Симптомы
Запуск служб (IIS) 7.0 на компьютере под управлением Windows Vista или Windows Server 2008. На компьютере имеется более 64 ГБ ОЗУ. Неожиданно процесс W3wp.exe IIS занимает 100% ресурсов ЦП. Таким образом на компьютере происходит низкой производительности.
Причина
Эта проблема возникает, так как драйвер HTTP режима ядра (Http.sys) наибольший адрес памяти определяется как 64 ГБ.
Решение
Сведения об исправлении
Существует исправление от корпорации Майкрософт. Однако данное исправление предназначено для устранения только проблемы, описанной в этой статье. Применяйте это исправление только в тех случаях, когда наблюдается проблема, описанная в данной статье. Это исправление может проходить дополнительное тестирование. Таким образом если вы не подвержены серьезно этой проблеме, рекомендуется дождаться следующего пакета обновления, содержащего это исправление.
Если исправление доступно для скачивания, имеется раздел «Пакет исправлений доступен для скачивания» в верхней части этой статьи базы знаний. Если этот раздел не отображается, обратитесь в службу поддержки для получения исправления.
Примечание. Если наблюдаются другие проблемы или необходимо устранить неполадки, вам может понадобиться создать отдельный запрос на обслуживание. Стандартная оплата за поддержку будет взиматься только за дополнительные вопросы и проблемы, которые не соответствуют требованиям конкретного исправления. Чтобы получить полный список телефонов поддержки и обслуживания клиентов корпорации Майкрософт или создать отдельный запрос на обслуживание, посетите следующий веб-сайт корпорации Майкрософт:
http://support.microsoft.com/contactus/?ws=supportПримечание. В форме «Пакет исправлений доступен для скачивания» отображаются языки, для которых доступно исправление. Если нужный язык не отображается, значит исправление для данного языка отсутствует.
Предварительные условия
Данное исправление на компьютере должна быть установлена одной из следующих операционных систем Windows:
-
Пакет обновления 1 (SP1) для Windows Vista
-
Windows Vista с пакетом обновления 2 (SP2)
-
Windows Server 2008
-
Windows Server 2008 с пакетом обновления 2 (SP2)
Чтобы получить дополнительные сведения о получении пакета обновления для Windows Vista, щелкните следующий номер статьи базы знаний Майкрософт:
935791 как получить последний пакет обновления для Windows Vista
Дополнительные сведения о том, как получить пакет обновления для Windows Server 2008, щелкните следующий номер статьи базы знаний Майкрософт:
Как получить последний пакет обновления для Windows Server 2008 968849
Необходимость перезагрузки
После установки исправления компьютер необходимо перезагрузить.
Сведения о замене исправлений
Это исправление не заменяет ранее выпущенные исправления.
Инструкции по установке
Сведения о файлах
Английский (США) версия данного исправления устанавливает файлы с атрибутами, указанными в приведенных ниже таблицах. Дата и время для файлов указаны в формате UTC. Дата и время для файлов на локальном компьютере отображаются в местном времени с вашим текущим смещением летнего времени (DST). Кроме того, при выполнении определенных операций с файлами, даты и время могут изменяться.
Примечания к сведениям о файле Windows Vista и Windows Server 2008
Важно. Исправления для Windows Server 2008 и Windows Vista исправления включены в те же пакеты. Однако только «Windows Vista» отображается на странице запрос исправления. Для получения пакета исправлений, который применяется к одной или обеих операционных систем, установите исправления, перечисленные в разделе «Windows Vista» на странице. Всегда смотрите раздел «Информация в данной статье относится к следующим продуктам» статьи для определения фактических операционных систем, к которым применяется каждое исправление.
-
Файлы, относящиеся к определенному продукту, этапу разработки (RTM, SPn) и обслуживания (LDR, GDR) можно определить по номерам версий, как показано в следующей таблице.
Версия
Продукт
SR_Level
Направление поддержки
6.0.600 1. 22 xxx
Windows Vista и Windows Server 2008
SP1
LDR
6.0.600 2. 22 xxx
Windows Vista и Windows Server 2008
SP2
LDR
-
1 Пакет обновления интегрируется в окончательной версии Windows Server 2008. Таким образом файлов выпуска RTM относятся только к системе Windows Vista. Файлов выпуска RTM выглядят следующим образом: 6.0.0000. номер версии XXXXXX .
-
Файлы MANIFEST (.manifest) и MUM (.mum), устанавливаемые для каждой среды, указаны отдельно в разделе «Сведения о дополнительных файлах для системы Windows Vista и Windows Server 2008». MUM и файлы МАНИФЕСТА и связанные файлы каталога безопасности (.cat), очень важны для поддержания состояния обновляемого компонента. Файлы каталога безопасности, для которых не перечислены атрибуты, подписаны цифровой подписью корпорации Майкрософт.
Для всех поддерживаемых 32-разрядных версий Windows Server 2008 и Windows Vista
Имя файла |
Версия файла |
Размер файла |
Дата |
Время |
Платформа |
---|---|---|---|---|---|
Httpapi.dll |
6.0.6001.22564 |
31,232 |
16-Nov-2009 |
14:09 |
x86 |
Httpapi.dll |
6.0.6002.22268 |
30,720 |
16-Nov-2009 |
14:00 |
x86 |
Http.sys |
6.0.6001.22564 |
411,136 |
16-Nov-2009 |
12:06 |
x86 |
Http.sys |
6.0.6002.22268 |
411,648 |
16-Nov-2009 |
11:59 |
x86 |
Для всех поддерживаемых 64-разрядных версий Windows Server 2008 и Windows Vista
Имя файла |
Версия файла |
Размер файла |
Дата |
Время |
Платформа |
---|---|---|---|---|---|
Httpapi.dll |
6.0.6001.22564 |
33,792 |
16-Nov-2009 |
14:46 |
x64 |
Httpapi.dll |
6.0.6002.22268 |
33,792 |
16-Nov-2009 |
13:58 |
x64 |
Http.sys |
6.0.6001.22564 |
609,792 |
16-Nov-2009 |
12:31 |
x64 |
Http.sys |
6.0.6002.22268 |
620,032 |
16-Nov-2009 |
12:14 |
x64 |
Для всех поддерживаемых IA-64-разрядных версий Windows Server 2008
Имя файла |
Версия файла |
Размер файла |
Дата |
Время |
Платформа |
---|---|---|---|---|---|
Httpapi.dll |
6.0.6001.22564 |
70,656 |
16-Nov-2009 |
16:31 |
IA-64 |
Httpapi.dll |
6.0.6002.22268 |
70,656 |
16-Nov-2009 |
13:52 |
IA-64 |
Http.sys |
6.0.6001.22564 |
1,176,576 |
16-Nov-2009 |
12:23 |
IA-64 |
Http.sys |
6.0.6002.22268 |
1,176,576 |
16-Nov-2009 |
12:16 |
IA-64 |
Статус
Корпорация Майкрософт подтверждает, что это проблема продуктов Майкрософт, перечисленных в разделе «Относится к».
Дополнительные сведения
Для получения дополнительных сведений о терминологии обновлений программного обеспечения щелкните следующий номер статьи базы знаний Майкрософт:
Описание 824684 Стандартные термины, используемые при описании обновлений программных продуктов Майкрософт
Сведения о дополнительных файлах
Сведения о дополнительных файлах для системы Windows Vista и Windows Server 2008
Дополнительные файлы для всех поддерживаемых 32-разрядных версий (x86) операционных систем Windows Vista и Windows Server 2008
Имя файла |
Версия файла |
Размер файла |
Дата |
Время |
Платформа |
---|---|---|---|---|---|
Package_for_kb975798_client_1~31bf3856ad364e35~x86~~6.0.1.0.mum |
Неприменимо |
1,367 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_client_2~31bf3856ad364e35~x86~~6.0.1.0.mum |
Неприменимо |
1,969 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_client~31bf3856ad364e35~x86~~6.0.1.0.mum |
Неприменимо |
1,713 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_sc_0~31bf3856ad364e35~x86~~6.0.1.0.mum |
Неприменимо |
1,421 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_sc_1~31bf3856ad364e35~x86~~6.0.1.0.mum |
Неприменимо |
1,966 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_sc~31bf3856ad364e35~x86~~6.0.1.0.mum |
Неприменимо |
1,701 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_server_0~31bf3856ad364e35~x86~~6.0.1.0.mum |
Неприменимо |
1,425 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_server_1~31bf3856ad364e35~x86~~6.0.1.0.mum |
Неприменимо |
1,969 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_server~31bf3856ad364e35~x86~~6.0.1.0.mum |
Неприменимо |
1,713 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_winpesrv_0~31bf3856ad364e35~x86~~6.0.1.0.mum |
Неприменимо |
1,422 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_winpesrv~31bf3856ad364e35~x86~~6.0.1.0.mum |
Неприменимо |
1,430 |
17-Nov-2009 |
08:34 |
Неприменимо |
X86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6001.22564_none_f5f90302b6967b3b.manifest |
Неприменимо |
4,708 |
16-Nov-2009 |
17:34 |
Неприменимо |
X86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6002.22268_none_f7e37612b3b935bb.manifest |
Неприменимо |
4,708 |
16-Nov-2009 |
16:00 |
Неприменимо |
X86_microsoft-windows-http_31bf3856ad364e35_6.0.6001.22564_none_ad0dc24c32258e80.manifest |
Неприменимо |
144,304 |
16-Nov-2009 |
17:36 |
Неприменимо |
X86_microsoft-windows-http_31bf3856ad364e35_6.0.6002.22268_none_aef8355c2f484900.manifest |
Неприменимо |
144,703 |
16-Nov-2009 |
16:02 |
Неприменимо |
Дополнительные файлы для всех поддерживаемых версий x64 под управлением операционной системы Windows Vista и Windows Server 2008
Имя файла |
Версия файла |
Размер файла |
Дата |
Время |
Платформа |
---|---|---|---|---|---|
Amd64_microsoft-windows-http-api_31bf3856ad364e35_6.0.6001.22564_none_52179e866ef3ec71.manifest |
Неприменимо |
4,722 |
16-Nov-2009 |
18:59 |
Неприменимо |
Amd64_microsoft-windows-http-api_31bf3856ad364e35_6.0.6002.22268_none_540211966c16a6f1.manifest |
Неприменимо |
4,722 |
16-Nov-2009 |
18:41 |
Неприменимо |
Amd64_microsoft-windows-http_31bf3856ad364e35_6.0.6001.22564_none_092c5dcfea82ffb6.manifest |
Неприменимо |
144,568 |
16-Nov-2009 |
19:01 |
Неприменимо |
Amd64_microsoft-windows-http_31bf3856ad364e35_6.0.6002.22268_none_0b16d0dfe7a5ba36.manifest |
Неприменимо |
144,967 |
16-Nov-2009 |
18:43 |
Неприменимо |
Package_for_kb975798_client_1~31bf3856ad364e35~amd64~~6.0.1.0.mum |
Неприменимо |
1,375 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_client_2~31bf3856ad364e35~amd64~~6.0.1.0.mum |
Неприменимо |
1,983 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_client~31bf3856ad364e35~amd64~~6.0.1.0.mum |
Неприменимо |
1,723 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_sc_0~31bf3856ad364e35~amd64~~6.0.1.0.mum |
Неприменимо |
1,429 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_sc_1~31bf3856ad364e35~amd64~~6.0.1.0.mum |
Неприменимо |
1980 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_sc~31bf3856ad364e35~amd64~~6.0.1.0.mum |
Неприменимо |
1,711 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_server_0~31bf3856ad364e35~amd64~~6.0.1.0.mum |
Неприменимо |
1,433 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_server_1~31bf3856ad364e35~amd64~~6.0.1.0.mum |
Неприменимо |
1,983 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_server~31bf3856ad364e35~amd64~~6.0.1.0.mum |
Неприменимо |
1,723 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_winpesrv_0~31bf3856ad364e35~amd64~~6.0.1.0.mum |
Неприменимо |
1,430 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_winpesrv~31bf3856ad364e35~amd64~~6.0.1.0.mum |
Неприменимо |
1,438 |
17-Nov-2009 |
08:34 |
Неприменимо |
X86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6001.22564_none_f5f90302b6967b3b.manifest |
Неприменимо |
4,708 |
16-Nov-2009 |
17:34 |
Неприменимо |
X86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6002.22268_none_f7e37612b3b935bb.manifest |
Неприменимо |
4,708 |
16-Nov-2009 |
16:00 |
Неприменимо |
Дополнительные файлы для всех поддерживаемых версий Windows Server 2008 на базе процессоров IA-64
Имя файла |
Версия файла |
Размер файла |
Дата |
Время |
Платформа |
---|---|---|---|---|---|
Ia64_microsoft-windows-http-api_31bf3856ad364e35_6.0.6001.22564_none_f5faa6f8b6948437.manifest |
Неприменимо |
4,715 |
17-Nov-2009 |
02:12 |
Неприменимо |
Ia64_microsoft-windows-http-api_31bf3856ad364e35_6.0.6002.22268_none_f7e51a08b3b73eb7.manifest |
Неприменимо |
4,715 |
16-Nov-2009 |
15:17 |
Неприменимо |
Ia64_microsoft-windows-http_31bf3856ad364e35_6.0.6001.22564_none_ad0f66423223977c.manifest |
Неприменимо |
144,558 |
17-Nov-2009 |
02:14 |
Неприменимо |
Ia64_microsoft-windows-http_31bf3856ad364e35_6.0.6002.22268_none_aef9d9522f4651fc.manifest |
Неприменимо |
144,957 |
16-Nov-2009 |
15:18 |
Неприменимо |
Package_for_kb975798_sc_0~31bf3856ad364e35~ia64~~6.0.1.0.mum |
Неприменимо |
1,425 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_sc_1~31bf3856ad364e35~ia64~~6.0.1.0.mum |
Неприменимо |
1,806 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_sc~31bf3856ad364e35~ia64~~6.0.1.0.mum |
Неприменимо |
1,706 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_server_0~31bf3856ad364e35~ia64~~6.0.1.0.mum |
Неприменимо |
1,429 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_server_1~31bf3856ad364e35~ia64~~6.0.1.0.mum |
Неприменимо |
1,809 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_server~31bf3856ad364e35~ia64~~6.0.1.0.mum |
Неприменимо |
1,718 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_winpesrv_0~31bf3856ad364e35~ia64~~6.0.1.0.mum |
Неприменимо |
1,426 |
17-Nov-2009 |
08:34 |
Неприменимо |
Package_for_kb975798_winpesrv~31bf3856ad364e35~ia64~~6.0.1.0.mum |
Неприменимо |
1,434 |
17-Nov-2009 |
08:34 |
Неприменимо |
X86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6001.22564_none_f5f90302b6967b3b.manifest |
Неприменимо |
4,708 |
16-Nov-2009 |
17:34 |
Неприменимо |
X86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6002.22268_none_f7e37612b3b935bb.manifest |
Неприменимо |
4,708 |
16-Nov-2009 |
16:00 |
Неприменимо |
Are you freaking out because you just saw the name w3wp.exe in your processes list? Worrying about an unknown executable (.exe) file in the processes of Windows Task Manager is a normal thing. After all, it can be a virus which can sweep all the important files from your system. Thankfully, all the .exe files in the processes list are not a virus.
Let’s come back to w3wp.exe in Windows 10. The term w3wp signifies IIS World Wide Web Worker Process. It is a part of the software Internet Information Services (IIS) from Microsoft. Before moving any further, you should investigate it a bit. If the file w3wp.exe is there on your system and positioned in C:\Windows\System32\inetsrv, then this is a “worker process” of Microsoft’s IIS web server. If it is located anywhere else, including the folder \System32 or in any of its subfolder, w3wp.exe can probably be an incognito malware.
End Task and Fix w3wp.exe in Windows 10
You can open the Task Manager and locate Processes tab to end task w3wp.exe in Windows 10.
Press Ctrl+Esc+Shift simultaneously.
In the list in the Processes tab, you will see the w3wp.exe running, right-click on it and select End Task.
How to find w3wp.exe running in IIS Management Console
Launch the IIS manager.
On the left side of the console, you will see your computer’s name, click it.
When you notice various icons on the right side, double click on Worker processes. A list of currently running processes will appear.
This screen will display you more information rather than the Task Manager.
Here, you find the name of the IIS application pool along with the process ID of running w3wp.exe process.
If this is not enough, double-click on any worker process and see entire web requests currently being executed inside that. This will also help you to catch the malware.
What is IIS Worker Process/w3wp.exe?
IIS (Internet Information Systems) manager configures the Web applications on a Windows Server. IIS is the third most popular web server (first is Apache and second is Nginx) for hosting sites and managing the requests received through different protocols such as HTTP, FTP, HTTPS, etc. This allows executing “multiple worker processes” simultaneously under WAS (“Windows Process Activation Service”) where each of them represents an “application pool”. The concept is much similar to the procedure when Windows uses multiple instances of svchost.exe and they run concurrently representing various Windows services.
The valid w3wp.exe file is a vital component of Windows and hardly causes any problem. This is a Windows system file without any apparent window and can be trusted if really from Microsoft. However, this process sometimes increases the CPU utilization and slows down the computer. Moreover, some malware camouflage themselves as w3wp.exe, especially when located in the C:\Windows\System32 or C:\Windows folder. Hence, you should examine whether this process in your system is a threat or not.
An Important Thing to Note
It is important to know about a confusing thing concerning IIS application pools. You can start and stop the application pools inside the IIS management console. But, starting a pool doesn’t mean that w3wp (IIS worker process) will also begin running. IIS will commence the worker process after receiving the first web request.
How to Disable or Stop w3wp.exe on IIS
If you don’t want w3wp.exe run, you must require either stop the IIS application pool or completely disable IIS.
When the IIS web server needs stopping utterly, stop a Service named as World Wide Web Publish Service. Then select Disabled in the Startup type.
If you don’t want to disable IIS altogether, then the management console will allow you to stop independent IIS application pools.
How to fix w3wp.exe in Windows 10
When w3wp.exe is malicious, it becomes necessary to remove it permanently from the system. To fix w3wp.exe is not a difficult task, you just need to follow the below mentioned 4 steps for freedom. Here are the steps:
Hold down Windows key and R on the keyboard.
Once the Run box opens, type regedit.exe and press Enter.
Now press CTRL + F on the registry editor and type w3wp.exe. This executable file is often located in AppData, Local, Temp, SystemDrive or Temp folder.
In these folders, you will find the .exe in RunOnce and Run subkeys. Permanently delete them and restart the system. In Windows 10, you can locate the keys by following this path and when you reach there, delete them.
Press Start Button à Select Run à Type regedit à Press Enter à Press CTRL + F. Finally, type w3wp.exe and you will be at the right place.
Automatically Remove w3wp.exe
Anything automatic is always attractive, the removal of w3wp.exe also. There are various tools available in the market which claims to remove this file automatically but remember, you will have to pay for them. They will provide you with the free version which will appropriately detect it but to complete the removal process, such removal tools will ask you to purchase the full version. So, if you are satisfied with their offering and price, go for them. However, you are aware of the manual process also.
Monitoring ASP.NET Applications and IIS Worker Processes
When the important ASP.NET web applications run on the web server, it becomes critical to monitor the server, IIS (Internet Information Systems), and applications. It is necessary to be aware of if the server gets down, w3wp.exe stops functioning, or whether the application is performing slowly.
So, after reading this article, you don’t need to worry about w3wp.exe in Windows 10 because now you know what it is and how to get rid of it.
The genuine w3wp.exe file is a software component of Internet Information Services by .
If «w3wp.exe» is present on a system and is located in «C:\Windows\System32\inetsrv», then it is the «worker process» within Microsoft’s Internet Information Services (IIS) web server. In any other location, including «\System32» or any other subfolder of it, «w3wp.exe» is probably disguised malware. IIS is one of the world’s three most popular web servers (besides Apache HTTP Server and Nginx) for hosting web sites and handling requests received via HTTP, HTTPS, FTP, and other protocols. One or more «worker processes» can run at the same time under the Windows Process Activation Service (WAS) within IIS, each representing an «application pool.» The concept can be compared to the way Windows uses one or more concurrent instances of «svchost.exe» under Task Manager to represent a variety of different Windows services. Microsoft Corporation, founded in 1975 by Paul Allen and Bill Gates, is headquartered in Redmond, WA, USA.
w3wp stands for IIS WorldWide Web Worker Process
The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the w3wp.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.
Click to Run a Free Scan for w3wp.exe related errors
W3wp.exe file information
The process known as IIS Worker Process belongs to software Internet Information Services by Microsoft (www.microsoft.com).
Description: The original w3wp.exe is an important part of Windows and rarely causes problems. The w3wp.exe file is located in a subfolder of C:\Windows\System32 or sometimes in a subfolder of C:\Windows (usually C:\Windows\System32\inetsrv\).
Known file sizes on Windows 10/11/7 are 19,968 bytes (32% of all occurrences), 24,064 bytes and 4 more variants.
W3wp.exe is a Windows system file. The program has no visible window. W3wp.exe is a Microsoft signed file.
Therefore the technical security rating is 2% dangerous, but you should also take into account the user reviews.
Recommended: Identify w3wp.exe related errors
Important: Some malware camouflages itself as w3wp.exe, particularly when located in the C:\Windows or C:\Windows\System32 folder. Therefore, you should check the w3wp.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer’s security. This was one of the Top Download Picks of The Washington Post and PC World.
Best practices for resolving w3wp issues
A clean and tidy computer is the key requirement for avoiding problems with w3wp. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows’ 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.
Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.
To help you analyze the w3wp.exe process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. BMalwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.
Other processes
cloud-drive-connect.exe advddischlp1.dll acrocef.exe w3wp.exe szdrvsvc.exe taskswitch.exe onda_mon.exe hsscp.exe wcscheduler.exe aegisp.sys musnotification.exe [all]
W3wp.exe is an important file that every user using IIS processes has probably seen in their chain of operations. When a web application runs inside Microsoft’s Internet Information Services (IIS), it utilizes what we know as IIS processes, which run in our computer background like w3wp.3xe.
Sometimes multiple processes are running simultaneously on one computer. In this guide, we will learn everything about what these processes mean and how we can manage, handle and stop them on our computer systems.
Read on to learn everything about IIS and w3wp and how each can affect your computer system’s web applications in this detailed guide!
Contents
- What Is the File w3wp.exe?
- – Internet Information Services Processes for Computer Systems
- – Stopping and Disabling IIS Worker Process
- – Viewing Active Internet Information Services Worker Processes on Your PC
- How to Check Virus and Malware Check on W3wp.exe Download?
- – Checking the File’s Legitimate Origin With Verified Signer
- – Removing and Uninstalling w3wp.exe From Program Files
- – Removing and Uninstalling W3wp.exe From System Settings
- Conclusion
w3wp exe is an executable exe file that is a representation of the IIS Worker Process, which in turn is a part of the Internet Information Services Software developed by Microsoft Software. The file doesn’t have high cpu usage, and it is used to signal that a web application process is running on computers.
– Internet Information Services Processes for Computer Systems
When we configure web applications on Windows servers, they are configured via the command line or the Internet Information Systems (IIS) Manager. When you are in the IIS, you can easily set up websites and decide on the application pools that are assigned to them. It is interesting to note that you can post multiple websites in a single Internet Information Services application pool.
Once an Internet Information Services application is defined, it becomes something that we call a w3wp.exe process, and that happens when the executable file starts up as an Internet Information Services worker process. There are two basic settings in this, and each depends on the version of .NET being used on your computer.
Simply put, an Internet Information Services Application Process (w3wp.exe) is the program that handles the web requests which are sent to the IIS web server for configured Internet Information Services application pools.
There are a few advanced settings that are provided by the Internet Information Services application pools. This, in turn, impacts the behavior of your IIS processes and w3wp. Examples of such impact might include but are not limited to things like an auto restart of the process, automatic shutting down, and haggling over what Windows user account it runs as.
It is equally possible for one Internet Information Services application pool to end up creating a web garden, which is basically multiple IIS processes.
– Stopping and Disabling IIS Worker Process
To stop the w3wp.exe high memory operation from running, it is essential that we start by completely disabling the IIS processes, or we will at least have to stop the IIS application pool.
Now, in order to shut the IIS web server completely, you will need to start by stopping the Windows Service called the “World Wide Web Publish Service.” You have to make sure that you stop it entirely, and once you have done that, you will need to change the “Startup type” from its current configuration to Disabled.
If you would instead stop individual Internet Information Services application pools within the IIS management console. You can do that quickly instead of disabling IIS altogether.
– Viewing Active Internet Information Services Worker Processes on Your PC
You can see all the active w3wp.exe service names on your PC by going to the Windows Task Manager. When you are in the Task Manager, you will see methods named w3wp.exe that indicate running IIS operations.
If you want to see more details, You can do so easily by going inside the IIS management console. Here’s how you can do that.
Start by opening up the IIS manager, and on the left side of the manager, you will see the name of your computer. After that, you will see a bunch of icons in a list that will be similar to the one on the right. It would help if you went to “Worker Processes,” double click on that to open it, and from there, you will get a list of all the processes currently running on your computer.
You will also be able to see a bunch of other details on the IIS Processes screen compared to similar information you would have seen in the Windows Task Manager. Some of the elements that you can easily see in this section include the Process Id for the running w3wp.exe high cpu process and the name of the Internet Information Services application pool.
Suppose you would like to take it a bit further from this stage. In that case, you also have the option to double click on any given IIS process, following which you will be able to see which web requests are currently processed inside of your selected IIS process.
How to Check Virus and Malware Check on W3wp.exe Download?
In order to check whether an exe file is a virus or a legitimate software, we will need to perform various tests on the file in question, and all of these usually start by checking the location of the target file. We have done most of the groundwork for you, and in this section, you will get our expert opinion on whether w3wp exe is malware software or one of the good guys.
Based on our expert technical review, there is nothing suspicious with the software and w3wp exe is a malware-free application that can have good uses.
– Checking the File’s Legitimate Origin With Verified Signer
Verified Signer is one of the software that you can use to verify the authenticity of your program files quickly. In order to start, you need to open the Task Manager, after which you will need to click on the columns field, where you will be able to add Verified Signer as one of the columns easily.
After you have done that, you can check the Verified Signer value for the w3wp.exe malware process on your computer screen. It is possible that the software is actually a virus or corrupted by malware if the result says “Unable to verify.”
If the developer of the software is legitimate, it usually means that the software which you are using is not a virus or malware application of any sort. However, if the developer is not listed and you feel something is not right, you can easily remove the software by uninstalling the program that is the root cause.
– Removing and Uninstalling w3wp.exe From Program Files
In this section, we will learn the process of removing or uninstalling w3wp.exe from your computer, and the following steps have to be done one by one. After you are done following these steps, w3wp.exe will be uninstalled and removed if it was a part of any software that you previously installed on your computer.
Almost all exe files that are part of a software program are also accompanied by an uninstall program. Therefore, the first thing that you need to do for the first step is to find the uninstall program in the w3wp.exe location . You can find this Uninstaller exe file in the following directory on any Windows computer device:
C:Program Files>Microsoft>Internet Information Services >IIS Worker Process> w3wp.exe_uninstall.exe
To uninstall using this method and stop the high CPU usage, the only thing you will need to do is click on the uninstall file. After that, you have to follow the given instructions from the subsequent messages in order to remove the software from your computer system.
– Removing and Uninstalling W3wp.exe From System Settings
If the above technique did not install the software through the previous method, it is only possible that the W3wp exe file was installed using the Windows Installer. If this is the case, you will have to follow a different removal method when trying to uninstall it. First of all, you need to go to System Settings from there. After you are there, you have to open the Add or Remove Programs Option.
Once you see the list of the given Programs options, you need to search for the w3wp.exe file by looking up the name of the file in the given search bar. If this option does not work, you can search for the software by trying out the developer’s name, which is Microsoft. It is also possible to search through the software name, which is Internet Information Services.
After you find your software in the Add or Remove Programs Option, you need to click on the following options. After that, you have the Uninstall Programs option, which will help you remove the program file w3wp.exe from your device once the uninstall has finished up. You can restart the computer to double check that both the software, Internet Information Services, in question, and the w3wp.exe file are entirely removed from your computer device.
Conclusion
With this section, we have reached the end of our journey into understanding Internet Information Services(IIS) processes and the w3wp exe file’s reality. We have taken the liberty of compiling a short list of four bullet points, and we hope this summary will be sufficient fodder for your next dip into the topic:
- W3wp exe files are the exe files in the chain of processes. In the Task manager, they represent the IIS processes that are running for web applications.W3wp exe files are not malware in themselves. They are legitimate files that Microsoft has developed.
- You can uninstall the w3wp.exe file and reduce CPU usage through two systems: finding and removing the file through program files and the other option to remove the file from System Settings.
- You can use Verified Signer and Task manager together to verify if the w3wp process running on your computer is legitimate or a virus.
We are sure that this detailed guide has helped you learn many things about the Internet Information Services(IIS) processes and the w3wp exe you possibly did not know before. If you have any questions regarding running web applications and their pools on your computer, you can refer to this guide and clear any doubts as they arise!
W3WP.exe — процесс службы WAS, в котором может содержаться приложение веб-сайта.
Обычно встречается на серверных системах Windows Server при использовании IIS и может грузить процессор, в зависимости от данных внутри процесса. Чтобы лучше понять, нужно рассмотреть что именно делает W3WP.exe:
- При переходе на сайт, браузер обращается к веб-серверу IIS по определенному URL, на стороне сервера этот запрос перехватывает драйвер HTTP.SYS.
- HTTP.SYS обращается к службе WAS для получения информации из хранилища конфигурации.
- Служба WAS запрашивает конфигурацию из хранилища, а именно из файла applicationHost.config в папке IIS.
- Из-за того что запрос получен по протоколу HTTP, конфигурационную инфу получает служба W3SVC (WWW Service), информация содержит данные о пуле приложений и других параметрах сайта.
- Полученная информация используется службой W3SVC для конфигурации HTTP.SYS.
- Далее служба WAS запускает W3WP.exe для пула приложений (если он ранее не был запущен).
- В процессе W3WP.exe работает приложение сайта, которое формирует ответ и возвращает его драйверу HTTP.SYS.
- И последнее — HTTP.SYS отправляет ответ браузеру.
Данная инфа взят с Хабра, надеюсь кому-то она подскажет зачем нужен процесс W3WP.exe. Я понял одно — процесс может грузить систему, использовать много оперативы, если внутри процесса — много данных.
Почему W3WP.exe грузит систему?
На сайте Microsoft сказано — это происходит во время передачи больших HTTP-ответов, которые создаются в ASP.
Часто проблема возникает при использовании медленного интернета, возможно потому что пакеты не успевают отправиться и накапливаются.
Чтобы попробовать исправить проблему, попробуйте обновить систему, установив все нужные обновы. Для Windows Server 2003 нужно получить последний пакет обновления.
Надеюсь эта инфа кому-то пригодиться. Удачи и добра, до новых встреч.
На главную!
15.10.2019