posts: 750
Post Thanks: 0
Thanked 0 Times in 0 Posts
Exclamation wmiprvse.exe

Please Login to Remove!

Has anyone heard of a Windows Process called wmiprvse that is taking up at least 50% or more of the processes of the server?

I have seen that at 4:06 am, a monitoring solution puts this process at 50% and nbes.exe at 50% which equals at a 100%. This goes on for 5 minutes until the monitoring solution sees the server process go back down to 50%.

Any ideas or has anyone been having the same issue?

ND 6.5.5 on Win2k3 SP1 IBM X 336 Server (2.8Ghz) with 3GB of Ram.

A web definition of this process:

Windows® Management Instrumentation (WMI) is a component of the Microsoft® Windows® operating system that provides management information and control in an enterprise environment. By using industry standards, managers can use WMI to query and set information on desktop systems, applications, networks, and other enterprise components. Developers can use WMI to create event monitoring applications that alert users when important incidents occur.

In earlier versions of Windows, providers were loaded in-process with the Windows Management service (WinMgmt.exe), running under the LocalSystem security account. Failure of a provider caused the entire WMI service to fail. The next request to WMI restarted the service.
Beginning with Windows XP, WMI resides in a shared service host with several other services. To avoid stopping all the services when a provider fails, providers are loaded into a separate host process named Wmiprvse.exe. Multiple instances of Wmiprvse.exe can run at the same time under different accounts: LocalSystem, NetworkService, or LocalService. The WMI core WinMgmt.exe is loaded into the shared Local Service host named Svchost.exe.
Note: wmiprvsw.exe is the Sasser worm!

Note: The wmiprvse.exe file is located in the folder C:\WINDOWS\System32\Wbem. In other cases, wmiprvse.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager.
Offline  
Old 08-24-2007, 04:19 PM   #2 (permalink)
BlackBerry Genius
 
hdawg's Avatar
 
Join Date: Aug 2006
Model: hdawg
PIN: port3101.org
Carrier: hdawg
Posts: 6,632
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

meh?

After you install SMS 2003 SP3, the Wmiprvse.exe process may generate high CPU usage on client computers during hardware-inventory operations

Perhaps:

Windows provided "Hardware Management" component (Add or Remove Programs -> Add/Remove Windows Components -> Management and Monitoring Tools -> Hardware Management). Remove this component, and CPU spiking should in theory go away if its banging at the HW . The root problem is probably with the "Event Collector" service (apparently installed with the component) - simply stopping this service should also fix the problem.

I'd remove Hardware Management and reinstall it and see what happens.
Offline  
Old 08-27-2007, 08:58 AM   #3 (permalink)
CrackBerry Addict
 
amukhey's Avatar
 
Join Date: Sep 2004
Location: Los Angeles
Model: 9700
Carrier: T-Mobile
Posts: 750
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

It is not an SMS server or has the SMS 2003 SP3 patched. I checked this before posting it here.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright © 2004-2014 BlackBerryForums.com.
The names RIM © and BlackBerry © are registered Trademarks of BlackBerry Inc.