What is this?
SpywareShooter
127.0.0.1
I hope this is the right place to put this...
I have noticed this ever since I found out what CTRL ALT DEL did (years ago
). There have been two processes running that I wasn't sure of. loadqm and winmgmt. I could have my system idle, no windows open or anything, and those processes would show up. Tonight I decided to see what would happen if I ended task on those processes. I started Resource Meter, which read this:
System: 86%
User: 86%
GDI: 93%
I clicked End Task on both of those processes, and nothing happened, but my resource meter now read this:
System: 89%
User: 89%
GDI: 93%
What are these two files? I know they aren't spyware or anything malicious, but it seems weird that they do nothing (thats noticable anyways). I use Windows ME if that helps with the situation.
I have noticed this ever since I found out what CTRL ALT DEL did (years ago
). There have been two processes running that I wasn't sure of. loadqm and winmgmt. I could have my system idle, no windows open or anything, and those processes would show up. Tonight I decided to see what would happen if I ended task on those processes. I started Resource Meter, which read this:System: 86%
User: 86%
GDI: 93%
I clicked End Task on both of those processes, and nothing happened, but my resource meter now read this:
System: 89%
User: 89%
GDI: 93%
What are these two files? I know they aren't spyware or anything malicious, but it seems weird that they do nothing (thats noticable anyways). I use Windows ME if that helps with the situation.
0
Comments
WinMgmt.exe is the Windows Management Instrumentation. It is used by system administrators to create Windows management scripts, for example, scripts that handles the user accounts on a server.
Mostly applicable to network admins for use but certain parts of windows xp do depend on it....for example; system information, system restore and terminal service. WMI can be uninstalled but then you'll lose those other features.
As far as I understand it WMI is a service that acts as an interface to better process data about a PC system, its hardware, software and services. It's like asking one guy who knows a lot rather than several people to get to the same answer. WMI sort of keeps a system inventory for the hardware or software that may require that data.
Disabling it will affect a lot of the GUI of windows itself.
Longer answers can be found here
http://www.win2000mag.com/Articles/Index.cfm?ArticleID=9100
http://www.2000trainers.com/article.aspx?articleID=286&page=1
MSN Queue Manager installs itself into the startup folder when you install MSN explorer. Something I never do. It's thought of as spyware as it does collect information about your system but not maliciously. It is a resource hog nonetheless.
Microsoft says "When you install MSN Explorer, the Loadqm.exe file is added to the Startup folder, and Loadqm.exe then starts each time you start your computer. Loadqm.exe loads the MSN Queue Manager component which manages queuing for the background file-transfer mechanism that is known as the drizzling service. "
http://support.microsoft.com/default.aspx?scid=KB;EN-US;q309418
You can run msconfig from the RUN menu and uncheck loadqm.exe to disable it but after opening up MSN Explorer, MSN Messenger or Hotmail through Internet Explorer, it might reappear as one of your background processes. So in order to remove it completely, follow these instructions:
1) Run regedit (Start > Run > regedit). Note: Always make a BACKUP of your registry before editing it!
2) Look for the key:
HKEY_Local_Machine_Software/Microsoft/Windows/CurrentVersion/Run
3) And delete the string value: ab LoadQm"loadqm.exe"
4) Reboot
5) Open My Computer. In the View menu go to Folder Options.
6) Select the View tab and put a check in the box "View all Files" (or "Show all Files"). Click Apply and close Folder Options.
7) Open Windows Explorer. Go to the Program Files folder and delete the hidden folder QMgr.
8) Other files to delete (you can use the Find option from Start):
loadqm.exe c:\windows
loadqm.lgc c:\windows\applog
qmgr.dll c:\windows\system
qmgrprxy.dll c:\windows\system
progld.dll c:\windows\system
qmgr.cab c:\Program Files\Messenger
qmgr.inf c:\Program Files\Messenger
And you can kiss MSN Queue Manager goodbye!
If it comes back as a service then no. If it doesn't and MSN works just fine...then you should be able to remove it.