WmiPrvSe.exe attempts to modify audio codecs and video DLLs
I have a non-virtual Windows 2003 Server SP2 with McAfee Solidcore
installed. A few days ago I noticed that for over a few months, once every
constant amount of time, around 24 hours, a bunch of Solidcore application
errors appear in the event viewer. The events read as follows:
"McAfee Solidifier prevented an attempt to modify file
"C:\windows\system32\msyuv.dll" by process
C:\WINDOWS\system32\wbem\wmiprvse.exe (Process ID: 1234, User: NT
AUTHORITY\SYSTEM)
This also happens for the following files, in every batch of errors:
windows\system32\msvidc32.dll windows\system32\msrle32.dll
windows\system32\iyuv_32.dll windows\system32\msh263.drv
windows\system32\tssoft32.acm windows\system32\msgsm23.acm
windows\system32\msg711.acm windows\system32\msadp32.acm
windows\system32\imaadp32.acm
And more.
Google searches and crawling MSDN and other Microsoft knowledge resources
have turned up nothing useful regarding the cause for this behavior.
Unfortunately, I can't reproduce the issue and it has not happened for
several weeks now, so it's not possible to look into it in real time.
This also occurs on several different servers, some on the same LAN and
some on a completely different network. All of them are Windows Server
2003 SP2 and non-virtual.
Any help would be appreciated.
No comments:
Post a Comment