Microsoft KB Archive/927891

= You receive an access violation error and the system may appear to become unresponsive when you try to install an update from Windows Update or from Microsoft Update =

Article ID: 927891

Article Last Modified on 12/10/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise x64 Edition
 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Datacenter x64 Edition
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard x64 Edition
 * Microsoft Windows XP Professional
 * Microsoft Windows XP Home Edition
 * Microsoft Windows XP Media Center Edition 2002
 * Microsoft Windows XP Media Center Edition 2004
 * Microsoft Windows XP Media Center Edition 2005
 * Microsoft Windows XP Tablet PC Edition
 * Microsoft Windows XP Tablet PC Edition 2005
 * Microsoft Windows 2000 Professional Edition
 * Microsoft Windows 2000 Service Pack 4
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Datacenter Server
 * Microsoft Windows Update
 * Microsoft Update

-



The problem that the &quot;Symptoms&quot; section describes was corrected in Windows Update Agent 3.0 and in update 927891. These updates were distributed through Microsoft Update in June and July, 2007. If you are still experiencing a problem that resembles the one that this article describes, it may be a different problem. To troubleshoot similar problems, please see the &quot;Similar problems and resolutions&quot; section later in this article.



SYMPTOMS
When you try to install an update from Windows Update or from Microsoft Update, you experience the following symptoms:
 * The system may appear to become unresponsive when Windows Update scans for updates that use Windows Installer.
 * You receive an access violation error in the Svchost.exe process. This process is related to the Automatic Updates service. This access violation occurs when you use Automatic Updates to scan for updates by using the daily automatic schedule or when you visit the Microsoft Update Web site to manually scan for updates.
 * A memory leak occurs when Windows Update scans for updates that use Windows Installer.
 * Windows Update scans take a very long time, sometimes hours, to finish.



RESOLUTION
To resolve this problem, follow these steps.

Step 1: Download and install update 927891
The following files are available for download from the Microsoft Download Center:

Download the Update for Windows XP (927891) package now.

Download the Update for Windows XP x64 Edition (927891) package now.

Download the Update for Windows Server 2003 (927891) package now.

Download the Update for Windows Server 2003 x64 Edition (927891) package now.

Download the Update for Windows Server 2003 for Itanium-based Systems (927891) package now.

Download the Update for Microsoft Windows 2000 (927891) package now.

Release Date: June 26, 2007

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Step 2: Download and install Windows Update Agent (WUA) 3.0
To download WUA 3.0, click the link for the version of Windows that you are running.

x86-based versions of Windows
Download the WindowsUpdateAgent30-x86.exe package now.

x64-based versions of Windows
Download the WindowsUpdateAgent30-x64.exe package now.

Itanium-based versions of Windows
Download the WindowsUpdateAgent30-ia64.exe package now.



STATUS
This problem was corrected in Windows Update Agent 3.0 and in update 927891.



Technical update: May 22, 2007
Microsoft has released a Microsoft Security Advisory on this problem for IT professionals. The security advisory contains additional security-related information about this problem. To view the security advisory, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/advisory/927891.mspx

Note This article discusses the MSI component fixes only. This fix is one component of a two-part fix that includes a Windows Update client software update. These updates will be deployed automatically by using Windows Update in May 2007 and June 2007. However, some customers may select to manually install these updates. To fully address the unresponsive system issue, both this fix for MSI must be installed and the Windows Update client must be updated to version 3.0. When you install the MSI fix and the new client, process-monitoring tools may still show CPU usage at near 100 percent. However, the system should still be responsive and should not lock up. If another task requires CPU cycles, they will be shared. However, if the system is idle, MSI will use the full cycles that are available to complete in the shortest time. If another task is running at the same time as MSI, the system may run slightly more slowly. However, the computer should still be responsive. Remember that you must install the MSI fix and the new client to address unresponsive or locked systems. It is expected that process-monitoring tools may still show CPU usage at near 100 percent, but computer unresponsiveness is expected. If you watch the process monitor, you may still see CPU usage at near 100 percent during some scans if the computer is otherwise idle. This is expected behavior.

Important Many instances of the Svchost.exe process may be running on a Windows-based computer. These Svchost.exe processes control certain tasks. The software update that is described in this article is only designed to address the problem that is mentioned in the &quot;Symptoms&quot; section. Other problems that you experience with Svchost.exe may require alternative resolutions or troubleshooting steps.

To resolve this problem, you must install this update together with the Windows Update Automatic Client 3.0. The Windows Update Automatic Client 3.0 will automatically be released through Automatic Updates by June 30, 2007. The updated Windows Client changes the thread modeling to move MSI scans to a thread that is separate from the user interface.

For the MSI update, install one of the following updates based on the version of Windows that is installed. To determine the version of Windows that is installed, follow these steps:
 * 1) Click Start, click Run, type sysdm.cpl, and then click OK.
 * 2) In the System Properties dialog box, click the General tab, and then notice the information that appears under System.

After you download the appropriate update, double-click the update package to install the update.

Note All versions of Windows XP, except for Windows XP Media Center versions, state &quot;Version 2002&quot; on the General tab in the System Properties dialog box. The update that is listed in the &quot;Windows XP, all versions (including all versions of Windows XP Media Center)&quot; section is correct for all versions of Windows XP. This includes all versions of Windows XP Media Center.

Note To install the update, you may have to apply the latest service pack for the version of Windows that you are running. For more information, click the following article numbers to view the articles in the Microsoft Knowledge Base:

889100 How to obtain the latest service pack for Windows Server 2003

322389 How to obtain the latest Windows XP service pack

Update information
The following files are available for download from the Microsoft Download Center:

Download the Update for Windows XP (927891) package now.

Download the Update for Windows XP x64 Edition (927891) package now.

Release Date: May 7, 2007

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites
You must have Windows XP SP2 installed before you apply this update. You must also have Windows Installer 3.1 installed before you apply this update.

Restart requirement
You must restart your computer after you apply this update.

Update replacement information
This update replaces update the following update:

916089 FIX: When you run Windows Update to scan for updates that use Windows Installer, including Office updates, you may experience a memory leak, or you may receive an error message for the Svchost process

File information
Windows XP, 32-bit versions

Windows XP, 64-bit versions

Windows Server 2003
Update information The following files are available for download from the Microsoft Download Center:

Download the Update for Windows Server 2003 (927891) package now.

Download the Update for Windows Server 2003 x64 Edition (927891) package now.

Download the Update for Windows Server 2003 for Itanium-based Systems (927891) package now.

Release Date: May 7, 2007

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites
You must have Windows Server 2003 SP1 or Windows Server 2003 SP2 installed before you apply this update.

Restart requirement
You must restart the computer after you apply this update.

Update replacement information
This update replaces the following update:

916089 FIX: When you run Windows Update to scan for updates that use Windows Installer, including Office updates, you may experience a memory leak, or you may receive an error message for the Svchost process

File information
Windows Server 2003, x86-based versions

Windows Server 2003, x64-based versions

Windows Server 2003, Itanium-based versions

Prerequisites
You must have Windows 2000 Service Pack 4 installed before you apply this update. You must also have Windows Installer 3.1 installed before you apply this update.

Restart requirement
You must restart the computer after you apply this update.

Update replacement information
This update replaces update 916089. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

916089 FIX: When you run Windows Update to scan for updates that use Windows Installer, including Office updates, you may experience a memory leak, or you may receive an error message for the Svchost process

The following files are available for download from the Microsoft Download Center:

Download the Update for Microsoft Windows 2000 (927891) package now.

For more information about the terms that are used to describe software updates, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates



Similar problems and resolutions
If you are still experiencing a problem that resembles the problem that this article describes, it may be a different problem. For more information about similar problems and resolutions, click the following article numbers to view the articles in the Microsoft Knowledge Base:

939273 You cannot deploy software updates on a computer that is running Microsoft Windows XP or Microsoft Windows Server 2003

932762 The Service Host process may stop unexpectedly in Windows Server 2003

931852 Error messages when you start a Windows XP-based computer and then try to download Windows updates

910666 The Svchost.exe process may end unexpectedly on a Windows Server 2003-based computer

894538 When Internet Authentication Service receives an unknown attribute in a packet, a Windows Server 2003-based Internet Authentication Service server stops responding

927385 You receive an error message after a Windows XP-based computer runs an automatic update, and you may be unable to run any programs after you close the &quot;svchost.exe - Application Error&quot; error message dialog box

If these Microsoft Knowledge Base articles do not help you resolve the problem, or if you experience symptoms that differ from those that this article describes, please search the Microsoft Knowledge Base for more information. To search the Microsoft Knowledge Base, visit the following Microsoft Web site:

http://support.microsoft.com

Then, type the text of the error message that you receive, or type a description of the problem in the Search Support (KB) field.

Additional query words: MSI AV win2003 winxp

Keywords: kbresolve kbfix atdownload kbwinserv2003postsp2fix kbwinxppresp3fix KB927891

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.