Jump to content

WMI Provider Host - High CPU Usage with ERA6 Agent


Recommended Posts

I'm testing the new version of ERA and Endpoint Security to prepare for a migration to the new product.  After installing the new agent, I'm noticing the WMI Provider Host process (wmiprvse.exe) is using an entire CPU core at 100%.  Rebooting does not resolve the issue -- only uninstalling the agent seems to clear the lock.

 

System Info:

 

Microsoft Surface Pro 3

Windows 8.1 Pro

Core i5 w/ 8GB RAM

 

I did a clean install of the agent and Endpoint Security (can't seem to get the new version of EES to push from ERA even with the agent installed).

 

Does anyone have any ideas?  I've searched for similar issues and can't seem to find anything related.

 

Thank you!

Link to post
Share on other sites
  • Former ESET Employees

I apologize for the inconvenience.  Are you familiar with Process Monitor by chance?  If you are, I would like to see what is winding up the WMI Provider Host Process.  Typically we actually see this kind of activity when there is an application called Conduit, or Conduit search on the machine, which is considered a toolbar or "Potentially Unwanted Application.

 

Here is the link to the Process Monitor download page:

hxxp://technet.microsoft.com/en-us/sysinternals/bb896645.aspx

Link to post
Share on other sites
  • 4 months later...

Morning!

 

I am having the same issue mentioned by rawarren. This process WmiPrvSE.exe is using a high amount of CPU resources, as you can see in this pic: hxxp://imageshack.com/a/img673/9367/OzJ0um.png.

 

When I stop EraAgentSvc service from services folder, the WmiPrvSE stops this high consumption. I have left my PC connected all day and night because i thought it might be an unfinished task or something, but it is still running at this level.

 

Here's my Process Monitor file (CSV), which seems this WmiPrvSE process is reading a bunch of registry entries, I wonder if it got stuck in an infinite loop or something?

https://dl.dropboxusercontent.com/u/51397445/Logfile.rar

 

My PC config is: Windows 8.1 Pro 64 bits // 8 GB RAM // Intel Core i7 // ESET Remote Administrator Agent x64 as well.

Thanks for any help.

Edited by gmoraes
Link to post
Share on other sites

Hi,

 

I have exactly the same problem.

 

Installed ESET products:

Agent 6.1.365.0

Antivirus 6.1.2222.1

 

Windows 8.1, 8GB RAM,

Link to post
Share on other sites
  • ESET Staff

This is known problem on Windows 8.1. It will be addressed in hot-fix release that will be available soon. Unfortunately there is no workaround in the meantime.

Link to post
Share on other sites
  • Administrators

My mistake, I confused the version of ERA all-in-one package with agent's stand-alone installer. As Michalp wrote, the issue will be addressed in the upcoming hot-fix release 6.1.31 (Agent version 6.1.413).

Link to post
Share on other sites
  • 2 weeks later...
  • Administrators

A new version of ESET Remote Administrator is available. You can perform upgrade by means of "Remote Administrator components upgrade" task: 

 

post-10-0-37427800-1432149844_thumb.png

Link to post
Share on other sites
  • 5 months later...

Are you suffering from low PC performance, go to control panel and check what process are in running condition. Open task manager and click on the “process” tab. Here you will see that (WMI Provider Host) wmiprvse.exe CPU usage is high and is more that 30%. Remove this useless process from the task manager, it is little difficult so check out the complete guide to get rid of this problem. Visit Steps to Fix wmiprvse.exe High CPU Usage

 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...