WMI Provider Host taking up all of CPU

Anonymous
2024-08-20T22:53:25+00:00

Hey! I have got a new build - Ryzen 7950x w 128GB RAM and a NVIDIA 4060 GPU. Motherboard: ROG STRIX X670-E-E GAMING. Main problem I have been facing is the WMI Activity levels for the CPU were getting up to 80-90% clogging the functionality of my PC.

My previous details about how it started and the intensity of the problem: https://answers.microsoft.com/en-us/windows/forum/all/wmi-provider-host-high-cpu-usage/da16f098-ec32-45ba-8527-3a080f37ab7b

Now, I have managed to execute some solutions mentioned in the above linked post and then some routes I have mentioned properly in this sheet I made for the same purpose; the major route I have chosen is to take note of PID's in Operational Logs of WMI Activity and tackle them one by one.

Details here: https://docs.google.com/spreadsheets/d/1QZ1BLoRiwY9USNcwSJb2dpQGacYCu\_XnusYGnH10jJA/edit?usp=sharing

I have marked the processes that have been "solved" and did not occur again as green and the ones still coming up as errors in the operational logs as red.

The processes giving me WMI Errors in a ranked manner in terms of frequency of errors:

  • NVIDIA Container
  • ASUS COM Service
  • ExpressVPN - VPN Service
  • Service Host Network Service

The situation as of now is it's gotten better; the WMI Activity doesn't go more than 20% as of now but as far as I know, this process shouldn't take up any of the CPU which means some programs/processes are still interfering which I want to fully solve. Also, there have been periods of no issues and then suddenly it crops up again so I want to fully eliminate it.

Also let me know; my last resort being a reboot to downgrade to Windows 10 and how would that fare as the last possible solution if I can't figure out how to eliminate the interfering programs/processes?

Thank you, eagerly waiting for a response. :)

Windows for home | Windows 11 | Devices and drivers

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Ramesh 181.9K Reputation points Volunteer Moderator
2024-09-28T17:17:01+00:00

Thanks. The PML can now be unshared (for privacy reasons).

The following app is causing the issue.

"C:\Program Files\Adda52_2.0\Adda52_2.0.exe"

Please terminate the app, uninstall it, or rename the executable.

Was this answer helpful?

0 comments

54 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ramesh 181.9K Reputation points Volunteer Moderator
    2024-09-28T22:18:44+00:00

    Adda52 repeatedly launches tasklist.exe, which is causing the issue. According to the log, no other apps are responsible for the spike. Does renaming the app solve the issue? Rename a file - Microsoft Support: https://support.microsoft.com/en-us/office/rename-a-file-baea7aab-760b-4ee0-af58-06e940d505a4

    Was this answer helpful?

    0 comments
  2. Anonymous
    2024-09-28T18:21:46+00:00

    Thanks Ramesh! Anything in particular the app is doing to make these unusual frequent calls to the WMI process?

    I wanted to know if an app called Junglee Poker also has some errors attributed to it? As I could see WMI Usage going higher when I opened Junglee and Adda52.

    Adda52 was also on my previous PC - which had much inferior specs than this one and used to run smoothly. Any reason it's giving problems now?

    Also, no other apps/processes are causing the issue? I remember when I hadn't downgraded to Win 10 and was on 11, processes like ASUS Com, Chrome etc used to come up as errors in Operational logs of WMI.

    Also, Adda52 is integral to what I do - one of the major sites I work on. What's the way to keep it in the system and not let it cause WMI issues? As you mentioned, "rename the executable" - how exactly do I do that?

    Was this answer helpful?

    0 comments
  3. Anonymous
    2024-09-28T17:02:52+00:00

    Didn't quite get how to "reset filters".

    Did the rest of it, do let me know if it needs to be done again.

    Logfile.zip

    Was this answer helpful?

    0 comments
  4. Ramesh 181.9K Reputation points Volunteer Moderator
    2024-09-28T14:34:52+00:00

    Here are both the links:

    FRST.txt

    Addition.txt

    When the WMI usage shoots up, please run a ProcMon trace and share the zipped log on OneDrive.

    1. Download Process Monitor: http://live.sysinternals.com/procmon.exe
    2. Launch Process Monitor.
    3. Reset the filter options and click OK.
    4. If tracing does not start automatically, press Ctrl + E.
    5. Run the trace for 90 seconds.
    6. After 90 seconds, switch to Process Monitor and stop tracing (Ctrl + E).
    7. Save "All Events" in a PML log file.
    8. *Zip* the log file and upload it to your OneDrive.

    The PML log size will be huge. Zipping it reduces the size by 90%.

    Was this answer helpful?

    0 comments