why is the following running on my pc? [site blocked: www.les.com] from source 192.168.1.20 Monday, Dec 22,2025 12:15:53 #pragma classflags("forceupdate") #pragma namespace("\\\\.\\root\\WMI") // // WPP Generated File // PDB: d:\0060.obj.x86fre\drivers\s

Question

why is the following running on my pc? [site blocked: www.les.com] from source 192.168.1.20 Monday, Dec 22,2025 12:15:53 #pragma classflags("forceupdate") #pragma namespace("\\\\.\\root\\WMI") // // WPP Generated File // PDB: d:\0060.obj.x86fre\drivers\s

Steven Ingle 0

[site blocked: www.les.com] from source 192.168.1.20 Monday, Dec 22,2025 12:15:53

#pragma classflags("forceupdate")

#pragma namespace("\\.\root\WMI")

//

// WPP Generated File

// PDB: d:\0060.obj.x86fre\drivers\storage\imapi2\filesystemimaging\dll\objfre\i386\imapi2fs.pdb

// PDB: Last Updated :2006-3-2:7:42:44:876 (UTC) [binplace]

//

//ModuleName = FileSystemImageTracing (Init called in Function CFileSystemImagingModule::DllMain)

[Dynamic,

Description("IMAPI2FS Tracing"),

guid("{F8036571-42D9-480A-BABB-DE7833CB059C}"),

locale("MS\0x409")]

class FileSystemImageTracing : EventTrace

{

[Description ("Enable Flags"),

    ValueDescriptions{

         "Trace information from the constructors",

         "Trace information from the destructors",

         "General Debugging Information",

         "Trace all function entry/exits"},

    DefineValues{

         "Constructor",

         "Destructor",

         "General",

         "FunctionEntryExit"},

    Values{

         "Constructor",

         "Destructor",

         "General",

         "FunctionEntryExit"},

    ValueMap{

         "0x00000001",

         "0x00000002",

         "0x00000004",

         "0x00000008"}: amended

]

uint32 Flags;

[Description ("Levels"),

    ValueDescriptions{

        "Abnormal exit or termination",

        "Severe errors that need logging",

        "Warnings such as allocation failure",

        "Includes non-error cases",

        "Detailed traces from intermediate steps" },

     DefineValues{

        "TRACE_LEVEL_FATAL",

        "TRACE_LEVEL_ERROR",

        "TRACE_LEVEL_WARNING",

        "TRACE_LEVEL_INFORMATION",

        "TRACE_LEVEL_VERBOSE" },

    Values{

        "Fatal",

        "Error",

        "Warning",

        "Information",

        "Verbose" },

    ValueMap{

        "0x1",

        "0x2",

        "0x3",

        "0x4",

        "0x5" },

    ValueType("index")

]

uint32 Level;

};

0 comments

1 answer

Your answer

Answer 1

Thanks for reaching out. The code and messages are not malware turn on something suspicious running on your PC.

They belong to windows built-in tracing and instrumentation components, specifically:

WMI(Windows Management Instrumentation)
WPP (Windows Software Trace Preprocessor)
IMAPI/FileSystemImageTracing
Event Tracing for Windows(ETW).

The snippets such as:

#pragma namespace (\\.\root\WMI”)
Class FileSystemImageTracing: Event Trace
TRACE_LEVEL_FATAL / ERROR / WARNING / INFORMATION / VERBOSE
References to .pdb, drivers, imapi2, filesystemimaging Are debug/trace definition used internally by windows to log and Diagnose system level operations (for example, CD/DVD burning, file system imaging , or storage operations).

Why this appears on your screen

This content is visible because:

You are viewing stack overflow/developer from forum page that contains:
1. decompiled symbols
2. WMI MOF (managed object format) definitions
3. windows driver tracing metadata
your network or security solution shows:
```
   [site blocked: www.les.com] from source 192.168.1.20
```
this simply negates a blocked outbound bad request not an active process running on your machine
the time stamps and comments indicate static source or symbol information on the live executable

important clarification

this does not mean:

hidden driver is running
a hacker is accessing your PC
malware is executing in the background

this is:

normal windows diagnostic infrastructure
read-only source/ debug metadata
Safe and expected on all supported version of Windows

what you should do(recommended actions)

No actions is required if :

Your system is functioning normally
This is only visible in a browser or forum page.

Optional checks

Run windows security
1. Open Windows security -> Virus & threat protection
2. Run a full scan
Verify running services
1. Open task manager -> processes
2. Confirm only known Microsoft services are running
Keep Windows updated
1. Settings-> Windows Update-> Check for updates

Please let us know if you require any further assistance we’re happy to help. If you found this information useful, kindly mark this as "Accept Answer".

Surya Amrutha Vaishnavi Lanka (INFOSYS LIMITED) 2,285 Reputation points Microsoft External Staff

2025-12-26T08:08:50.6033333+00:00

Hope you're doing well! Please let us know if the issue persists or resolved. If the answer is helpful, please click "Accept Answer" and kindly approve it. If we didn't get any response from your side. we will proceed to close the thread by 29th December
Surya Amrutha Vaishnavi Lanka (INFOSYS LIMITED) 2,285 Reputation points Microsoft External Staff

2025-12-30T10:40:11.8866667+00:00

As we haven’t received any further updates or follow-up on this thread, we will proceed to close it for now. If you need additional assistance or have new information to share, please feel free to post a new thread. We’ll be happy to support you further as needed.

Share via

why is the following running on my pc? [site blocked: www.les.com] from source 192.168.1.20 Monday, Dec 22,2025 12:15:53 #pragma classflags("forceupdate") #pragma namespace("\\\\.\\root\\WMI") // // WPP Generated File // PDB: d:\0060.obj.x86fre\drivers\s

1 answer

Your answer