workablob
join:2004-06-09
Houston, TX
 ·Comcast
| reply to Apophis
Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem.
I have been all over this particular issue and after more than a year and false hopes I disabled Automatic Updates service in the services applet.
I periodically update my Ghost image with new patches but then I also use Disk Protection in SteadyState so if I have any bad stuff get in due to a missing patch I get a new system when I reboot.
$.02
David |
|
bcastner
Premium,VIP,MVM
join:2002-09-25
Chevy Chase, MD
clubs: 
1 edit | reply to Camborita
Your detailed fix is longer than mine, but does the same thing at its core. The DLL registration is completely off-task and unrelated material for the issue being discussed in this thread.
Longer is not better, just longer. |
|
Camborita
@qwest.net
| reply to paradigm
Check out this blog. It has a more detailed solution than the simple "fix" suggested earlier:
»www.stuckiniowa.com/svchostexe-1···log-257/ |
|
jtraynor
Loosemoose
Premium
join:2002-10-28
Carefree, AZ
1 edit | reply to bcastner
Most of these SVCHOST/wuaueng.dll problems involved both Microsoft and CA Antivirus software. Other A/V vendors may be involved, but the most prominent was CA. A temporary circumvention was to exclude .msp and .msi files from the real-time scanner - not a great solution, but it worked for many people. CA indicated the issue surfaced with engine V31.4, and a little over a week ago they released engine V31.5. The new engine seemed to resolve most of these issues. [Remove the exclusions!]
In a few isolated cases [no CA installed, or the new CA engine in place] the problem persisted. In these cases, stopping the Automatic Update service, then deleting the C:\Windows\SoftwareDistribution folder, followed by a reboot, did the trick. There may be other unique situations, but the corrections noted above resolved the predominant cases.
 |
|
bcastner
Premium,VIP,MVM
join:2002-09-25
Chevy Chase, MD
clubs:
 ·Verizon Online DSL
| reply to paradigm
You misunderstood what I wrote.
In some cases the issue can be traced to busy servers. However, the "fix" suggested earlier above will likely resolve the issue in any case.
The "Fix":
From a command session, type carefully:
net stop wuauserv
rmdir c:\windows\softwaredistribution /s
net start wuauserv
You need to stop the wuauserv service (if running) to clear the softwaredistribution folder.
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users
|
|
paradigm
@net.uk
| reply to Apophis
It has nothing to do with wether or not you use Windows Update or Microsoft Update servers.
I'm behind a WSUS (3.0) server, and get the same wuaueng.dll issue.
It's happening across 4 PC's here now in the office, all 4 PC's only talk to the WSUS server. |
|
bcastner
Premium,VIP,MVM
join:2002-09-25
Chevy Chase, MD
clubs:
·Verizon Online DSL
| reply to fahrenheit
Part of the problem is that the servers at Microsoft are incredibly busy at the moment.
If using Microsoft Update and not the older Windows Update, flip back temporarily. The Windows Updates Servers are less stessed at the moment.
================================
I note too that there is a published workaround if you are using CA Antivirus. The SVCHOST issue is related only to those using this software. The workaround from CA:
quote:
1. "Open Security Center"
2. "Open Advance Settings"
3. Clicked on the "Options" button
4. Clicked on the "Modify" link under the Exclusions list and then "Added" *.msi and *.msp to the list and clicked OK
Discussion of the CA Antivirus SVCHOST issue: »www.villagegeek.com/
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users
|
|
fahrenheit
@unl.pt | reply to Apophis
you are saying this is a sp3 issue, never the less it happens to me with SP2, so it's like Apophis said it's not related to sp3 but with some other issue. |
|
Apophis
Jaffa Kree
Premium
join:2001-12-27
Holmen, WI
clubs: | reply to Apophis
This problem is now affecting Windows 2000 Professional computers as well as Windows XP Home/Pro/Media Center Editions. |
|
bcastner
Premium,VIP,MVM
join:2002-09-25
Chevy Chase, MD
clubs:
·Verizon Online DSL
1 edit | reply to BudBob
My original concern about software firewalls (a point completely missed by BudBob  in his shouting above) was the repeated signs of a proxy failure in the update log. 90% of the time it is a software firewall client responsible for this class of Windows Update log errors. They were not being ruled in as the cause, but being ruled out as a factor. Later investigation about versioning issues with wuaueng.dll showed a looping cycle by Windows Update on certain files in the SP3 redistributable, so the discussion long ago moved away from any firewall focus.
The suggestion earlier by Apophis was an excellent one, and at the moment the accepted workaround:
Start, Run, CMD
In the black CMD session box, type (carefully):
net stop wuauserv
rmdir c:\windows\softwaredistribution /s
net start wuauserv
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users
|
|
jtraynor
Loosemoose
Premium
join:2002-10-28
Carefree, AZ
| reply to bcastner
Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues
This is no Firewall issue. As noted, it started on Wednesday, May 7th, and although it does not affect every machine, it does get some. My problem started at exactly 10AM, and reappeared several times when a Windows Update decided to come to life on its own (not scheduled). I now have the problem on a second machine. I even updated to SP3 on the 2nd machine but that did not resolve to problem.
This is serious, and it is getting worse. Where is Microsoft???? |
|
BudBob
Premium
join:2003-01-01
Mckinney, TX | reply to Van Helsing
Re: [XP Pro] Wuaueng.dll / Svchost.exe 100% Usage Problem.
It NOT a firewall issue, I am using hardware firewalls and have the same issues. |
|
Van Helsing
@cox.net
| reply to Apophis
After observing the boot process with Process Explorer, wuaueng.dll loads early in boot priority bringing the boot up process to a crawl and is NOT relinqishing CPU cycles so that other drivers and software can load. Using about 95% of resources it takes an unusual amount of time to get the computer any where usable with only 5% available to load the rest of the system. There is no way a simple web app should consume that amount of resources EVER. |
|
Van Helsing
@cox.net
| reply to Apophis
Any more info if this fixed the problem.
I Don't believe this is a firewall problem. I don't use a software firewall at all. Hardware with rules only, and I still have it. Also the service is not giving up it's CPU cycles as it should because there is very noticeable lag to the system at all times. Especially on-line when gaming. |
|
Apophis
Jaffa Kree
Premium
join:2001-12-27
Holmen, WI
clubs:
1 edit | reply to Apophis
Im making some progress, I did the following.
net stop wuauserv
rmdir c:\windows\softwaredistribution /s
net start wuauserv
Now when going back to the windows update site it asked me to install the KB892130 (Windows Genuine Advantage Pack) which I did. After this, the site is asking me to install Service Pack 3 which I am now doing. So far, SVCHOST.exe / wuaueng.dll have not got stuck in a loop.
More to follow.... |
|
Apophis
Jaffa Kree
Premium
join:2001-12-27
Holmen, WI
clubs:
| reply to Apophis
Re: [XP Pro] Wuaueng.dll / XP Sp3 Update Issues
If this was a simple firewall issue I would not have the same exact problem with now 8 different computers at 6 different locations. There are now several discussions going on about this same issue starting on wednesday afternoon which is when the problem first appears now on the Microsoft.XP.General forums.
Forcing the installation of the windowsupdateagent30-x86.exe did not help.
Running this batch file also did not help.
Regsvr32 wups2.dll /s
Regsvr32 licdll.dll /s
Regsvr32 regwizc.dll /s
regsvr32 msxml.dll /s
regsvr32 msxml2.dll /s
regsvr32 msxml3.dll /s
regsvr32 comcat.dll /s
regsvr32 shdoc401.dll /s
regsvr32 shdoc401.dll /i /s
regsvr32 asctrls.ocx /s
regsvr32 oleaut32.dll /s
regsvr32 shdocvw.dll /I /s
regsvr32 shdocvw.dll /s
regsvr32 browseui.dll /s
regsvr32 browseui.dll /I /s
regsvr32 msrating.dll /s
regsvr32 mlang.dll /s
regsvr32 hlink.dll /s
regsvr32 mshtmled.dll /s
regsvr32 urlmon.dll /s
regsvr32 plugin.ocx /s
regsvr32 sendmail.dll /s
regsvr32 scrobj.dll /s
regsvr32 mmefxe.ocx /s
regsvr32 corpol.dll /s
regsvr32 jscript.dll /s
regsvr32 msxml.dll /s
regsvr32 imgutil.dll /s
regsvr32 thumbvw.dll /s
regsvr32 cryptext.dll /s
regsvr32 rsabase.dll /s
regsvr32 inseng.dll /s
regsvr32 iesetup.dll /i /s
regsvr32 cryptdlg.dll /s
regsvr32 actxprxy.dll /s
regsvr32 dispex.dll /s
regsvr32 occache.dll /s
regsvr32 occache.dll /i /s
regsvr32 iepeers.dll /s
regsvr32 urlmon.dll /i /s
regsvr32 cdfview.dll /s
regsvr32 webcheck.dll /s
regsvr32 mobsync.dll /s
regsvr32 pngfilt.dll /s
regsvr32 licmgr10.dll /s
regsvr32 icmfilter.dll /s
regsvr32 hhctrl.ocx /s
regsvr32 inetcfg.dll /s
regsvr32 tdc.ocx /s
regsvr32 MSR2C.DLL /s
regsvr32 msident.dll /s
regsvr32 msieftp.dll /s
regsvr32 xmsconf.ocx /s
regsvr32 ils.dll /s
regsvr32 msoeacct.dll /s
regsvr32 inetcomm.dll /s
regsvr32 msdxm.ocx /s
regsvr32 dxmasf.dll /s
regsvr32 l3codecx.ax /s
regsvr32 acelpdec.ax /s
regsvr32 mpg4ds32.ax /s
regsvr32 voxmsdec.ax /s
regsvr32 danim.dll /s
regsvr32 Daxctle.ocx /s
regsvr32 lmrt.dll /s
regsvr32 datime.dll /s
regsvr32 dxtrans.dll /s
regsvr32 dxtmsft.dll /s
regsvr32 WEBPOST.DLL /s
regsvr32 WPWIZDLL.DLL /s
regsvr32 POSTWPP.DLL /s
regsvr32 CRSWPP.DLL /s
regsvr32 FTPWPP.DLL /s
regsvr32 FPWPP.DLL /s
regsvr32 WUAPI.DLL /s
regsvr32 WUAUENG.DLL /s
regsvr32 ATL.DLL /s
regsvr32 WUCLTUI.DLL /s
regsvr32 WUPS.DLL /s
regsvr32 WUWEB.DLL /s
regsvr32 wshom.ocx /s
regsvr32 wshext.dll /s
regsvr32 vbscript.dll /s
regsvr32 scrrun.dll mstinit.exe /setup /s
regsvr32 msnsspc.dll /SspcCreateSspiReg /s
regsvr32 msapsspc.dll /SspcCreateSspiReg /s
regsvr32 wups.dll /s
regsvr32 wuaueng.dll /s
regsvr32 wucltui.dll /s
regsvr32 wuweb.dll /s
regsvr32 msxml.dll /s
regsvr32 msxml2.dll /s
regsvr32 msxml3.dll /s
regsvr32 urlmon.dll /s
regsvr32 initpki.dll /s
regsvr32 mssip32.dll /s
regsvr32 wintrust.dll /s
regsvr32 dssenh.dll /s
regsvr32 rsaenh.dll /s
regsvr32 gpkcsp.dll /s
regsvr32 sccbase.dll /s
regsvr32 slbcsp.dll /s
regsvr32 cryptdlg.dll /s
regsvr32 jscript.dll /s
At this point Im convinced that the issue has something to do with the Windows Update servers them selfs. Im seeing this issue now on several computers with and without the latest windows updates and even some with and without XPSP3. |
|
bcastner
Premium,VIP,MVM
join:2002-09-25
Chevy Chase, MD
clubs:
·Verizon Online DSL
| reply to Apophis
So it is not the case that wuaeng is doing nothing but wasting CPU cycles.
It is trying, without success, to download something. Your logs at a glance suggest a proxy failure, which usually means a firewall issue. Examples where this is a common issue: Norton Internet Security 2007.
Usual first crack at fixing the issue: Uninstall the firewall or integrated firewall/Antivirus software. Reboot. Reinstall.
The issue arises because of antivirus and/or firewalls with HIPS capability. They do not reliably adjust to versioning changes in processes and services that they have whitelisted for internet access. Some third-party firealls have a feature to rebuild their whitelist HIPS table. Some do not. If unavailable, uninstall, reboot and reinstall. It will rescan and add the services and processes again.
--
============
MS-MVP 2004 - -2008, ASAP Member
Users Helping Users
|
|
bcastner
Premium,VIP,MVM
join:2002-09-25
Chevy Chase, MD
clubs:
·Verizon Online DSL
| reply to Apophis
So it is not the case that wuaeng is doing nothing but wasting CPU cycles.
It is trying, without success, to download something. Your logs at a glance suggest a proxy failure, which usually means a firewall issue. Examples where this is a common issue: Norton Internet Security 2007. |
|
Apophis
Jaffa Kree
Premium
join:2001-12-27
Holmen, WI
clubs:
| reply to Apophis
Here's is some info from the WindowsUpdate.log file when the computer is using 100% on SVCHOST.exe / WUAUENG.DLL
2008-05-09 13:01:02:968 836 c28 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: Send failed with hr = 80072ee7.
2008-05-09 13:01:02:984 836 c28 Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: Bypass List used : Auth Schemes used :
2008-05-09 13:01:02:984 836 c28 Misc WARNING: WinHttp: SendRequestUsingProxy failed for . error 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2008-05-09 13:01:02:984 836 c28 Misc WARNING: DownloadFileInternal failed for »www.update.microsoft.com/v7/wind···dir.cab: error 0x8024402c
2008-05-09 13:01:02:984 836 c28 Agent WARNING: Failed to obtain the authorization cab URLs, hr=0X8024402C
2008-05-09 13:01:02:984 836 c28 Agent * WARNING: Online service registration/service ID resolution failed, hr=0x8024402C
2008-05-09 13:01:03:296 836 c28 Agent * WARNING: Exit code = 0x8024402C |
|
Apophis
Jaffa Kree
Premium
join:2001-12-27
Holmen, WI
clubs: | reply to Apophis
Ive got 3 more customer computer with this same exact issue, however, these 3 computer DO NOT have SP3 installed.
Im trying to figure out which windows update is causing the problem now.... |
|
