WSUS Product Team Blog

WSUS Product Team thoughts, information, tips and tricks and beyond :-)

Internal Repro results on svchost/msi issue

Internal Repro results on svchost/msi issue

  • Comments 117
  • Likes

Hi - Touching base back on our testing results in reproducing the "svchost/msi issue" system hang, lock and/or unresponsive behaivor reports.  After installing the new 3.0 client, and the MSI fix (KB927891) referenced in yesterdays' post, we tested scan times, system responsiveness and CPU utilization on a variety of systems running multiple applications simultaneously.

Baselines were run on Single Processor 733 Mhz systems with 256Mb Ram, with XPSP2 and Windows Server 2003 SP1 operating systems and Office 2003 installed.  Multiple instances of IE, Office apps, and AV utils were run during scans.  In these cases there was the expected CPU usage spike in the task manager, however all the systems remained responsive.  

I have not yet had anyone report and send information to me on locked or unresponsive systems after installing and verifying the new 3.0 client and the MSI fix are on the systems. Still open to recieving the WindowsUpdate.log and system HW/SW configuration if you are continuing to experience these issues.  However,  we are seeing many more posts in blogs, forums and newsgroups where users are reporting these installs alleviate these issues, while the CPU consumption does temporarly spike as expected. 

We will continue to monitor this issue.

thanks -

Bobbie Harder


  • Yeah Bobbie, After installing the new 3.0 Agent client, and the KB927891_v3, now everything seems to be normal!!! thank you and Wsus Team

  • Does test machines had Microsoft Update client as a default one instead of Windows update? This is very important point.

  • I agree this is great news. Better news however will be when I can distribute the full solution via WSUS. Currently if I’m using WSUS 2 I need to find an alternate method to install both the new 3.0 client and KB927891. If I move to WSUS 3 (which would resolve the 3.0 client upgrade) I still need to find an alternate method to install KB927891. I’ve read the previous post and I know the current target timeframe is “late May early June”. I and other customers would prefer sooner rather than later.

  • For an Urgent Deployment in your Environment, you can use a vbs script like this one:



    'Windows Svchost Issue Fix

    'script Write by Jeferson Propheta

    'Created 05/11/2007  -  Last Update 05/15/2007  ExpandEnvironmentStrings


    On Error Resume Next

    CONST ForAppending = 8

    Const ForReading   = 1

    Set objShell       = CreateObject("WScript.Shell")

    strRunFile = objShell.ExpandEnvironmentStrings("%SystemDrive%") & ("\WsusFIXRUN.txt")

    strAGTFile = objShell.ExpandEnvironmentStrings("%SystemDrive%") & ("\WsusAGT.txt")

    strKBFile = objShell.ExpandEnvironmentStrings("%SystemDrive%") & ("\WsusKb.txt")

    strWsusAgentFile = "\\_YOUR_SERVER_NAME_HERE_\_YOUR_FOLDER_\WindowsUpdateAgent30-x86.exe /quiet /wuforce /norestart"

    strWsusPatchFile = "\\_YOUR_SERVER_NAME_HERE_\_YOUR_FOLDER_\WindowsXP-KB927891-v3-x86-ENU.exe /quiet /warnrestart:99 /log:C:\KB927891v3.log"

    strAGTLog = "\\_YOUR_SERVER_NAME_HERE_\_YOUR_FOLDER_\Logs\Agent_Install_v3-%computername%_%username%.log"

    strPatchLog = "\\_YOUR_SERVER_NAME_HERE_\_YOUR_FOLDER_\Logs\KB927891_v3-%computername%_%username%.log"

    Set objAready = CreateObject("Scripting.FileSystemObject")

    If NOT objAready.FileExists(strRunFile) Then

      strComputer        = "."

      Set objWMIService  = GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")

      Set colServices    = objWMIService.ExecQuery ("SELECT * FROM Win32_Service WHERE Name = 'wuauserv'")

              For Each objService in colServices

                       errReturnCode = objService.StopService()

               Next "%ComSpec% /C rd /S /Q %SystemRoot%\SoftwareDistribution",0

      strComputer    = "."

      Set objWMIService = GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")

      Set colServices   = objWMIService.ExecQuery ("SELECT * FROM Win32_Service WHERE Name = 'wuauserv'")

              For Each objService in colServices

                       errReturnCode = objService.StartService()


    Wscript.Sleep 5000

          If NOT objAready.FileExists(strAGTFile) Then

        "%ComSpec% /C start" & strWsusAgentFile,0 ,true

                 objShell.Run "%ComSpec% /C set computername >" & strAGTFile,0 ,True

                 objShell.Run "%ComSpec% /C set computername >" & strAGTLog,0 ,True

          End If

    Wscript.sleep 50000

          If NOT objAready.FileExists(strKBFile) Then

        "%ComSpec% /C start" & strWsusPatchFile,0 ,true

                 objShell.Run "%ComSpec% /C set computername >" & strKBFile,0 ,True

                 objShell.Run "%ComSpec% /C set computername >" & strPatchLog,0 ,True

          End If

          objShell.Run "%ComSpec% /C set computername >" & strRunFile,0 ,True

    End If

    Set objAready      = Nothing

    Set objShell       = Nothing



    Hope it help

  • Bobbie Harder from Microsoft WSUS team blogs that there is no report of unresponsiveness if the hotfix

  • I installed both WSUS 3.0 and KB927891-v3. On the problem machine (a celeron client 1.7 HGz with 384 MB memory) I even ended up reinstalling WindowsUpdateAgent30 and deleting the SoftwareDistribution folder, but still no luck...

    The system is not responsive at all when starting up and therefore not usable. Other programs seem to "hang" when starting up and even starting up the task manager or services control panel takes long minutes. I finally disabled the Windows Update Service, ... again.

    What do I need to send to whom to get this thing finally solved?


  • A+ - Please send me your full system description, software running and your windowsupdate.log from the problem client.  We'd also like your email address so dev can contact you for further event logs and tracings. thnks


  • The new 3.0 client, and the MSI fix (KB927891) solved my problems on XP Home SP2 and an Athlon XP 1900 CPU (1.61 GHz). Went from total freeze up to being able to get email and use Word while scanning. Thanks much!

  • Cx was having system hang during windows update. After installing KB927891 and Windows Update Agent 3.0 it came out of hanging situation, but still the CPU spikes for svchost during update above 90% for long time. But was able to update one machine. As per 932494, above action plan should resolve the problem completely including spiking of CPU with SVCHOST.

  • To those that ping the blog about the svchost issue and then say " The patch is only helps on some

  • What about Windows 2000?

    (And this question seems to keep being ignored in the other comments)

    We have over 1000 PC's suffering with this issue, intermittently (as checking for updates are random).  The Hotfix is only for XP and Server 2003. Our security folks won't allow us to turn Automatic Updates off.

    I won't have a chance to test the version 3 client until Monday, but I'm more concerned that about the hotfix not being available for 2000, where you are stating it is needed for a "complete solution".

    Info for 2000 would be most appreciated.


  • Hi,            

                 I have the same question about Windows 2000. What can I do about this? I have attemped a lot of alternative solutions for resolvere this problem, but  with Windows 2000 is very difficult .   I Would like to know which the impact to use these corrections in windows 2000?    

    Gratefulness for the XP solution.

    Marcelo Montezuma.

  • KB927891 fixed the problem on my Dell Inspiron 5150 running XP Home SP2.  Exact reproduction of the problem: before the patch, SVCHOST took 100% of the CPU and the system was unusable.  After the patch, SVCHOST takes 100% of the CPU for a few minutes but the system is still usable.

    Funny thing: only one of two identical units (purchased on the same day) exhibited the problem.  For unrelated reasons, I had done a complete software rebuild (including a disk reformat) on one of the two laptops.  The svchost/msi issue hit right after I finished the rebuild -- possibly after installing Office 2003 and switching to Microsoft Update.

  • KB927891 is available by MU/WSUS2/WSUS3 now

  • @WTH, Montezuma and all others with Windows 2000.

    kb927891 is now freely available for Windows 2000.

    Don't believe a word of the kb article which indicates that this is a PSS hotfix (for Win2k). That article is just plain wrong (Again!!) because the update is freely downloadable. Google on "update for windows 2000 (kb927891)" (*including* the quotes) to find Microsoft's download details page.


Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment