How to find which software/tool execute WmiPrvSE.exe?

[psg]

Hi after i start PC i see WmiPrvSE.exe consume 48% of CPU time, after about 10min it calm down i checked my pc with hijackthis and sfc and lspfix but found nothing bad i know WmiPrvSE.exe runs for many tools but is there a chance to find what tool/software/driver exactly execute WmiPrvSE.exe? I could disable services one by one at registered boot but there are a lot of them so fastest way could be read which services "want" WmiPrvSE.exe after PC reboot.

 

[marsmimar]

You might be able to fix this issue by restarting the “Windows Management Instrumentation” service. Click Start, type Services in the search box, hit Enter. Under Services (Local), scroll down until you find the “Windows Management Instrumentation” service. Click to highlight and select Restart.

It's also possible that a virus or malware got onto your machine and is disguising itself as WmiPrvSE.exe. Have you run a full scan with your anti-virus of choice? You could also use the free Malwarebytes as a second opinion scanner.

https://www.malwarebytes.org/products/

Microsoft also has a free tool called Process Explorer. (It's kinda like Task Manager on steroids.) It offers a much greater analysis of what process is running and what's using it. You don't even have to install it. You can run it directly from the live link at Run Process Explorer now from Live.Sysinternals.com.

 

[psg]

thanks for reply
as i said there is no malware/virus just WMI is launched by some tool but i don;t know which tool wants WMI
I'm using process hacker to see process tree but WMI is launched by svchost.exe and there is no more tools listed in that tree
is there a chance to "catch" what tool needs to lunch WMI after startup?

 

[Urthboundmisfit]

I'd look for clues in Event Viewer

 

[Tookeri]

@psg Your specs says you have an HP. If so, read this: windows 7 - Why does WMI Provider Host (WmiPrvSE.exe) keep spiking my CPU? - Super User

It may be caused by the HP Wireless Assistant.