I have been having a problem playing games on my computer because of this. When i open task manager all mcafee processes are off accept wmiprvse which battles for my cpu hence games that i play lag. Is there way to prevent mcafee form using wmiprvse.exe Instead of me doing what a mcafee tech recrommended which is to turn off real time scanning and my firewall leaving my computer vunerable. I mean thats like going nude to a sword fight.
below i have attached:
Trace log for the process
and a dmp file if you have the tools to read it.
Message was edited by: maximuminfinite on 4/22/13 8:01:03 PM CDT
Message was edited by: maximuminfinite on 4/22/13 8:23:37 PM CDTMessage was edited by: maximuminfinite on 4/22/13 9:36:38 PM CDT
Solved! Go to Solution.
Well i have solved my problem. It appears it was a form of malware that was very cleverly disguised to the t, as using mutiple virus scanners and rootkits did not find anything. So i found the location changed the file ownership from the application to admin(me) and deleted it. So it appears that maybe the excess cpu usage coming from that application could be the result of mcafee blocking it hence when i uninstalled the mcafee it used less cpu because there was no resistance.
So i would say that in this case mcafee was my friend not my enemyMessage was edited by: maximuminfinite on 4/24/13 8:31:43 PM CDT
And what is your Operating System (Win7, Win8, Vista, XP, other)?
wmiprvse.exe is not a McAfee program, it's part of Windows (see hxxp://www.tech-faq.com/wmiprvse-exe.html).
High CPU usage for wmiprvse is a known problem which could have many different causes.
Having said that, it may be that McAfee is using wmiprvse to log event messages. If you can't get the information from Task Manager use Process Explorer to see what's going on - read this thread from the PC-review forums. That should tell you which process is using wmiprvse.
Note that there is a possibility of malware impersonating or injecting itself into wmiprvse
Virus with same file name:
W32/Sonebot-B - sophos.com
Edit - The link to tech-faq.com got corrupted, clicking on it led to a series of Yellow SiteAdvisor warning pages for resonly.com. Weird, I took it from the site and added it by the usual method. Anyway, it's been corrected. All safe now.
Edit - Or perhaps not. This is getting on my wick. Here's the (obfuscated) HTML code for that link. I can't see anything wrong with it but I've unlinked the URL so you can't click on it any more.
<p>wmiprvse.exe is not a McAfee program, it's part of Windows (<a href="hxxp://www.tech-faq.com/wmiprvse-exe.html">hxxp://www.tech-faq.com/wmiprvse-exe.html</a>). High CPU usage for wmiprvse is a known problem which could have many different causes.</p>
Message was edited by: Hayton on 23/04/13 21:05:24 ISTMessage was edited by: Hayton on 23/04/13 21:32:23 IST
Post your Hijackthis log on one of the forums that specialize in them - see near the bottom of the last link in my signature below. We can't analyze them here, sorry.
Moved to Malware Discussions > Home User Assistance as I think this is some sort of infection. You might consider running Malwarebytes Free, linked in the last link in my signature below.
Do not accept the free trial otherwise you'll end up with the wrong version.
I opened your Hijackthis log and, although I am not qualified to analyze such things (post it on the aforementioned forums), the first thing that struck me was YTD Toolbar, which should be removed IMHO.
I think your system is Windows 8, no?Message was edited by: Ex_Brit on 23/04/13 7:50:49 EDT AM
wow so many repsoneses to reply to
1. yes my computer is using windows 8
2. The mcafee version i am using is 12.1
3. I have uninstalled ytd toolbar. There no change in my cpu but thanks for the suggestion as it could have been or was a potential piece of malware on my computer.
4. i will use some of those tools that Ex_BRIT has provided information on.
Thanks you for your suggetions so far. I will post back to see if i find anything
Apologies for the deluge. Perhaps you were getting an email notification every time I edited my post, and there were an awful lot of edits. The board software is doing something very strange with one of the links and it took a lot of messing around with the post to get rid of the after-effects.
Only got 1 per post thank goodness. Hopefully Tiffani/Admin will take a look at what's going on with this. I'm subscribed to the whole section anyway.
Irrelevent to helping to the OP however. Sorry to digress.Message was edited by: Ex_Brit on 23/04/13 5:03:52 EDT PM
The stinger tool, malwarebytes and the rootkit tool did not find anything.
I have found something fishey on my computer just now. Mcafee says its secure yet windows is saying it is turned off. Each time i go to turn on spyware and virus protection it takes me too mcafee update instead of "turning on mcafee" even though mcafee is on.
On another note wmiprvse.exe is now using 0%.
I did not disable anything in case you are wondering, and i uninstalled malwarebytes and used virtual technician to make sure that there was nothing interfering.
Did you follow my advice and repost that HJT log on one of the specialist forums? They should have some advice to give on it.