none
Single core PCs max out at 100% CPU on svchost (wuauclt) after boot. Dual core, maxes one core.

    Soru

  • I've read several forums and tried several things, but i'm not having any luck. I need help please.

     

    Started on: http://social.technet.microsoft.com/Forums/en/winserverwsus/thread/794ca65a-cb3f-4336-b696-e092996a53b7

    Then was directed to: http://social.technet.microsoft.com/Forums/en-CA/winserverwsus/thread/daf131c5-6a4f-45d1-a03f-c39cea436b6f

     

    I believe the second one to be my problem, but I have made the changes to the GPO disabling updating missing DCOM objects, but the registry key that is supposed to be created doesn't exists.

    When I tried to enable tracing, WU stopped logging all together and I guess i'm not smart enough to get any further.

    Below is my log file AFTER restoring logging. Also, I did a complete rebuild of Windows Update on the client (removing softwaredistribution and such, to try and reset Windows Update) @ the first lockup 15:31:21:839

     

    NOTE the lockups / 100% cpu @:

    2010-03-25    15:31:21:839    1048    1b4    Agent

    2010-03-25    15:44:07:522    1048    5b4    PT

    LOG FILE:

    2010-03-25    15:30:27:640    1048    430    Misc    ===========  Logging initialized (build: 7.4.7600.226, tz: -0500)  ===========
    2010-03-25    15:30:27:640    1048    430    Misc      = Process: C:\WINDOWS\System32\svchost.exe
    2010-03-25    15:30:27:640    1048    430    Misc      = Module: C:\WINDOWS\system32\wuaueng.dll
    2010-03-25    15:30:27:640    1048    430    Service    *************
    2010-03-25    15:30:27:671    1048    430    Service    ** START **  Service: Service startup
    2010-03-25    15:30:27:671    1048    430    Service    *********
    2010-03-25    15:30:27:687    1048    430    Agent      * WU client version 7.4.7600.226
    2010-03-25    15:30:27:687    1048    430    Agent      * Base directory: C:\WINDOWS\SoftwareDistribution
    2010-03-25    15:30:27:687    1048    430    Agent      * Access type: No proxy
    2010-03-25    15:30:27:703    1048    430    Agent      * Network state: Connected
    2010-03-25    15:31:13:598    1048    430    Agent    ***********  Agent: Initializing Windows Update Agent  ***********
    2010-03-25    15:31:13:598    1048    430    Agent    ***********  Agent: Initializing global settings cache  ***********
    2010-03-25    15:31:13:598    1048    430    Agent      * WSUS server: http://10.10.1.200
    2010-03-25    15:31:13:598    1048    430    Agent      * WSUS status server: http://10.10.1.200
    2010-03-25    15:31:13:598    1048    430    Agent      * Target group: Lipscomb and Pitts Insurance LLC
    2010-03-25    15:31:13:598    1048    430    Agent      * Windows Update access disabled: No
    2010-03-25    15:31:13:613    1048    430    DnldMgr    Download manager restoring 0 downloads
    2010-03-25    15:31:13:613    1048    430    AU    ###########  AU: Initializing Automatic Updates  ###########
    2010-03-25    15:31:13:613    1048    430    AU    AU setting next detection timeout to 2010-03-25 20:31:13
    2010-03-25    15:31:13:613    1048    430    AU    AU setting next sqm report timeout to 2010-03-25 20:31:13
    2010-03-25    15:31:13:613    1048    430    AU      # WSUS server: http://10.10.1.200
    2010-03-25    15:31:13:613    1048    430    AU      # Detection frequency: 22
    2010-03-25    15:31:13:613    1048    430    AU      # Target group: Lipscomb and Pitts Insurance LLC
    2010-03-25    15:31:13:613    1048    430    AU      # Approval type: Scheduled (Policy)
    2010-03-25    15:31:13:613    1048    430    AU      # Scheduled install day/time: Every day at 12:00
    2010-03-25    15:31:13:613    1048    430    AU      # Auto-install minor updates: Yes (Policy)
    2010-03-25    15:31:13:613    1048    430    AU    Setting AU scheduled install time to 2010-03-26 17:00:00
    2010-03-25    15:31:13:613    1048    430    AU    Initializing featured updates
    2010-03-25    15:31:13:613    1048    430    AU    Found 0 cached featured updates
    2010-03-25    15:31:14:199    1048    430    Report    ***********  Report: Initializing static reporting data  ***********
    2010-03-25    15:31:14:199    1048    430    Report      * OS Version = 5.1.2600.2.0.65792
    2010-03-25    15:31:15:264    1048    430    Report      * Computer Brand = Compaq
    2010-03-25    15:31:15:264    1048    430    Report      * Computer Model = Evo D510 SFF
    2010-03-25    15:31:15:280    1048    430    Report      * Bios Revision = 686O2 v3.18
    2010-03-25    15:31:15:280    1048    430    Report      * Bios Name = 686O2 v3.18
    2010-03-25    15:31:15:280    1048    430    Report      * Bios Release Date = 2003-05-28T00:00:00
    2010-03-25    15:31:15:280    1048    430    Report      * Locale ID = 1033
    2010-03-25    15:31:15:280    1048    430    AU    AU finished delayed initialization
    2010-03-25    15:31:15:280    1048    430    AU    #############
    2010-03-25    15:31:15:280    1048    430    AU    ## START ##  AU: Search for updates
    2010-03-25    15:31:15:280    1048    430    AU    #########
    2010-03-25    15:31:15:280    1048    430    AU    <<## SUBMITTED ## AU: Search for updates [CallId = {A90916DB-A98A-446D-BBC3-124FAE2D1676}]
    2010-03-25    15:31:16:159    1048    1b4    Agent    *************
    2010-03-25    15:31:16:159    1048    1b4    Agent    ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2010-03-25    15:31:16:159    1048    1b4    Agent    *********
    2010-03-25    15:31:16:159    1048    1b4    Agent      * Online = No; Ignore download priority = No
    2010-03-25    15:31:16:159    1048    1b4    Agent      * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
    2010-03-25    15:31:16:159    1048    1b4    Agent      * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2010-03-25    15:31:16:159    1048    1b4    Agent      * Search Scope = {Machine}
    2010-03-25    15:31:21:839    1048    1b4    Agent    WARNING: Failed to evaluate Installed rule, updateId = {BFE5B177-A086-47A0-B102-097E4FA1F807}.102, hr = 8024E001
    2010-03-25    15:39:36:878    1048    430    AU    ###########  AU: Uninitializing Automatic Updates  ###########
    2010-03-25    15:39:36:878    1048    1b4    Agent      * WARNING: Failed to filter search results, error = 0x8024000B
    2010-03-25    15:39:36:956    1048    1b4    Agent    *********
    2010-03-25    15:39:36:956    1048    1b4    Agent    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2010-03-25    15:39:36:956    1048    1b4    Agent    *************
    2010-03-25    15:39:36:971    1048    1b4    Report    REPORT EVENT: {E6C5F01A-BB2F-4C12-90E5-BE2F3839327A}    2010-03-25 15:31:13:613-0500    1    202    102    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Content Install    Reboot completed.
    2010-03-25    15:39:37:158    1048    430    Report    WARNING: Reporter failed to upload events with hr = 80240004.
    2010-03-25    15:39:37:158    1048    430    Report    WARNING: Reporter failed to upload events with hr = 80240004.
    2010-03-25    15:39:37:158    1048    430    Report    WARNING: Reporter failed to upload events with hr = 80240004.
    2010-03-25    15:39:37:313    1048    430    Service    *********
    2010-03-25    15:39:37:313    1048    430    Service    **  END  **  Service: Service exit [Exit code = 0x240001]
    2010-03-25    15:39:37:313    1048    430    Service    *************
    2010-03-25    15:39:47:860    1048    a8c    Misc    ===========  Logging initialized (build: 7.4.7600.226, tz: -0500)  ===========
    2010-03-25    15:39:47:938    1048    a8c    Misc      = Process: C:\WINDOWS\System32\svchost.exe
    2010-03-25    15:39:47:938    1048    a8c    Misc      = Module: C:\WINDOWS\system32\wuaueng.dll
    2010-03-25    15:39:47:860    1048    a8c    Service    *************
    2010-03-25    15:39:47:938    1048    a8c    Service    ** START **  Service: Service startup
    2010-03-25    15:39:47:938    1048    a8c    Service    *********
    2010-03-25    15:39:48:063    1048    a8c    Agent      * WU client version 7.4.7600.226
    2010-03-25    15:39:48:063    1048    a8c    Agent      * Base directory: C:\WINDOWS\SoftwareDistribution
    2010-03-25    15:39:48:078    1048    a8c    Agent      * Access type: No proxy
    2010-03-25    15:39:48:078    1048    a8c    Agent      * Network state: Connected
    2010-03-25    15:39:54:705    3232    ca4    Misc    ===========  Logging initialized (build: 7.4.7600.226, tz: -0500)  ===========
    2010-03-25    15:39:54:705    3232    ca4    Misc      = Process: C:\WINDOWS\system32\wuauclt.exe
    2010-03-25    15:39:54:705    3232    ca4    Misc      = Module: C:\WINDOWS\system32\wuaueng.dll
    2010-03-25    15:39:54:658    3232    ca4    DtaStor    Default service for AU is {00000000-0000-0000-0000-000000000000}
    2010-03-25    15:39:54:705    3232    ca4    DtaStor    Default service for AU is {9482F4B4-E343-43B6-B170-9A65BC822C77}
    2010-03-25    15:39:54:798    1048    a8c    Agent    WARNING: Failed to read the service id for re-registration 0x80070002
    2010-03-25    15:39:54:798    1048    a8c    Agent    WARNING: Missing service entry in the backup data store; cleaning up
    2010-03-25    15:40:39:618    1048    a8c    Agent    ***********  Agent: Initializing Windows Update Agent  ***********
    2010-03-25    15:40:39:618    1048    a8c    Agent    ***********  Agent: Initializing global settings cache  ***********
    2010-03-25    15:40:39:618    1048    a8c    Agent      * WSUS server: http://10.10.1.200
    2010-03-25    15:40:39:618    1048    a8c    Agent      * WSUS status server: http://10.10.1.200
    2010-03-25    15:40:39:618    1048    a8c    Agent      * Target group: Lipscomb and Pitts Insurance LLC
    2010-03-25    15:40:39:618    1048    a8c    Agent      * Windows Update access disabled: No
    2010-03-25    15:40:39:633    1048    a8c    DnldMgr    Download manager restoring 0 downloads
    2010-03-25    15:40:39:633    1048    a8c    AU    ###########  AU: Initializing Automatic Updates  ###########
    2010-03-25    15:40:39:633    1048    a8c    AU    AU setting next detection timeout to 2010-03-25 20:40:39
    2010-03-25    15:40:39:633    1048    a8c    AU    AU setting next sqm report timeout to 2010-03-25 20:40:39
    2010-03-25    15:40:39:633    1048    a8c    AU      # WSUS server: http://10.10.1.200
    2010-03-25    15:40:39:633    1048    a8c    AU      # Detection frequency: 22
    2010-03-25    15:40:39:633    1048    a8c    AU      # Target group: Lipscomb and Pitts Insurance LLC
    2010-03-25    15:40:39:633    1048    a8c    AU      # Approval type: Scheduled (Policy)
    2010-03-25    15:40:39:633    1048    a8c    AU      # Scheduled install day/time: Every day at 12:00
    2010-03-25    15:40:39:633    1048    a8c    AU      # Auto-install minor updates: Yes (Policy)
    2010-03-25    15:40:39:649    1048    a8c    AU    Setting AU scheduled install time to 2010-03-26 17:00:00
    2010-03-25    15:40:39:649    1048    a8c    AU    Initializing featured updates
    2010-03-25    15:40:39:649    1048    a8c    AU    Found 0 cached featured updates
    2010-03-25    15:40:40:398    1048    a8c    Report    ***********  Report: Initializing static reporting data  ***********
    2010-03-25    15:40:40:398    1048    a8c    Report      * OS Version = 5.1.2600.2.0.65792
    2010-03-25    15:40:40:444    1048    a8c    Report      * Computer Brand = Compaq
    2010-03-25    15:40:40:460    1048    a8c    Report      * Computer Model = Evo D510 SFF
    2010-03-25    15:40:40:460    1048    a8c    Report      * Bios Revision = 686O2 v3.18
    2010-03-25    15:40:40:460    1048    a8c    Report      * Bios Name = 686O2 v3.18
    2010-03-25    15:40:40:460    1048    a8c    Report      * Bios Release Date = 2003-05-28T00:00:00
    2010-03-25    15:40:40:460    1048    a8c    Report      * Locale ID = 1033
    2010-03-25    15:40:40:538    1048    a8c    AU    AU finished delayed initialization
    2010-03-25    15:40:40:538    1048    a8c    AU    #############
    2010-03-25    15:40:40:538    1048    a8c    AU    ## START ##  AU: Search for updates
    2010-03-25    15:40:40:538    1048    a8c    AU    #########
    2010-03-25    15:40:40:554    1048    a8c    AU    <<## SUBMITTED ## AU: Search for updates [CallId = {73DDB5CA-2696-471B-822B-735258D8D90F}]
    2010-03-25    15:40:40:569    1048    5b4    Report    WARNING: Failed to open event cache file at C:\WINDOWS\SoftwareDistribution\EventCache\{7BDEABC9-0B0C-4E33-8054-BBF1B53B66E6}.bin for reading with hr = 80070002.
    2010-03-25    15:40:40:569    1048    5b4    Agent    *************
    2010-03-25    15:40:40:569    1048    5b4    Agent    ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2010-03-25    15:40:40:569    1048    5b4    Agent    *********
    2010-03-25    15:40:40:569    1048    5b4    Agent      * Online = No; Ignore download priority = No
    2010-03-25    15:40:40:569    1048    5b4    Agent      * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
    2010-03-25    15:40:40:569    1048    5b4    Agent      * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2010-03-25    15:40:40:569    1048    5b4    Agent      * Search Scope = {Machine}
    2010-03-25    15:40:40:678    1048    5b4    Agent      * Found 0 updates and 0 categories in search; evaluated appl. rules of 0 out of 0 deployed entities
    2010-03-25    15:40:40:678    1048    5b4    Agent    *********
    2010-03-25    15:40:40:678    1048    5b4    Agent    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2010-03-25    15:40:40:678    1048    5b4    Agent    *************
    2010-03-25    15:40:40:694    1048    7cc    AU    >>##  RESUMED  ## AU: Search for updates [CallId = {73DDB5CA-2696-471B-822B-735258D8D90F}]
    2010-03-25    15:40:40:694    1048    7cc    AU      # 0 updates detected
    2010-03-25    15:40:40:694    1048    7cc    AU    #########
    2010-03-25    15:40:40:694    1048    7cc    AU    ##  END  ##  AU: Search for updates [CallId = {73DDB5CA-2696-471B-822B-735258D8D90F}]
    2010-03-25    15:40:40:694    1048    7cc    AU    #############
    2010-03-25    15:40:40:694    1048    7cc    AU    Featured notifications is disabled.
    2010-03-25    15:40:40:694    1048    7cc    AU    Setting AU scheduled install time to 2010-03-26 17:00:00
    2010-03-25    15:40:40:694    1048    a8c    AU    #############
    2010-03-25    15:40:40:694    1048    a8c    AU    ## START ##  AU: Search for updates
    2010-03-25    15:40:40:694    1048    a8c    AU    #########
    2010-03-25    15:40:40:694    1048    a8c    AU    <<## SUBMITTED ## AU: Search for updates [CallId = {C789101F-FA43-4AA4-90AC-E4E2FD57E734}]
    2010-03-25    15:40:40:694    1048    5b4    Agent    *************
    2010-03-25    15:40:40:694    1048    5b4    Agent    ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2010-03-25    15:40:40:694    1048    5b4    Agent    *********
    2010-03-25    15:40:40:694    1048    5b4    Agent      * Online = Yes; Ignore download priority = No
    2010-03-25    15:40:40:694    1048    5b4    Agent      * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
    2010-03-25    15:40:40:694    1048    5b4    Agent      * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2010-03-25    15:40:40:694    1048    5b4    Agent      * Search Scope = {Machine}
    2010-03-25    15:40:51:786    1048    5b4    Misc    Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
    2010-03-25    15:40:51:957    1048    5b4    Misc     Microsoft signed: Yes
    2010-03-25    15:40:51:973    1048    5b4    Misc    Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.cab:
    2010-03-25    15:40:51:989    1048    5b4    Misc     Microsoft signed: Yes
    2010-03-25    15:40:52:004    1048    5b4    Setup    ***********  Setup: Checking whether self-update is required  ***********
    2010-03-25    15:40:52:004    1048    5b4    Setup      * Inf file: C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.inf
    2010-03-25    15:40:52:051    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\cdm.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
    2010-03-25    15:40:52:067    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wuapi.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
    2010-03-25    15:40:52:082    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.4.7600.226, required version = 7.1.6001.65
    2010-03-25    15:40:52:082    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wuauclt.exe: target version = 7.4.7600.226, required version = 7.1.6001.65
    2010-03-25    15:40:52:082    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.4.7600.226, required version = 7.1.6001.65
    2010-03-25    15:40:52:113    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.4.7600.226, required version = 7.1.6001.65
    2010-03-25    15:40:52:113    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wuaueng.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
    2010-03-25    15:40:52:113    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.4.7600.226, required version = 7.1.6001.65
    2010-03-25    15:40:52:113    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wucltui.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
    2010-03-25    15:40:52:145    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.4.7600.226, required version = 7.1.6001.65
    2010-03-25    15:40:52:145    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wups.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
    2010-03-25    15:40:52:160    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wups2.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
    2010-03-25    15:40:52:176    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wuweb.dll: target version = 7.4.7600.226, required version = 7.1.6001.65
    2010-03-25    15:40:52:176    1048    5b4    Setup    WARNING: Warning: Setup callback ReportProgress failed: 0x8007000d
    2010-03-25    15:40:52:176    1048    5b4    Setup      * IsUpdateRequired = No
    2010-03-25    15:40:52:332    1048    5b4    PT    +++++++++++  PT: Synchronizing server updates  +++++++++++
    2010-03-25    15:40:52:332    1048    5b4    PT      + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://10.10.1.200/ClientWebService/client.asmx
    2010-03-25    15:40:52:488    1048    5b4    PT    WARNING: Cached cookie has expired or new PID is available
    2010-03-25    15:40:52:488    1048    5b4    PT    Initializing simple targeting cookie, clientId = 2cb32d0d-5f24-4d87-8be2-f3d42405e650, target group = Lipscomb and Pitts Insurance LLC, DNS name = lpi116.lpinsurance.com
    2010-03-25    15:40:52:488    1048    5b4    PT      Server URL = http://10.10.1.200/SimpleAuthWebService/SimpleAuth.asmx
    2010-03-25    15:40:55:530    1048    5b4    Agent    WARNING: Failed to evaluate Installed rule, updateId = {BFE5B177-A086-47A0-B102-097E4FA1F807}.102, hr = 8024E001
    2010-03-25    15:44:07:522    1048    5b4    PT    +++++++++++  PT: Synchronizing extended update info  +++++++++++
    2010-03-25    15:44:07:522    1048    5b4    PT      + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://10.10.1.200/ClientWebService/client.asmx

     

     

    Script i ran for rebuild - FYI :

    Net stop wuauserv
    net stop cryptsvc
    regsvr32 /s /u wuapi.dll
    regsvr32 /s /u wuaueng.dll
    regsvr32 /s /u wuaueng1.dll
    regsvr32 /s /u wucltui.dll
    regsvr32 /s /u wups.dll
    regsvr32 /s /u wups2.dll
    regsvr32 /s /u wuweb.dll
    regsvr32 /s /u softpub.dll
    regsvr32 /s /u wintrust.dll
    regsvr32 /s /u initpki.dll
    regsvr32 /s /u dssenh.dll
    regsvr32 /s /u rsaenh.dll
    regsvr32 /s /u gpkcsp.dll
    regsvr32 /s /u sccbase.dll
    regsvr32 /s /u slbcsp.dll
    regsvr32 /s /u mssip32.dll
    regsvr32 /s /u cryptdlg.dll

    attrib -s -h %windir%
    attrib -s -h %windir%\system32
    attrib -s -h %windir%\system32\catroot
    attrib -s -h -r %windir%\system32\catroot2
    ren %windir%\system32\catroot2\Edb.log *.tst
    del %windir%\system32\CatRoot\tmp*.cat /s /f /q
    del %windir%\System32\CatRoot\kb*.cat /s /f /q
    del %windir%\inf\oem*.* /s /f /q
    ren %windir%\System32\Catroot2 oldcatroot2


    regsvr32 /s wuapi.dll
    regsvr32 /s wuaueng.dll
    regsvr32 /s wuaueng1.dll
    regsvr32 /s wucltui.dll
    regsvr32 /s wups.dll
    regsvr32 /s wups2.dll
    regsvr32 /s wuweb.dll
    regsvr32 /s softpub.dll
    regsvr32 /s wintrust.dll
    regsvr32 /s initpki.dll
    regsvr32 /s dssenh.dll
    regsvr32 /s rsaenh.dll
    regsvr32 /s gpkcsp.dll
    regsvr32 /s sccbase.dll
    regsvr32 /s slbcsp.dll
    regsvr32 /s mssip32.dll
    regsvr32 /s cryptdlg.dll

    del %windir%\SoftwareDistribution\*.* /s /f /q

    net start cryptsvc
    net start wuauserv

    25 Mart 2010 Perşembe 20:54

Yanıtlar

  • Just wondering if you found a resolution for this?  Having a similar issue at the moment and would be glad to know what others have used to solve it.

    The original post was from June, 2010, and there were several known issues at that time that could contribute to CPU overloads on the WUAgent.

    2010-03-25    15:40:40:398    1048    a8c    Report      * OS Version = 5.1.2600.2.0.65792

    2010-03-25    15:40:52:082    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wuauclt.exe: target version = 7.4.7600.226, required version = 7.1.6001.65

    2010-03-25    15:40:55:530    1048    5b4    Agent    WARNING: Failed to evaluate Installed rule, updateId = {BFE5B177-A086-47A0-B102-097E4FA1F807}.102, hr = 8024E001

    In this case of this poster, the most notable problem is that the client system was still running Windows XP Service Pack 2 (SP3 was released April 2008) and the WSUS server was still running WSUS v3 Service Pack 1 (SP2 was released August 2009) and the WSUS server contained an unexpired, defective update (the 0x8024E001 error).

    All three of those issues were likely contributing significantly to the performance issues. Given that the O.P. wasn't very diligent in applying service packs, my guess would also be that two other factors were also present: Update maintenance on that WSUS3SP1 server probably wasn't being performed as it should -- the presence of a defective update suggest this also -- so there were likely thousands of updates being unnecessarily scanned by the WUAgent, and the WinXPSP2 system probably had a version of Offfice 2003 originally installed several years earlier and patched through several years of updates, resulting in a very large Windows Installer database -- both of which were also known performance-related causes in 2010.

    If you're having a similar issue today, I would recommend opening a new thread with the platform specifics of the environment you're currently operating in, which are probably not at all related to the known issues from a couple of years ago. But, at a minimum, ensure that the WSUS server does not have undeclined superseded updates that are being scanned by the WUAgent, and if you do have Office 2003 installations that date back several years -- uninstall Office 2003, reinstall Office 2003, apply SP3 directly (slipstreamed Office2003/SP3 is even better), and then patch up the Office 2003 installation. (Note, we're quickly approaching the time frame where similar issues could be impacting Office 2007 installations, particularly if their installation vintage is in the 3-4 year timeframe.)


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Product Manager, SolarWinds
    Microsoft MVP - Software Distribution (2005-2012)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

    30 Haziran 2012 Cumartesi 22:06

Tüm Yanıtlar

  • Just wondering if you found a resolution for this?  Having a similar issue at the moment and would be glad to know what others have used to solve it.
    20 Haziran 2012 Çarşamba 17:52
  • Just wondering if you found a resolution for this?  Having a similar issue at the moment and would be glad to know what others have used to solve it.

    The original post was from June, 2010, and there were several known issues at that time that could contribute to CPU overloads on the WUAgent.

    2010-03-25    15:40:40:398    1048    a8c    Report      * OS Version = 5.1.2600.2.0.65792

    2010-03-25    15:40:52:082    1048    5b4    Setup    Update NOT required for C:\WINDOWS\system32\wuauclt.exe: target version = 7.4.7600.226, required version = 7.1.6001.65

    2010-03-25    15:40:55:530    1048    5b4    Agent    WARNING: Failed to evaluate Installed rule, updateId = {BFE5B177-A086-47A0-B102-097E4FA1F807}.102, hr = 8024E001

    In this case of this poster, the most notable problem is that the client system was still running Windows XP Service Pack 2 (SP3 was released April 2008) and the WSUS server was still running WSUS v3 Service Pack 1 (SP2 was released August 2009) and the WSUS server contained an unexpired, defective update (the 0x8024E001 error).

    All three of those issues were likely contributing significantly to the performance issues. Given that the O.P. wasn't very diligent in applying service packs, my guess would also be that two other factors were also present: Update maintenance on that WSUS3SP1 server probably wasn't being performed as it should -- the presence of a defective update suggest this also -- so there were likely thousands of updates being unnecessarily scanned by the WUAgent, and the WinXPSP2 system probably had a version of Offfice 2003 originally installed several years earlier and patched through several years of updates, resulting in a very large Windows Installer database -- both of which were also known performance-related causes in 2010.

    If you're having a similar issue today, I would recommend opening a new thread with the platform specifics of the environment you're currently operating in, which are probably not at all related to the known issues from a couple of years ago. But, at a minimum, ensure that the WSUS server does not have undeclined superseded updates that are being scanned by the WUAgent, and if you do have Office 2003 installations that date back several years -- uninstall Office 2003, reinstall Office 2003, apply SP3 directly (slipstreamed Office2003/SP3 is even better), and then patch up the Office 2003 installation. (Note, we're quickly approaching the time frame where similar issues could be impacting Office 2007 installations, particularly if their installation vintage is in the 3-4 year timeframe.)


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Product Manager, SolarWinds
    Microsoft MVP - Software Distribution (2005-2012)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

    30 Haziran 2012 Cumartesi 22:06
  • Thanks Lawrence. My problem is solved now, it turned out to be a proxy issue again - damn proxy was redirecting requests for wsus-server to servers overseas instead of the one in the local subnet. Have solved it with an updated PAC file which stops any wsus-server requests going to the proxy and all is good now.

    Appreciate the detail!

    01 Temmuz 2012 Pazar 08:36