WMI Provider Host taking up all of CPU

Hi Gaurav,

Please try the clean boot procedure Arthur.SH - MSFT recommended earlier. A clean boot is the process of starting Windows without loading third-party apps and services. It's a safe procedure.

For more information, see this Microsoft article.

How to perform a clean boot in Windows - Microsoft Support:

https://support.microsoft.com/en-us/topic/how-to-perform-a-clean-boot-in-windows-da2f9573-6eec-00ad-2f8a-a97a1807f3dd

(Step 3 is very important. You need to first enable "Hide all Microsoft Services" before clicking "Disable all".)

Hey Arthur! Again thanks for the extensive research and testing you have carried out for me. If there's any portal or avenue where I can pay you for your service thus far and for future replies, I would like to do so, or anything else really as a token of gratitude. :)

Couple of things I saw, one I don't know if it's related to this or not but my Boot time (IDK if that's exactly what it's called - the time from when I turn the CPU on and the screen shows up with Republic of Gamers and boots up) was one random time up to 4-5 mins. Like I switched on the CPU and thrice force shut it through long pressing the power button and 4th time it actually started after a 2-4 minute delay. I don't know if it's relevant. I don't know but don't think it's a hardware problem, there are no heating issues as well.

1 - Thank you for the explanation. I tried doing this:

It again said access denied to even stop the MB service.

Video: https://gyazo.com/1a0d50cf8668ded5fac46300f0aebd54

I enabled the super administrator command:

And tried after this, unfortunately the same error occurred.

That's what i was supposed to do to clean uninstall MB right? I couldn't find any more steps I could try.

2 - Glad to know clean boot won't interfere with the normal working. So does that also mean if the WMI problem doesn't occur I can just use the PC in clean boot mode itself? Also, I'm assuming our objective of doing a clean boot is to find what "programs/services" are creating this issue - haven't we already achieved that via the PID indexing and match them up to the processes?

3 - Even though as a poker player, I love problems and have a curious mind so I really don't wanna give up on this half way but more and more I dive deep into it, my threshold of understanding is getting hit and I may not efficiently follow instructions etc. I'm beginning to think rebooting and downgrading to Win 10 is the most convenient way to go about it. :|

Thanks for your reply my friend, I've been waiting to hear from you :)

You are too kind my friend, it is my honor to explain your confusion and help you! It has been my wish since childhood to help as many people as I can, and I would be happy if you just clicked “yes” at the bottom of my post!

1. First of all, some new information from you. It's not necessarily relevant from this point of view, as the boot may receive the following factors:

(1) The type of hard disk used, SSD, HDD, HHD. by far SSD is the fastest and widely used. Different hard disk types can cause variations in boot speed.

(2) Boot type, for example, in BIOS we use UEFI, LEGACY, UEFI/LEGACY and so on.

(3) You mentioned in your description about forcing it to shut down by long-pressing the power and delaying it for the fourth time before actually booting up. This is sometimes hardware related, sometimes system related and it is difficult to define the cause of the problem.

For example, my personal laptop, which I personally tested for you, sometimes has similar occurrences, but I think my laptop causes it to be hardware related. After all, it's been used for four years, but it's very well equipped :)

2. Thanks for always providing detailed information and videos.

I see that the problem is still “denial of access”, which I think is due to a so-called protection mechanism of third-party anti-virus software. Because the principle of anti-virus software is simply to protect our computers, but some viruses may try to shut down the service of the anti-virus software first after entering.

I think a clean uninstall of MB is a good choice for now.

However, I found that recently there are some malicious viruses will disguise as system level services to take up, please beware my friend!

3. Clean mode is generally what we use more for troubleshooting problems, because if the WMI problem doesn't recur in clean boot, we can rule out problems due to 3rd party software & drivers, and further narrow down the scope of the problem.

Searching the PID index in a way that we may not be able to find all matching processes through the Event Viewer, as some logged events may have duplicate PID numbers.

4. I am very glad that you share my curiosity and I am really happy to meet you who are willing to work together to solve the problem!

Downgrading to Windows 10 is indeed an effective method if you find other solutions cumbersome, but always remember to back up your data my friend!

Looking forward to your good news, I will always be here for you!

Hey Arthur! Hope you're doing well :)

I ended up shifting to Windows 10 and restored all data and apps as needed. I didn't face any problems and it was smooth for 2 weeks now - until today when during playing a session again my WMI spiked up even though it went to 20% at max till now and saw it at 5-7% till now. https://gyazo.com/aa4d79a9b956adc20d3fe735a00fdf66

I tried figuring out the program which caused eorr in the logs - only found one (couple of errors) which was a program I used to play poker called WPT. A poker app basically. I found some PID's which weren't to be found in the ongoing processes in the task manager.

I tried doing this which was the last step of what you told me: https://gyazo.com/26a7e8116e1a188119300dbbb93f7aa0 Hopefully this settles it? Do I have to do it everytime I start my PC? Like if the service was stopped, will it restart on it's own upon the "frequent calls" if there are any?

Please let me know how to figure this out and solve this for good!