Windows 10: WMIC running cmd.exe to search for LeagueClientUX - causing +70%

This has happened twice now - at least only twice I'm aware of, but probably more often.

Basically what happens CPU usage jumps to 100%. Looking at task manager I see 70% or more cpu usage from WMIC (WmiPrvSE.exe). Checking Event Viewer Analytic and Debug Logs for WMI-Activity - Operational I see lots of errors (which are subsequently deleted so tricky to capture) for a search of process named LeagueClientUX.exe (League of Legends game client - which I have never played and is not on my pc). When I went back into task manager and changed view/sorting I saw almost a hundred of these cmd.exe calls to search for the League client.

I'm thinking it seems to happen at a particular time so I checked task scheduler to see if I could determine something there, but, alas, I found nothing.

Rebooting seems to stop it, but I'd rather get to the source to prevent it.

I've run all my av/am tools and they find nothing. Has anyone else seen this? If so how did you stop it?

Thanks, Steve

P.S. I'll try to monitor it and see if I can capture a message from the event log before it gets deleted - Yes I can see the events (which return 5858) and watch them all become "deleted event" until they are all gone.

:)

 

USB drive will not run exes.

Hi,

Thank you for posting your query in Microsoft Community. I understand the inconvenience caused to you and will help you in solving the issue.

To assist you better, I would like to ask if you have installed any Antivirus in the Laptop.

I suggest you to run the program in compatibility mode by following the steps provided below and check if the issue persist.

• Right click on the “.exe” file of the program and select properties.
• Under Compatibility tab, check the option for “Run in Compatibility mode”.
• Select the Operating System from the drop down list.
• Click on Apply and OK.

Hope the information is helpful. Feel free to write to us for any other assistance with Windows, we’ll be glad to assist you.

 

Can't run .exe file

Hi Phil,

There are several reasons why you are having issues running .exe files on your Windows 10 laptop. To assist you better, kindly answer the questions below:

• Have you made any changes to your laptop prior to this issue?
• What troubleshooting steps have you done so far?
• What is the error message that you received when running .exe files?

Regards.

 

How to let wmic command(s) that within environment variable can run properly in Powershell window?

In Windows 10 V1703, now right-click on Start button, there shows "Windows PowerShell (Admin)" which replaced old "Command Prompt (Admin)".





In a PowerShell window, can run well the below command:

net user $env:UserName





Now in Cortana's search box type "cmd", then right-click "Command Prompt", click "Run as administrator", open a "Command Prompt (Admin)" window,





can run well the below command in it:

net user %UserName%





This indicates that the environment variable $env:UserName in PS is equal to %UserName% in CMD.

And, in a "Command Prompt (Admin)" window, can run well the below two commands in it:

Get the current account's username:

wmic useraccount where name="%UserName%" get Name





View a specific user account info list:

wmic useraccount where name="[username]" list

for example, list my user account:

wmic useraccount where name="" list





Now in a PowerShell window, I try to run the following commands, but all have failed:

wmic useraccount where name="$env:UserName" get Name

wmic useraccount where name=$env:UserName get Name

wmic useraccount where name="" list

wmic useraccount where name= list

Please tell me,

which PowerShell scripts are equal to the CMD commands --

wmic useraccount where name="[username]" list

and

wmic useraccount where name="%UserName%" get Name?