Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

SVC host using full CPU, Windows update hangs


  • Please log in to reply
10 replies to this topic

#1 I_still_like_win_7

I_still_like_win_7

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:30 AM

Posted 04 January 2017 - 07:47 PM

Hello,

 

Thank you for these very helpful forums.

 

I have a Windows 7 system that has started to use 100% of one of my CPU cores. It has been doing this for about 2 weeks now.

 

The process is "svchost.exe" and the associated services are Windows Update (wuauserv), BITS, etc.

 

I let the update run for 24 hours and the system never successfully updated on a fast internet connection, so from what I can tell something is wrong or corrupt with Windows Update (I think?)

 

I have run scans with Malwarebytes and Microsoft Security Essentials and have not detected a virus.

 

When I go into services and stop "wuauserv" CPU usage returns to normal.

 

Upon the next Windows startup, the system CPU is normal for some period of time until:

-Msmpeng.exe becomes busy

-TrustedInstaller.exe becomes busy

 

After these two processes run, "svchost.exe" high CPU usage returns

 

I have tried to fix the Windows Update files via these steps from Microsoft:

 

----------------------------

a. Click “Start”, type “cmd”in the Start search box.
b. Right-click “cmd” and select “Run as administrator”.
c. On the open Command Prompt window copy and paste the commands (all at once) and press Enter.
net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 catroot2.old
net start wuauserv
net start cryptSvc
net start bits
net start msiserver

 

----------------------------

 

I have also run "WindowsUpdateDiagnositc" and it has an error "0x80070003(2017-01-04- T07_30"_18P)

 

After running the diagnostic I have attempted to run Windows update via Control Panel > Windows Update and it simply runs the CPU core up to 25% again and stays there for hours.

 

Any suggestions are greatly appreciated.

 

Thanks



BC AdBot (Login to Remove)

 


#2 MoxieMomma

MoxieMomma

  • Members
  • 471 posts
  • OFFLINE
  •  
  • Local time:07:30 AM

Posted 04 January 2017 - 07:55 PM

Hello and welcome:

 

There was/is a problem with the WU client under Win7 SP1 going back many months.

But there is a fix.

 

I suggest following the instructions here.

The only variations for an existing Win7 install (vs. a new install) are that you can skip KB3125574 AND you should already have IE11.

 

Otherwise, if you follow these steps exactly, on an otherwise stable system, this ought to fix the issue:

 

https://www.bleepingcomputer.com/forums/t/636244/fresh-windows-7-install-cannot-update/#entry4151942

 

(Also, see MS's own official KB article on this, even though their bare bones instructions do not always work without the added steps to temporarily kill the WU service.  And this post lists some links to other topics here and at other forums, for more cases where this procedure worked to fix the issue.)

 

The general idea is to get WU out of the perpetual "checking for updates" mess, so that you can manually run the individual offline installers for KB3020369 and KB3172605.

That will fix the WU client.

Then you will be able to use WU normally to get any available patches.

 

If this does not work or you get some sort of specific error code, then you probably have a different issue.

 

Please post back and let us know how it goes, so that we can all learn,

 

MM



#3 I_still_like_win_7

I_still_like_win_7
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:30 AM

Posted 04 January 2017 - 08:31 PM

Thanks MoxieMomma.

 

Okay I have started these steps and unfortunately I'm already having issues.

 

1. Downloaded all 3 KBs (success)

2. Disconnected from Network/internet (unplugged network cable, success)

3. Changed Windows update service to manual  (success)

4. Attempted to stop the Windows update service. I was not able to stop the service with the PC disconnected from the Network. CPU core usage at full.

5. Connected to the Network. The service stopped. CPU core usage still at full.

6. Disconnected from the network. CPU core usage still at full.

6. Ran KB 3125574. I ran across this error:

 

-----------------

 

Installer encountered an error:0x80080005
 
Server execution failed
 
 
EDIT: It seems that the Windows Update service never stopped--the process status says "Stopping" and it is stuck there, CPU usage still maxed out.
 
-----------------
 
CPU core usage still at 25%.

Edited by I_still_like_win_7, 04 January 2017 - 08:37 PM.


#4 MoxieMomma

MoxieMomma

  • Members
  • 471 posts
  • OFFLINE
  •  
  • Local time:07:30 AM

Posted 04 January 2017 - 08:43 PM

Hi:

 

Sorry you're having trouble.

 

Couple of things:

 

  • Unless this is a new install of Windows 7, you do not need KB3125574 (please re-read what I wrote in my previous reply) :)
  • Make sure you downloaded the correct version of the installers (for Win7/SP1, either 32-bit or 64-bit, depending on your system)
  • You need to go into Windows Update (from the Windows Control Panel) and set it to "never check for updates-not recommended", AND
  • You need to go into services.msc to set  Windows Update service to "manual"; and THEN
  • Also, you did not say whether you rebooted after you shut off/disabled Windows Update -- this is very important (and doing so will probably "fix" the problem of being unable to stop the service)
  • THEN you run the KB3020369 installer and REBOOT.
  • THEN you run the KB3172605 installer and REBOOT.
  • THEN you follow the rest of the steps....

The process looks more complicated than it is.  It's merely broken down into small steps.

It may help to print out the instructions for reference as you go.

 

Keep us posted,

MM

 

 

{EDIT: typo}


Edited by MoxieMomma, 04 January 2017 - 08:44 PM.


#5 MoxieMomma

MoxieMomma

  • Members
  • 471 posts
  • OFFLINE
  •  
  • Local time:07:30 AM

Posted 04 January 2017 - 08:49 PM

Also:

 

If you are a "visual" person, there is an illustrated version of this (nearly identical, and achieving the same endpoints) here.

 

Cheers,

MM



#6 I_still_like_win_7

I_still_like_win_7
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:30 AM

Posted 04 January 2017 - 10:16 PM

Thanks for your patience, MoxieMomma. :-). I appreciate the detailed descriptions both text and visual.
 
Oops in my original response I forgot to mention I did go into Windows Update and set never check for updates.
 
I did see your instruction saying that I did not need KB3125574; however the PC is rather old so I tried it. My apologies. Perhaps this is why it provided an error?
 
I have rebooted now, the service properly stopped.
 
KB3020369 reported as already installed
 
KB3172605 installer ran and rebooted.
 
I then did these steps:
 
went into services.msc and change WU back to "Automatic-delayed start" and start the service.
reconnected to the internet.
changed WU to "notify me, but let me choose".
Ran a manual check for updates.
 
 
The manual check for updates worked! I set a system restore point and installed several updates.
 
So far the CPU usage is bouncing around so I'll keep an eye on it and let you know if it goes high again.
 
At this point KB3172605 seems to have helped get Windows Update back on track!


#7 MoxieMomma

MoxieMomma

  • Members
  • 471 posts
  • OFFLINE
  •  
  • Local time:07:30 AM

Posted 05 January 2017 - 03:49 AM

Hi:

 

Well done! :thumbup2:

 

There are many reasons for CPU spikes (e.g. normal behavior, software conflicts, even malware).

So further investigation may be needed if the problem recurs.

But I'm glad you were able to resolve your WU issue.

 

Cheers,

MM



#8 xtype

xtype

  • Members
  • 47 posts
  • OFFLINE
  •  
  • Local time:02:30 PM

Posted 05 January 2017 - 08:20 AM

Might be worth running the Farbar tool and posting the logs in the security 


 form"  to check for malware etc..

 

xtype...


Edited by xtype, 05 January 2017 - 08:35 AM.


#9 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,714 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:06:30 AM

Posted 05 January 2017 - 11:09 AM

Might be worth running the Farbar tool and posting the logs in the security 


 form"  to check for malware etc..

 

xtype...

Farbar tools are usually relegated to the Malware Removal Logs forum.  You have to be a member of the Malware Removal Team to request scans with these tools.  Members of the MRT occasionally will request members to run Farbar scans in the Am I Infected forum.  You may already be aware that you can not use these tools in the Windows forums.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#10 xtype

xtype

  • Members
  • 47 posts
  • OFFLINE
  •  
  • Local time:02:30 PM

Posted 05 January 2017 - 06:47 PM

Yes of coarse dc3 i'll leave it at that..... :thumbup2:



#11 ankit02

ankit02

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:07:00 PM

Posted 22 February 2017 - 03:17 AM

I have faced similar issues (high cpu usage or spikes in task manager)

I did a search on google and came out to a blog post.

https://usefulpcguide.com/18385/svchost-exe-netsvcs-high-cpu/

 

I have did exact steps mentioned here And voila ! my problem got resolved.

Hope it helps.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users