Windows 10: WmiPrvSE high CPU Usage. Netsvcs thread calls Provider::CreateInstanceEnum - CIMWin32 :...

I have noticed that my computer is always busy -- looking at the task manager, I found that WmiPrvSE is persistently pulling about 7%-8% CPU load on a 6-core machine(!).


By running Event Viewer and enabling trace logging, I found that WMI-Activity shows repeated entries for Provider::CreateInstanceEnum - CIMWin32 : Win32_Printer being generated from a thread inside netsvcs.


If I use process explorer, I can bring up the offending threads and suspend it, causing my CPU load to drop to near-zero.


Also, the CreateInstace has a much higher KernelTime and UserTime value compared to other trace entries for WMI-Activity. (I pasted two trace activity entries from my current situation -- note that the second thread has a UserTime value of 38, while more typically the numbers are 1 or 2!)


I am not sure how to debug this further -- I would appreciate help on this!


Thank you!

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

- <System>
<Provider Name="Microsoft-Windows-WMI-Activity" Guid="{1418ef04-b0b4-4623-bf7e-d74ab47bbdaa}" />
<EventID>12</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2019-11-19T18:35:27.586615700Z" />
<EventRecordID>8</EventRecordID>
<Correlation ActivityID="{cd6c56b8-1846-414f-ba17-7cab4f913504}" />
<Execution ProcessID="4808" ThreadID="6224" ProcessorID="10" KernelTime="3" UserTime="8" />
<Channel>Microsoft-Windows-WMI-Activity/Trace</Channel>
<Computer>Joseph-P52</Computer>
<Security UserID="S-1-5-21-2144532057-3111012501-2876236151-1001" />
</System>
- <UserData>
- <Operation_Provider_Info_New xmlns="http://manifests.microsoft.com/win/2006/windows/WMI">
<GroupOperationId>1401</GroupOperationId>
<Operation>Provider::CreateInstanceEnum - CIMWin32 : Win32_Printer</Operation>
<HostId>6368</HostId>
<ProviderName>CIMWin32</ProviderName>
<ProviderGuid>{d63a5850-8f16-11cf-9f47-00aa00bf345c}</ProviderGuid>
<Path>%systemroot%\system32\wbem\cimwin32.dll</Path>
</Operation_Provider_Info_New>
</UserData>

</Event>


- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-WMI-Activity" Guid="{1418ef04-b0b4-4623-bf7e-d74ab47bbdaa}" />
<EventID>12</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2019-11-19T18:53:33.650275300Z" />
<EventRecordID>4</EventRecordID>
<Correlation ActivityID="{9dadd5bd-6741-4ae8-b0c0-c490e0a9ac9e}" />
<Execution ProcessID="4808" ThreadID="6200" ProcessorID="10" KernelTime="10" UserTime="38" />
<Channel>Microsoft-Windows-WMI-Activity/Trace</Channel>
<Computer>Joseph-P52</Computer>
<Security UserID="S-1-5-21-2144532057-3111012501-2876236151-1001" />
</System>
- <UserData>
- <Operation_Provider_Info_New xmlns="http://manifests.microsoft.com/win/2006/windows/WMI">
<GroupOperationId>1401</GroupOperationId>
<Operation>Provider::CreateInstanceEnum - CIMWin32 : Win32_Printer</Operation>
<HostId>6368</HostId>
<ProviderName>CIMWin32</ProviderName>
<ProviderGuid>{d63a5850-8f16-11cf-9f47-00aa00bf345c}</ProviderGuid>
<Path>%systemroot%\system32\wbem\cimwin32.dll</Path>
</Operation_Provider_Info_New>
</UserData>
</Event>

:)

 

WMI Host Provider Regularly Using Up CPU

See if this helps:

Fix: WMI Provider Host (WmiPrvSE.exe) High CPU Usage On ...

https://appuals.com/wmi-provider-host-wmiprvse-...

 

WMI Provider host CPU usage

I had the same issue with WMI constantly consuming 80% of the resources through task manager. All i did was to restart the wmi services which you can do by going to services, rightclick this service and choose restart or go to

https://appuals.com/how-to-fix-wmiprvse-exe-high-cpu-usage-on-windows-10/ and following the solution there!

 

WMI Provider host (WmiPrvSE.exe) uses alot of CPU when playing games.


Have you ever wondered why an unknown application kept running in your taskbar called WmiPrvSE! Well, this application acts as an important part of your OS as it provides an important connection between your third parties applications and inbuilt OS but it can be a problem when it uses a high amount of memory and CPU . you can read more here