Can wmiprvse.exe be used in a trojan horse?

[rwells7722]

I was checking my Windows Task Manager to see what processes were running and determine if any of them are detrimental. I got rid of some problems. However, I noticed that a program named wmiprvse.exe started up and ran while I was watching and then stopped. Any idea if it might be connected with a Trojan Horse type program?

My research indicates that it is a process for quick shared network access to Win98/ME machines. I didn't enable it intentionally. I worry that it might run periodically to create a connection that I don't want over my cable modem connection.

Any ideas?

 

[Crundy]

You could try installing a personal firewall such as Zonealarm (

http://www.zonealarm.com/

- Free version available) and see what the program is doing while you're online. C:\DOS:>
C:\DOS:>RUN
RUN DOS RUN!!

 

[XPisfree]

I was hacked very badly where wmiprvse.exe played a big part. Even with all the XP updates, somehow Windows Media Player enabled access to my PC through a port (maybe 1532?) but I think the "devices" recognition in WMP opened to my CD-Rom drive and onwards. I had to deny permissions to the whole WBEM folder but still had funny mouse "jerking" afterwards, so... formatted the drive. Verdammte WMPlayer - disable everything especially unique ID of your layer by websites.. this opens up SuperCookie vulnerability.. ZOne Alarm IS good but disabling a bunch of services helps!

 

[Crundy]

Always a good idea to keep your security patches up to date

http://windowsupdate.microsoft.com/

C:\DOS:>
C:\DOS:>RUN
RUN DOS RUN!!