XP Windows / Automatic Updates SVCHOST.exe 100% CPU .. MS did something.


Recommended Posts

  On 12/09/2013 at 20:48, bigmehdi said:

And I'm not convinced by the need to constantly update the system, at least with a good antivirus & firewall.

 

:face palm:

  • Like 2

Regardless of EOL they still should fix it because there will still be companies holding on as long as they can as well as individuals and the least you can do is let them have whatever updates are available until there are no more.

 

After EOL they assume the risk and not MS..

  On 12/09/2013 at 20:52, warwagon said:

:face palm:

Why? Unless you use IE or Office (the MU CPU usage bug makes it impossible to keep Office updated on older machines) I don't think that much could happen if your XP has at least the latest service pack installed. Adobe Flash, Reader and third party browsers update themselves separately so the surface attack area is already quite reduced.

Seen this in a recent XP SP3 VM that was not configured to use WSUS.

 

I installed the certificate revocation optional / recommended update and it seemed to sort itself out in my case.

 

I've seen Animalware service, Windows Security Essentials, McAfee Antivirus etc also cause this issue though during a botched definition update.

  On 12/09/2013 at 23:49, Aergan said:

Seen this in a recent XP SP3 VM that was not configured to use WSUS.

 

I installed the certificate revocation optional / recommended update and it seemed to sort itself out in my case.

 

I've seen Animalware service, Windows Security Essentials, McAfee Antivirus etc also cause this issue though during a botched definition update.

 

This one? http://www.microsoft.com/en-us/download/details.aspx?id=39802

Well slip streaming is a great way to handle this. I guess the best way to avoid this problem and continue to use XP will be to slipstream all updates after XP SP-3 including the very last ones MS makes up until the cut off date.

After April 2014 no more XP updates except paid hot fixes for companies. So at the point if the slip stream is done right then every fresh install will have SP-3 and all the updates after. There will be no need run Windows or Microsoft update at all and should be disabled.

Just make sure to have as much protection as possible to mitigate attacks. Disable unnecessary services and if possible perform any registry tweaks that are for security purposes, disable file and print sharing if stand alone machine.

Also some programs like Nlite let you remove certain Windows components not needed that could also reduce the attack surface.

  • Like 2

I have struggled with this problem for a while. However, today, after trying almost every apparent solution suggested in various forums, and having given up and set Updates to OFF, and disabling the update service, I tried once more just to see what happened.

If anyone with this problem...  100% CPU on svchost.exe, (in my case, specifically relating to updates) uses Process Explorer, as I do, they should see the related process, Wuauclt.exe.

Instead of killing the svchost process, I decided to try killing the wuauclt process instead..   Aha....   it did not die, or should I say, it died only to be resurected immediately, and immediately the system started to download updates, with no more high CPU hogging..

I have no idea why this worked, but as nothing else has, I consider this may be a 'fix' of some sort...

Hi. Typically Wuauclt.exe. is what I see also. I am telling you this problem goes back years but it was also hit or miss for me because some machines had this behavior and others did not.

I forget though if it had to do with Windows Update or Microsoft Update. There is a difference and I always choose Microsoft Update as it gives you more updates than the standard Windows Update.

In the end like I said once there are no more updates it is best to slip stream them all into a CD with SP-3 and remove unnecessary components and every fresh install will be up to date so to speak :)

Think  Micro XP where Nlite and others can strip out things. Also don't forget to disable Auto Update.

  • 2 weeks later...

Once again It's a recent thing. Which is why I thought I was using bad media at first. When I would do a clean install I would check for updates via windows update and the bar would go across for maybe 10 / 15 seconds and then go to the next step. Wonder my surprise when one day 10 / 15 seconds turned into minutes with 100% usage on every new install.

I had the same problem.

 

end of last I install reinstall xp with service pack 3 in a dualboot system and it refused to even check for update saying could not find the page.

 

had to manually download windows updater and install and it just stayed at scanning for updates.

 

only way I got around it was install xp with service pack 2 and windows update worked. and installed service pack 3 and still worked and fully updated the system.

Could is possibly be something with the Microsoft Update website and/or whatever applet they force people to install before running the update scan?  Or I guess since the WU service phones home, and it might be getting a command to bust ass while doing the update scan.

 

My thought is that if this is something recent, then obviously it isn't a specific update to the core OS since the PCs we're talking about aren't up-to-date.

 

Regardless, this is something Microsoft really needs to fix.  It can't be that difficult and may not even require an software update or anything.

Hi to all. This problem is now very common. Absolutly every fix fails on multiple machines.

The only common demominator I can see is that its always lowly single core CPU's

Any fresh XP install, SP3 just immediatly goes 100% on the WU site.

I had success a couple of months ago with a Core2Duo, but since then have had many P4 and 1.6 Celeon boxes that fail.

I know it probably isn't CPU specific, but from an engineering point of view it's like the engine just cannot cope?

MSEssentials also causing this 100cpu in its updates on many PC's I'm seeing (low spec) as well.

Whats going on?

  On 12/09/2013 at 19:36, fatbeerguy said:

Use sysinternals procexp to check which service inside of service host is actually using the CPU, and then use procmon or windbg to figure out why its hogging CPU.

 

+1

It's so obvious to me what's going on, and someone else also mentioned it

 

It's a combination of scanning through a few hundred updates and refreshing the WU database at the same time

 

I bet that given enough time to complete it would go away on it's own since it's the first run of it, there's no need for a full rescan and DB update after that and should run normally

I'm not buying this.

Here is my real world experiment yesterday and today.

Dell Optiplex 320 lowly 1.6 Celeron, 1gb RAM

XP Pro SP3, 100%cpu on fresh build as soon as WU site visited

Left all night, still just scanning.

Tried all fixes, same.

Suspicious of my media maybe?

So, tried XP Home SP3, SAME fault.

As I type I am now looking at an installation of 7 Pro, it's at the WU site, CPU spiked for a mo, now its all perect, nicely doing the updates with a healthy CPU rate.

This is IMHO 100% MS Update site with XP.

Nick

Just did a brand new, fresh install of XP yesterday on an ancient E-Machine. One of the first things I ALWAYS do on a fresh install is disable auto update under both sections. In services and the automatic update icon in control panel.

 

No such issue on that machine yesterday, other than taking 6 hours, it felt like, to get them all.

 

Of course,

I ALWAYS disable automatic updates on EVERY computer of mine anyway. The ONLY thing I EVER allow to do anything automatically is my AV updates, when I actually use an AV, that is!!

 

Auto updates are WAY more trouble than they're worth, especially when 16 different things are starting up trying to do that at same time, IMO.

  On 12/09/2013 at 23:32, francescob said:

Why? Unless you use IE or Office (the MU CPU usage bug makes it impossible to keep Office updated on older machines) I don't think that much could happen if your XP has at least the latest service pack installed. Adobe Flash, Reader and third party browsers update themselves separately so the surface attack area is already quite reduced.

 

Sorry, but that's just a "stick my head in the sand and pretend it doesn't exists" approach to safety.

 

What happens when the next Blaster or Nachi comes along that makes use of a vulnerability in Windows to infect your machine without user intervention.  The Windows firewall is not infallible you know, especially the antiquated one in XP. I've seen malware able to disable it in the past. It can take AV vendors several days, if not weeks to push out definition updates for new viruses as quite often it depends on sample submissions.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • There's a few here upset Kamala Harris never got the Presidency! lol....
    • Yeah, he identified a whole lot of wasteful spending of US taxpayer money. What's wrong with that? Nothing, unless you had your fingers in the pie of course.
    • How to reduce the annoying Liquid Glass effects on iOS 26 by Aditya Tiwari Apple announced Liquid Glass at WWDC 2025 in all of its glory. It's a new glass-inspired design language from the iPhone-maker making its way to most of its software platforms, including iOS 26, iPadOS 26, macOS 26, tvOS 26, and watchOS 26. Apple markets Liquid Glass as a new translucent material that "behaves like glass in the real world. Its color is informed by surrounding content and intelligently adapts between light and dark environments." The Cupertino giant isn't wrong. The new glass-inspired design does bring a fresh coat of paint and some beautiful visuals to the iPhone and other Apple-made devices. However, as the dust from the mega arrival settles, people are starting to realize the current drawbacks of having too much glass on their device. There have been reports of users, including those at Neowin, experiencing readability issues, background separation issues, and trouble focusing on the content displayed on the screen due to its transparent nature. While these are small nuances on Apple's part that can be fixed without much hassle, it's degrading the initial experience of what the company calls its biggest visual upgrade since iOS 7. That said, there are some workarounds built into iOS 26 that will help you tone down the shortcomings. If you're running the iOS 25 Developer Beta 1 on your supported iPhone model, you can follow these steps to make things a little better: Go to the Settings app on your iPhone. Scroll down and tap on Accessibility > Display & Text Size. Next, you'll find two toggle options: Reduce Transparency and Increase Contrast. When you enable the Reduce Transparency toggle button, iOS 26 can "improve contrast by reducing transparency and blurs on some backgrounds to increase legibility." The other toggle, Increase Contrast, does what its name suggests. It can "increase color contrast between app foreground and background colors." Enabling each of these toggle buttons individually or simultaneously will have different effects on your iPhone's user interface. Control Center is being criticized for the extra transparency, making the UI look cluttered and difficult to focus. Here, the Reduce Transparency button adds a darker background to make the Control Center UI elements stand out. Liquid Glass transparency issues are also prevalent in the Notification Center and the navigation controls of various apps. In the image above, see how the text of the navigation buttons has become unreadable or hard to focus on with certain backgrounds. It's challenging to determine what can trigger such behavior, as one can have countless color combinations on their device. In the image below, this is how these buttons look when both Reduce Transparency and Increase Contrast are enabled. It's still a hit or miss depending on what colors you are dealing with. Part of the blame also goes to the fact that iOS 26 is still an early beta, and the change doesn't render as intended every time. You can also notice the difference in the look and feel of the Control Center when reduced transparency is turned on. On a side note, you can add the Reduce Transparency and Increase Contrast buttons in the Control Center for quicker access. That said, let's wait to see what changes Apple will implement as it continues to gather feedback through the beta program. Hopefully, the software will become more stable when the first public beta of iOS 26 arrives sometime in July. Interested users can try out the latest iPhone update through the developer beta program, noting that early builds might come with unexpected bugs and issues.
    • Austin residents rally against Tesla's robotaxi launch by Hamid Ganji Tesla's plan to launch its robotaxi service in Austin, Texas, has sparked protests in the city. While the EV maker targets June 22 as the launch date, local residents are raising their voices against the plan due to political disagreements and safety concerns. As reported by CNBC, public safety advocates and political protesters are organizing protests against Tesla's robotaxi launch in Austin. Members of the Dawn Project, Tesla Takedown, and Resist Austin have cited safety issues with Tesla's automated driving systems. Meanwhile, Elon Musk's involvement in Donald Trump's administration and his work in the Department of Government Efficiency (DOGE) has prompted another group of people to join the Austin protests against Tesla. To show Austin citizens the safety problems of Tesla's self-driving system, The Dawn Project brought a Tesla Model Y to the protest, equipped with the company's Full Self-Driving (FSD) software (version 13.2.9). In the demonstration, the Model Y with FSD software reportedly zoomed past a school bus with a stop sign held out and ran over a child-sized mannequin placed in front of the car. The FSD package includes automatic lane-keeping, steering, and parking. It is unclear to what extent this test was conducted under standard conditions or what Tesla's defense is. However, multiple cases of Tesla FSD software malfunction in the past have resulted in collisions or severe accidents, according to data collected by National Highway Traffic Safety Administration. Interestingly, The Dawn Project CEO Dan O'Dowd is the CEO of another company that sells embedded safety and security solutions to carmakers like Ford and Toyota. It remains to be seen whether Tesla could launch a robotaxi service in Austin despite the residents' protests. Earlier this week, Elon Musk demonstrated the new version of Tesla's FSD software in a post on X. Musk's decisions on DOGE fuel public backlash against Tesla. While Musk left the Trump administration after a beef with the president, he's still a target of public criticism, which directly imapcts Tesla. As a result, the slow sales have even caused Tesla to sell its Cybertruck with 0 percent APR to boost sales.
    • I'm sure Denmark would stand to lose a lot if US consumers stopped buying Danish products, whether that's Lurpak butter or hi-fi equipment.
  • Recent Achievements

    • One Month Later
      greege earned a badge
      One Month Later
    • Week One Done
      greege earned a badge
      Week One Done
    • Week One Done
      LagFighterZ earned a badge
      Week One Done
    • First Post
      ThatGuyOnline earned a badge
      First Post
    • One Month Later
      5i3zi1 earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      547
    2. 2
      ATLien_0
      229
    3. 3
      +FloatingFatMan
      166
    4. 4
      Michael Scrip
      119
    5. 5
      +Edouard
      91
  • Tell a friend

    Love Neowin? Tell a friend!