Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

Troubleshooting
Research
Professional Opinions
Ask a Question
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

troubleshooting Question

wmiprvse + svchost = 100% CPU utilization

Avatar of mindIT
mindIT asked on
Windows XPNetwork AnalysisComponents
13 Comments1 Solution3304 ViewsLast Modified:
I manage several different clients who are having some client workstations that hit 100% CPU utilization constantly. I've checked Process Explorer and noticed that wmiprvse is taking about 40% of the CPU, and one of the svchost processes is taking 10% or so. When I suspend svchost, usage drops down to 1% or so.

The wmipsrvse process has several (15 or so) kernel32.dll threads running.

C:\windows\system32\wbem\logs\wbemess.log is filled with:

(Sun Jul 13 19:13:26 2008.180565279) : Aborting polling query 'select * from Win32_Service' because the quota for memory used by polling is exceeded
(Sun Jul 13 19:13:26 2008.180565329) : Polling query 'select * from Win32_Service' failed with error code 0x8004106C.  Will retry at next polling interval

The query is being given 5-10 times each second.

When I disable the Windows Management Instrumentation service, CPU usage drops to 1% or so.

Is there any way to see from where that WMI query is coming? Has anybody seen this behavior before?

We have some management software (Level Platforms Managed Workplace) that I suspect, but the behavior continues when I disable it, so I'm not sure.

Thanks!
ASKER CERTIFIED SOLUTION
Avatar of STF26
STF26

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Commented:
This problem has been solved!
Unlock 1 Answer and 13 Comments.
See Answers