Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Just an observation
#1
WWAHost.exe runs as an executable in Windows 8 necessary for certain Windows Apps (i.e. Xbox Music).
When I was monitoring a certain process with procmon (Sysinternals) I noticed a really huge stream of messages with a reference to qmhook64.dll (I attached a logfile for you to see a tiny selection, the format is native to procmon). The messages were submitted by wwahost.exe, a process unknown to me, but a quick search on the Internet showed it was a harmless process (http://www.groovypost.com/tips/wwahost- ... g-or-virus). The fact that a QM process was linked to all this, disturbed me a bit. So, I stopped QM to see what would happen: the messages stopped!
I was running QM version 2.3.3.7, the latest official release.
I uninstalled this version and installed the beta QM version 2.3.4.3 and guess what, no more messages. I left the beta on my system (still using the low level hook). I have absolutely no idea why the beta stopped the messages (more Windows 8 compliant?), but perhaps this observation is useful for someone.

Kind Regards.


Attached Files
.zip   Logfile.zip (Size: 41.28 KB / Downloads: 350)
#2
The dll was used in previous QM versions, and removed in QM 2.3.4.
In the dll was a Windows hook for posted messages received by 64-bit processes.
Don't know what is wwahost.exe. Probably it posts messages frequently.


Forum Jump:


Users browsing this thread: 1 Guest(s)