[XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. in Microsoft Help http://www.dslreports.com/forum/r20453781 en Sun, 08 Nov 2009 11:29:09 EDT Sun, 08 Nov 2009 11:29:09 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20590994 workablob : I have been all over this particular issue and after more than a year and false hopes I disabled Automatic Updates service in the services applet.

I periodically update my Ghost image with new patches but then I also use Disk Protection in SteadyState so if I have any bad stuff get in due to a missing patch I get a new system when I reboot.
$.02

David]]> http://www.dslreports.com/forum/remark,20590994 Wed, 04 Jun 2008 15:42:53 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20576188 bcastner : Your detailed fix is longer than mine, but does the same thing at its core. The DLL registration is completely off-task and unrelated material for the issue being discussed in this thread.

Longer is not better, just longer.]]> http://www.dslreports.com/forum/remark,20576188 Mon, 02 Jun 2008 05:52:42 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20574994 anon : Check out this blog. It has a more detailed solution than the simple "fix" suggested earlier:

»www.stuckiniowa.com/svchostexe-1···log-257/]]> http://www.dslreports.com/forum/remark,20574994 Sun, 01 Jun 2008 21:51:42 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20537259 jtraynor : Most of these SVCHOST/wuaueng.dll problems involved both Microsoft and CA Antivirus software. Other A/V vendors may be involved, but the most prominent was CA. A temporary circumvention was to exclude .msp and .msi files from the real-time scanner - not a great solution, but it worked for many people. CA indicated the issue surfaced with engine V31.4, and a little over a week ago they released engine V31.5. The new engine seemed to resolve most of these issues. [Remove the exclusions!]

In a few isolated cases [no CA installed, or the new CA engine in place] the problem persisted. In these cases, stopping the Automatic Update service, then deleting the C:\Windows\SoftwareDistribution folder, followed by a reboot, did the trick. There may be other unique situations, but the corrections noted above resolved the predominant cases.
;)]]> http://www.dslreports.com/forum/remark,20537259 Sun, 25 May 2008 12:32:26 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20527651 bcastner : You misunderstood what I wrote.

In some cases the issue can be traced to busy servers. However, the "fix" suggested earlier above will likely resolve the issue in any case.

The "Fix":

From a command session, type carefully:

net stop wuauserv
rmdir c:\windows\softwaredistribution /s
net start wuauserv

You need to stop the wuauserv service (if running) to clear the softwaredistribution folder.
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users

]]> http://www.dslreports.com/forum/remark,20527651 Fri, 23 May 2008 07:13:03 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20527498 anon : It has nothing to do with wether or not you use Windows Update or Microsoft Update servers.

I'm behind a WSUS (3.0) server, and get the same wuaueng.dll issue.

It's happening across 4 PC's here now in the office, all 4 PC's only talk to the WSUS server.]]> http://www.dslreports.com/forum/remark,20527498 Fri, 23 May 2008 05:20:02 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20486166 bcastner : Part of the problem is that the servers at Microsoft are incredibly busy at the moment.

If using Microsoft Update and not the older Windows Update, flip back temporarily. The Windows Updates Servers are less stessed at the moment.

================================

I note too that there is a published workaround if you are using CA Antivirus. The SVCHOST issue is related only to those using this software. The workaround from CA:

quote:
1. "Open Security Center"
2. "Open Advance Settings"
3. Clicked on the "Options" button
4. Clicked on the "Modify" link under the Exclusions list and then "Added" *.msi and *.msp to the list and clicked OK


Discussion of the CA Antivirus SVCHOST issue: »www.villagegeek.com/
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users

]]> http://www.dslreports.com/forum/remark,20486166 Thu, 15 May 2008 09:40:55 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20486103 anon : you are saying this is a sp3 issue, never the less it happens to me with SP2, so it's like Apophis said it's not related to sp3 but with some other issue.]]> http://www.dslreports.com/forum/remark,20486103 Thu, 15 May 2008 09:28:19 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20472791 Apophis : This problem is now affecting Windows 2000 Professional computers as well as Windows XP Home/Pro/Media Center Editions.]]> http://www.dslreports.com/forum/remark,20472791 Mon, 12 May 2008 22:18:17 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20466969 bcastner : My original concern about software firewalls (a point completely missed by BudBob See Profile in his shouting above) was the repeated signs of a proxy failure in the update log. 90% of the time it is a software firewall client responsible for this class of Windows Update log errors. They were not being ruled in as the cause, but being ruled out as a factor. Later investigation about versioning issues with wuaueng.dll showed a looping cycle by Windows Update on certain files in the SP3 redistributable, so the discussion long ago moved away from any firewall focus.

The suggestion earlier by Apophis See Profile was an excellent one, and at the moment the accepted workaround:

Start, Run, CMD

In the black CMD session box, type (carefully):

net stop wuauserv
rmdir c:\windows\softwaredistribution /s
net start wuauserv
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users

]]> http://www.dslreports.com/forum/remark,20466969 Sun, 11 May 2008 20:39:09 EDT Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues http://www.dslreports.com/forum/remark,20466290 jtraynor : This is no Firewall issue. As noted, it started on Wednesday, May 7th, and although it does not affect every machine, it does get some. My problem started at exactly 10AM, and reappeared several times when a Windows Update decided to come to life on its own (not scheduled). I now have the problem on a second machine. I even updated to SP3 on the 2nd machine but that did not resolve to problem.

This is serious, and it is getting worse. Where is Microsoft????]]> http://www.dslreports.com/forum/remark,20466290 Sun, 11 May 2008 17:26:27 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20465667 BudBob : It NOT a firewall issue, I am using hardware firewalls and have the same issues. ]]> http://www.dslreports.com/forum/remark,20465667 Sun, 11 May 2008 14:36:10 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20462876 anon : After observing the boot process with Process Explorer, wuaueng.dll loads early in boot priority bringing the boot up process to a crawl and is NOT relinqishing CPU cycles so that other drivers and software can load. Using about 95% of resources it takes an unusual amount of time to get the computer any where usable with only 5% available to load the rest of the system. There is no way a simple web app should consume that amount of resources EVER.]]> http://www.dslreports.com/forum/remark,20462876 Sat, 10 May 2008 20:05:02 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20462750 anon : Any more info if this fixed the problem.

I Don't believe this is a firewall problem. I don't use a software firewall at all. Hardware with rules only, and I still have it. Also the service is not giving up it's CPU cycles as it should because there is very noticeable lag to the system at all times. Especially on-line when gaming.]]> http://www.dslreports.com/forum/remark,20462750 Sat, 10 May 2008 19:24:13 EDT Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20458556 Apophis : Im making some progress, I did the following.

net stop wuauserv

rmdir c:\windows\softwaredistribution /s

net start wuauserv

Now when going back to the windows update site it asked me to install the KB892130 (Windows Genuine Advantage Pack) which I did. After this, the site is asking me to install Service Pack 3 which I am now doing. So far, SVCHOST.exe / wuaueng.dll have not got stuck in a loop.

More to follow....]]> http://www.dslreports.com/forum/remark,20458556 Fri, 09 May 2008 18:33:36 EDT Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues http://www.dslreports.com/forum/remark,20458435 Apophis : If this was a simple firewall issue I would not have the same exact problem with now 8 different computers at 6 different locations. There are now several discussions going on about this same issue starting on wednesday afternoon which is when the problem first appears now on the Microsoft.XP.General forums.

Forcing the installation of the windowsupdateagent30-x86.exe did not help.

Running this batch file also did not help.

Regsvr32 wups2.dll /s
Regsvr32 licdll.dll /s
Regsvr32 regwizc.dll /s
regsvr32 msxml.dll /s
regsvr32 msxml2.dll /s
regsvr32 msxml3.dll /s
regsvr32 comcat.dll /s
regsvr32 shdoc401.dll /s
regsvr32 shdoc401.dll /i /s
regsvr32 asctrls.ocx /s
regsvr32 oleaut32.dll /s
regsvr32 shdocvw.dll /I /s
regsvr32 shdocvw.dll /s
regsvr32 browseui.dll /s
regsvr32 browseui.dll /I /s
regsvr32 msrating.dll /s
regsvr32 mlang.dll /s
regsvr32 hlink.dll /s
regsvr32 mshtmled.dll /s
regsvr32 urlmon.dll /s
regsvr32 plugin.ocx /s
regsvr32 sendmail.dll /s
regsvr32 scrobj.dll /s
regsvr32 mmefxe.ocx /s
regsvr32 corpol.dll /s
regsvr32 jscript.dll /s
regsvr32 msxml.dll /s
regsvr32 imgutil.dll /s
regsvr32 thumbvw.dll /s
regsvr32 cryptext.dll /s
regsvr32 rsabase.dll /s
regsvr32 inseng.dll /s
regsvr32 iesetup.dll /i /s
regsvr32 cryptdlg.dll /s
regsvr32 actxprxy.dll /s
regsvr32 dispex.dll /s
regsvr32 occache.dll /s
regsvr32 occache.dll /i /s
regsvr32 iepeers.dll /s
regsvr32 urlmon.dll /i /s
regsvr32 cdfview.dll /s
regsvr32 webcheck.dll /s
regsvr32 mobsync.dll /s
regsvr32 pngfilt.dll /s
regsvr32 licmgr10.dll /s
regsvr32 icmfilter.dll /s
regsvr32 hhctrl.ocx /s
regsvr32 inetcfg.dll /s
regsvr32 tdc.ocx /s
regsvr32 MSR2C.DLL /s
regsvr32 msident.dll /s
regsvr32 msieftp.dll /s
regsvr32 xmsconf.ocx /s
regsvr32 ils.dll /s
regsvr32 msoeacct.dll /s
regsvr32 inetcomm.dll /s
regsvr32 msdxm.ocx /s
regsvr32 dxmasf.dll /s
regsvr32 l3codecx.ax /s
regsvr32 acelpdec.ax /s
regsvr32 mpg4ds32.ax /s
regsvr32 voxmsdec.ax /s
regsvr32 danim.dll /s
regsvr32 Daxctle.ocx /s
regsvr32 lmrt.dll /s
regsvr32 datime.dll /s
regsvr32 dxtrans.dll /s
regsvr32 dxtmsft.dll /s
regsvr32 WEBPOST.DLL /s
regsvr32 WPWIZDLL.DLL /s
regsvr32 POSTWPP.DLL /s
regsvr32 CRSWPP.DLL /s
regsvr32 FTPWPP.DLL /s
regsvr32 FPWPP.DLL /s
regsvr32 WUAPI.DLL /s
regsvr32 WUAUENG.DLL /s
regsvr32 ATL.DLL /s
regsvr32 WUCLTUI.DLL /s
regsvr32 WUPS.DLL /s
regsvr32 WUWEB.DLL /s
regsvr32 wshom.ocx /s
regsvr32 wshext.dll /s
regsvr32 vbscript.dll /s
regsvr32 scrrun.dll mstinit.exe /setup /s
regsvr32 msnsspc.dll /SspcCreateSspiReg /s
regsvr32 msapsspc.dll /SspcCreateSspiReg /s
regsvr32 wups.dll /s
regsvr32 wuaueng.dll /s
regsvr32 wucltui.dll /s
regsvr32 wuweb.dll /s
regsvr32 msxml.dll /s
regsvr32 msxml2.dll /s
regsvr32 msxml3.dll /s
regsvr32 urlmon.dll /s
regsvr32 initpki.dll /s
regsvr32 mssip32.dll /s
regsvr32 wintrust.dll /s
regsvr32 dssenh.dll /s
regsvr32 rsaenh.dll /s
regsvr32 gpkcsp.dll /s
regsvr32 sccbase.dll /s
regsvr32 slbcsp.dll /s
regsvr32 cryptdlg.dll /s
regsvr32 jscript.dll /s

At this point Im convinced that the issue has something to do with the Windows Update servers them selfs. Im seeing this issue now on several computers with and without the latest windows updates and even some with and without XPSP3.]]> http://www.dslreports.com/forum/remark,20458435 Fri, 09 May 2008 18:06:48 EDT Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues http://www.dslreports.com/forum/remark,20458334 bcastner : So it is not the case that wuaeng is doing nothing but wasting CPU cycles.

It is trying, without success, to download something. Your logs at a glance suggest a proxy failure, which usually means a firewall issue. Examples where this is a common issue: Norton Internet Security 2007.

Usual first crack at fixing the issue: Uninstall the firewall or integrated firewall/Antivirus software. Reboot. Reinstall.

The issue arises because of antivirus and/or firewalls with HIPS capability. They do not reliably adjust to versioning changes in processes and services that they have whitelisted for internet access. Some third-party firealls have a feature to rebuild their whitelist HIPS table. Some do not. If unavailable, uninstall, reboot and reinstall. It will rescan and add the services and processes again.
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users

]]> http://www.dslreports.com/forum/remark,20458334 Fri, 09 May 2008 17:35:44 EDT Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues http://www.dslreports.com/forum/remark,20458325 bcastner : So it is not the case that wuaeng is doing nothing but wasting CPU cycles.

It is trying, without success, to download something. Your logs at a glance suggest a proxy failure, which usually means a firewall issue. Examples where this is a common issue: Norton Internet Security 2007.]]> http://www.dslreports.com/forum/remark,20458325 Fri, 09 May 2008 17:33:23 EDT Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues http://www.dslreports.com/forum/remark,20458309 Apophis : Here's is some info from the WindowsUpdate.log file when the computer is using 100% on SVCHOST.exe / WUAUENG.DLL

2008-05-09 13:01:02:968 836 c28 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: Send failed with hr = 80072ee7.
2008-05-09 13:01:02:984 836 c28 Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: Bypass List used : Auth Schemes used :
2008-05-09 13:01:02:984 836 c28 Misc WARNING: WinHttp: SendRequestUsingProxy failed for . error 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: DownloadFileInternal failed for »www.update.microsoft.com/v7/wind···dir.cab: error 0x8024402c
2008-05-09 13:01:02:984 836 c28 Agent WARNING: Failed to obtain the authorization cab URLs, hr=0X8024402C
2008-05-09 13:01:02:984 836 c28 Agent * WARNING: Online service registration/service ID resolution failed, hr=0x8024402C
2008-05-09 13:01:03:296 836 c28 Agent * WARNING: Exit code = 0x8024402C]]> http://www.dslreports.com/forum/remark,20458309 Fri, 09 May 2008 17:29:19 EDT Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues http://www.dslreports.com/forum/remark,20458062 Apophis : Ive got 3 more customer computer with this same exact issue, however, these 3 computer DO NOT have SP3 installed.

Im trying to figure out which windows update is causing the problem now....]]> http://www.dslreports.com/forum/remark,20458062 Fri, 09 May 2008 16:33:45 EDT Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues http://www.dslreports.com/forum/remark,20456918 yeti34 : I have noticed the CPU usage as well and just thought my box was jacked. I now see it is not only me with this issue. I hope there is some sort of resolution to the issue. ]]> http://www.dslreports.com/forum/remark,20456918 Fri, 09 May 2008 12:48:10 EDT Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues http://www.dslreports.com/forum/remark,20455612 bcastner : It is not unusual for wuaueng.dll to have periods of high CPU usage.

Do not do anything for several days to test if this is a persistent issue, or a temporary one.

Remember that this is a background task, so it will cede CPU attention to foreground tasks when necessary.]]> http://www.dslreports.com/forum/remark,20455612 Fri, 09 May 2008 08:58:34 EDT Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues http://www.dslreports.com/forum/remark,20455604 anon : I am having the same issue as soon as I boot up the service host associated with windows update wuaueng.dll seizes up my computer with almost 100% use. I have SP3 installed but I too have the file dated 7/30/07.]]> http://www.dslreports.com/forum/remark,20455604 Fri, 09 May 2008 08:56:26 EDT Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues http://www.dslreports.com/forum/remark,20454330 bluepoint : I've checked the wuaueng.dll in my system a saw both versions you've mentioned. The wuaueng.dll dated 4/14/08 is version 5.4.3790.5512 while the one that resides in my system32 folder is version 7.0.6000.381 dated 07/30/07.
I believe this is the reason WU replaces the file as it has the higher version. With that said, I am not experiencing your high CPU usage when visiting WU/MU.

Added below + pics
I believe the wuaueng.dll that came with the service pack is the old component of WU, it only carries the newer date when the SP was constructed.

SP properties		 

SP version		 

System32 properties		 

System32 Version		 
]]> http://www.dslreports.com/forum/remark,20454330 Thu, 08 May 2008 22:34:12 EDT Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues http://www.dslreports.com/forum/remark,20453846 Apophis : Just started a chat session with MS, I'll let you know where this goes.]]> http://www.dslreports.com/forum/remark,20453846 Thu, 08 May 2008 20:58:32 EDT Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues http://www.dslreports.com/forum/remark,20453824 bcastner : I cannot replicate this. However I do believe you. there could be a fact case where this happens. I have bugged it for you and will reply if I hear anything. Perhaps somebody else has already dealt with this issue and will respond.

If I were you I would, sitting at one of the machines, use the free support assistance by phone, online or chat for XP SP3 issues:

Free unlimited installation and compatibility support is available for Windows XP, but only for Service Pack 3 (SP3), until 14 Apr-09. Chat and e-mail support is available only in the United States and Canada.

quote:
. US: »support.microsoft.com/oas/defaul···d=522131

. CA: »support.microsoft.com/oas/defaul···d=522131

. UK: »support.microsoft.com/oas/defaul···d=522131

. AU: »support.microsoft.com/oas/defaul···d=522131

. Other: »support.microsoft.com/oas/defaul···rid=1173 | select Windows XP | select Windows XP Service Pack 3

--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users

]]> http://www.dslreports.com/forum/remark,20453824 Thu, 08 May 2008 20:52:07 EDT [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem. http://www.dslreports.com/forum/remark,20453781 Apophis : Microsoft have an obvious problem with their windows update site. Here's what Ive been seeing. On computer that have Service Pack 3 install, if the users goes and tries to do any windows updates, the website wants to install an update to the updater service which does the following.

The Service pack 3 file: wuaueng.dll (4/14/08) is replaced by a wuaueng.dll file which is dated: (7/30/07).

Once the computer does this anytime the updater program auto-starts or is initiated by the windows update site, the wuaueng.dll file running inside of the svchost.exe will use 100% of the primary system processor bringing the entire system to a crawl.

Ive found no fix to this issue besides stopping the windows update service and copying the newer file back to the c:\windows\system32 directory. Only bad thing is that you cant use the windows update site again as it will try to replace this file again.

If someone has a fix to this please let me know as Ive had 3 customer computers already have this issue today alone.]]> http://www.dslreports.com/forum/remark,20453781 Thu, 08 May 2008 20:43:02 EDT