I have a brand new PC with a fresh install of Win 7 Pro 64, when and only when I install avast, WmiPrvSE.exe keeps spiking from 0 to ~50% CPU usage, it slows the system down and will completely freeze it when doing anything CPU intensive, resulting in having to do a hard reboot.
I’ve tried a clean boot, making a new user account, disabling widgets and sidebar, but nothing has helped. However when I uninstall Avast, the problem goes away.
When I inspect the process in Process Monitor, it shows as you can see here (http://i.imgur.com/Ju5f5aN.png) that tzres.dll is being called thousands of times over a few seconds. It seems that tzres.dll is related to daylight savings time, and there are a lot of Windows Servers that have issues with this. If I inspect the process in Event Viewer Analytic and Debug logs, it shows that WmiPrvSE.exe’s ClientProcessId=0 for system.
Any ideas?
edit: I should mention that I tried installing Microsoft Security Essentials and did not have this issue.
I have exactly the same problem. With avast installed wmiprvse calls tzres.dll about 200 times every few seconds resulting in cpu spikes. Uninstall avast - problem solved.
Have the same problem, but dug in deeper. 2 Windows 7 and 1 Windows 8 machine affected with same problem.
When you look close you see the system tries to create tzres.dll and immediately after it fails it tries to create tzres.dll.mui in the localized map in the windows\system32 folder.
After it fails to do so for 100 times (you can actually filter in procmon and see it happen) the process starts to read the objects.data file in the Wbem\Repository.
The WMIPRVSE services can be stopped with the penalty of stopping the IPHelper and Security Center services as well.
tested;
WmiPrvSe stopped + IPHelper stopped + Security Center stopped = No disk activity anymore - problem away
WmiPrvSe running + IPHelper running = problems
WmiPrvSe running + Security Center running = problems
Shutting WmiPrvSe totally is a problem because I have other software relying on the WMI event Sink like for Instance my office file synch and Defrag software.
Setting the debug option on the WMI Event Sink gave me a bunch of extra info, but always led to svchost as the culprit since the Sink service is running there and notifies all back with, off course, the same proc id.
And with no spirit to dive into the cim files to see what’s in, the track ends here for me. :-[
I have no more time to fiddle around to get the exact avast part up on the table, so avast, please fix this fast!
It will enhance the performance of the computer it’s running on, since it’s now trashing capacity,
(On my SSD it takes like 1-3% of queue length when loaded fully) that must be a nice performance improvement for all.
So is anything being done to fix this for people who want to keep Avast? I’m not too keen on keeping it if it uses services in such an unoptimized way. Not sure why they would use WMI in the first place. Hopefully this is a bug that can be fixed?
btw, i tried disabling the icon animation - did not help.
can i ask you to little cooperation with solving this issue ? As a starter, support package will be really appreciated. (Download link and little how-to available at: https://www.avast.com/en-us/faq.php?article=AVKB33) Please don’t forget to tick the ‘Automatically send to Avast’ option and to post your package id here.
I have noticed my machine is not creating and constantly recreating tzres.dll in the background leading to heavy CPU usage also. Support ticket created and file uploaded
