XP Windows / Automatic Updates SVCHOST.exe 100% CPU .. MS did something.


Recommended Posts

Thank you Raynerph on post 123! This happened to me on an elderly underpowered Asus Z3300 field machine and it was driving me nuts. Your solution cured it and was by far the easiest (after spending 3 hours going down dead ends).

And thanks Jay Omega for reposting.

Yes, this is not a new issue as many would think. I have noticed this on many machines when working with one of the MS partners, who were testing WGA. 

You can try using the offline updater, http://download.wsusoffline.net/

It updates the Windows Update files by default before installing any more updates. Make sure to update root certificates as well.

 

 

This worked for me,  straight after the first updates from wsusoffline and reboot, my automatic updates just started working again. Previously tried every suggested fix without success.

 

Kudos StarkWiz

  • 2 weeks later...

I have experienced the same problem on XP Mode.

 

Go to google.com and search for "cumulative security update for IE8 for XP" and then find, download and install the recent update - KB2888505 as of this writing, which is the Nov 2013 update.

 

Reboot and then go to Windows Update. Bingo - the updates appear. :)

For the moment i'm going to mark this as answered just to bring post 123 to the first page. I can confirm that this update does solve the problem on all the computers i've come across with the SVCHOST.exe issue. We shall see what tomorrow's updates bring.

Ok, it's broken again. I guess they updated IE.

 

Does anyone know how i can find the latest culmulative update for IE 8?

Using the search function on MS download centre never seems to work and it seems silly to have to ask how to find the new update every time one is released (or even to find out if there is a new one!).

 

Thanks

Ok, it's broken again. I guess they updated IE.

 

Does anyone know how i can find the latest culmulative update for IE 8?

Using the search function on MS download centre never seems to work and it seems silly to have to ask how to find the new update every time one is released (or even to find out if there is a new one!).

 

Thanks

 

 

If you have IE8 installed then this link: http://www.microsoft.com/en-us/download/details.aspx?id=41404

 

If IE6: http://www.microsoft.com/en-us/download/details.aspx?id=41458

  • Like 1

Ok, it's broken again. I guess they updated IE.

 

Does anyone know how i can find the latest culmulative update for IE 8?

Having only just found this thread after restoring a laptop from a June backup (and hitting the 100% cpu issue for the first time), I can say that only one of the suggested techniques worked for me (and it was near the end of the thread): I download a fresh install of IE8 from https://www.microsoft.com/en-gb/download/internet-explorer-8-details.aspx and opted for any available updates - it found the latest (which is now 2898785, which probably explains why the November update 2888505 did not work).  Installed IE8 (and update) and rebooted, and the problem is fixed.  Of course, I could have hung about here until the answer arrived!  Until MS can overcome their urge to provide us with out-dated updates, I think a fresh install every time is easiest.

 

Thanks!

 

How did you find what the latest update is? For some reason it doesn't show in the search.

 

I just found that if you go to the main downloads page, go on "internet explorer downloads", then "show all" then "sort by date" then you can look through them and hope to find the latest one but that seems a bit of a cumbersome method!

 

It's wierd how there's not "this is the latest ie update" page.

Having only just found this thread after restoring a laptop from a June backup (and hitting the 100% cpu issue for the first time), I can say that only one of the suggested techniques worked for me (and it was near the end of the thread): I download a fresh install of IE8 from https://www.microsoft.com/en-gb/download/internet-explorer-8-details.aspx and opted for any available updates - it found the latest (which is now 2898785, which probably explains why the November update 2888505 did not work).  Installed IE8 (and update) and rebooted, and the problem is fixed.  Of course, I could have hung about here until the answer arrived!  Until MS can overcome their urge to provide us with out-dated updates, I think a fresh install every time is easiest.

 

You defiantly do not have to clean install to fix this issue.

Thanks!

 

How did you find what the latest update is? For some reason it doesn't show in the search.

 

I just found that if you go to the main downloads page, go on "internet explorer downloads", then "show all" then "sort by date" then you can look through them and hope to find the latest one but that seems a bit of a cumbersome method!

 

It's wierd how there's not "this is the latest ie update" page.

 

Mention not:

http://search.microsoft.com/en-us/DownloadResults.aspx?FORM=DLC&ftapplicableproducts=Internet%20Explorer&sortby=-availabledate

It happened in November and again today:  svchst using 99% while trying to access Windows Updates.  I'm not tech savvy but WU destroyed our machine in 2005 and I've had Auto Updates shut off ever since choosing to Custom install the Updates individually.  I'm the one everyone calls when their machine won't work so have learned that Patience is often what is required.

 

I installed all 10 updates in no time flat on our Vista machine.  But, the XP machine did it again!  I chose Custom Updates and waited, for two hours, whilst the svchst was chewing up 99% of CPU.  When it finally arrived at the site, I unchecked all of the Updates, then chose only KB2898785 - the IE cumulative update, and installed.  Svchst still chewing on 99% after the install so let it sit for awhile with itself.  Then restarted the machine.  I am now installing the rest of the updates in a normal fashion.  It is slow, but the "normal" slow on our 12 year old XP Dell. 

 

It's not a fancy solution but has worked twice for me.

If you have IE8 installed then this link: http://www.microsoft.com/en-us/download/details.aspx?id=41404

 

Thanks a bunch Zlip792, much appreciated, WFM, XP Pro SP3. :)

.

@Thanks for the thread +warwagon and all, folks here have bailed me out for the last three months of this ****!

It happened again on XP Mode on Win 7.  Just find, download, and install the KB2898785 update (Cumulative Security Update for IE8 for XP - Dec 2013), then reboot, then go to Microsoft Update.

 

Annoying as hell, I know .... but I think MS did this on purpose.

First allow me to say that I am a computer dummy.  Through diligent troubleshooting, I solved this problem for me.  I have an older computer with XP SP3.   Last month, relatively shortly after receiving MS updates, my svchost started showing 99% of CPU usage, and really bogged my computer down.  Not knowing about this forum at the time, I completely re-installed my OS which was XP SP2 and IE6.  I went to Microsoft Updates and could get no updates to show, so I called Microsoft.  The lady that I spoke with on the phone told me that you cannot receive updates through MS without SP3, and you can't get SP3 without IE8, and that you needed IE8 to get SP3 and without doing those updates, you wouldn't be able to get MS updates..her reason was because XP will be discontinued shortly.   So... I found an SP3 download somewhere online for XP,  and loaded it into my computer, then I used a saved IE8 setup that I had saved (I ALWAYS save programs like these in an external HD just for this purpose.) Anyway after then loading IE8, I was able to get MS updates to work.  This solved the Svchost problem.  Then yesterday, again after installing updates delivered by Automatic Updates, my task manager showed the problem had returned.  I used Google chrome, and found this forum and tried MANY of the suggestions here, and nothing worked for the svchost problem unless I turned Automatic Updates OFF.  I tried to see if I could updates from the Microsoft Update web site, and my CPU immediately shot up to 100% and no updates would show, just the endless "Checking for Updates".  After 20 minutes I quit the website and tried slipstreaming updates using a service recommended on this forum.   The updates downloaded, but when trying to install them, the CPU shot up again, even with Automatic Updates OFF, and the updates that were downloaded wouldn't install.  I even installed IE updated listed here on this forum without success.  SO... being very frustrated I just sat and pondered a moment.  I deduced because of what that lady told me last month, that either the MS Update applet was corrupted, or my IE8 was corrupted.  Since I couldn't find how to uninstall "Microsoft Updates".  I thought I'd try re-installing IE8. Wouldn't you just know it,  ouila, I was able to get MS Updates to work, and the svchost  no longer shot up to 100%.  I imagine that one of the updates installed yesterday did something to IE8, and corrupted it.  I will say also that I did turn off Automatic updates, and that also fixed the problem, but I think doing that only dealt with the symptom and not the problem.  Anyway now, everything works good.  I dread that MS is cutting of support for XP, as I've had it since 2005, and I know it thoroughly and hate change, etc,etc.etc.  Hope this might help someone.  Seems almost too simple to have worked, but it did.

Hey guys,

 

i too have been having this issue as a Point of sale Tech, we have over 250 pos terminals with 3 variations of windows XP on them( WEPOS, POSReady2009, Windows XP)

 

after reading over this entire thread i have come to realize Microsoft are working on the problem but are haven't actually fixed it. and TBH for someone in my situation with over 250 PCs to take care of installing a cumulative patch once a month is BS!!!

 

now that i have had my rant, here is what i have found. on 99% of the computers we have resorted to just turning the updates off via windows update and disabling the automatic updates service in services does in fact stop the problem from comming back. but it doesnt help us get the updates......

 

so after studying one of the PCs in house i saw that inside the SVChost.exe wuauclt.exe was chewing the CPU usage (using processexplorer) so i went looking for it. 

 

i managed to find that in c:\windows\system32 there is an EXE called wuauclt.exe and right underneath it is wuauclt1.exe, strange right?

 

so for lack of ideas i renamed the original and to wuaucltexe.old and renamed the one underneath wuauclt1.exe to wuauclt.exe and rebooted.

 

2 months later still no problems with this PC and windows updates are turned on. this is the only PC i have done it with as im not 100% sure it is safe......

 i have attached a picture to this post to show you what i ment. if anybody is willing give it a go and post results

 

Cheers

Brendon.

 

post-511695-0-90951400-1386836709.jpg

  • Like 2

I would say it has something to do with IE, 6 7 and 8. Since the first time when it happened, after I installed the Oct IE cumulative update, it was sweet as. I could go to WU and it worked. Same thing happened for the Nov, and Dec 2013 updates that came out for XP. I had to install the IE cumulative update first before WU would work again. This also stopped svchost.exe from hogging the CPU

 

And, so the windowsupdate icon would appear on the taskbar.  The icon never appeared on the taskbar (if I didnt install the IE update first). As soon as I installed the IE update, the icon appeared. Dont think stopping services and disabling WU is the fix. This is in XP mode.

 

Thankfully if XP updates stop in Apr next yr, I can use Nlite to slipstream all the updates

Hey guys,

 

i too have been having this issue as a Point of sale Tech, we have over 250 pos terminals with 3 variations of windows XP on them( WEPOS, POSReady2009, Windows XP)

 

after reading over this entire thread i have come to realize Microsoft are working on the problem but are haven't actually fixed it. and TBH for someone in my situation with over 250 PCs to take care of installing a cumulative patch once a month is BS!!!

 

now that i have had my rant, here is what i have found. on 99% of the computers we have resorted to just turning the updates off via windows update and disabling the automatic updates service in services does in fact stop the problem from comming back. but it doesnt help us get the updates......

 

so after studying one of the PCs in house i saw that inside the SVChost.exe wuauclt.exe was chewing the CPU usage (using processexplorer) so i went looking for it. 

 

i managed to find that in c:\windows\system32 there is an EXE called wuauclt.exe and right underneath it is wuauclt1.exe, strange right?

 

so for lack of ideas i renamed the original and to wuaucltexe.old and renamed the one underneath wuauclt1.exe to wuauclt.exe and rebooted.

 

2 months later still no problems with this PC and windows updates are turned on. this is the only PC i have done it with as im not 100% sure it is safe......

 i have attached a picture to this post to show you what i ment. if anybody is willing give it a go and post results

 

Cheers

Brendon.

 

Signed up to say thanks Brendon, we also support shop tills (although on a much smaller scale) and this fixed the issue for us. Thanks for taking the time to post.

*Snip*

 

 

Tried this out; fixed the issue with svchost cpu usage, but made Windows update site inaccessible (would not load).  Reverting back the wuauclt.exe lets Windows update load, but then the cpu usage is back. 

 

 

Installing IE8 Dec updates next.

http://technet.microsoft.com/en-us/security/bulletin/ms13-097

 

:)

look there i face this problem too  :) , every time manually i download Cumulative Security Update , and it always works !

 

Windows XP Service Pack 3

 

Internet Explorer 8

http://www.microsoft.com/downloads/details.aspx?familyid=1dbcb79c-bfb8-4e01-8824-8f834a012091

 

Edit : https://www.neowin.net/forum/topic/1176387-xp-windows-automatic-updates-svchostexe-100-cpu-ms-did-something/?view=findpost&p=596159331

 

please look the above link as well  :rolleyes:

Tried this out; fixed the issue with svchost cpu usage, but made Windows update site inaccessible (would not load).  

 

i can honestly say i didnt check that when i did it, thanks for pointing it out. 

 

i have just logged into this machine to test this, i opened IE 8 and tools>windows update it seems to have worked, clicked express and now its looking for updates.

 

ill let you know what happens

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Microsoft making much needed change to Windows 11, 10 Patch Tuesday security updates by Sayan Sen Recently, Microsoft delivered its latest Defender patches for Windows 11 ISOs. These definitions are released from time to time alongside the general security updates available during Patch Tuesday. Speaking of Defender, the company has now announced another important change that affects how security updates are delivered to enterprise devices running Windows. According to a recent announcement, Microsoft Defender for Endpoint's endpoint detection and response (EDR) updates will no longer be bundled with the monthly Windows security updates or Patch Tuesdays. Instead the company is shifting delivery of these updates to Microsoft Update, bringing EDR servicing in line with several other Microsoft Defender components. If you recall, Microsoft last year moved PowerShell updates to Microsoft Update (MU) as well since it provides automatic updates for Microsoft products and services. Thus the move is intended to allow Microsoft to deliver EDR improvements and security enhancements independently of the OS's regular monthly update cycle; this should enable faster deployment of protection updates without requiring organizations to wait for the next Patch release. For those unfamiliar, Microsoft Defender for Endpoint's EDR capabilities are designed to help organizations detect, investigate, and respond to advanced threats across managed devices. Keeping these components updated is critical for maintaining protection against evolving attack techniques. The rollout has already began for Windows 10 devices in late May 2026 (last month) and Microsoft says it will gradually expand support to Windows 11 and the remaining supported Windows versions over the coming months. The company expects deployment across Windows 10 and Windows 11 to be completed by fall 2026 or around Q3 of this year. Once the transition is complete, EDR updates will be delivered through Microsoft Update using KB5005292, provided the required prerequisite updates have already been installed. Microsoft is also introducing a new Defender Update Service as part of the change. Following installation of the first update, devices will automatically create a new directory located at %ProgramData%\Microsoft\Microsoft Defender\Defender Update. Microsoft notes that restarts may occasionally be necessary in case of "rare" failure scenarios. For most organizations, the tech giant says no action will be required as long as Microsoft Update is already permitted within their update management strategy. Admins who rely on manually deployed update packages, however, will need to adjust their processes to ensure the new Defender update package is included. Microsoft also recommends reviewing internal documentation and notifying helpdesk and security operations teams about the updated delivery mechanism to avoid confusion during the transition. As a prerequisite, the tech giant notes that systems must be running Sense version 10.8798.25857.1000 or later and have one of the following Windows updates (or later) installed: Win11 24H2 KB5062660 (2025-07 Cumulative Update Preview) Win11 23H2 KB5062663 (2025-07 Cumulative Update Preview) Win11 22H2 KB5062663 (2025-07 Cumulative Update Preview) Win10 22H2 KB5062649 (2025-07 Cumulative Update Preview) Win10 1809 KB5063877 (2025-08 Cumulative Update) Server 2019 KB5063877 (2025-08 Cumulative Update) Server 2022 KB5063880 (2025-08 Cumulative Update) Server 2025 KB5063878 (2025-08 Cumulative Update) As always, organizations should verify that their update policies align with the new servicing approach before the broader rollout reaches all supported Windows platforms later this year. In case of major problems, the EDR update can be rolled back to the inbox version stored in %ProgramFiles%\\Windows Defender Advanced Threat Protection (ATP) using: MpCmdRun.exe -RevertMde -Product Edr -ToVersion Inbox For those who have access to the Microsoft 365 Admin Center portal, you can view the message here under ID MC1381119.
    • My problem with these smart scopes is that IMO they're not really an entrance into astronomy, they're an entrance to looking at pretty(ish) pictures that you take by essentially pressing a button and letting the scope do the work. I still maintain that getting some binoculars or a solid dedicated telescope (which doesn't have to mean expensive) and actually spending time learning the night sky and using a telescope is a much better way to actually learn. But, granted, the learning curve is a bit steeper (as it tends to be).
    • I never played Crazy Taxi before, but this looks like a fun game!
    • The perception of Microsoft Edge is unfortunate as it's a world class browser. I'm not exaggerating when I say it's the best browser I've ever used with its feature set, speed, reliability and advanced security. Running the extension Ublock Origin is a must though to deal with advertising and trackers.
    • You can check out our latest 9070 GRE review with scores for the XT too, but these are on Windows: Gaming performance Productivity performance
  • Recent Achievements

    • One Month Later
      DJC50PLUS earned a badge
      One Month Later
    • Week One Done
      DJC50PLUS earned a badge
      Week One Done
    • Proficient
      Eric Biran went up a rank
      Proficient
    • Dedicated
      Conjor earned a badge
      Dedicated
    • Week One Done
      Windows Guy earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      493
    2. 2
      PsYcHoKiLLa
      248
    3. 3
      Steven P.
      73
    4. 4
      +Edouard
      69
    5. 5
      neufuse
      68
  • Tell a friend

    Love Neowin? Tell a friend!