Apophis
Jaffa Kree
Premium
join:2001-12-27
Holmen, WI
clubs: 
edit:
May 9th, @06:11PM
| [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem.
Microsoft have an obvious problem with their windows update site. Here's what Ive been seeing. On computer that have Service Pack 3 install, if the users goes and tries to do any windows updates, the website wants to install an update to the updater service which does the following.
The Service pack 3 file: wuaueng.dll (4/14/08) is replaced by a wuaueng.dll file which is dated: (7/30/07).
Once the computer does this anytime the updater program auto-starts or is initiated by the windows update site, the wuaueng.dll file running inside of the svchost.exe will use 100% of the primary system processor bringing the entire system to a crawl.
Ive found no fix to this issue besides stopping the windows update service and copying the newer file back to the c:\windows\system32 directory. Only bad thing is that you cant use the windows update site again as it will try to replace this file again.
If someone has a fix to this please let me know as Ive had 3 customer computers already have this issue today alone. |
|
bcastner
Premium,MVM
join:2002-09-25
Chevy Chase, MD
clubs:
 ·Verizon Online DSL
| Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues
I cannot replicate this. However I do believe you. there could be a fact case where this happens. I have bugged it for you and will reply if I hear anything. Perhaps somebody else has already dealt with this issue and will respond.
If I were you I would, sitting at one of the machines, use the free support assistance by phone, online or chat for XP SP3 issues:
Free unlimited installation and compatibility support is available for Windows XP, but only for Service Pack 3 (SP3), until 14 Apr-09. Chat and e-mail support is available only in the United States and Canada.
quote:
. US: »support.microsoft.com/oas/defaul···d=522131
. CA: »support.microsoft.com/oas/defaul···d=522131
. UK: »support.microsoft.com/oas/defaul···d=522131
. AU: »support.microsoft.com/oas/defaul···d=522131
. Other: »support.microsoft.com/oas/defaul···rid=1173 | select Windows XP | select Windows XP Service Pack 3
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users
|
|
Apophis
Jaffa Kree
Premium
join:2001-12-27
Holmen, WI
clubs: | reply to Apophis
Just started a chat session with MS, I'll let you know where this goes. |
|
bluepoint
join:2001-03-24
·Verizon Online DSL
edit:
May 8th, @10:53PM
| reply to Apophis
SP properties | | 
SP version | | 
System32 properties | | 
System32 Version | |
I believe this is the reason WU replaces the file as it has the higher version. With that said, I am not experiencing your high CPU usage when visiting WU/MU.
Added below + pics
I believe the wuaueng.dll that came with the service pack is the old component of WU, it only carries the newer date when the SP was constructed. |
|
Van Helsing
@cox.net | reply to Apophis
I am having the same issue as soon as I boot up the service host associated with windows update wuaueng.dll seizes up my computer with almost 100% use. I have SP3 installed but I too have the file dated 7/30/07. |
|
bcastner
Premium,MVM
join:2002-09-25
Chevy Chase, MD
clubs:
·Verizon Online DSL
| It is not unusual for wuaueng.dll to have periods of high CPU usage.
Do not do anything for several days to test if this is a persistent issue, or a temporary one.
Remember that this is a background task, so it will cede CPU attention to foreground tasks when necessary. |
|
yeti34
RC Onroad racin
join:2001-04-12
Salt Lake City, UT | reply to Apophis
I have noticed the CPU usage as well and just thought my box was jacked. I now see it is not only me with this issue. I hope there is some sort of resolution to the issue. |
|
Apophis
Jaffa Kree
Premium
join:2001-12-27
Holmen, WI
clubs: | reply to Apophis
Ive got 3 more customer computer with this same exact issue, however, these 3 computer DO NOT have SP3 installed.
Im trying to figure out which windows update is causing the problem now.... |
|
Apophis
Jaffa Kree
Premium
join:2001-12-27
Holmen, WI
clubs:
| reply to Apophis
Here's is some info from the WindowsUpdate.log file when the computer is using 100% on SVCHOST.exe / WUAUENG.DLL
2008-05-09 13:01:02:968 836 c28 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: Send failed with hr = 80072ee7.
2008-05-09 13:01:02:984 836 c28 Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: Bypass List used : Auth Schemes used :
2008-05-09 13:01:02:984 836 c28 Misc WARNING: WinHttp: SendRequestUsingProxy failed for . error 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: DownloadFileInternal failed for »www.update.microsoft.com/v7/wind···dir.cab: error 0x8024402c
2008-05-09 13:01:02:984 836 c28 Agent WARNING: Failed to obtain the authorization cab URLs, hr=0X8024402C
2008-05-09 13:01:02:984 836 c28 Agent * WARNING: Online service registration/service ID resolution failed, hr=0x8024402C
2008-05-09 13:01:03:296 836 c28 Agent * WARNING: Exit code = 0x8024402C |
|
bcastner
Premium,MVM
join:2002-09-25
Chevy Chase, MD
clubs:
·Verizon Online DSL
| So it is not the case that wuaeng is doing nothing but wasting CPU cycles.
It is trying, without success, to download something. Your logs at a glance suggest a proxy failure, which usually means a firewall issue. Examples where this is a common issue: Norton Internet Security 2007. |
|
bcastner
Premium,MVM
join:2002-09-25
Chevy Chase, MD
clubs:
·Verizon Online DSL
| reply to Apophis
So it is not the case that wuaeng is doing nothing but wasting CPU cycles.
It is trying, without success, to download something. Your logs at a glance suggest a proxy failure, which usually means a firewall issue. Examples where this is a common issue: Norton Internet Security 2007.
Usual first crack at fixing the issue: Uninstall the firewall or integrated firewall/Antivirus software. Reboot. Reinstall.
The issue arises because of antivirus and/or firewalls with HIPS capability. They do not reliably adjust to versioning changes in processes and services that they have whitelisted for internet access. Some third-party firealls have a feature to rebuild their whitelist HIPS table. Some do not. If unavailable, uninstall, reboot and reinstall. It will rescan and add the services and processes again.
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users
|
|
Apophis
Jaffa Kree
Premium
join:2001-12-27
Holmen, WI
clubs:
| reply to Apophis
If this was a simple firewall issue I would not have the same exact problem with now 8 different computers at 6 different locations. There are now several discussions going on about this same issue starting on wednesday afternoon which is when the problem first appears now on the Microsoft.XP.General forums.
Forcing the installation of the windowsupdateagent30-x86.exe did not help.
Running this batch file also did not help.
Regsvr32 wups2.dll /s
Regsvr32 licdll.dll /s
Regsvr32 regwizc.dll /s
regsvr32 msxml.dll /s
regsvr32 msxml2.dll /s
regsvr32 msxml3.dll /s
regsvr32 comcat.dll /s
regsvr32 shdoc401.dll /s
regsvr32 shdoc401.dll /i /s
regsvr32 asctrls.ocx /s
regsvr32 oleaut32.dll /s
regsvr32 shdocvw.dll /I /s
regsvr32 shdocvw.dll /s
regsvr32 browseui.dll /s
regsvr32 browseui.dll /I /s
regsvr32 msrating.dll /s
regsvr32 mlang.dll /s
regsvr32 hlink.dll /s
regsvr32 mshtmled.dll /s
regsvr32 urlmon.dll /s
regsvr32 plugin.ocx /s
regsvr32 sendmail.dll /s
regsvr32 scrobj.dll /s
regsvr32 mmefxe.ocx /s
regsvr32 corpol.dll /s
regsvr32 jscript.dll /s
regsvr32 msxml.dll /s
regsvr32 imgutil.dll /s
regsvr32 thumbvw.dll /s
regsvr32 cryptext.dll /s
regsvr32 rsabase.dll /s
regsvr32 inseng.dll /s
regsvr32 iesetup.dll /i /s
regsvr32 cryptdlg.dll /s
regsvr32 actxprxy.dll /s
regsvr32 dispex.dll /s
regsvr32 occache.dll /s
regsvr32 occache.dll /i /s
regsvr32 iepeers.dll /s
regsvr32 urlmon.dll /i /s
regsvr32 cdfview.dll /s
regsvr32 webcheck.dll /s
regsvr32 mobsync.dll /s
regsvr32 pngfilt.dll /s
regsvr32 licmgr10.dll /s
regsvr32 icmfilter.dll /s
regsvr32 hhctrl.ocx /s
regsvr32 inetcfg.dll /s
regsvr32 tdc.ocx /s
regsvr32 MSR2C.DLL /s
regsvr32 msident.dll /s
regsvr32 msieftp.dll /s
regsvr32 xmsconf.ocx /s
regsvr32 ils.dll /s
regsvr32 msoeacct.dll /s
regsvr32 inetcomm.dll /s
regsvr32 msdxm.ocx /s
regsvr32 dxmasf.dll /s
regsvr32 l3codecx.ax /s
regsvr32 acelpdec.ax /s
regsvr32 mpg4ds32.ax /s
regsvr32 voxmsdec.ax /s
regsvr32 danim.dll /s
regsvr32 Daxctle.ocx /s
regsvr32 lmrt.dll /s
regsvr32 datime.dll /s
regsvr32 dxtrans.dll /s
regsvr32 dxtmsft.dll /s
regsvr32 WEBPOST.DLL /s
regsvr32 WPWIZDLL.DLL /s
regsvr32 POSTWPP.DLL /s
regsvr32 CRSWPP.DLL /s
regsvr32 FTPWPP.DLL /s
regsvr32 FPWPP.DLL /s
regsvr32 WUAPI.DLL /s
regsvr32 WUAUENG.DLL /s
regsvr32 ATL.DLL /s
regsvr32 WUCLTUI.DLL /s
regsvr32 WUPS.DLL /s
regsvr32 WUWEB.DLL /s
regsvr32 wshom.ocx /s
regsvr32 wshext.dll /s
regsvr32 vbscript.dll /s
regsvr32 scrrun.dll mstinit.exe /setup /s
regsvr32 msnsspc.dll /SspcCreateSspiReg /s
regsvr32 msapsspc.dll /SspcCreateSspiReg /s
regsvr32 wups.dll /s
regsvr32 wuaueng.dll /s
regsvr32 wucltui.dll /s
regsvr32 wuweb.dll /s
regsvr32 msxml.dll /s
regsvr32 msxml2.dll /s
regsvr32 msxml3.dll /s
regsvr32 urlmon.dll /s
regsvr32 initpki.dll /s
regsvr32 mssip32.dll /s
regsvr32 wintrust.dll /s
regsvr32 dssenh.dll /s
regsvr32 rsaenh.dll /s
regsvr32 gpkcsp.dll /s
regsvr32 sccbase.dll /s
regsvr32 slbcsp.dll /s
regsvr32 cryptdlg.dll /s
regsvr32 jscript.dll /s
At this point Im convinced that the issue has something to do with the Windows Update servers them selfs. Im seeing this issue now on several computers with and without the latest windows updates and even some with and without XPSP3. |
|
Apophis
Jaffa Kree
Premium
join:2001-12-27
Holmen, WI
clubs:
edit:
May 9th, @06:39PM
| reply to Apophis
Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem.
Im making some progress, I did the following.
net stop wuauserv
rmdir c:\windows\softwaredistribution /s
net start wuauserv
Now when going back to the windows update site it asked me to install the KB892130 (Windows Genuine Advantage Pack) which I did. After this, the site is asking me to install Service Pack 3 which I am now doing. So far, SVCHOST.exe / wuaueng.dll have not got stuck in a loop.
More to follow.... |
|
Van Helsing
@cox.net
| Any more info if this fixed the problem.
I Don't believe this is a firewall problem. I don't use a software firewall at all. Hardware with rules only, and I still have it. Also the service is not giving up it's CPU cycles as it should because there is very noticeable lag to the system at all times. Especially on-line when gaming. |
|
Van Helsing
@cox.net
| reply to Apophis
After observing the boot process with Process Explorer, wuaueng.dll loads early in boot priority bringing the boot up process to a crawl and is NOT relinqishing CPU cycles so that other drivers and software can load. Using about 95% of resources it takes an unusual amount of time to get the computer any where usable with only 5% available to load the rest of the system. There is no way a simple web app should consume that amount of resources EVER. |
|
BudBob
Premium
join:2003-01-01
Mckinney, TX | reply to Van Helsing
It NOT a firewall issue, I am using hardware firewalls and have the same issues. |
|
jtraynor
Loosemoose
Premium
join:2002-10-28
Carefree, AZ
| reply to bcastner
Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues
This is no Firewall issue. As noted, it started on Wednesday, May 7th, and although it does not affect every machine, it does get some. My problem started at exactly 10AM, and reappeared several times when a Windows Update decided to come to life on its own (not scheduled). I now have the problem on a second machine. I even updated to SP3 on the 2nd machine but that did not resolve to problem.
This is serious, and it is getting worse. Where is Microsoft???? |
|
bcastner
Premium,MVM
join:2002-09-25
Chevy Chase, MD
clubs:
·Verizon Online DSL
edit:
May 11th, @08:47PM
| reply to BudBob
Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem.
My original concern about software firewalls (a point completely missed by BudBob  in his shouting above) was the repeated signs of a proxy failure in the update log. 90% of the time it is a software firewall client responsible for this class of Windows Update log errors. They were not being ruled in as the cause, but being ruled out as a factor. Later investigation about versioning issues with wuaueng.dll showed a looping cycle by Windows Update on certain files in the SP3 redistributable, so the discussion long ago moved away from any firewall focus.
The suggestion earlier by Apophis was an excellent one, and at the moment the accepted workaround:
Start, Run, CMD
In the black CMD session box, type (carefully):
net stop wuauserv
rmdir c:\windows\softwaredistribution /s
net start wuauserv
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users
|
|
Apophis
Jaffa Kree
Premium
join:2001-12-27
Holmen, WI
clubs: | reply to Apophis
This problem is now affecting Windows 2000 Professional computers as well as Windows XP Home/Pro/Media Center Editions. |
|
fahrenheit
@unl.pt | reply to Apophis
you are saying this is a sp3 issue, never the less it happens to me with SP2, so it's like Apophis said it's not related to sp3 but with some other issue. |
|
