I've read through various posts, but nothing seems to match exactly the situation I'm seeing.

I have a Sony Vaio laptop running Windows 8.1 64 bit which is showing a constant 20% cpu usage from WmiPrvSE.

I don't see instructions on how to determine what is being loaded by the WMI Provider Host from the trace file.

I've uploaded the trace file here: https://drive.google.com/file/d/0B39RE7vcQxdPMHYwbGdSMGJHeEk/edit?usp=sharing

Any help with specifics or a pointer to how I can read the etl file to determine what exactly is being loaded and using so many cpu cycles would be highly appreciated.

Rob.

You need to run this .cmd to capture WMI data:

xperf -on PROC_THREAD+LOADER+PROFILE+INTERRUPT+DPC+DISPATCHER -stackwalk profile -BufferSize 1024 -MaxFile 512 -FileMode Circular -f Kernel.etlxperf -start WMILogger -on Microsoft-Windows-WMI-Activity -BufferSize 1024 -f WMI.etlecho At this point, the test pass should be performed.pauseXperf -stopXperf -stop WMILoggerXperf -merge WMI.etl kernel.etl WMItracing.etldel WMI.etldel kernel.etl

Zip and upload the WMItracing.etl

Also use the WPT from the Windows 8.1 SDK in Windows 8.1:

http://msdn.microsoft.com/en-US/windows/desktop/bg162891

Edited December 1, 201312 yr by MagicAndre1981

Thanks very much, Andre.

I've followed your script with the Windows 8.1 SDK and uploaded the zipped log here:

https://drive.google.com/file/d/0B39RE7vcQxdPN1p5eWJudlhqem8/edit?usp=sharing

I also tried the voodoo steps of stopping and starting the WMI service, then restarting the machine. The CPU usage dropped from 20% to about 7%. Better, but still enough to quickly drain the battery on a laptop.

Please let me know if anything jumps out as causing the high usage.

Regards,

Rob.

I can't really see the cause. Try to capture 2 new traces later this day.