Help - Search - Members - Calendar
Full Version: Microsoft: Fix on 100% CPU usage svchost.exe / msi
Gladiator Security Forum > Microsoft Corner > Tutorials Corner > Windows XP
Donna
Some users are having issues with svchost.exe / msi. The Hotfix+WSUS 3.0 works to some users. Microsoft's WSUS Team has a follow-up today at http://blogs.technet.com/wsus/archive/2007...follow-up.aspx:

QUOTE
Just want to make sure you know we are actively following up on the comments posted on the svchost/msi issue. We are working on reproducing the reported performance issues on various systems in our labs. We will keep you posted as to the findings.

I also want to provide some clarification with install instructions for both the new client and the MSI fix, as well as upcoming available automatic distribution options, and the performance expectations after the MSI fix and new client are installed.

Build 0374 AU client/ WSUS 3.0 client:

While we are engaged in a world-wide deployment of the new AU client (build .0374), this staged deployment is occurring in a wave which we expect to complete by early June. This means that for AU users, the new client bits will just automatically self update when visiting the site before mid –June, and for WSUS users, you will be able to download the bits after 5/22/2007 (or upgrade to WSUS 3.0 now).

To make the client available earlier vs. waiting for the duration of the world-wide roll-out, we released the client in a ‘stand-alone’ form which you can download from the Download Center now. The version of the client is 0374 – and can be installed directly from:

http://download.windowsupdate.com/v7/windo...Agent30-x86.exe

http://download.windowsupdate.com/v7/windo...Agent30-x64.exe

http://download.windowsupdate.com/v7/windo...gent30-ia64.exe

Further instructions can be found in http://msdn2.microsoft.com/en-us/library/aa387285.aspx

Please verify on your systems, the client version here is: <windows dir>\system32\wuaueng.dll is 7.0.6000.374

KB927891/MSI fix:

To make sure you have the latest MSI fix in KB927891, make sure your MSI.dll binary version for supported platforms are exactly as documented under files in:

http://support.microsoft.com/kb/927891 .

This MSI fix will be available via MU/WU (and there by WSUS) by late May early June.

Expected results: It’s important to note that with the MSI fix and the new client installed, the CPU may still go near 100%, but the system should still be responsive and not lock up. If another task requires CPU cycles they will be shared, but if the system is idle, MSI will use the full cycles available. If a task is running at the same time as MSI, the system may be slightly slower, but should still be responsive during this time. Key to remember the MSI fix and the new client address unresponsive or locked systems. CPU spikes during some scans are expected, machine unresponsiveness is not. If your watching the process monitor, you will still see 100% CPU during some scans and this is expected behavior.

Next steps for problem systems:

If, after checking these installations, and reviewing expected behavior, iyou are still experiencing this issue and have a system which we can remote into, or obtain logs from, for further investigation, please contact me directly at bobbieh@microsoft.com. The windowsupdate.log from the system experiencing the performance issue would be helpful information as well as full system description of hardware, platform and additional programs installed and running.
Hunter
What is included in a Microsoft patch?

Let's roll up our sleeves, get technical and examine what is included in each type of Microsoft patch. Security patches, critical updates, updates, update rollups, drivers and feature packs fall into the general distribution releases (GDR) category. These go through testing across different platforms and applications to ensure proper functionality, and that the program or update that includes new features performs as intended. However, hotfixes developed by Microsoft Product Support Services for a specific situation are not as tested as those included in general distribution releases. Microsoft Knowledge Base articles, freely available from Microsoft Product Support Services, always accompany these QFEs.

read more here
http://searchwindowssecurity.techtarget.co...1036250,00.html


Microsoft releases WSUS 3.0

By Eileen Kennedy, News Writer
01 May 2007 | SearchWinIT.com



Microsoft released the newest version of its Windows Software Update Services, the company's popular free patching tool known as WSUS 3.0.
Some of the highlights are a Microsoft Management Console-based user interface and custom views based on products, classifications, sync date and the groups that the updates are approved for. There is also new filtering based on approvals and the status of a client.


The WSUS 3.0 Release Candidate will be supported by Microsoft through May 31, and the WSUS 3.0 Microsoft Operations Manager pack should be available next week, the company said.

In WSUS 3.0, the idea of approved for detection -- i.e., when an application is checked to see if an update is required, but the final authorization to patch or update is left to the administrator -- goes away. Users can build views to see which updates are unapproved and needed by clients.

Shortcomings in WSUS

The one big downside to WSUS is that it patches only Microsoft platforms, and not even all of them. Third-party patch managers can usually support Unix and Linux in addition to third-party applications. WSUS does not help uninstalls either because that is done through Systems Management Server, or SMS.

Some of the new features have already received kudos. "I think the reporting is improved -- there are graphs and features like that," said Jim Brown, senior technical specialist at General Mills Inc. in Minneapolis, Minn., who has been using WSUS 3.0 RC 1 but has not downloaded the latest version yet.

Brown said he is less enthusiastic that the management console is now the user interface instead of the Web-based interface as in previous versions. He said the console is cumbersome and time-consuming because if he is in several domains at the same time, he has to exit them first before he can use the console interface.

Small companies, big companies can use WSUS 3.0

Although some of the new features in WSUS 3.0 are available in commercial products, the free tool is popular with IT shops, particularly in small companies that cannot afford a full-blown software distribution tool such as Microsoft's SMS.

"It doesn't need the infrastructure like [SMS], though from my experience, you don't have as much control as SMS," said Chris Mosby, an SMS administrator for a large regional bank and a Microsoft MVP. "It's good for companies with a small infrastructure. A lot of people certainly seem to be excited [about it]," he said.

But big companies, such as General Mills with its 20,000 users and numerous plants around the world, find it useful as well.


WSUS 3.0 requires Windows Server 2003, Windows XP with Service Pack 2 and Windows 2000 with Service Pack 4.
http://searchwinit.techtarget.com/original...1253442,00.html

More on WSUS:
WSUS 3.0 release candidate beta is ready

Tricks for optimizing WSUS performance
http://searchwindowssecurity.techtarget.co...1161515,00.html
WSUS vs. SMS: Choosing a Windows patch management tool
http://searchsecuritychannel.techtarget.co...1225479,00.html
WSUS deployment: Step 1
http://searchsecuritychannel.techtarget.co...1225020,00.html
Hunter
WSUS deployment: Step 1

17 Oct 2006 | SearchExchange.com



The prep work

Before you install WSUS, you need to make sure your system is running the Background Intelligent Transfer Service (BITS) 2.0 and the Service Pack 1 version of the .NET Framework.


BITS is a Windows component. You can install it by opening the server's Add/Remove Programs applet and clicking the Add/Remove Windows Components button.

When you see the list of Windows components, select the Application Server option and click the Details button.

Select the Internet Information Server option and click Details. BITS will be one of the installation choices on the resulting component list.

You can download the .NET Framework component from Microsoft.

After installing BITS and the .NET Framework, you must also install Windows Server 2003 Service Pack 1.

WSUS deployment: Step-by-step guide





Step 1: The prep work
Step 2: Installing WSUS
Step 3: Configuring WSUS
Step 4: Configuring clients

http://searchsecuritychannel.techtarget.co...1225020,00.html
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.