WMIPRVSE.exe crashing server 2012 r2 Standard

Question

I am getting the following error and when this happens I am unable to query wmi objects until I kill the wmiprvse process which is using 25% CPU and restart the WMI service.  Can anyone point me in the right direction
Log Name:      Application
Source:        Application Error
Date:          3/13/2014 8:09:20 AM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:     
Description:
Faulting application name: wmiprvse.exe, version: 6.3.9600.16384, time stamp: 0x5215f9c9
Faulting module name: DnsServerPsProvider.dll, version: 6.3.9600.16384, time stamp: 0x5215e759
Exception code: 0xc0000005
Fault offset: 0x00000000000ef9d1
Faulting process id: 0x2e30
Faulting application start time: 0x01cf3db0fef3c715
Faulting application path: C:\Windows\system32\wbem\wmiprvse.exe
Faulting module path: C:\Windows\System32\wbem\DnsServerPsProvider.dll
Report Id: afdec300-aab0-11e3-80c4-00155d141503
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-13T13:09:20.000000000Z" />
    <EventRecordID>19343</EventRecordID>
    <Channel>Application</Channel>
    <Computer></Computer>
    <Security />
  </System>
  <EventData>
    <Data>wmiprvse.exe</Data>
    <Data>6.3.9600.16384</Data>
    <Data>5215f9c9</Data>
    <Data>DnsServerPsProvider.dll</Data>
    <Data>6.3.9600.16384</Data>
    <Data>5215e759</Data>
    <Data>c0000005</Data>
    <Data>00000000000ef9d1</Data>
    <Data>2e30</Data>
    <Data>01cf3db0fef3c715</Data>
    <Data>C:\Windows\system32\wbem\wmiprvse.exe</Data>
    <Data>C:\Windows\System32\wbem\DnsServerPsProvider.dll</Data>
    <Data>afdec300-aab0-11e3-80c4-00155d141503</Data>
    <Data>
    </Data>
    <Data>
    </Data>
  </EventData>
</Event>

Answer 1

Hi,
Would you please let me confirm if uses the Win32_Service WMI class to query some service information? Before
this issue occurred, have you change any settings or installed any third-party application? Based on your description, I noticed that the wmiprvse process used 25% CPU. Meanwhile, did memory usage of Wmiprvse.exe process keeps increasing, and the system performance
decreases?
Please use sfc /scannow command to scan and verify protected system files. For more details, please refer to
the following article.
System File Checker (sfc)
In addition, please perform a clean boot to check if software conflicts. For detailed operations, please refer
to the following KB.
How to perform a clean boot in Windows
The dnsserverpsprovider.dll has description DNS WMIv2 Provider. Meanwhile, please navigate to path of DnsServerPsProvider.dll
and check if it’s OK.
By the way, please refer to the following article and trace WMI activity. Then check if you can find some more
clues.
Tracing WMI Activity
Hope this helps.
Best regards,
Justin Gu