Large number of network adapters and Wmiprvse/svchost

Question

Hello,

I am running some tests with a virtual miniport driver where a large number of instances are installed on a machine (80+). When this is done Wmiprvse.exe and svchost.exe are seen to take up most CPU usage. When all adapters and the driver are uninstalled this behavior persists even between reboots.

Is it know why this occurs?

Answer 1

You're not alone; I'm seeing similar behavior where wmiprvse consumes about 100% of a core, but I don't have that many miniports.  I haven't had time to look into it yet, though.  Hopefully, someone else has solved it

 -Bria

---

Azius Developer Training www.azius.com Windows device driver, internals, security, & forensics training and consulting.