svchost settings: svchost.exe tries to terminate wmiadap.exe

Discussion in 'ProcessGuard' started by concerned807, Jan 11, 2006.

Thread Status:
Not open for further replies.
  1. concerned807

    concerned807 Registered Member

    Joined:
    Dec 2, 2004
    Posts:
    68
    ProcessGuard gives me this warning sometime.

    Warning details:
    "svchost.exe was blocked from terminating wmiadap.exe"


    I would appreciate if you could shed light on whether or not the above is a normal occurrence. In addition, I'd like to know what the most secure settings for svchost.exe. The bellow attachment shows my svchost.exe setting when the warning appears.

    Thanks!

    ---
    Windows XP Pro SP2
    ProcessGuard 3.15 Registered
     

    Attached Files:

    Last edited: Jan 13, 2006
  2. concerned807

    concerned807 Registered Member

    Joined:
    Dec 2, 2004
    Posts:
    68
    My wmiadap.exe settings

    Also attached below my wmiadap.exe settings
     

    Attached Files:

  3. redwolfe_98

    redwolfe_98 Registered Member

    Joined:
    Feb 14, 2002
    Posts:
    581
    Location:
    South Carolina, USA
    it looks normal to me, based on the settings that you have, where "svchost.exe" cannot terminate protected applications.. :)
     
  4. concerned807

    concerned807 Registered Member

    Joined:
    Dec 2, 2004
    Posts:
    68
    I still don't understand with that svchost.exe settings why svchost.exe sometime tries to terminate wmiadap.exe:rolleyes:
     
  5. redwolfe_98

    redwolfe_98 Registered Member

    Joined:
    Feb 14, 2002
    Posts:
    581
    Location:
    South Carolina, USA
  6. beetlejuice69

    beetlejuice69 Registered Member

    Joined:
    Mar 16, 2005
    Posts:
    780
    I gave svchost.exe the ability to terminate. It needs that sometime for shutdowns and reboots. I never had any ill effects from that.
     
  7. rickontheweb

    rickontheweb Registered Member

    Joined:
    Nov 14, 2004
    Posts:
    129
    I get the same message if I suspend my PC shortly after a boot up and wmiadap.exe is running and doing it's thing. Wmiadap.exe usually only runs for short periods after boot up on my system anyway. Svchost will try and terminate it before the suspend and fail.

    It's the only time I see svchost trying to terminate something, so I don't allow it termination rights. I usually just ignore it, terminate wmiadap.exe myself upon resume if I see that message or sometimes I think it just closes itself down after a certain time like it normally does if I hadn't suspend/resumed my PC.
     
  8. concerned807

    concerned807 Registered Member

    Joined:
    Dec 2, 2004
    Posts:
    68
    That is what is happening here and what I am doing. Guees I need to dig a bit deeper what wmiadap.exe really is.
     
  9. rickontheweb

    rickontheweb Registered Member

    Joined:
    Nov 14, 2004
    Posts:
    129
    I believe this has been discussed before. Try doing a search on this forum. XP does housekeeping chores with wmiadap.exe and wmiprvse.exe shortly after boot.

    MS has a tool that disables some of these performance counters, but some are built into XP and not configureable. There doesn't seem to be any sort of complete documentation on exactly what it is doing.

    Only that it's part of XP's "optimization" routines... You could try search MS's technet or knowledgebase and see if you get any details.
     
  10. billaku

    billaku Registered Member

    Joined:
    Oct 16, 2005
    Posts:
    67
    Location:
    Texas Central Coast, US
Thread Status:
Not open for further replies.