What is the "wmpnetwk.exe" process on windows 7? Is the "wmpnetwk.exe" process a virus? Can I terminate the "wmpnetwk.exe" process?

"wmpnetwk.exe" process represents "Windows Media Player Network Sharing Service" program. "wmpnetwk.exe" process is created by the "Windows Media Player Network Sharing Service" service.

"wmpnetwk.exe" process is normally running under the parent process "services" as shown in the process tree below:

Boot
   wininit
      services
         wmpnetwk

On the Processes tab of "Task Manager", "wmpnetwk.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
wmpnetwk.exe             12,248 K   Windows Media Player Network Sharing Service

Additional information about "wmpnetwk.exe" process:

Command line:
   "C:\Program Files\Windows Media Player\wmpnetwk.exe"

Programe file information:
   Name: wmpnetwk.exe
   Location: C:\Program Files\Windows Media Player\wmpnetwk.exe
   Description: Windows Media Player Network Sharing Service
   Version: 12.0.7600.16385 (win7_rtm.090713-1255)
   Size: 1525248 bytes
   Last modified: 11/20/2010 10:25:05 PM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Windows\System32
C:\Program Files\Windows Media Player\en-US\wmpnetwk.exe.mui
C:\Windows\System32\en-US\setupapi.dll.mui
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0\Icon Files
C:\Windows\System32\en-US\wmploc.DLL.mui
C:\Windows\System32\en-US\FirewallAPI.dll.mui
C:\Windows\System32\en-US\KernelBase.dll.mui

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKLM\SYSTEM\ControlSet001\services\crypt32
HKCU\Control Panel\International
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer
HKCU\Software\Microsoft\MediaPlayer\Preferences
HKLM\SOFTWARE\Microsoft\MediaPlayer\PREFERENCES
HKCU\Software\Microsoft\MediaPlayer\Health\{FA8AF24C-DA18-476A-8DC5-2A15A310618E}
HKLM\SOFTWARE\Wow6432Node\Microsoft\MediaPlayer\PREFERENCES\HME

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\system32\kernel32.dll
C:\windows\system32\KERNELBASE.dll
C:\windows\system32\ADVAPI32.dll
C:\windows\system32\msvcrt.dll
C:\windows\SYSTEM32\sechost.dll
C:\windows\system32\RPCRT4.dll
C:\windows\system32\USER32.dll
C:\windows\system32\GDI32.dll
C:\windows\system32\LPK.dll

"wmpnetwk.exe" process is not a virus. You should not terminate "wmpnetwk.exe" process.

 

⇒Application Service Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials