Many of you already know about the program wmiprvse.exe -- it's a part of the Microsoft Windows Management Instrumentation feature. It's supposed to help your windows system run better, but it has a problem -- a big problem. It frequently starts sucking up 50% or more of the CPU, sometimes only briefly but sometimes for hours at a time. I know this from personal experience as well as from the many many postings there are on the web (here's one example) asking about how to fix this problem. I haven't found any satisfactory answers yet.
One post suggested this was because there was a bad network card on the network, but I have yet to find pointers on where to find the information that is being analyzed and how to find the errant network card... or whatever else is happening.
One problem with wmiprvse.exe is that you cannot simply terminate the process: if you do, say with Task Manager, then it immediately comes back and jumps right back up to the magic 50%+ CPU utilization. Even reboots aren't guaranteed to fix the problem and who wants to reboot their Windows machine and lose even more time?
Well, a few days back, I found a work-around. It's just a band-aid, I know, but I'm happy to be able to use it. The fix is to suspend the wmiprvse task. The way I do this is through the Process Explorer utility offered by the SysInternals folks -- this is just one of the many excellent programs that they offer (and in a nice little ironic twist, they're now owned by Microsoft so the problem and the solution are all in the family).
Once you have Process Explorer installed and you see that wmiprvse.exe is doing it's CPU-sucking thing, just find it on the Process Explorer list, right-click it, and select the Suspend option. The task stays in the system, but doesn't get any CPU cycles, unless you Resume the task.
At this point, I've had wmiprvse.exe suspended for over 3 days. Occasionally, I do a Resume and see it hit 50% and then just re-suspend. There aren't a bunch of error messages in the event log, so... no bad things seem to be happening to my system and I'm getting full use in spite of wmiprvse.
Thank you, SysInternals... nice stuff!