Windows Vista WMIPRVSE Process Problem

I am running Vista Home Premium x64. I recently moved this computer from one classroom to another. In doing so, I had to remove the three existing user profiles and create a new administrator profile. I also added a new printer and its associated driver and renamed the computer.

All seemed to be working until I started receiving the following message in the event viewer:

Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

In addition, there are two WMIPRVSE services running (one as NETWORK and one as SYSTEM). One of these services continues to run consuming about 10% of the CPU. There is also an svchost.exe running, that I believe is associated, consuming anywhere from 20% to all the rest of the available CPU. This looks to the user as if the machine has frozen or locked up.

I did notice CPU usage is heaviest within the first 10 minutes of boot. It will operate close to normal for a while then consume the system again.

I've seen an earlier post from Arie with the following fix:

To fix this error, open an elevated command prompt*) and enter the following pressing the enter key after each line:

net stop winmgmt

(press Y when asked if you want to stop certain services)

DEL %WINDIR%\System32\wbem\Repository\*.*

Reboot and let your system idle for a few minutes. Reboot once more and the error and warning should be resolved.

*)To open an elevated command prompt, type cmd in Vista's Start Search box, right-click cmd on the Start menu & select Run as administrator

I have also seen a post in the Microsoft Knowledge Base that wants me to run a VB Script to eliminate Event ID: 10 messages. I don't know if this solution will resolve the root cause or just prevent the message from being logged in the event viewer.

Looking forward to some advice...Gary

 

I suggest trying to retrace your steps, uninstall the printer, remove the new administrator, ect (...as far as you can).

You can try using command lines (if you find the correct ones). Me, I don't think you should be expected to work that way to make the system work correctly.

Try retracing your steps.

Matt