Internal Repro results on svchost/msi issue


Hi – Touching base back on our testing results in reproducing the “svchost/msi issue” system hang, lock and/or unresponsive behaivor reports.  After installing the new 3.0 client, and the MSI fix (KB927891) referenced in yesterdays’ post, we tested scan times, system responsiveness and CPU utilization on a variety of systems running multiple applications simultaneously.


Baselines were run on Single Processor 733 Mhz systems with 256Mb Ram, with XPSP2 and Windows Server 2003 SP1 operating systems and Office 2003 installed.  Multiple instances of IE, Office apps, and AV utils were run during scans.  In these cases there was the expected CPU usage spike in the task manager, however all the systems remained responsive.  


I have not yet had anyone report and send information to me on locked or unresponsive systems after installing and verifying the new 3.0 client and the MSI fix are on the systems. Still open to recieving the WindowsUpdate.log and system HW/SW configuration if you are continuing to experience these issues.  However,  we are seeing many more posts in blogs, forums and newsgroups where users are reporting these installs alleviate these issues, while the CPU consumption does temporarly spike as expected. 


We will continue to monitor this issue.


thanks –


Bobbie Harder


 

Comments (117)

  1. Anonymous says:

    To those that ping the blog about the svchost issue and then say " The patch is only helps on some

  2. Anonymous says:

    A+ – Please send me your full system description, software running and your windowsupdate.log from the problem client.  We’d also like your email address so dev can contact you for further event logs and tracings. thnks

    bobbieh@microsoft.con

  3. Anonymous says:

    Bobbie Harder from Microsoft WSUS team blogs that there is no report of unresponsiveness if the hotfix

  4. Jeferson Propheta says:

    Yeah Bobbie, After installing the new 3.0 Agent client, and the KB927891_v3, now everything seems to be normal!!! thank you and Wsus Team

  5. Vilius says:

    Does test machines had Microsoft Update client as a default one instead of Windows update? This is very important point.

  6. Anonymous says:

    I agree this is great news. Better news however will be when I can distribute the full solution via WSUS. Currently if I’m using WSUS 2 I need to find an alternate method to install both the new 3.0 client and KB927891. If I move to WSUS 3 (which would resolve the 3.0 client upgrade) I still need to find an alternate method to install KB927891. I’ve read the previous post and I know the current target timeframe is “late May early June”. I and other customers would prefer sooner rather than later.

  7. Jeferson Propheta says:

    For an Urgent Deployment in your Environment, you can use a vbs script like this one:

    ‘SVCHOST.vbs

    ‘***************************************************************************************************

    ‘Windows Svchost Issue Fix

    ‘script Write by Jeferson Propheta

    ‘Created 05/11/2007  –  Last Update 05/15/2007  ExpandEnvironmentStrings

    ‘***************************************************************************************************

    On Error Resume Next

    CONST ForAppending = 8

    Const ForReading   = 1

    Set objShell       = CreateObject("WScript.Shell")

    strRunFile = objShell.ExpandEnvironmentStrings("%SystemDrive%") & ("WsusFIXRUN.txt")

    strAGTFile = objShell.ExpandEnvironmentStrings("%SystemDrive%") & ("WsusAGT.txt")

    strKBFile = objShell.ExpandEnvironmentStrings("%SystemDrive%") & ("WsusKb.txt")

    strWsusAgentFile = "\_YOUR_SERVER_NAME_HERE__YOUR_FOLDER_WindowsUpdateAgent30-x86.exe /quiet /wuforce /norestart"

    strWsusPatchFile = "\_YOUR_SERVER_NAME_HERE__YOUR_FOLDER_WindowsXP-KB927891-v3-x86-ENU.exe /quiet /warnrestart:99 /log:C:KB927891v3.log"

    strAGTLog = "\_YOUR_SERVER_NAME_HERE__YOUR_FOLDER_LogsAgent_Install_v3-%computername%_%username%.log"

    strPatchLog = "\_YOUR_SERVER_NAME_HERE__YOUR_FOLDER_LogsKB927891_v3-%computername%_%username%.log"

    Set objAready = CreateObject("Scripting.FileSystemObject")

    If NOT objAready.FileExists(strRunFile) Then

      strComputer        = "."

      Set objWMIService  = GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\" & strComputer & "rootcimv2")

      Set colServices    = objWMIService.ExecQuery ("SELECT * FROM Win32_Service WHERE Name = ‘wuauserv’")

              For Each objService in colServices

                       errReturnCode = objService.StopService()

               Next

    objShell.run "%ComSpec% /C rd /S /Q %SystemRoot%SoftwareDistribution",0

      strComputer    = "."

      Set objWMIService = GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\" & strComputer & "rootcimv2")

      Set colServices   = objWMIService.ExecQuery ("SELECT * FROM Win32_Service WHERE Name = ‘wuauserv’")

              For Each objService in colServices

                       errReturnCode = objService.StartService()

               Next

    Wscript.Sleep 5000

          If NOT objAready.FileExists(strAGTFile) Then

                 objShell.run "%ComSpec% /C start" & strWsusAgentFile,0 ,true

                 objShell.Run "%ComSpec% /C set computername >" & strAGTFile,0 ,True

                 objShell.Run "%ComSpec% /C set computername >" & strAGTLog,0 ,True

          End If

    Wscript.sleep 50000

          If NOT objAready.FileExists(strKBFile) Then

                 objShell.run "%ComSpec% /C start" & strWsusPatchFile,0 ,true

                 objShell.Run "%ComSpec% /C set computername >" & strKBFile,0 ,True

                 objShell.Run "%ComSpec% /C set computername >" & strPatchLog,0 ,True

          End If

          objShell.Run "%ComSpec% /C set computername >" & strRunFile,0 ,True

    End If

    Set objAready      = Nothing

    Set objShell       = Nothing

    Wscript.Quit

    ‘**********END

    Hope it help

  8. APlus says:

    I installed both WSUS 3.0 and KB927891-v3. On the problem machine (a celeron client 1.7 HGz with 384 MB memory) I even ended up reinstalling WindowsUpdateAgent30 and deleting the SoftwareDistribution folder, but still no luck…

    The system is not responsive at all when starting up and therefore not usable. Other programs seem to "hang" when starting up and even starting up the task manager or services control panel takes long minutes. I finally disabled the Windows Update Service, … again.

    What do I need to send to whom to get this thing finally solved?

    A+

  9. Wayne says:

    The new 3.0 client, and the MSI fix (KB927891) solved my problems on XP Home SP2 and an Athlon XP 1900 CPU (1.61 GHz). Went from total freeze up to being able to get email and use Word while scanning. Thanks much!

  10. Purushotham says:

    Cx was having system hang during windows update. After installing KB927891 and Windows Update Agent 3.0 it came out of hanging situation, but still the CPU spikes for svchost during update above 90% for long time. But was able to update one machine. As per 932494, above action plan should resolve the problem completely including spiking of CPU with SVCHOST.

  11. WTH says:

    What about Windows 2000?

    (And this question seems to keep being ignored in the other comments)

    We have over 1000 PC’s suffering with this issue, intermittently (as checking for updates are random).  The Hotfix is only for XP and Server 2003. Our security folks won’t allow us to turn Automatic Updates off.

    I won’t have a chance to test the version 3 client until Monday, but I’m more concerned that about the hotfix not being available for 2000, where you are stating it is needed for a "complete solution".

    Info for 2000 would be most appreciated.

    Thanks

  12. Montezuma says:

    Hi,            

                 I have the same question about Windows 2000. What can I do about this? I have attemped a lot of alternative solutions for resolvere this problem, but  with Windows 2000 is very difficult .   I Would like to know which the impact to use these corrections in windows 2000?    

    Gratefulness for the XP solution.

    Marcelo Montezuma.

  13. David Chaiken says:

    KB927891 fixed the problem on my Dell Inspiron 5150 running XP Home SP2.  Exact reproduction of the problem: before the patch, SVCHOST took 100% of the CPU and the system was unusable.  After the patch, SVCHOST takes 100% of the CPU for a few minutes but the system is still usable.

    Funny thing: only one of two identical units (purchased on the same day) exhibited the problem.  For unrelated reasons, I had done a complete software rebuild (including a disk reformat) on one of the two laptops.  The svchost/msi issue hit right after I finished the rebuild — possibly after installing Office 2003 and switching to Microsoft Update.

  14. Malte says:

    KB927891 is available by MU/WSUS2/WSUS3 now

  15. James_A says:

    @WTH, Montezuma and all others with Windows 2000.

    kb927891 is now freely available for Windows 2000.

    Don’t believe a word of the kb article which indicates that this is a PSS hotfix (for Win2k). That article is just plain wrong (Again!!) because the update is freely downloadable. Google on "update for windows 2000 (kb927891)" (*including* the quotes) to find Microsoft’s download details page.

    James

  16. APlus says:

    I added some additional memory, now 640 MB in total. No improvements, so the problem client is now having the Windows Update Service disabled.

    The logfiles are send the same day, no update yet. Any news?

    A+

  17. usendeque says:

    Hi people!

    Want a real sex [url=http://realpartner.bravehost.com/”>http://realpartner.bravehost.com/]tonight[/url]

    http://realpartner.bravehost.com

    G’night )))

  18. airplane tickets says:

    <a href= http://saimon1.ibelgique.com>airplane”>http://saimon1.ibelgique.com>airplane tickets</a> http://saimon1.ibelgique.com airplane tickets

  19. ctl00$_$ctl00$_$ctl01$_$form$_$tbname says:

    i ephedra <a href= http://www.forum66.com/ipb/?mforum=ephedraa >vitalbody ephedra</a> [url=http://www.forum66.com/ipb/?mforum=ephedraa]vitalbody ephedra[/url]

  20. buy meridia says:

    Buy Meridia Online. Order Meridia –  <a href=http://www.yurbo.co.uk/community/viewprofile.php?user=buy-meridia>buy">http://www.yurbo.co.uk/community/viewprofile.php?user=buy-meridia>buy
    meridia</a> Get Meridia helps the seriously overweight shed pounds and keep them off. [url=http://www.yurbo.co.uk/community/viewprofile.php?user=buy-meridia]buy
    meridia[/url].

  21. Buy Propecia says:

    Propecia online from a man s body – <a href=http://www.funky.co.uk/community/viewprofile.php?user=buy_propecia>Buy”>http://www.funky.co.uk/community/viewprofile.php?user=buy_propecia>Buy Propecia</a>. Propecia tablets contain the active ingredient finasteride – [url=http://www.funky.co.uk/community/viewprofile.php?user=buy_propecia]Buy Propecia[/url].

  22. Buy Meridia says:

    Buy cheap meridia pills – <a href=http://www.blogtalkradio.com/buy-meridia>buy”>http://www.blogtalkradio.com/buy-meridia>buy  meridia</a>.   Best meridia weight loss information.[url=http://www.blogtalkradio.com/buy-meridia]meridia buy[/url].

  23. ctl00$_$ctl00$_$ctl01$_$form$_$tbname says:

    do meridia <a href= http://meridia.zblog.ru >meridia results</a> [url=http://meridia.zblog.ru]meridia results[/url]

  24. ctl00$_$ctl00$_$ctl01$_$form$_$tbname says:

    do meridia <a href= http://meridia.zblog.ru >meridia results</a> [url=http://meridia.zblog.ru]meridia results[/url]

  25. buy meridia says:

    Meridia diet pills –  <a href=http://www.blogtalkradio.com/Buy_Meridia>buy”>http://www.blogtalkradio.com/Buy_Meridia>buy meridia</a>. The cheapest meridia online – [url=http://www.blogtalkradio.com/Buy_Meridia]buy meridia[/url].

  26. buy propecia says:

    PROPECIA fast free comparison shopping in the 12 months to see <a href=http://www.artima.com/profile/54203>buy”>http://www.artima.com/profile/54203>buy propecia</a> – [url=http://www.artima.com/profile/54203]buy propecia[/url].

  27. joseph says:

    sweet site thx <a href=" http://groups.google.com/group/ephedrine-zyx/web/ephedrine-for-sale ">ephedrine for sale

    </a>  :-OO <a href=" http://groups.google.com/group/ephedrine-zyx/web/diet-pills-with-ephedrine ">diet pills with ephedrine

    </a>  aijob <a href=" http://groups.google.com/group/ephedrine-zyx/web/pure-ephedrine ">pure ephedrine

    </a>  txixc

  28. ��Casino Deutschland says:

    Good site! My site about Kasinos

    <a href=http://groups.google.de/group/deutsches/web/kasino-im-internet>Kasino im Internet</a> [url=http://groups.google.de/group/deutsches/web/kasino-im-internet]Kasino im Internet[/url]

    <a href=http://groups.google.de/group/deutsches/web/online-zocken>Online Zocken</a> [url=http://groups.google.de/group/deutsches/web/online-zocken]Online Zocken[/url]

    End ^)

  29. adipex says:

    Good site! My site about adipex pills

    <a href=http://groups.google.com/group/adipex-p/web/adipex-phentermine>adipex phentermine</a> [url=http://groups.google.com/group/adipex-p/web/adipex-phentermine]adipex phentermine[/url]

    <a href=http://groups.google.com/group/adipex-p/web/adipex-diet-pills>adipex diet pill</a> [url=http://groups.google.com/group/adipex-p/web/adipex-diet-pills]adipex diet pill[/url]

    End ^)

  30. adipex says:

    Good site! My site about adipex pills

    <a href=http://groups.google.com/group/adipex-p/web/adipex-p>adipex</a> [url=http://groups.google.com/group/adipex-p/web/adipex-p]adipex[/url]

    <a href=http://groups.google.com/group/adipex-p/web/generic-adipex>generic adipex</a> [url=http://groups.google.com/group/adipex-p/web/generic-adipex]generic adipex[/url]

    End ^)

  31. Heather says:

    the finer and more improved manufactures  such as contain a great <a href= http://idisk.mac.com/dukebluedevilsfreewe/Public/0/premade-myspace-layouts-with-stars.html >premade myspace layouts with stars</a>    manner, none of them well knew. The merchants knew perfectly in jevbuaumpp

  32. karen says:

    it  a fifth grinds it at the top for receiving the head  to make the head <a href= http://idisk.mac.com/dukebluedevilsfreewe/Public/0/my-space-layouts-disney-villians.html >my space layouts disney villians</a>    employed in the foreign trade of consumption has made one. If the capitals pkkqjxvgcf

  33. online vicodin says:

    Good site! My site about vicodin

    <a href=http://groups.google.com/group/vicodin3/web/online-vicodin>online vicodin</a> [url=http://groups.google.com/group/vicodin3/web/online-vicodin]online vicodin[/url]

    <a href=http://groups.google.com/group/vicodin3/web/addiction-vicodin>addiction vicodin</a> [url=http://groups.google.com/group/vicodin3/web/addiction-vicodin]addiction vicodin[/url]

    End ^)

  34. Eckko says:

    Wireless is the buzz word of the times, and broadband is its closest kin,

  35. Meridia says:

    Thanks! Good site. My site about meridia diet pills  – <a href=http://www.mojizu.com/artist/Meridia.aspx>meridia</a>”>http://www.mojizu.com/artist/Meridia.aspx>meridia</a>, [url=http://www.mojizu.com/artist/Meridia.aspx]buy meridia[/url].

  36. meridia says:

    Thanks! Good site. My site about meridia diet pills  – <a href=http://www.mojizu.com/artist/Meridia.aspx>buy”>http://www.mojizu.com/artist/Meridia.aspx>buy meridia</a>, [url=http://www.mojizu.com/artist/Meridia.aspx]meridia[/url].

  37. CheattGep says:

    Pourquoi creer un blog chez cowblog alors qu’il vous bombarde de publicite ?

    Pas moins de 4 popups en une minute sur chaque blog visite !! LE blog devient tout simplement invisitable !

    PAr ailleurs la plateforme est devenu une niche de groupes [url=http://www.blog-politique-a-babord-toute.fr/]pervers[/url] tres malsains dont des [url=http://le-brouillon.cowblog.fr/]racistes[/url] qui communiquent entre eux par le biais de cowblog.fr : Dangereux individus !

    Tout sauf Cowblog ! ATTENTION protegez vos enfants !

    Allez chez BLOGGER!

  38. Discount meridia says:

    Good site! My site about meridia pills –

    <a href=http://www.imeem.com/groups/ceSm_RFt/forums/D0e6NA9l/oE5iEJYl/cheap_meridia/>cheap meridia</a> [url=http://www.imeem.com/groups/ceSm_RFt/forums/D0e6NA9l/oE5iEJYl/cheap_meridia/]cheap meridia[/url]

    ��<a href=http://www.imeem.com/groups/ceSm_RFt/forums/D0e6NA9l/OVgFBYhU/meridia/>Meridia</a> [url=http://www.imeem.com/groups/ceSm_RFt/forums/D0e6NA9l/OVgFBYhU/meridia/]Meridia[/url]

    End ^)

  39. Adaptortraw says:

    [url=http://broalmanone.com]broalmanone.com[/url]

  40. cheap propecia says:

    Good site! My site about propecia

    ��You site is very good! Welcome to online pharmacy propecia – <a href=http://us.cyworld.com/Propecia>propecia</a> [url=http://us.cyworld.com/Propecia]propecia[/url].

    ��You site is very good! Welcome to online pharmacy propecia – <a href=http://us.cyworld.com/Propecia>propecia</a> [url=http://us.cyworld.com/Propecia]propecia[/url].

    End ^)

  41. buy meridia says:

    Good site! Thank you! Vizit my site about meridia –  

    <a href=http://meridia.webnode.com/buy-meridia/>buy meridia</a> [url=http://meridia.webnode.com/buy-meridia/]buy meridia[/url] <a href=http://meridia.webnode.com/news/visitors-notice/>discount meridia</a> [url=http://meridia.webnode.com/news/visitors-notice/]discount
    meridia[/url] <a href=http://meridia.webnode.com/news/website-launched/>generic meridia</a> [url=http://meridia.webnode.com/news/website-launched/]generic meridia[/url]

    <a href=http://meridia.webnode.com/buy-meridia/>buy meridia</a> [url=http://meridia.webnode.com/buy-meridia/]buy meridia[/url] <a href=http://meridia.webnode.com/news/visitors-notice/>discount meridia</a> [url=http://meridia.webnode.com/news/visitors-notice/]discount
    meridia[/url] <a href=http://meridia.webnode.com/news/website-launched/>generic meridia</a> [url=http://meridia.webnode.com/news/website-launched/]generic meridia[/url]

    End ^)

  42. meridia diet pill says:

    Good site! Thank you! Vizit my site about meridia –  

    <a href=http://meridia.webnode.com/buy-meridia/>buy meridia</a> [url=http://meridia.webnode.com/buy-meridia/]buy meridia[/url] <a href=http://meridia.webnode.com/news/visitors-notice/>discount meridia</a> [url=http://meridia.webnode.com/news/visitors-notice/]discount
    meridia[/url] <a href=http://meridia.webnode.com/news/website-launched/>generic meridia</a> [url=http://meridia.webnode.com/news/website-launched/]generic meridia[/url]

    <a href=http://meridia.webnode.com/buy-meridia/>buy meridia</a> [url=http://meridia.webnode.com/buy-meridia/]buy meridia[/url] <a href=http://meridia.webnode.com/news/visitors-notice/>discount meridia</a> [url=http://meridia.webnode.com/news/visitors-notice/]discount
    meridia[/url] <a href=http://meridia.webnode.com/news/website-launched/>generic meridia</a> [url=http://meridia.webnode.com/news/website-launched/]generic meridia[/url]

    End ^)

  43. bvbcvfdg says:

    YZC8Fw vcxdsgcvb363454gdfgdbcv53435654

  44. bvbcvfdg says:

    z3L42l vcxdsgcvb363454gdfgdbcv53435654

  45. association says:

    <a href=" http://map11.weebly.com "> advancement boy ceremony rank scout </a>

    <a href=" http://map6.webnode.com ">advancement association professional researcher</a>

  46. advancement says:

    <a href=" http://map11.weebly.com "> advancement boy ceremony rank scout </a>

    <a href=" http://map6.webnode.com ">advancement association professional researcher</a>

  47. expedition says:

    <a href=" http://map31.weebly.com ">aura saturn</a>

    <a href=" http://map32.weebly.com ">body expedition ford kit</a>

  48. creative says:

    <a href="http://map33.weebly.com/">arts”>http://map33.weebly.com/">arts creative expressive master therapy</a>

    [url=http://map33.weebly.com/]arts creative expressive master therapy[/url]

    http://map33.weebly.com/

  49. agent says:

    <a href=" http://map54.weebly.com/ ">agent buyer ca rio vista</a>

    <a href=" http://map55.weebly.com/ ">agp x vs x</a>

    <a href=" http://map56.weebly.com/ ">agency development trade us</a>

  50. chupachups says:

    <a href=" http://chupachups.weebly.com/ ">air battery fresheners powered</a>

    <a href=" http://chupachups.weebly.com/index2.html ">aikman arkansas bluff kelly pine</a>

  51. bluff says:

    <a href=" http://chupachups.weebly.com/ ">air battery fresheners powered</a>

    <a href=" http://chupachups.weebly.com/index2.html ">aikman arkansas bluff kelly pine</a>

  52. georgia-pageant says:

    <a href=" http://beat2.itgo.com/beautiful-face-of-georgia-pageant.html ">beautiful face of georgia pageant</a>

    <a href=" http://beat2.iwarp.com/beautiful-exotic-picture-woman.html ">beautiful exotic picture woman</a>

    <a href=" http://beat2.scriptmania.com/beautiful-episode-guide-people.html ">beautiful episode guide people</a>

  53. annotated says:

    <a href=" http://pinponk18.weebly.com/ ">annotated ashanti bibliography ghana tribe</a>

    <a href=" http://pinponk19.weebly.com/ ">announces its perspective trannsene</a>

    <a href=" http://pinkponk20.weebly.com/ ">annual compound formula growth rate</a>

  54. cxvbvc says:

    <a href=" http://cuso1.weebly.com/ ">back chest pain pain upper</a>

    <a href=" http://cuso2.weebly.com/ ">back cutting hair her</a>

  55. sohbet says:

    Thanks so much for this! This is exactly……………

  56. müzik dinle says:

    Sorry, but what is kimerikas?….

  57. radyo dinle says:

    Very interesting writeup thank you…………………………………………………..

  58. RoyArtelo says:

    Do you think that Obama is going to win because the Republicans have such a bad candidate?

    Why did John McCain make his final argument against Obama… coal?

    That’s his closing argument? William Ayers, Rev. Wright, spreading the wealth, Born Alive, meeting dictators without preconditions, etc. all have to take a back seat so that McCain can go to Colorado and New Mexico to talk about coal? Does this more or less explain why he’s going to get his clock cleaned Tuesday?

  59. Cancer Help says:

    Useful info about <a href="http://mesothelioma-disease.blog.ca/">mesothelioma”>http://mesothelioma-disease.blog.ca/">mesothelioma cancer</a>

    http://mesothelioma-disease.blog.ca/

    [URL=http://mesothelioma-disease.blog.ca/]mesothelioma cancer[/URL]

  60. metin says:

    thank you oyun oyunlar dinamikoyun

  61. sohbet odalari says:

    thanks <a href="http://www.trstar.net&quot; title="chat sohbet, sohbet odalari">sohbet chat</a> very good

  62. sohbet says:

    unstable.  I would not want to be the helicopter pilot with you as my sys admin ;^).  

    Thank . . .  

    http://www.ircask.com

  63. chat says:

    That’s his closing argument? William Ayers, Rev. Wright, spreading the wealth, Born Alive, meeting dictators without preconditions, etc. all have to take a back seat so that McCain can go to Colorado and New Mexico to talk about coal? Does this more or less explain why he’s going to get his clock cleaned Tuesday?

  64. sohbet says:

    That’s his closing argument? William Ayers, Rev. Wright, spreading the wealth, Born Alive, meeting dictators without preconditions, etc. all have to take a back seat so that McCain can go to Colorado and New Mexico to talk about coal? Does this more or less explain why he’s going to get his clock cleaned Tuesday?

  65. Rap says:

    baydin absurd

    http://www.kodes.com Hiphop, Rap, Ceza, sagopa, Kolera

    http://www.gekkog.com Hiphop, Rap, Gekko G

    http://www.maskanimasyon.com Animasyon

  66. Fundyy says:

    Thank you

    Fundyy : http://www.fundyy.net

    Fundyy Müzikleri : http://www.fundyy.net

    Fundyy Albümleri : http://www.fundyy.net

  67. romantic says:

    You Eklermis our web address please…

    http://www.sohbetsizsiniz.com" title="sohbet" target="_blank">