locked
SBS 2008 hangs during searching updates RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    I've a problem with windows update on an SBS 2008. It hangs during searching updates. After 3 hours nothing changed. svchost.exe is still using 13% CPU (1 core). I'm not sure if I'm in the right forum, but I don't think that it's an WSUS-related problem.

    I've tried to reinstall the windows update agent and cleaned the Softwaredistribution-folder. Nothing helps!

    Here is some part of the log:

    2011-11-27 15:59:32:552  460 24ac Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2011-11-27 15:59:32:552  460 24ac Agent   * Search Scope = {Machine}
    2011-11-27 16:01:11:803  460 2334 AU Triggering AU detection through DetectNow API
    2011-11-27 16:01:11:804  460 2334 AU Will do the detection after current detection completes
    2011-11-27 16:29:32:325 4684 f04 COMAPI -------------
    2011-11-27 16:29:32:325 4684 f04 COMAPI -- START --  COMAPI: Search [ClientId = Exchange12]
    2011-11-27 16:29:32:326 4684 f04 COMAPI ---------
    2011-11-27 16:29:32:330 4684 f04 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = Exchange12]
    2011-11-27 16:46:59:620  460 2490 AU ###########  AU: Uninitializing Automatic Updates  ###########
    2011-11-27 16:46:59:620  460 24ac Agent   * WARNING: Failed to filter search results, error = 0x8024000B
    2011-11-27 16:46:59:643  460 24ac Agent *********
    2011-11-27 16:46:59:643  460 24ac Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2011-11-27 16:46:59:643  460 24ac Agent *************
    2011-11-27 16:46:59:643  460 24ac Agent *************
    2011-11-27 16:46:59:643  460 24ac Agent ** START **  Agent: Finding updates [CallerId = Exchange12]
    2011-11-27 16:46:59:643  460 24ac Agent *********
    2011-11-27 16:46:59:643  460 24ac Agent   * Online = Yes; Ignore download priority = No
    2011-11-27 16:46:59:643  460 24ac Agent   * Criteria = "IsInstalled=0 and CategoryIDs contains 'ab62c5bd-5539-49f6-8aea-5a114dd42314'"
    2011-11-27 16:46:59:643  460 24ac Agent   * ServiceID = {00000000-0000-0000-0000-000000000000} Third party service
    2011-11-27 16:46:59:643  460 24ac Agent   * Search Scope = {Machine}
    2011-11-27 16:47:00:484  460 24ac Agent   * WARNING: Exit code = 0x8024000B
    2011-11-27 16:47:00:484  460 24ac Agent *********
    2011-11-27 16:47:00:484  460 24ac Agent **  END  **  Agent: Finding updates [CallerId = Exchange12]
    2011-11-27 16:47:00:484  460 24ac Agent *************
    2011-11-27 16:47:00:484  460 24ac Agent WARNING: WU client failed Searching for update with error 0x8024000b
    2011-11-27 16:47:00:487 4684 26f0 COMAPI >>--  RESUMED  -- COMAPI: Search [ClientId = Exchange12]
    2011-11-27 16:47:00:487  460 2490 Agent Sending shutdown notification to client
    2011-11-27 16:47:00:487 4684 26f0 COMAPI   - Updates found = 0
    2011-11-27 16:47:00:487 4684 26f0 COMAPI   - WARNING: Exit code = 0x00000000, Result code = 0x8024001E
    2011-11-27 16:47:00:487 4684 26f0 COMAPI ---------
    2011-11-27 16:47:00:487 4684 22c8 COMAPI WARNING: Received service shutdown/self-update notification.
    2011-11-27 16:47:00:487 4684 26f0 COMAPI --  END  --  COMAPI: Search [ClientId = Exchange12]
    2011-11-27 16:47:00:487 4684 26f0 COMAPI -------------
    2011-11-27 16:47:00:488 4684 f04 COMAPI WARNING: Operation failed due to earlier error, hr=8024001E
    2011-11-27 16:47:00:488 4684 f04 COMAPI FATAL: Unable to perform synchronous search. (hr=8024001E)
    2011-11-27 16:47:00:488  460 2490 Agent Sending shutdown notification to client
    2011-11-27 16:47:00:488 4684 22c8 COMAPI WARNING: Received service shutdown/self-update notification.
    2011-11-27 16:47:00:489  460 2490 Report REPORT EVENT: {B0ECBA9A-7F4C-486A-BF86-A51015D0ABBC} 2011-11-27 15:59:32:283+0100 1 202 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Reboot completed.
    2011-11-27 16:47:00:495  460 2490 Report CWERReporter finishing event handling. (00000000)
    2011-11-27 16:47:00:495  460 2490 Report CWERReporter finishing event handling. (00000000)
    2011-11-27 16:47:00:873  460 2490 Service *********
    2011-11-27 16:47:00:873  460 2490 Service **  END  **  Service: Service exit [Exit code = 0x240001]
    2011-11-27 16:47:00:874  460 2490 Service *************
    2011-11-27 16:47:05:296  460 1774 Misc ===========  Logging initialized (build: 7.4.7600.226, tz: +0100)  ===========
    2011-11-27 16:47:05:297  460 1774 Misc   = Process: C:\Windows\system32\svchost.exe
    2011-11-27 16:47:05:297  460 1774 Misc   = Module: c:\windows\system32\wuaueng.dll
    2011-11-27 16:47:05:296  460 1774 Service *************
    2011-11-27 16:47:05:297  460 1774 Service ** START **  Service: Service startup
    2011-11-27 16:47:05:297  460 1774 Service *********
    2011-11-27 16:47:05:298  460 1774 Agent   * WU client version 7.4.7600.226
    2011-11-27 16:47:05:298  460 1774 Agent   * Base directory: C:\Windows\SoftwareDistribution
    2011-11-27 16:47:05:299  460 1774 Agent   * Access type: No proxy
    2011-11-27 16:47:05:299  460 1774 Agent   * Network state: Connected
    2011-11-27 16:47:05:728  460 100c Report CWERReporter::Init succeeded
    2011-11-27 16:47:05:729  460 100c Agent ***********  Agent: Initializing Windows Update Agent  ***********
    2011-11-27 16:47:05:729  460 1f28 Agent ***********  Agent: Initializing Windows Update Agent  ***********
    2011-11-27 16:47:05:731  460 100c Agent ***********  Agent: Initializing global settings cache  ***********
    2011-11-27 16:47:05:732  460 100c Agent   * WSUS server: http://server:8530
    2011-11-27 16:47:05:733  460 100c Agent   * WSUS status server: http://server:8530
    2011-11-27 16:47:05:734  460 100c Agent   * Target group: (Unassigned Computers)
    2011-11-27 16:47:05:735  460 100c Agent   * Windows Update access disabled: No
    2011-11-27 16:47:05:736  460 100c DnldMgr Download manager restoring 0 downloads
    2011-11-27 16:47:05:740  460 1f28 AU ###########  AU: Initializing Automatic Updates  ###########
    2011-11-27 16:47:05:742  460 1f28 AU AU setting next detection timeout to 2011-11-27 15:47:05
    2011-11-27 16:47:05:745  460 1f28 AU   # WSUS server: http://server:8530
    2011-11-27 16:47:05:746  460 1f28 AU   # Detection frequency: 4
    2011-11-27 16:47:05:747  460 1f28 AU   # Approval type: Pre-install notify (Policy)
    2011-11-27 16:47:05:748  460 1f28 AU   # Auto-install minor updates: No (Policy)
    2011-11-27 16:47:05:749  460 1f28 AU   # Will display featured software notifications (User preference)
    2011-11-27 16:47:05:751  460 1f28 AU Initializing featured updates
    2011-11-27 16:47:05:752  460 1f28 AU Found 0 cached featured updates
    2011-11-27 16:47:12:977  460 1774 Report ***********  Report: Initializing static reporting data  ***********
    2011-11-27 16:47:12:977  460 1774 Report   * OS Version = 6.0.6002.2.0.131377
    2011-11-27 16:47:12:977  460 1774 Report   * OS Product Type = 0x00000009
    2011-11-27 16:47:13:014  460 1774 Report   * Computer Brand = Dell Inc.
    2011-11-27 16:47:13:014  460 1774 Report   * Computer Model = PowerEdge T310
    2011-11-27 16:47:13:018  460 1774 Report   * Bios Revision = 1.0.2
    2011-11-27 16:47:13:018  460 1774 Report   * Bios Name = Phoenix ROM BIOS PLUS Version 1.10 1.0.2
    2011-11-27 16:47:13:018  460 1774 Report   * Bios Release Date = 2009-09-12T00:00:00
    2011-11-27 16:47:13:018  460 1774 Report   * Locale ID = 3079
    2011-11-27 16:47:13:022  460 1f28 AU AU finished delayed initialization
    2011-11-27 16:47:13:024  460 1774 AU #############
    2011-11-27 16:47:13:024  460 1774 AU ## START ##  AU: Search for updates
    2011-11-27 16:47:13:024  460 1774 AU #########
    2011-11-27 16:47:13:026  460 1774 AU <<## SUBMITTED ## AU: Search for updates [CallId = {EDA1E01E-57E0-4AC5-9230-7D7F2E2192BA}]
    2011-11-27 16:47:13:027  460 2628 Agent *************
    2011-11-27 16:47:13:027  460 2628 Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2011-11-27 16:47:13:027  460 2628 Agent *********
    2011-11-27 16:47:13:027  460 2628 Agent   * Online = No; Ignore download priority = No
    2011-11-27 16:47:13:027  460 21c0 AU Triggering AU detection through DetectNow API
    2011-11-27 16:47:13:027  460 2628 Agent   * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2011-11-27 16:47:13:027  460 21c0 AU Will do the detection after current detection completes
    2011-11-27 16:47:13:027  460 2628 Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2011-11-27 16:47:13:027  460 2628 Agent   * Search Scope = {Machine}
    2011-11-27 17:17:05:806 4684 f04 COMAPI -------------
    2011-11-27 17:17:05:806 4684 f04 COMAPI -- START --  COMAPI: Search [ClientId = Exchange12]
    2011-11-27 17:17:05:806 4684 f04 COMAPI ---------
    2011-11-27 17:17:05:811 4684 f04 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = Exchange12]
    2011-11-27 17:21:06:646  460 21c0 AU Triggering AU detection through DetectNow API
    2011-11-27 17:21:06:647  460 21c0 AU Will do the detection after current detection completes
    2011-11-27 17:34:38:455 3524 2088 Misc ===========  Logging initialized (build: 7.4.7600.226, tz: +0100)  ===========
    2011-11-27 17:34:38:455 3524 2088 Misc   = Process: C:\Windows\SysWOW64\wusa.exe
    2011-11-27 17:34:38:455 3524 2088 Misc   = Module: C:\Windows\SysWOW64\wuapi.dll
    2011-11-27 17:34:38:454 3524 2088 COMAPI -----------  COMAPI: IUpdateServiceManager::AddScanPackageService  -----------
    2011-11-27 17:34:38:455 3524 2088 COMAPI   - ServiceName = Eigenständiges Windows-Updateinstallationsprogramm
    2011-11-27 17:34:38:455 3524 2088 COMAPI   - ScanFileLocation = C:\e908a839cc7684fd9aa1\wsusscan.cab
    2011-11-27 17:34:38:470  460 2474 Misc Validating signature for C:\Windows\SoftwareDistribution\ScanFile\0bc1fdba-a225-47f6-b007-548f993db760\Source.cab:
    2011-11-27 17:34:38:535  460 2474 Misc  Microsoft signed: Yes
    2011-11-27 17:34:39:668  460 2474 DtaStor Default service for AU is {9482F4B4-E343-43B6-B170-9A65BC822C77}
    2011-11-27 17:34:39:670 3524 2088 COMAPI   - Added scan package service, ServiceID = {0BC1FDBA-A225-47F6-B007-548F993DB760} Third party service
    2011-11-27 17:34:39:756 3524 2088 COMAPI -------------
    2011-11-27 17:34:39:756 3524 2088 COMAPI -- START --  COMAPI: Search [ClientId = wusa]
    2011-11-27 17:34:39:756 3524 2088 COMAPI ---------
    2011-11-27 17:34:39:763 3524 2088 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = wusa]

    Can anyone help me?

    thank!


    Sunday, November 27, 2011 4:48 PM

Answers

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    I've done a trace with xperf -

    Process svchost Module wuaueng.dll

    Process, Module, Function, Weight, % Weight, Count, TimeStamp
    CSusSortedArrayList<CSusMap<tagDSGlobalUpdateId;CUpdateDetectInfo;CSusSortedArrayListItemOpsBasic<tagDSGlobalUpdateId>;CUpdateDetectInfo>::_tagMapEntry;CSusMap<tagDSGlobalUpdateId;CUpdateDetectInfo;CSusSortedArrayListItemOpsBasic<tagDSGlobalUpdateId>;CUpdateDetectInfo>::CMapEntryOps>::InternalCompare, 550.815740, 1.71, 551,
    CSusMap<tagDSGlobalUpdateId;CUpdateDetectInfo;CSusSortedArrayListItemOpsBasic<tagDSGlobalUpdateId>;CUpdateDetectInfo>::FindNearestLessThanOrEqual, 205.000707, 0.64, 205,
    memcmp, 115.965160, 0.36, 116,
    CUpdatesToPruneList::AddSupersedenceInfoIfNeeded, 75.996459, 0.24, 76,
    CUpdateDetectInfoList::FindNewestUpdate, 74.992780, 0.23, 75,
    CSusMap<tagDSGlobalUpdateId;CUpdateDetectInfo;CSusSortedArrayListItemOpsBasic<tagDSGlobalUpdateId>;CUpdateDetectInfo>::_tagMapEntry::_tagMapEntry, 36.998278, 0.11, 37,
    _security_check_cookie, 29.992360, 0.09, 30,
    memset, 8.998351, 0.03, 9,
    CSusAsyncCall::IsCancelled, 3.999810, 0.01, 4,
    memcpy, 3.999739, 0.01, 4,

    Please help!

    Monday, November 28, 2011 9:32 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Can you verify if you are facing issue mentioned in:

    http://blogs.technet.com/b/sbs/archive/2010/06/04/case-in-the-corner-series-spiking-cpu.aspx

     

    • Marked as answer by max_payne1256 Monday, November 28, 2011 10:44 AM
    Monday, November 28, 2011 10:25 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Yes! Some hours ago I read about those Exchange-Antispam-Updates. I created a view for definition-updates and declined more than 30 of those updates.

    After I've stopped the windows-update-service, deleted the softwaredestributionfolder and restarted the service it took about 2 hours, and then windows-update worked again :)

    Thanks!

    • Marked as answer by max_payne1256 Monday, November 28, 2011 10:45 AM
    Monday, November 28, 2011 10:44 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Good to know it fixed your issue.....and yeah.....MaxPayne roxxxxxxxxxx :)
    Monday, November 28, 2011 11:03 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    http://social.technet.microsoft.com/Forums/en-US/exchangesoftwareupdate/thread/80bcd162-8eee-445d-84c2-6118d62c39b4/

    It's not just you.

    Thursday, December 1, 2011 2:20 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    The issue has been resolved.  You can re-enable antispam updates.
    Monday, December 5, 2011 5:07 AM