The genuine WmiApSrv.exe file is a software component of Microsoft Windows Operating System by Microsoft Corporation. "WmiApSrv.exe" is a Microsoft Windows Operating System service. It is called the WMI Performance Adapter Service. By default under "Services" it is set for "Manual" startup, but can be changed to "Automatic." It is a crucial component, running under the LocalSystem account, of Windows Management Instrumentation (WMI), which should not be removed. WMI is how Microsoft implements the Web-Based Enterprise Management (WBEM) industry standard, thus this process resides in "C:\Windows\System32\wbem". One function of WMI is making system performance counter information available to both local and remote network applications. Whenever an application's code calls Performance Data Helper (PDH) functions to get this data, "WmiApSrv.exe" starts up, if in "Manual" mode. This can cause high volumes of "entered a started/stopped state" Event Log messages, which the "Automatic" setting avoids.
WMIApSrv stands for WMI Performance Adapter Service
The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the WmiApSrv.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.
Description: WmiApSrv.exe is an important part of Windows, but often causes problems. WmiApSrv.exe is located in a subfolder of C:\Windows\System32—normally C:\Windows\System32\wbem\.
Known file sizes on Windows 10/11/7 are 126,464 bytes (60% of all occurrences), 136,192 bytes or 137,728 bytes.
It is a service, and the service name is WmiApSrv.
The file is a Windows core system file. The program is not visible. The WmiApSrv.exe file is a trustworthy file from Microsoft.
WmiApSrv.exe is able to monitor applications.
Therefore the technical security rating is 3% dangerous; however you should also read the user reviews.
If WmiApSrv.exe is located in a subfolder of the user's profile folder, the security rating is 60% dangerous. The file size is 21,504 bytes.
There is no file information. The program starts when Windows starts (see Registry key: RunOnce, TaskScheduler, Run).
The WmiApSrv.exe file is not a Windows core file. The program has no visible window.
WmiApSrv.exe appears to be a compressed file.
If WmiApSrv.exe is located in a subfolder of C:\Windows, the security rating is 25% dangerous. The file size is 985,600 bytes (50% of all occurrences) or 203,264 bytes.
The file is not a Windows system file. The program is not visible.
WmiApSrv.exe is able to monitor applications.
Important: Some malware camouflages itself as WmiApSrv.exe, particularly when located in the C:\Windows or C:\Windows\System32 folder, for example UDS:DangerousObject.Multi.Generic (detected by Kaspersky), and TROJ_FAKEMS.TRVD (detected by TrendMicro). Therefore, you should check the WmiApSrv.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
Score
User Comments
SPYWARE
Do windows XP really need this as a "critical service"? Leorick
Microsoft signed file so must be okay
This is a windows performance monitoring tool. It is currently filled with bugs including memory leaks. I recomend disabling it in your services. lord_demion (further information)
it can be dangerous.. And you can just terminate it. Useless and possible spyware haistakaa paska koko valtiovalta
It can be disabled, not necessary indeed Ricky
I've had it disabled for a couple years now w XP, no issues Danny B
Spyware!! Hans Jürgen Strunz
it's in my XP Sys32 as part of SP2 - NOD32 AV says it's clean GinnaBL
Malware Petr
very important dont remove!!! kyrpä perseeseen
This process has opened many ports on my computer, tracks my app usage and hides itself. There is also much more going on in my PC but not sure if all related to this. CATHERINE LORENZO
This went up to 24-25% after installing PostgreSQL 10. I stopped the service in Task Manager and the psql console worked fine, but pgAdmin v4 wouldn't run. Brian Burns
spy ware, un needed use of cpu and memory, not needed at all other than for microsoft to spy on u Jack
Show all user comments
Summary: Average user rating of WmiApSrv.exe:
based on 24 votes with 14 user comments.
5 users think WmiApSrv.exe is essential for Windows or an installed application.
3 users think it's probably harmless.
8 users think it's neither essential nor dangerous.
3 users suspect danger.
5 users think WmiApSrv.exe is dangerous and recommend removing it.
3 users don't grade WmiApSrv.exe ("not sure about it").
Best practices for resolving WmiApSrv issues
A clean and tidy computer is the key requirement for avoiding problems with WmiApSrv. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.
Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.
To get your computer running as fast as it did on day one, you can 8reset your PC. Your personal files will remain intact, but any programs you installed will need to be reinstalled.
To help you analyze the WmiApSrv.exe process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. A good Bantivirus software detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.
Score
User Comments
Leorick
lord_demion (further information)
haistakaa paska koko valtiovalta
Ricky
Danny B
Hans Jürgen Strunz
GinnaBL
Petr
kyrpä perseeseen
CATHERINE LORENZO
Brian Burns
Jack
Summary: Average user rating of WmiApSrv.exe: based on 24 votes with 14 user comments. 5 users think WmiApSrv.exe is essential for Windows or an installed application. 3 users think it's probably harmless. 8 users think it's neither essential nor dangerous. 3 users suspect danger. 5 users think WmiApSrv.exe is dangerous and recommend removing it. 3 users don't grade WmiApSrv.exe ("not sure about it").