When you use Automatic Updates to scan for updates or to apply updates to applications that use Windows Installer, you experience issues that involve the Svchost.exe process

You use Automatic Updates to scan for updates or to apply updates to any applications that use Microsoft Windows Installer 3.1. After you do this, you experience issues when you use the following update mechanisms:

• Microsoft Update
• Windows Server Update Services (WSUS)
• The Microsoft Baseline Security Analyzer (MBSA) 2.0
• Microsoft Systems Management Server Inventory Tool for Microsoft Updates (SMS ITMU)

Some applications that use Windows Installer include Microsoft Office 2003, Microsoft Office XP, and Microsoft Windows Defender. These applications experience the following issues:

• The Svchost.exe process may spike the CPU usage to 100 percent during update detection or update installation. Also, the Svchost.exe process causes the computer to stop responding for various lengths of time.
• The Svchost.exe process produces an access violation during update detection or update installation. Additionally, you receive the following error message:
  SVCHOST.exe Application Error
  The instruction at 0x0745F2780 referenced memory at 0x000000000 the memory could not be read.
• The Svchost.exe process leaks memory during update detection or update installation.

Microsoft provides the following updates to resolve these issues:

• Update 927891 resolves newly-discovered crashes that occur in the Svchost.exe process. Because of the access violations that update 916089 does not resolve, update 927891 also resolves the reported access violations that occur in the Svchost.exe process.
  
  Note These secondary access violations were not exposed until after update 916089 was applied. The secondary access violations are not caused by update 916089.
  
  For more information, click the following article number to view the article in the Microsoft Knowledge Base:
  927891  (http://support.microsoft.com/kb/927891/ ) You receive an access violation error and the system may appear to become unresponsive when you try to install an update from Windows Update or from Microsoft Update

The WSUS version 3.0 client program has been released to help address the following issues:

• You may experience prolonged high CPU usage when you scan the computer for updates or when you install updates.
• The computer stops responding (hangs) when you scan the computer for updates or when you install updates.

To resolve these issues, you must install update 927891 and the new WSUS 3.0 client.

Notes

• To resolve this issue, you must be using version 374 or a later version of the Windows Update Agent.
  
  For more information about the latest version of the Windows Update Agent, click the following article number to view the article in the Microsoft Knowledge Base:
  946928  (http://support.microsoft.com/kb/946928/ ) Information for network administrators about how to obtain the latest Windows Update agent
• Update 927891 includes update 916089.
• Although this solution should resolve the computer unresponsiveness and reduce the time that you experience high CPU usage, this solution does not completely eliminate high CPU usage. However, after you apply these updates, the computer should run in a typical manner.

Download information

To obtain the latest WSUS version 3.0 client program, click one of the following links as appropriate for the operating system.

x86-based versions of Windows

Download the WindowsUpdateAgent30-x86.exe package now. (http://go.microsoft.com/fwlink/?LinkID=91237)

x64-based versions of Windows

Download the WindowsUpdateAgent30-x64.exe package now. (http://go.microsoft.com/fwlink/?LinkID=91238)

Itanium-based versions of Windows

Download the WindowsUpdateAgent30-ia64.exe package now. (http://go.microsoft.com/fwlink/?LinkID=91239)

File information

For more information about how to confirm the version of the files in the latest WSUS version 3.0 client program, click the following article number to view the article in the Microsoft Knowledge Base:

This problem was corrected in Windows Update Agent 3.0 and update 927891.

Update 927891 fully replaces update 916089. If you are affected by the issues that are described in the "Symptoms" section, please follow these steps:

1. Apply update 927891.
2. Restart the computer.

If any of the issues remain, contact Microsoft Customer Support.

Notes

• The WSUS version 3.0 client program is fully compatible with WSUS 2.0 SP1.
• The WSUS version 3.0 client program has been made available to the WSUS 2.0 SP1 server infrastructure so that clients can "SelfUpdate" to the newer WSUS 3.0 version. This update to the SelfUpdate tree is located in the Critical Updates classification and is identified as KB936301.

If you are still experiencing a problem that resembles the one that this article describes, it may be a different problem.

For more information about similar problems and resolutions, click the following article numbers to view the articles in the Microsoft Knowledge Base: If these articles do not help you resolve the problem or if you experience symptoms that differ from those that this article describes, please search the Microsoft Knowledge Base for more information. To search the Microsoft Knowledge Base, visit the following Microsoft Web site: Then, type the text of the error message that you receive, or type a description of the problem in the Search Support (KB) field.

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use (http://go.microsoft.com/fwlink/?LinkId=151500) for other considerations.