Aurosonic 4 Posted May 3, 2022 Share Posted May 3, 2022 After the eset update (which happened between 21.00 1-st May and 01:00 2-nd may) I’ve encountered a problem when most of my gadgets says WMI broken. I wasn’t sure which software exactly broke it, so i’ve started analizing. I revert back to my previous closest windows state which was backup at April 18-th. Backup made with Acronis True Image. Right after first boot WMI works fine until next reboot. I’ve mentioned that right after the first boot eset updates it’s data base, so i’ve decided to recover previous windows state again with turned off LAN adapter so no internet connection involved. And WMI worked fine. I’ve uninstalled ESET and turned on internet again. Rebooted PC and no issue with WMI. Then i’ve installed ESET again and it instantly broke WMI after reboot. So it’s definitely related to ESET. And i’m unable to restore WMI even after uninstalling ESET. I guess that latest database update makes some permanent changes related to WMI. Maybe in windows Registry or somewhere else. Not sure. But even WMI recovery from it’s backup made from wmimgmt.msc doesn’t help nore wmi database reset. Only windows recover to previous state before eset database update. I’m on Windows 11 with latest updates. Ready to provide any additional info if needed to find the source of WMI break. New_Style_xd 1 Link to comment Share on other sites More sharing options...
Administrators Marcos 5,071 Posted May 3, 2022 Administrators Share Posted May 3, 2022 (Un)fortunately we have no reports of such issue with ESET. Please open a support ticket with your local ESET distributor for further troubleshooting. The best would be if you could provide a disk or vm image where the issue is reproduced right after installing ESET. Link to comment Share on other sites More sharing options...
Aurosonic 4 Posted May 3, 2022 Author Share Posted May 3, 2022 10 hours ago, Marcos said: (Un)fortunately we have no reports of such issue with ESET. Please open a support ticket with your local ESET distributor for further troubleshooting. The best would be if you could provide a disk or vm image where the issue is reproduced right after installing ESET. Just tried it with clean install of Windows 10. Absolutely same behavior! Started two gadgets that works perfectly. Then installed ESET. During ESET Database update one of the gadgets stoped working with "Something went wrong" message. And after reboot both gadgets shows "Broken WMI" ! It's easy to replicate. I've mentioned with registry analyzer that ESET makes changes in registry branche WMI Security. Probably that's the issue. Link to comment Share on other sites More sharing options...
Aurosonic 4 Posted May 3, 2022 Author Share Posted May 3, 2022 i've check event monitor for WMI-Activity and it's flooded with WMI error Code 5858 New_Style_xd 1 Link to comment Share on other sites More sharing options...
Aurosonic 4 Posted May 3, 2022 Author Share Posted May 3, 2022 Here's before and after latest ESET update. I'm working with ESET and gadget over 5 years and this happens only after the last ESET update of one of it's modules. New_Style_xd 1 Link to comment Share on other sites More sharing options...
Aurosonic 4 Posted May 3, 2022 Author Share Posted May 3, 2022 And another mention: After latest ESET update WMI Provider Host / WmiPrvSE.exe constantly loads CPU. It was at 0% CPU usage before the update New_Style_xd 1 Link to comment Share on other sites More sharing options...
Aurosonic 4 Posted May 3, 2022 Author Share Posted May 3, 2022 Problem solved! Found out "Smart Optimization" option was the issue that broke the WMI. Turned it off right before the ESET update solved all the problems. Link to comment Share on other sites More sharing options...
itman 1,659 Posted May 3, 2022 Share Posted May 3, 2022 14 minutes ago, Aurosonic said: Found out "Smart Optimization" option was the issue that broke the WMI. Turned it off right before the ESET update solved all the problems. The Smart Optimization option exists whether ThreatSense settings do; Real-time protection, Malware scans, Web Access Protection, etc.. I really can't see how this setting is related to your WMI problems. Trooper and New_Style_xd 2 Link to comment Share on other sites More sharing options...
MartinPe 10 Posted May 3, 2022 Share Posted May 3, 2022 2 hours ago, itman said: The Smart Optimization option exists whether ThreatSense settings do; Real-time protection, Malware scans, Web Access Protection, etc.. I really can't see how this setting is related to your WMI problems. After reading this post, I was having the same issue with the WMI process. But in my case, it was the AMD User Experience feature of the Catalyst driver. Stopping it fixed the problem for me. The process was AUEPMaster.exe. Link to comment Share on other sites More sharing options...
GerardGe 0 Posted May 10, 2022 Share Posted May 10, 2022 Found a solution to fix the WMI filter after Eset installation: https://support.solarwinds.com/SuccessCenter/s/article/WMI-Polling-method-does-not-show-CPU-Memory-and-Interface-Data?language=en_US&r=1318&ui-knowledge-components-aura-actions.KnowledgeArticleVersionCreateDraftFromOnlineAction.createDraftFromOnlineArticle=1 Link to comment Share on other sites More sharing options...
The PIT 1 Posted May 31, 2022 Share Posted May 31, 2022 I noticed you mentioned acronis. What version of acronis as later versions have their own antivirus security built in which have a nasty habit of switching back on after updates. Had a month of chasing random ssl errors in firefox which ended up being acronis web protection turning itself back on. I then had eset and acronis checking web access which made a mess of things. Going back to an older version of acronis solved that issue. Link to comment Share on other sites More sharing options...
Recommended Posts