What is the "WmiApSrv.exe" process on windows 8? Is the "WmiApSrv.exe" process a virus? Can I terminate the "WmiApSrv.exe" process?

"WmiApSrv.exe" process represents "WMI Performance Reverse Adapter" program, created by the "WMI Performance Adapter" service.

"WmiApSrv.exe" process is normally running under the parent process "Boot" as shown in the process tree below:

Boot
   WmiApSrv

On the Processes tab of "Task Manager", "WmiApSrv.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
WmiApSrv.exe              4,140 K   WMI Performance Reverse Adapter

Additional information about "WmiApSrv.exe" process:

Command line:
   C:\Windows\system32\wbem\WmiApSrv.exe

Programe file information:
   Name: WmiApSrv.exe
   Location: C:\Windows\system32\wbem\WmiApSrv.exe
   Description: WMI Performance Reverse Adapter
   Version: 6.2.9200.16384 (win8_rtm.120725-1247)
   Size: 198144 bytes
   Last modified: 7/25/2012 11:08:51 PM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Windows\System32
C:\Windows\System32\wbem\en-US\WmiApSrv.exe.mui

Some registry keys used:
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SOFTWARE\MICROSOFT\WindowsRuntime\CLSID
HKCR\ActivatableClasses\CLSID
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids

Some DLL libraries used:
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\KERNEL32.DLL
C:\Windows\system32\KERNELBASE.dll
C:\Windows\system32\msvcrt.dll
C:\Windows\SYSTEM32\wbemcomn.dll
C:\Windows\SYSTEM32\loadperf.dll
C:\Windows\system32\WS2_32.dll
C:\Windows\system32\RPCRT4.dll
C:\Windows\system32\NSI.dll
C:\Windows\SYSTEM32\sechost.dll

"WmiApSrv.exe" process is not a virus. You should not terminate "WmiApSrv.exe" process.

 

⇒ Application Service Processes on Windows 8

⇐ "vds.exe" Process on Windows 8

⇑ System Service Processes on Windows 8

⇑⇑ Windows 8 Processes Tutorials