A wmiprvse.exe process may leak memory when a WMI notification query is used heavily on a Windows Server 2008-based or Windows Vista-based computer
Consider the following scenario:
- You set up a Windows Management Instrumentation (WMI) notification query to monitor event log changes on a Windows Server 2008-based or Windows Vista-based computer.
- Some events are added that trigger the WMI notification query.
In this scenario, the memory usage of one instance of the wmiprvse.exe process increases quickly until the memory is exhausted.
For more information on this issue, including potential causes, workarounds, and resolutions, see: Microsoft KB Article KB958124.