XP Windows / Automatic Updates SVCHOST.exe 100% CPU .. MS did something.


Recommended Posts

Time to upgrade maybe?

For your information, this is an XP virtual machine running under Windows 7 Pro, which exists to support those applications and hardware which Windows 7 doesn't.  If Microsoft had been more attentive to supporting legacy applications and hardware, I wouldn't need XP at all.

A dumb question perhaps, but how do you turn Automatic Updates OFF?  I'm looking at the Microsoft Update home page, and on the right is a green shield with a check-mark in it, beside which are the words "Automatic Updates Turned ON" -- clicking on that does nothing.  Below it is the link "PIck a time to install updates" but there is no link to turn them off.

I applied this patch [KB2879017] a week or so ago and it fixed my "99% CPU" problem on my XP machine until today.  Now, the CPU load goes to 100% with svchost.exe within several minutes of booting, even if I don't do anything else.  If I kill svchost.exe then i have no network connectivity.

 

 So I installed KB2888505 today, and it seems to have fixed the problem again--at least for now.  Let's see how long it lasts this time.

A dumb question perhaps, but how do you turn Automatic Updates OFF?  I'm looking at the Microsoft Update home page, and on the right is a green shield with a check-mark in it, beside which are the words "Automatic Updates Turned ON" -- clicking on that does nothing.  Below it is the link "PIck a time to install updates" but there is no link to turn them off.

Right click on My Computer and select Properties. Then its the Auto Update tab.

For your information, this is an XP virtual machine running under Windows 7 Pro, which exists to support those applications and hardware which Windows 7 doesn't.  If Microsoft had been more attentive to supporting legacy applications and hardware, I wouldn't need XP at all.

Casualties of war. Microsoft first and foremost has a priority to secure their code. Whatever apps that breaks is on the developer to fix. If they don't, then oh well, there's not much Microsoft can do. Eventually somewhere, you have to draw a line where support gets cut off, and move on. You can't support everything forever.

For your information, this is an XP virtual machine running under Windows 7 Pro, which exists to support those applications and hardware which Windows 7 doesn't.  If Microsoft had been more attentive to supporting legacy applications and hardware, I wouldn't need XP at all.

 

I personally wouldn't blame Microsoft for lazy software developers, but that's just me.  And common sense.

Just joined to report my experiences with this. And hopefully help someone battling the same problems...

 

First run into the problem at the end of last month, on a clean XP SP3 Pro install, same symptoms as reported when wuauclt.exe is run svchost stuck running the CPU at 99%. Clearing SoftwareDeployment folder, running offline updates, and many other solutions didnt help me at all. Disabling Automatic Updates does work but its not an option in my place of work at this is dictated by GPOs, so its just re-enabled when a domain user logs in.

 

Fixed it at the time by installing IE8 (selecting NOT to install updates) then installing KB2879017-x86-ENU.exe IE updates. WSUS then worked as expected afterwards.

 

Now the past two days ive been dealing with another machine, with same problem. The updates above did not help. but repeating the same process and installing KB2888505-x86-ENU.exe in place of old updates solved the problem for me.

 

 

Seems KB2888505 has likely superseded KB2879017. Be interesting to see if the problem occurs again when the next IE update is out.

KB2879017 I provided was sufficent, just KB2888505 (by raynerph), which is newer, resolves problem also.

Thank You  :D

After 3 hours of searching at last found a fix KB2888505 worked for me  :laugh:

( KB2879017 didn't worked in my case :rolleyes:  ) 

 

Whatever happened to Page 8 of this thread?  I get just a blank page.

same here  :huh:   :s

I joined this site to say thank you to the thoughtful and diligent people who have found a solution to this problem.  I'm a computer tech, with a computer repair shop.  This problem was driving me crazy for the past few weeks.  I've read hundreds of forum threads and tried countless different fixes to try and fix this CPU spike problem.  I read over 2 hours worth of tech news and forums every day, and I have had several frustrating computers to work on the past 2 or 3 months.  I very much appreciate this group of people who spent over a month to ferret out a solution to this problem.

 

I began a very frustrating odyssey with a computer on Wednesday, which just happened to be the day after Update Tuesday.  After finding this thread, I tried the October cumulative security update, after I reached that post in the forum thread.  This did not work for me, though it worked for other people earlier in the month.  After that failed, I read more of the thread, and then I tried the November patch, which immediately fixed the problem.  It is obvious that the latest IE8 cumulative security update must be applied in order for the update process to work now.  This is also why it works to reinstall IE8 over the top of itself.  By reinstalling IE8, the latest cumulative security update will automatically be installed (If you leave the download updates box checked).

 

It is amazing to me that Microsoft continues to let this happen. Unless Microsoft decides to fix this issue, which I doubt will happen so close to the end of support, it seems to me that this problem will reoccur immediately after Update Tuesday on every month until Microsoft finishes releasing cumulative security updates to IE8.  I assume that on Update Tuesday (or whenever they issue a new cumulative security update) this problem will reoccur.  It will reoccur for everyone who has automatic updates turned on.  I believe that if automatic updates are turned on, the computer will begin to see the 100% CPU usage, until the time when the update successfully installs itself and the computer is rebooted.  And, I believe that those who check for updates manually will not see this spike until they begin a manual update, at which time, the CPU usage will jump to to 100%, and all updates will fail, until the cumulative security update is installed by manually downloading it and installing it, or by reinstalling IE8 over the top of itself, which should install the cumulative security update along with the program.

 

So, does everybody else think this thing will reoccur every month?

 

Thanks,

Chief

Microsoft seems to look into fixing this bug:

 

http://marc.info/?l=patchmanagement&m=138447194406363&w=2

 

 

 

> Thanks to those who have sent their logs. Thanks to your logs, we found the \
> backend changes that were supposed to be made to fix this weren't made.
> In short, this isn't a bug fix (at least not in the near term). The problem is \
> caused by the Windows Update client evaluating an exceptionally long supersedence \
> chain - something IE6 and IE7 have more than any other version of IE due to their \
> time in market. Each 'link' in the chain doubles the CPU resources needed to \
> evaluate it over the previous version. The chain is so long that the design \
> stymies the WUA client.
> We're working to expire these exceptionally old, dated, unnecessary updates in the \
> chain. The expirations for these didn't happen as planned.
> While I can't provide a date for when this will be done, we know it's an issue \
> affecting customer PCs and we're working to get it out as soon as possible to halt \
> the impact.
> Thanks - and I hope that helps...

 

http://news.softpedia.com/news/Microsoft-Promises-to-Fix-Windows-XP-SVCHOST-Bug-400634.shtml

I just joined to provide feedback on this topic. I'm running an XP machine on SP3 (not a clean install). The machine hung up totally on the most recent (November) set of Windows updates. Confirmed via Sysinternals Process Explorer that the problem was Windows update.

Thanks to raynerph's post, I did the following manually:

Turn AutoUpdate off

Download and install latest version of IE8

Go to Microsoft Update center, download KB2888505 (the latest as of November 15) for IE8 for XP, and install (it's important to download the correct version of this KB file).

Reboot

Start up IE 8, go to Microsoft Update center, and check for latest updates. After about 5 minutes of intensive svchost.exe scanning at 100% CPU utilization, the site returned the list of available updates, which could then be successfully installed (a total of 23 updates for this machine).

Now all is well, but AutoUpdate is still OFF!.

Thanks again to raynerph for his excellent advice.

Thank you for this valuable thread. I work in the IT industry for a storage vendor. We have many problems on native windows servers that relate not tour DSM but to Windows Storport and MPIO bugs which they only grudgingly recognize.

I credit this blog with keeping the pressure on Micorosoft to fix the updated bugs in Win XP SP3 post July system updates.

 

I fixed this with the prescribed method where a re-install of XP SP3 is not possible.

 

 

Step 1 Disabled Auto update but left notification in place

Step 2 Killed svchost at 99% CPU and wuadat.exe

Step 3 1 BITS (intelligent transfer) service was stopped manually restarted it.

Step 4 Uninstalled IE 8

Step 5 Reboot

Step 6 Via Firefox installed KB 287901

Step 7 via firefox installed KB2888505 (believe this  was the key and only released recently!!)

Step 8 reinstalled IE8 and updates

Step 9 Reboot

Step10 upon reboot yellow icon informs me that there are updates

Step 11 XP Security Updates (qty 9) updated and rebooted without incident.

Step 12 Reboot

Step 13 Java dependent (v 7 update 45) was enabled in browser and legacy java app ran (you guessed it Win7 65 bit is supported but only if you downgrade MS Office from 64 to 32 Bit - now you know why I have an XP virtual machine for this one unfortunately critical java app)

Step 14 No Svchost using any CPU above 9%

 

Yeah!!!

Ciber_Ted as of 11/19/2013

 

I credit this blog with keeping the pressure on Micorosoft to fix the updated bugs in Win XP SP3 post July system updates.

 

 

Indeed, if you Google SVCHOST 100% cpu this thread is 4th down on the 1st page of Google search results :D

 

People must be finding it, because ATM this thread has 211,000 views in 2 months or about 3,107 views per day! :D

Indeed, if you Google SVCHOST 100% cpu this thread is 4th down on the 1st page of Google search results :D

 

People must be finding it, because ATM this thread has 211,000 views in 2 months or about 3,107 views per day! :D

Good idea making the thread.

Indeed, if you Google SVCHOST 100% cpu this thread is 4th down on the 1st page of Google search results :D

 

People must be finding it, because ATM this thread has 211,000 views in 2 months or about 3,107 views per day! :D

 

I have seen this thread referenced elsewhere as well. It has some of the best discussion (and work-arounds) I have seen on the Internet on this issue. Its place in the Google search results is well deserved. While I thankfully don't have to support any machines running Windows XP anymore, some of my friends who do have thanked me for pointing them to this thread. It is somewhat disappointing that Windows XP still has enough marketshare to warrant the level of attention this issue has received, but thank you, warwagon, for starting the discussion!

I have seen this thread referenced elsewhere as well. It has some of the best discussion (and work-arounds) I have seen on the Internet on this issue. Its place in the Google search results is well deserved. While I thankfully don't have to support any machines running Windows XP anymore, some of my friends who do have thanked me for pointing them to this thread. It is somewhat disappointing that Windows XP still has enough marketshare to warrant the level of attention this issue has received, but thank you, warwagon, for starting the discussion!

This goes to show that the Neowin forum is still relevant as a compendium of technical knowledge. 

  • Like 2
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Does anyone here know if these updates are integrated into the UUP dump isos?
    • Motrix Next 3.9.4 by Razvan Serea Motrix Next is a modern, open-source cross-platform download manager built as the official next-generation successor to the original Motrix project. It has been completely rewritten using Tauri 2, Vue 3, TypeScript, and Rust, while still relying on the powerful Aria2 download engine for high-speed multi-protocol transfers. The app supports HTTP, HTTPS, FTP, BitTorrent, ED2K and magnet links, offering advanced features like multi-connection acceleration, task scheduling, bandwidth control, and batch download management. With a significantly reduced install size (around 20MB), it focuses on being lightweight, fast, and resource-efficient compared to traditional Electron-based download tools. Designed for Windows, macOS, and Linux, Motrix Next delivers a clean, modern UI inspired by Material Design 3 principles, with smooth animations and a minimal workflow. It improves usability through better download organization, system tray integration, and enhanced torrent handling including selective file downloads and tracker management. Motrix Next features: Multi-protocol downloads — HTTP, FTP, BitTorrent, Magnet, .torrent, ED2K, and Metalink tasks BitTorrent — Selective file download, DHT, peer exchange, encryption controls, metadata caching, GeoIP peer flags, and tracker probing Browser extension integration — Embedded Extension API with independent authentication, download confirmation, smart auto-submit, filename hints, referer/cookie forwarding, and real-time controls (Chrome Web Store · Edge Add-ons) Safe filename handling — Content-Disposition, RFC 2047, non-UTF-8, percent-encoded, and extensionless URL resolution with path traversal sanitization Download organization — Favorite and recent folders, optional file-type categorization, stale-record cleanup, and completed history backed by SQLite Concurrent downloads — Independent controls for active tasks, HTTP connections per server, segments per file, and BT peer limits Speed control — Global and per-task upload/download limits with day-of-week and time-of-day scheduling System integration — Tray operation, optional tray speed display, macOS Dock badge/progress, protocol handlers for magnet://, thunder://, and motrixnext:// Lightweight mode — Destroys the WebView on minimize-to-tray while Rust keeps the engine, task monitor, notifications, history, and extension routing alive Notifications and power options — Native task start/complete/failure notifications, keep-awake during downloads, and optional shutdown after completion Network controls — Scoped proxy support for downloads, app updates, and tracker updates, plus system proxy detection Auto-update channels — Stable, Beta, and Latest Across Channels policies with separate download and install phases Diagnostics — Structured logs, exportable diagnostic ZIPs, database integrity checks, automatic DB rebuild, and Linux GPU rendering fallback Personalization — Light/dark/system theme, 10 color schemes, 26 languages, and first-launch system language detection Motrix Next 3.9.4 changelog: Motrix Next 3.9.4 promotes the 3.9.4 beta cycle to stable. This release refreshes bundled engine binaries, improves task detail readability and copy actions, expands link handling for magnet and ED2K workflows, polishes responsive navigation and text wrapping, updates browser extension documentation, and refines network preference controls. New Features Task Detail copy actions — Added copyable values for task metadata and reusable render functions for long text fields. Magnet and ED2K lifecycle support — Added task lifecycle handling for magnet and ED2K links. History cleanup for deleted tasks — Deleted tasks can now remove matching history records. User-Agent management — Added user-agent management and improved related network preference controls. Browser extension documentation — Added the Firefox Add-ons link for the Motrix Next extension. Improvements Engine binaries — Updated bundled binaries for supported architectures. Task Detail readability — Long task names, URLs, tracker values, and copyable metadata now render more clearly. Deletion messaging — Refined localized task deletion text for clarity and consistency. Text wrapping — Improved URI input wrapping and task name multiline display. Navigation layout — Improved sub-navigation responsiveness. Disk allocation default — Changed the default file allocation method to trunc. Proxy controls — Improved proxy button styling in network preferences. Download: Motrix Next 64-bit | ARM64 | macOS ~20.0 MB (Open Source) Links: Website | macOS / Linux | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • NVIDIA officially supports Ubuntu, as linked above with the GeForce NOW Hands on I did in collaboration with Paul Hill.
    • TO be clear I am not running linux today, however I keep thinking about it. And I want to make sure there are minimal obstacles if I decide to make that switch in the coming months.
    • Yes, I actually glossed over the Linux part from the OP. You could always go for a 9070 XT and if you really want to play Ray Traced games in the future, GeForce Now is pretty damn good on Linux https://www.neowin.net/news/nvidias-native-geforce-now-app-for-linux-bridges-the-gaming-gap-hands-on/
  • Recent Achievements

    • Proficient
      Eric Biran went up a rank
      Proficient
    • Dedicated
      Conjor earned a badge
      Dedicated
    • Week One Done
      Windows Guy earned a badge
      Week One Done
    • Dedicated
      Mark Spruce earned a badge
      Dedicated
    • Collaborator
      conkir earned a badge
      Collaborator
  • Popular Contributors

    1. 1
      +primortal
      479
    2. 2
      PsYcHoKiLLa
      252
    3. 3
      Steven P.
      72
    4. 4
      +Edouard
      69
    5. 5
      Skyfrog
      67
  • Tell a friend

    Love Neowin? Tell a friend!