Windows 8 and 8.1 Forums


WmiPrvSE.exe hogging processor

  1. #1


    Chester U.K.
    Posts : 43
    Windows 8 Poo Edition (& Windows 7 Premium)

    WmiPrvSE.exe hogging processor


    Hi!
    I have an ongoing problem with WmiPrvSE.exe, - every now and again it seems to hog the processor and maxes it out, -when I open the task manager I can see that the processor is running at 100% with WmiPrvSE.exe accounting for the lions share of that. -Its a problem because I can`t run any sort of music program or media player without it pausing in the middle of playing a track or film (it makes a horrendous noise too), its also causing problems with other applications - interrupting their operation. -I sometimes Broadcast to a server and can`t really afford to put up with this problem because its interrupting my programs. - I have had to switch to another windows 7 PC for now or at least until I can cure this problem.
    Has anybody else come across this problem and is there a viable fix for it? - I understand that this is a essential windows service and is needed for the anti-virus program (defender), someone suggested to me that a wi-fi driver helper application that uses the service was known to cause this problem, but I am on a wired lan and have disabled the wi-fi, and the problem still occurs .
    Anybody?

      My System SpecsSystem Spec

  2. #2


    Redmond
    Posts : 651
    Windows 8.1 x64


    The process WMIPrvSE.exe is a WMI Provider host. These get created when an application or script running on the machine queries WMI and causes a provider host to be spun up to satisfy the request. If you're seeing lots of activity in wmiprvse.exe processes, you have something (or some things) making heavy use of WMI on your machine.

    Is there a pattern at all to when this seems to occur?
      My System SpecsSystem Spec

  3. #3


    Chester U.K.
    Posts : 43
    Windows 8 Poo Edition (& Windows 7 Premium)


    Hi, thanks for answering - wasn`t sure where to ask this so thanks for moving it to the right location.

    There doesn`t seem to be a regular pattern as such but I would say it does occur every 10 minutes or so on average, - in saying that, there could be a gap of 20 minutes between occurrences or just 5 minutes, it seems quite random.
    I have tried disabling things like my Livedrive backup, Dropbox, Skydrive etc and running with nothing showing in the task bar to try to isolate it but so far without success. Whatever I do , it still comes back. I have also run antispyware scans in case it is a Trojan or malware. -I used Superantispyware and malwarebytes. (Nothing found).
      My System SpecsSystem Spec

  4. #4


    Redmond
    Posts : 651
    Windows 8.1 x64


    You can enable WMI tracing (it's not on by default) by doing the following on Win8:

    • Open Event Viewer
    • Click View > Show Analytic and Debug Logs
    • Browse to Applications and Services Logs > Microsoft > Windows > WMI-Activity
    • Right-click on both the "Debug" and "Trace" log options within this folder, and select "Enable Log" for both (the "Operational" log should already be enabled and logging generic events)


    Reboot, and after the next time you see high activity in wmiprvse.exe, see if there's any activity in these two newly-enabled logs.
      My System SpecsSystem Spec

  5. #5


    Chester U.K.
    Posts : 43
    Windows 8 Poo Edition (& Windows 7 Premium)


    OK, thanks -will give that a try tomorrow, - bit occupied at the moment, -one of my USB external drives is dying (different PC) and I`m transferring what I can to a new one.
    Thanks for the help!
      My System SpecsSystem Spec

  6. #6


    Redmond
    Posts : 651
    Windows 8.1 x64


    Good luck - I'll try to keep an eye on this as I start traveling again tomorrow.
      My System SpecsSystem Spec

  7. #7


    Chester U.K.
    Posts : 43
    Windows 8 Poo Edition (& Windows 7 Premium)


    OK started the logging process and almost immediately the processor started maxing out again but on examining the logs I can only see the process cimwill32.dll running at the times of the spikes

    Here is an example of the log:-

    Log Name: Microsoft-Windows-WMI-Activity/Operational
    Source: Microsoft-Windows-WMI-Activity
    Date: 12/05/2013 13:43:57
    Event ID: 5857
    Task Category: None
    Level: Information
    Keywords:
    User: NETWORK SERVICE
    Computer: LUNA
    Description:
    CIMWin32 provider started with result code 0x0. HostProcess = wmiprvse.exe; ProcessID = 4844; ProviderPath = %systemroot%\system32\wbem\cimwin32.dll
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Microsoft-Windows-WMI-Activity" Guid="{1418EF04-B0B4-4623-BF7E-D74AB47BBDAA}" />
    <EventID>5857</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2013-05-12T12:43:57.281362300Z" />
    <EventRecordID>6001</EventRecordID>
    <Correlation />
    <Execution ProcessID="4844" ThreadID="5072" />
    <Channel>Microsoft-Windows-WMI-Activity/Operational</Channel>
    <Computer>LUNA</Computer>
    <Security UserID="S-1-5-20" />
    </System>
    <UserData>
    <Operation_StartedOperational xmlns="http://manifests.microsoft.com/win/2006/windows/WMI">
    <ProviderName>CIMWin32</ProviderName>
    <Code>0x0</Code>
    <HostProcess>wmiprvse.exe</HostProcess>
    <ProcessID>4844</ProcessID>
    <ProviderPath>%systemroot%\system32\wbem\cimwin32.dll</ProviderPath>
    </Operation_StartedOperational>
    </UserData>
    </Event>

    -All double dutch to me I`m afraid?
      My System SpecsSystem Spec

  8. #8


    Chester U.K.
    Posts : 43
    Windows 8 Poo Edition (& Windows 7 Premium)


    Closing this thread. Still no wiser unfortunately. -Guess I`ll just have to put up with it.
      My System SpecsSystem Spec

  9. #9


    Redmond
    Posts : 651
    Windows 8.1 x64


    Sorry - been traveling without internet access off and on for the last month. I would recommend running a process monitor log along with this logging and stopping the process monitor logging (file > save) when the issue occurs. Since it's cimwin32, some process is running and querying WMI, but we don't know if it's some new process or if an existing one is doing so, but it's likely calling native classes. A process monitor log should give more insight here.
      My System SpecsSystem Spec

  10. #10


    Have a read of this thread. You may find an answer there.
    WmiPrvSE.exe CPU consumption
      My System SpecsSystem Spec

Page 1 of 2 12 LastLast
WmiPrvSE.exe hogging processor
Related Threads
Hi, lately, I have been experiencing a slowdown on my computer. As any other person would do, I opened Task Manager and saw that a process called WMI Provider Host took 20-30%, of CPU. I tried to end the task but it continued to open up. I went into my anti-virus software and found nothing...
These three services (Windows Firewall, Diagnostic Policy Service, and Base Filtering Engine) running in a single svchost, frequently hog nearly 50% of my CPU (Intel i5 third-gen). How can I improve this? My fan is nearly constantly running. Is there any way I can make these services a little bit...
Hi I noticed that there three wmiprvse tasks running in task manager, 2 open in the same location, but the third one opens in a different location. Am I infected? Screenshot of third one: Screenshot by Lightshot
Solved Two WmiPrvSE.exe in System Security
I have two WmiPrvSE.exe's running in task manager, and I can't find out if 2 are supposed to be running or not, or if it could be malware. Screenshot: Screenshot by Lightshot
Processor upgrade in Drivers & Hardware
Hello I have an acer aspire V5-122-P and I have got the AMD A4-1250 APU and was wondering if it is possible to upgrade my processor (if I can find the A6 version as I have been having trouble finding it :P ) My motherboard is an acer one. And my socket is an FT1 and my chipset model ID1536. If...
My network is being used, but I don't know what it is. Looks like there is something hogging the network. I've checked windows update, but windows update were not downloading any update. Im not sure, maybe virus or malware. Done full computer scan with Bitdefender Total Security 2013 but nothing...
Solved CPU hogging in General Support
Win8 x64, E8400 There's this process 'NT Kernel & System' always using 40%+ CPU, up to sometimes 55% for no apparent reason. Any thought?
Eight Forums Android App Eight Forums IOS App Follow us on Facebook