Results 1 to 4 of 4

Thread: False Positive? wmiapsvr?

  1. #1
    Junior Member
    Join Date
    May 2006
    Posts
    1

    Question False Positive? wmiapsvr?

    First post over this great forum..sorry if incorrect!:blush:
    this night I get before beginning the scan with spybot:
    Spybot-S&D has detected a system service that has been identified as a threat:
    display name: Scheda WMI performance
    registry key: wmiapsvr
    It has been shut down. You can check its status on the System Services Control Panel.

    (repeated for 9 times )
    it tell me also:

    Adware.ZioCom.B: Servizio di sistema (Chiave di registro, nothing done)
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\WmiApSrv

    what to do?it seems a regular windows system service! let me to know!

    goodnight!!:D dany

  2. #2
    Member of Team Spybot Buster's Avatar
    Join Date
    Oct 2005
    Location
    Bochum/Germany
    Posts
    389

    Default

    Hello dany,

    please send the wmiapsrv.exe located in c:\windows\system32\wbem to detections(at)spybot.info for further analysis. We would like to get this false positive fixed as soon as possible. Thanks!
    "The advantage of wisdom is that you can always act the fool. The opposite is quite tough."

    K. Tucholsky

    _______________________________________________________________

    Please help us improve Spybot and download our distributed testing client.

  3. #3
    Junior Member
    Join Date
    May 2006
    Posts
    1

    Default Same problem

    whenever i let wmiapsvr run
    my computer seems to crash about 5 minutes later, everything freezes. and i have to turn computer off manually.. and if i end this process along with wdfmgr my computer seems to be fine, i have spyware S&D and i updated it, and i scaned, it found nothing wrong. I have Kaspersky updated, and it found nothing. I'm wondering if i really have a problem or not.. plz help.. =X

  4. #4
    Member of Team Spybot Buster's Avatar
    Join Date
    Oct 2005
    Location
    Bochum/Germany
    Posts
    389

    Default

    Hello Dany,

    it is a regular windows system file. We will fix the detection for this file in the next update, scheduled for the end of this week.
    "The advantage of wisdom is that you can always act the fool. The opposite is quite tough."

    K. Tucholsky

    _______________________________________________________________

    Please help us improve Spybot and download our distributed testing client.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •