WMI Provider host

[toddman]

My Windows 7 comp recently started running much slower and chewing up heavy memory (nearly 4 gigs) consistently. I also noticed that there is a process "WmiPrvSE.exe" using between 20-30% of my CPU for no apparent reason.

 

Additionally there seems to always be a svchost.exe process using about 150 megs of memory at any given time and another dozen or so svchost.exe processes running just for fun. Maybe thats normal but it seems out of the norm.

 

Not sure if this is just standard Windows genius at work or if I have reason for concern.

 

Any advice would be greatly appreciated.

 

Thank you

[Firefox]

Hello and

Lets take a look under the hood, maybe we can find what's going on by looking at some log files....

Please run the following scanner and send back the logs.

Download DDS from one of the locations below and save to your Desktop

dds.scr

dds.com

Temporarily disable any script blocker if your Anti-Virus/Anti-Malware has it.

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.

Then double click dds.scr or dds.com to run the tool.

Click the Run button if prompted with an Open File - Security Warning dialog box.

A black DOS console should open and run for a moment.

• When done, DDS will open two (2) logs:
• DDS.txt
• Attach.txt

• Save both reports to your desktop
• Please include the following logs in your next reply as an attachment: DDS.txt and Attach.txt

  You can ignore the note about zipping the Attach.txt file

[toddman]

Thank you for the prompt reply, the logs are attached 

Attach.txt

DDS.txt

[AdvancedSetup]

Unfortunately not enough information in that log.   Please run the following and let's see if this one can find anything else.

 

Please download MiniToolBox save it to your desktop and run it.

Checkmark the following check-boxes:

• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• Report FF Proxy Settings
• Reset FF Proxy Settings
• List content of Hosts
• List IP configuration
• List Winsock Entries
• List last 10 Event Viewer log
• List Installed Programs
• List Devices
• List Users, Partitions and Memory size.
• List Minidump Files
  

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using Reset FF Proxy Settings option Firefox should be closed.
 

Thanks

[toddman]

Here are the results

 

 

 

Result.txt

[AdvancedSetup]

Yes the computer would seem to probably be infected however it also appears to be using pirated software so we cannot assist you with this.
 
#127.0.0.1 activate-sjc0.adobe.com
#127.0.0.1 activate-sjc0.adobe.com
 
This topic will now be closed due to evidence of cracked or pirated software on this system.

Piracy Policy