WmiPrvSE.exe high CPU usage problem caused by bad startup program RRS feed

  • Question

  • hi

    i'm running Win7 ultimate x86

    i have to find what tool just after restart PC making WMI 80% CPU usage.

    i found this post: https://social.technet.microsoft.com/forums/windows/en-US/87e2d994-74c7-4620-96ba-aa6655f18e39/wmiprvseexe-high-cpu-usage-problem-caused-by-bad-startup-program?referrer=http://social.technet.microsoft.com/forums/windows/en-US/87e2d994-74c7-4620-96ba-aa6655f18e39/wmiprvseexe-high-cpu-usage-problem-caused-by-bad-startup-program

    i install WPT and i made wmi.cmd file with:

    Xperf -on PROC_THREAD+LOADER+PROFILE+INTERRUPT+DPC+DISPATCHER -stackwalk profile -BufferSize 1024 -MaxFile 256 -FileMode Circular -f Kernel.etl
    xperf -start WMILogger -on WMI_Tracing:::'stack' -BufferSize 1024 -f WMI.etl

    echo At this point, the test pass should be performed.



    Xperf -stop
    Xperf -stop WMILogger
    Xperf -merge WMI.etl kernel.etl WMItracing.etl

    del WMI.etl
    del kernel.etl

    start xperf WMItracing.etl

    but in cmd console i've got two errors:

    Xperf : error: NT Kernel Logger: error 0xb7 - can't create file which already exist

    and next error:

    Xperf error WMItracing.etl: path not valid error: 0xa1

    and i can't get WMItracing.etl file to see which program execute WMIPrv, how to fix it ?

    • Edited by Jan21 Wednesday, April 15, 2015 3:13 PM
    Wednesday, April 15, 2015 3:08 PM


All replies

  • Jan21

    Curious as to why you are still using Xperf instead of Windows performance recorder & WPA?

    In order to diagnose your problem we need to run Windows performance toolkit the instructions for which can be found in this wiki

    If you have any questions feel free to ask

    Please run the trace when you are experiencing the problem

    Wanikiya and Dyami--Team Zigzag

    Wednesday, April 15, 2015 3:44 PM
  • could you advice me how to setup recorder to catch what software want WMI execution after startup ? how to setup it without unnecessary options to get clear view what need WMI. 


    Wednesday, April 15, 2015 4:49 PM
  • Hi,

    If you just to find out which app want WMI execution after startup, you can use Process Exporer instead of Task Manager to check process status.

    Process Explorer:


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Thursday, April 16, 2015 5:33 AM
  • process explorer will not show it!

    svchost.exe lunch WMIprv and there is no more services

    one or more tools just after startup want some data that's why WMI eat over 80% of CPU time so i have to find what tool want something from wmiprv

    Thursday, April 16, 2015 8:37 AM
  • i'm not recording by record tool but it tells me second instance is recording now

    also i don't have SAVE button in record tool

    Thursday, April 16, 2015 6:05 PM
  • Hi,

    For more details about using Windows Performance Record, you can refer another blog:


    On the other hand, have you tried the method using Network Monitor find the culprit of WMIprv occupying high CPU usage?

    Have you make any change to your system before this problem occurs? How about system restore to fix this problem?

    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    • Marked as answer by Yolanda Zhu Wednesday, May 13, 2015 2:06 AM
    Friday, April 17, 2015 5:59 AM