WMI Provider Host taking up all of CPU

Anonymous
2024-08-20T22:53:25+00:00

Hey! I have got a new build - Ryzen 7950x w 128GB RAM and a NVIDIA 4060 GPU. Motherboard: ROG STRIX X670-E-E GAMING. Main problem I have been facing is the WMI Activity levels for the CPU were getting up to 80-90% clogging the functionality of my PC.

My previous details about how it started and the intensity of the problem: https://answers.microsoft.com/en-us/windows/forum/all/wmi-provider-host-high-cpu-usage/da16f098-ec32-45ba-8527-3a080f37ab7b

Now, I have managed to execute some solutions mentioned in the above linked post and then some routes I have mentioned properly in this sheet I made for the same purpose; the major route I have chosen is to take note of PID's in Operational Logs of WMI Activity and tackle them one by one.

Details here: https://docs.google.com/spreadsheets/d/1QZ1BLoRiwY9USNcwSJb2dpQGacYCu\_XnusYGnH10jJA/edit?usp=sharing

I have marked the processes that have been "solved" and did not occur again as green and the ones still coming up as errors in the operational logs as red.

The processes giving me WMI Errors in a ranked manner in terms of frequency of errors:

  • NVIDIA Container
  • ASUS COM Service
  • ExpressVPN - VPN Service
  • Service Host Network Service

The situation as of now is it's gotten better; the WMI Activity doesn't go more than 20% as of now but as far as I know, this process shouldn't take up any of the CPU which means some programs/processes are still interfering which I want to fully solve. Also, there have been periods of no issues and then suddenly it crops up again so I want to fully eliminate it.

Also let me know; my last resort being a reboot to downgrade to Windows 10 and how would that fare as the last possible solution if I can't figure out how to eliminate the interfering programs/processes?

Thank you, eagerly waiting for a response. :)

Windows for home | Windows 11 | Devices and drivers

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Ramesh 181.9K Reputation points Volunteer Moderator
2024-09-28T17:17:01+00:00

Thanks. The PML can now be unshared (for privacy reasons).

The following app is causing the issue.

"C:\Program Files\Adda52_2.0\Adda52_2.0.exe"

Please terminate the app, uninstall it, or rename the executable.

Was this answer helpful?

0 comments

54 additional answers

Sort by: Newest
Most helpful Newest Oldest
  1. Ramesh 181.9K Reputation points Volunteer Moderator
    2024-09-27T16:10:13+00:00

    Was this answer helpful?

    0 comments
  2. Anonymous
    2024-09-27T15:59:21+00:00

    Hey Arthur! Please if you could look into this and revert back?

    Was this answer helpful?

    0 comments
  3. Anonymous
    2024-09-19T23:14:59+00:00

    Hey Arthur! Hope you're doing well :)

    I ended up shifting to Windows 10 and restored all data and apps as needed. I didn't face any problems and it was smooth for 2 weeks now - until today when during playing a session again my WMI spiked up even though it went to 20% at max till now and saw it at 5-7% till now. https://gyazo.com/aa4d79a9b956adc20d3fe735a00fdf66

    I tried figuring out the program which caused eorr in the logs - only found one (couple of errors) which was a program I used to play poker called WPT. A poker app basically. I found some PID's which weren't to be found in the ongoing processes in the task manager.

    I tried doing this which was the last step of what you told me: https://gyazo.com/26a7e8116e1a188119300dbbb93f7aa0 Hopefully this settles it? Do I have to do it everytime I start my PC? Like if the service was stopped, will it restart on it's own upon the "frequent calls" if there are any?

    Please let me know how to figure this out and solve this for good!

    Was this answer helpful?

    0 comments
  4. Anonymous
    2024-09-03T02:07:17+00:00

    Thanks for your reply my friend, I've been waiting to hear from you :)

    You are too kind my friend, it is my honor to explain your confusion and help you! It has been my wish since childhood to help as many people as I can, and I would be happy if you just clicked “yes” at the bottom of my post!

    1. First of all, some new information from you. It's not necessarily relevant from this point of view, as the boot may receive the following factors:

    (1) The type of hard disk used, SSD, HDD, HHD. by far SSD is the fastest and widely used. Different hard disk types can cause variations in boot speed.

    (2) Boot type, for example, in BIOS we use UEFI, LEGACY, UEFI/LEGACY and so on.

    (3) You mentioned in your description about forcing it to shut down by long-pressing the power and delaying it for the fourth time before actually booting up. This is sometimes hardware related, sometimes system related and it is difficult to define the cause of the problem.

    For example, my personal laptop, which I personally tested for you, sometimes has similar occurrences, but I think my laptop causes it to be hardware related. After all, it's been used for four years, but it's very well equipped :)

    1. Thanks for always providing detailed information and videos.

    I see that the problem is still “denial of access”, which I think is due to a so-called protection mechanism of third-party anti-virus software. Because the principle of anti-virus software is simply to protect our computers, but some viruses may try to shut down the service of the anti-virus software first after entering.

    I think a clean uninstall of MB is a good choice for now.

    However, I found that recently there are some malicious viruses will disguise as system level services to take up, please beware my friend!

    1. Clean mode is generally what we use more for troubleshooting problems, because if the WMI problem doesn't recur in clean boot, we can rule out problems due to 3rd party software & drivers, and further narrow down the scope of the problem.

    Searching the PID index in a way that we may not be able to find all matching processes through the Event Viewer, as some logged events may have duplicate PID numbers.

    1. I am very glad that you share my curiosity and I am really happy to meet you who are willing to work together to solve the problem!

    Downgrading to Windows 10 is indeed an effective method if you find other solutions cumbersome, but always remember to back up your data my friend!

    Looking forward to your good news, I will always be here for you!

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments