Link to home
Start Free TrialLog in
Avatar of regsamp
regsamp

asked on

SVCHOST.EXE causing CPU to run at 100%

A Windows XP Pro SP2 machine is having the CPU usage stay at 100% because the SVCHOST.EXE file is using 99000K of the processor and is taxing the system.  We have tried the patch KB916089.  Tried running these commands in batch script:
**********************************************************************
net stop wuauserv

sc config wuauserv type= own start= auto
sc config BITS start= auto

regsvr32 atl.dll /s
regsvr32 wuapi.dll /s
regsvr32 wups.dll /s
regsvr32 wups2.dll /s
regsvr32 wuaueng.dll /s
regsvr32 wuaueng1.dll /s
regsvr32 wucltui.dll /s
regsvr32 wuweb.dll /s
regsvr32 MSXML3.dll /s
regsvr32 qmgr.dll /s
regsvr32 qmgrprxy.dll /s
regsvr32 jscript.dll /s
net start wuauserv

We cannot toggle Automatic Updates on and off because we have WSUS and a group policy prevents this.  Any assistance offered would be greatly appreciated.  
ASKER CERTIFIED SOLUTION
Avatar of Alan Huseyin Kayahan
Alan Huseyin Kayahan
Flag of Sweden image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of regsamp
regsamp

ASKER

Thanks MrHusy, will try those steps and post back.
try reapplying SP2
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of regsamp

ASKER

Tried patch 927891 and were still having the same issue.  
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
If it is WU, are you using the New Microsoft Update? or the plain jane Windows Update.....There is a setting at the update page to revert back to Windows Update....
Avatar of regsamp

ASKER

No doubt is it SVCHOST.EXE as the memory usuage goes over 99,000K and the CPU stays locked at 100%.  The Windows Update for this machine is given updates by WSUS.  Did the following steps and rebooted and the issue has no reoccured yet but will monitor and post back.
* Click on Start, Run and type the following command in the open box and click OK

      services.msc

    * Find the Automatic Updates service and double-click on it.
    * Click on the Log On Tab and make sure the "Local System Account" is selected as the logon account and the box for "allow service to interact with desktop" is UNCHECKED.
    * Under the Hardware Profile section in the Log On Tab, make sure the service is enabled.
    * On the General Tab, the Startup Type should be Automatic, if not, drop the box down and select Automatic.
    * Under "Service Status" on the General tab, the service should be Started, click the Start button enable it.
    * Repeat the steps above for the service "Background Intelligent Transfer Service (BITS)"

Re-Register Windows Update DLLs

    * Click on Start, Run, and type CMD and click ok
    * In the black command window type the following command and press Enter

      REGSVR32 WUAPI.DLL

    * Wait until you receive the "DllRegisterServer in WUAPI.DLL succeeded" message and click OK
    * Repeat the last two steps above for each of the following commands (I know you already did but please repeat again after above)

      REGSVR32 WUAUENG.DLL
      REGSVR32 WUAUENG1.DLL
      REGSVR32 ATL.DLL
      REGSVR32 WUCLTUI.DLL
      REGSVR32 WUPS.DLL
      REGSVR32 WUPS2.DLL
      REGSVR32 WUWEB.DLL

Remove Corrupted Windows Update Files

    * At the command prompt, type the following command and press Enter

      net stop WuAuServ
    * Still at the command prompt,

      type cd %windir% and press Enter
    * In the opened folder, type the following command and press Enter to rename the SoftwareDistribution Folder

      ren SoftwareDistribution SD_OLD
    * Restart the Windows Update Service by typing the following at the command prompt

      net start WuAuServ

    * type Exit and Press Enter to close the command prompt

Reboot Windows

    * click on Start, Shut Down, and Restart to reboot Windows XP
"No doubt is it SVCHOST.EXE as the memory usuage goes over 99,000K and the CPU stays locked at 100%."

Just to clarify, I understood that part, but I was curious to see if you knew exactly what .exe or .dll UNDER svchost.exe was tanking the CPU.....Process Explorer could have helped identify that further....

Glad it hasnt resurfaced yet though....
Avatar of regsamp

ASKER

Ah, sorry johnb6767, not sure on the .exe or dll under svchost.exe that was tanking the CPU but will check if it happens again here.  
Hopefully it wont......Good luck!!!
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of regsamp

ASKER

I will look at doing SP2 over probably as a last resort as it takes a lot of time to redo.  
We had the same issue.  Im not sure if you have access to your WSUS server or not.  The quick and dirty fix for us was to do a search in WSUS for "office" select all the updates and decline them all.  I know its not ideal but it seems like it will help until Microsoft gets their act togeather.
Avatar of regsamp

ASKER

Well, issue has not returned.  That is one nasty bug.