 |
Newsgroups: comp.lang.asm.x86
From: s_dubrov...@nospicedham.yahoo.com
Date: Sat, 3 Nov 2012 09:24:18 -0700 (PDT)
Local: Sat, Nov 3 2012 12:24 pm
Subject: Re: perhaps OT: about windoze
On Saturday, November 3, 2012 5:09:14 AM UTC-5, wolfgang kern wrote:
You might try: open a command prompt, >netstat -bvn
> Rod Pemberton replied: > >> I figured that some applications call "WMIprsv" and/or "wmiaprsv"
> >> even I told the service-panel (with admin rights) to never use WMI.
> >> What I think about this just delaying shit is is that it just waits
> >> for an iNET-connection (which I wont allow anyway)...
> >> My question on this just is: "how to get rid of it!"
> >> I tried to delete all this 'wbem'-files but they seem to be immortal.
> >> So my thinking about M$ got one more task, how to prevent [stuff] ...
> > Yes. WinXP/7/Vista system files seem to be "immortal". They
> > are detected as missing and then restored for you ...
> > It's MS' gift to the world!
> They seem to be 'undeletable' at all, because they are there again
> immediatly after deletion followed by 'actualise view'
> > I'm not fully up to date on WinXP/7/Vista. I've only used them a few > > times.
> > I think these are your options:
> > 1) run msconfig
> > 2) login as administrator, delete files
> > 3) delete appropriate registry key (regkey) using regedit
> > 4) start the task manager, kill WMI processes
> AD 4) that's what I do, but then it's already to late for the app
> to start within certain time :)
> > 'msconfig' should allow you to disable any startup applications. I don't
> > know if WMI stuff is included. There are many webpages on how to use
> > 'msconfig' on the Internet.
> This wbem-story isn't a startup item. I see it in the task-manager after
> I close the net-connection and right after some application starts.
> And the delayed startup of the latter made me search for who does it.
which gives the current Active Connections and their PID number. Then look in the Windows Task Manager for the same PID number to see what process is using it. For me, I have an PID entry of an Active Connection, currently on the XPpro box, of 1404. This matches the PID in the windows task manager of jqs.exe <java quick starter>. The thing is that you have to check netstat while the Connection is open. Some process don't stay active.
But I don't show a current process in the Windows Task Manager named wbem or whatever. Perhaps it is because this user isn't admin, or the process has closed already.
I don't know anything about WMI so I looked here: http://en.wikipedia.org/wiki/Windows_Management_Instrumentation
This tells me that WMI is an architecture woven into windows. So I wouldn't try to dismantle it, but would try to find the offending application.
One thing that creating a new user account does is it baselines the initial processes listed in Windows Task Manager, the new user gets the original baseline (defaults) of processes. Not all later installed processes get carried over into it. You might try creating a new admin user and compare the loaded processes of the windows task manager with that of your current user. And see if the bad behavior is absent in the new user. My process lists are all different among the 4 user accts. here, yet I am the only operator of this machine.
I like Frank's idea too. I spend more time on this debian linux box than on the XP box nowadays.
Steve
> > As I understand it, WinXP would allow you to use the administrator account
> > as your personal Windows account, if you chose to do so. Supposedly,
> > Win7/Vista will not let you use the administrator account as your personal
> > Windows account, ever. So, you have to login as adminstrator, > > selectively,
> > when needed. As administrator, you should be able to delete system files.
> > I think ... maybe ... maybe not.
> Yeah, but I'm always admin on this machine (XPpro) anyway.
> > It's likely there is a registry key that can be deleted to prevent WMI > > stuff
> > to start.
> Couldn't find it the registry, perhaps it's hidden below another name.
> > You probably need responses from others to provide more information. Or,
> > you may need to search the Internet for more information.
> Thanks, I'll continue my search.
> __
> wolfgang
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
| |||||||||||||