Windows Update Agent Service + High Memory Utilization

When I check for windows updates svchost.exe uses 2.5GB of RAM. When I stop the windows update agent service memory utilization drops down and everything is running fine.

I have downloaded and installed the latest version of windows update agent.
I have deleted the software distribution folder and recreated it.
Run the fix it tool that re registers any services related to windows update

I attempted to install the system update readiness tool from (https://www.microsoft.com/en-us/down....aspx?id=20858) but it fails to install. It does however generate the CBS logs. The CheckSUR does not find anything but I checked the CBSPersist and this error repeatedly

2016-05-09 13:00:18, Info CBS Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-05-09 13:00:18, Info CBS Session: 30517805_1764779813 initialized by client WindowsUpdateAgent.

I had to select what I wanted to upload from the logs due to filesize limitation but please let me know if anything else is needed.

If anyone could think of anything please let me know. I am out of ideas on this one.

Hi GDP
Checksur IS the output from the SURT KB.
Can you just copy/paste your last day entries from the windowsupdate log.
Is your comp upto date otherwise, if not please run this tool and post the results
http://go.microsoft.com/fwlink/?LinkID=52012

Roy

well the install of SURT failed but there was a Checksur log file and CheckSUR.persist showing nothing was found. I have attached all the logs in the .rar archive but I will go ahead and show you what it contains .

This one is from CheckSUR.log


=================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 26.0
2016-05-09 11:17

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 2318
No errors detected

This one is from CheckSUR.persist


=================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 26.0
2016-05-09 11:17

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 2318
No errors detected

Nothing is found but something is definitely wrong.


I have already checked the computer for viruses using eset, malwarebytes, and adwcleaner. Some items were found in adwcleaner and malwarebytes but nothing serious.

Everytime I check for windows updates Memory spikes. Any ideas?

As i said please copy/paste todays entries from the windowsUpdate log.

Roy

2016-05-13 02:47:29:959 5824 1668 Misc =========== Logging initialized (build: 7.6.7600.320, tz: -0700) ===========
2016-05-13 02:47:29:959 5824 1668 Misc = Process: c:\program files\windows defender\MpCmdRun.exe
2016-05-13 02:47:29:959 5824 1668 Misc = Module: C:\Windows\system32\wuapi.dll
2016-05-13 02:47:29:959 5824 1668 COMAPI -------------
2016-05-13 02:47:29:959 5824 1668 COMAPI -- START -- COMAPI: Search [ClientId = Windows Defender]
2016-05-13 02:47:29:959 5824 1668 COMAPI ---------
2016-05-13 02:47:29:974 5656 f2c Agent *************
2016-05-13 02:47:29:974 5824 1668 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = Windows Defender]
2016-05-13 02:47:29:974 5656 f2c Agent ** START ** Agent: Finding updates [CallerId = Windows Defender]
2016-05-13 02:47:29:974 5656 f2c Agent *********
2016-05-13 02:47:29:974 5656 f2c Agent * Online = Yes; Ignore download priority = No
2016-05-13 02:47:29:974 5656 f2c Agent * Criteria = "(IsInstalled = 0 and IsHidden = 0 and CategoryIDs contains '8c3fcc84-7410-4a95-8b89-a166a0190486' and CategoryIDs contains 'e0789628-ce08-4437-be74-2495b842f43b')"
2016-05-13 02:47:29:974 5656 f2c Agent * ServiceID = {00000000-0000-0000-0000-000000000000} Third party service
2016-05-13 02:47:29:974 5656 f2c Agent * Search Scope = {Machine}
2016-05-13 02:47:30:083 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:30:161 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:30:177 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\TMP3481.tmp with dwProvFlags 0x00000080:
2016-05-13 02:47:30:224 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:30:271 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\v6-win7sp1-wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:30:271 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:079 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\v6-win7sp1-wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:33:094 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:094 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:33:110 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:110 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\TMP4006.tmp with dwProvFlags 0x00000080:
2016-05-13 02:47:33:125 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:125 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:33:125 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:125 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\TMP4017.tmp with dwProvFlags 0x00000080:
2016-05-13 02:47:33:141 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:172 5656 f2c Agent Checking for updated auth cab for service 7971f918-a847-4430-9279-4a52d1efe18d at http://ds.download.windowsupdate.com.../v6-muauth.cab
2016-05-13 02:47:33:172 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:33:172 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:188 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:33:203 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:313 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:33:313 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:313 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP40D3.tmp with dwProvFlags 0x00000080:
2016-05-13 02:47:33:313 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:328 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\v6-muredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:33:328 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:359 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\v6-muredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:33:359 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:359 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:33:359 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:359 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP4103.tmp with dwProvFlags 0x00000080:
2016-05-13 02:47:33:375 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:375 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:33:375 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:375 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP4113.tmp with dwProvFlags 0x00000080:
2016-05-13 02:47:33:391 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:33:391 5656 f2c PT +++++++++++ PT: Starting category scan +++++++++++
2016-05-13 02:47:33:391 5656 f2c PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://fe2.update.microsoft.com/v6/...ce/client.asmx
2016-05-13 02:47:37:119 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:37:135 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:37:135 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP4FC4.tmp with dwProvFlags 0x00000080:
2016-05-13 02:47:37:166 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:37:166 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\v6-muredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:37:166 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:37:197 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\v6-muredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:37:213 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:37:213 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:37:213 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:37:228 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP5023.tmp with dwProvFlags 0x00000080:
2016-05-13 02:47:37:244 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:37:244 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:37:244 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:37:244 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP5033.tmp with dwProvFlags 0x00000080:
2016-05-13 02:47:37:259 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:37:259 5656 f2c PT +++++++++++ PT: Synchronizing server updates +++++++++++
2016-05-13 02:47:37:259 5656 f2c PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://fe2.update.microsoft.com/v6/...ce/client.asmx
2016-05-13 02:47:38:086 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:38:086 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:38:102 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP538E.tmp with dwProvFlags 0x00000080:
2016-05-13 02:47:38:117 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:38:117 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\v6-muredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:38:133 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:38:164 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\v6-muredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:38:164 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:38:164 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:38:180 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:38:180 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP53DD.tmp with dwProvFlags 0x00000080:
2016-05-13 02:47:38:195 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:38:195 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 02:47:38:195 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:38:211 5656 f2c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP53EE.tmp with dwProvFlags 0x00000080:
2016-05-13 02:47:38:211 5656 f2c Misc Microsoft signed: NA
2016-05-13 02:47:38:211 5656 f2c PT +++++++++++ PT: Synchronizing extended update info +++++++++++
2016-05-13 02:47:38:211 5656 f2c PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://fe2.update.microsoft.com/v6/...ce/client.asmx
2016-05-13 02:47:38:398 5656 1994 AU Can not perform non-interactive scan if AU is interactive-only
2016-05-13 02:47:38:398 5656 f2c Agent * Added update {CC6E521D-DE65-4E1D-8191-E6AE6B6ED80E}.200 to search result
2016-05-13 02:47:38:398 5656 f2c Agent * Found 1 updates and 4 categories in search; evaluated appl. rules of 21 out of 35 deployed entities
2016-05-13 02:47:38:648 5656 f2c Agent *********
2016-05-13 02:47:38:648 5656 f2c Agent ** END ** Agent: Finding updates [CallerId = Windows Defender]
2016-05-13 02:47:38:648 5656 f2c Agent *************
2016-05-13 02:47:38:648 5824 1be4 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = Windows Defender]
2016-05-13 02:47:38:663 5824 1be4 COMAPI - Updates found = 1
2016-05-13 02:47:38:663 5824 1be4 COMAPI ---------
2016-05-13 02:47:38:663 5824 1be4 COMAPI -- END -- COMAPI: Search [ClientId = Windows Defender]
2016-05-13 02:47:38:663 5824 1be4 COMAPI -------------
2016-05-13 02:47:38:710 5824 18f0 COMAPI -------------
2016-05-13 02:47:38:710 5824 18f0 COMAPI -- START -- COMAPI: Download [ClientId = Windows Defender]
2016-05-13 02:47:38:710 5824 18f0 COMAPI ---------
2016-05-13 02:47:38:710 5824 18f0 COMAPI - Forced: No; Download priority: 3
2016-05-13 02:47:38:710 5824 18f0 COMAPI - Updates in request: 1
2016-05-13 02:47:38:710 5824 18f0 COMAPI - ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2016-05-13 02:47:38:741 5824 18f0 COMAPI <<-- SUBMITTED -- COMAPI: Download [ClientId = Windows Defender]
2016-05-13 02:47:38:882 5656 f2c DnldMgr *************
2016-05-13 02:47:38:882 5656 f2c DnldMgr ** START ** DnldMgr: Downloading updates [CallerId = Windows Defender]
2016-05-13 02:47:38:897 5656 f2c DnldMgr *********
2016-05-13 02:47:38:897 5656 f2c DnldMgr * Call ID = {1D9102CD-9BBD-46C3-9ED3-FE643200A62C}
2016-05-13 02:47:38:897 5656 f2c DnldMgr * Priority = 3, Interactive = 1, Owner is system = 1, Explicit proxy = 1, Proxy session id = -1, ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}
2016-05-13 02:47:38:897 5656 f2c DnldMgr * Updates to download = 1
2016-05-13 02:47:38:897 5656 f2c Agent * Title = Definition Update for Windows Defender - KB915597 (Definition 1.219.1665.0)
2016-05-13 02:47:38:897 5656 f2c Agent * UpdateId = {CC6E521D-DE65-4E1D-8191-E6AE6B6ED80E}.200
2016-05-13 02:47:38:897 5656 f2c Agent * Bundles 1 updates:
2016-05-13 02:47:38:897 5656 f2c Agent * {E1CFF641-ED4D-4C17-B68A-CA9762CAB090}.200
2016-05-13 02:47:38:913 5656 f2c DnldMgr *********** DnldMgr: New download job [UpdateId = {E1CFF641-ED4D-4C17-B68A-CA9762CAB090}.200] ***********
2016-05-13 02:47:41:378 5656 f2c DnldMgr * BITS job initialized, JobId = {713E7151-2312-4BC7-B0DF-D6AB72DA0976}
2016-05-13 02:47:41:581 5656 f2c DnldMgr * Downloading from http://download.windowsupdate.com/d/...d43e3cf3e7.exe to C:\Windows\SoftwareDistribution\Download\b8686e148b308a61e606a0a76aa2c182\5adf6de86ed73945cca66fa0bd 3ba2d43e3cf3e7 (full file).
2016-05-13 02:47:41:799 5656 f2c Agent *********

2016-05-13 02:47:41:799 5656 f2c Agent ** END ** Agent: Downloading updates [CallerId = Windows Defender]
2016-05-13 02:47:41:799 5656 f2c Agent *************
2016-05-13 02:47:42:407 5656 1a68 DnldMgr BITS job {713E7151-2312-4BC7-B0DF-D6AB72DA0976} completed successfully
2016-05-13 02:47:42:470 5656 1a68 Misc Validating signature for C:\Windows\SoftwareDistribution\Download\b8686e148b308a61e606a0a76aa2c182\5adf6de86ed73945cca66fa0bd 3ba2d43e3cf3e7 with dwProvFlags 0x00000080:
2016-05-13 02:47:42:485 5656 1a68 Misc Microsoft signed: Yes
2016-05-13 02:47:42:501 5656 1a68 DnldMgr Download job bytes total = 330008, bytes transferred = 330008
2016-05-13 02:47:42:501 5656 1a68 DnldMgr *********** DnldMgr: New download job [UpdateId = {E1CFF641-ED4D-4C17-B68A-CA9762CAB090}.200] ***********
2016-05-13 02:47:42:501 5656 1a68 DnldMgr * All files for update were already downloaded and are valid.
2016-05-13 02:47:42:501 5824 efc COMAPI >>-- RESUMED -- COMAPI: Download [ClientId = Windows Defender]
2016-05-13 02:47:42:501 5824 efc COMAPI - Download call complete (succeeded = 1, succeeded with errors = 0, failed = 0, unaccounted = 0)
2016-05-13 02:47:42:501 5824 efc COMAPI ---------
2016-05-13 02:47:42:501 5824 efc COMAPI -- END -- COMAPI: Download [ClientId = Windows Defender]
2016-05-13 02:47:42:501 5824 efc COMAPI -------------
2016-05-13 02:47:42:501 5824 1b38 COMAPI -------------
2016-05-13 02:47:42:501 5824 1b38 COMAPI -- START -- COMAPI: Install [ClientId = Windows Defender]
2016-05-13 02:47:42:501 5824 1b38 COMAPI ---------
2016-05-13 02:47:42:501 5824 1b38 COMAPI - Allow source prompts: Yes; Forced: No; Force quiet: Yes
2016-05-13 02:47:42:501 5824 1b38 COMAPI - Updates in request: 1
2016-05-13 02:47:42:501 5824 1b38 COMAPI - ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2016-05-13 02:47:42:501 5824 1b38 COMAPI - Updates to install = 1
2016-05-13 02:47:42:501 5656 aa8 Agent *************
2016-05-13 02:47:42:501 5824 1b38 COMAPI <<-- SUBMITTED -- COMAPI: Install [ClientId = Windows Defender]
2016-05-13 02:47:42:501 5656 aa8 Agent ** START ** Agent: Installing updates [CallerId = Windows Defender]
2016-05-13 02:47:42:532 5656 aa8 Agent *********
2016-05-13 02:47:42:532 5656 aa8 Agent * Updates to install = 1
2016-05-13 02:47:42:532 5656 aa8 Agent * Title = Definition Update for Windows Defender - KB915597 (Definition 1.219.1665.0)
2016-05-13 02:47:42:532 5656 aa8 Agent * UpdateId = {CC6E521D-DE65-4E1D-8191-E6AE6B6ED80E}.200
2016-05-13 02:47:42:532 5656 aa8 Agent * Bundles 1 updates:
2016-05-13 02:47:42:532 5656 aa8 Agent * {E1CFF641-ED4D-4C17-B68A-CA9762CAB090}.200
2016-05-13 02:47:42:610 5656 aa8 DnldMgr Preparing update for install, updateId = {E1CFF641-ED4D-4C17-B68A-CA9762CAB090}.200.
2016-05-13 02:47:42:626 5448 1910 Misc =========== Logging initialized (build: 7.6.7600.320, tz: -0700) ===========
2016-05-13 02:47:42:626 5448 1910 Misc = Process: C:\Windows\system32\wuauclt.exe
2016-05-13 02:47:42:626 5448 1910 Misc = Module: C:\Windows\system32\wuaueng.dll
2016-05-13 02:47:42:626 5448 1910 Handler :::::::::::::
2016-05-13 02:47:42:626 5448 1910 Handler :: START :: Handler: Command Line Install
2016-05-13 02:47:42:626 5448 1910 Handler :::::::::
2016-05-13 02:47:42:626 5448 1910 Handler : Updates to install = 1
2016-05-13 02:47:43:655 5656 f2c Report REPORT EVENT: {5D0DD4B3-9987-4CF9-B732-8719560F5C3B} 2016-05-13 02:47:38:648-0700 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 Windows Defender Success Software Synchronization Windows Update Client successfully detected 1 updates.
2016-05-13 02:47:43:655 5656 f2c Report REPORT EVENT: {8A6BF36B-2070-4C28-872F-10D58B561C0C} 2016-05-13 02:47:42:501-0700 1 162 101 {CC6E521D-DE65-4E1D-8191-E6AE6B6ED80E} 200 0 Windows Defender Success Content Download Download succeeded.
2016-05-13 02:47:43:655 5656 f2c Report CWERReporter finishing event handling. (00000000)
2016-05-13 02:47:49:911 5448 1910 Handler : Command line install completed. Return code = 0x00000000, Result = Succeeded, Reboot required = false
2016-05-13 02:47:49:911 5448 1910 Handler :::::::::
2016-05-13 02:47:49:911 5448 1910 Handler :: END :: Handler: Command Line Install
2016-05-13 02:47:49:911 5448 1910 Handler :::::::::::::
2016-05-13 02:47:50:254 5656 aa8 Agent *********
2016-05-13 02:47:50:254 5656 1994 AU Can not perform non-interactive scan if AU is interactive-only
2016-05-13 02:47:50:254 5656 aa8 Agent ** END ** Agent: Installing updates [CallerId = Windows Defender]
2016-05-13 02:47:50:254 5824 efc COMAPI >>-- RESUMED -- COMAPI: Install [ClientId = Windows Defender]
2016-05-13 02:47:50:254 5656 aa8 Agent *************
2016-05-13 02:47:50:254 5824 efc COMAPI - Install call complete (succeeded = 1, succeeded with errors = 0, failed = 0, unaccounted = 0)
2016-05-13 02:47:50:254 5824 efc COMAPI - Reboot required = No
2016-05-13 02:47:50:254 5824 efc COMAPI ---------
2016-05-13 02:47:50:254 5824 efc COMAPI -- END -- COMAPI: Install [ClientId = Windows Defender]
2016-05-13 02:47:50:254 5824 efc COMAPI -------------
2016-05-13 02:47:54:934 5656 f2c Report REPORT EVENT: {78271C87-C468-4DF9-B639-46E3D778BFFC} 2016-05-13 02:47:49:927-0700 1 183 101 {CC6E521D-DE65-4E1D-8191-E6AE6B6ED80E} 200 0 Windows Defender Success Content Install Installation Successful: Windows successfully installed the following update: Definition Update for Windows Defender - KB915597 (Definition 1.219.1665.0)
2016-05-13 02:47:54:934 5656 f2c Report CWERReporter finishing event handling. (00000000)
2016-05-13 08:37:47:017 5656 1994 AU AU setting next sqm report timeout to 2016-05-14 15:37:47
2016-05-13 09:08:05:227 5656 1994 AU ########### AU: Uninitializing Automatic Updates ###########
2016-05-13 09:08:05:227 5656 1994 Report CWERReporter finishing event handling. (00000000)
2016-05-13 09:08:05:227 5656 1994 Service *********
2016-05-13 09:08:05:227 5656 1994 Service ** END ** Service: Service exit [Exit code = 0x240001]
2016-05-13 09:08:05:227 5656 1994 Service *************
2016-05-13 09:08:08:809 5656 1e94 Misc =========== Logging initialized (build: 7.6.7600.320, tz: -0700) ===========
2016-05-13 09:08:08:809 5656 1e94 Misc = Process: C:\Windows\system32\svchost.exe
2016-05-13 09:08:08:809 5656 1e94 Misc = Module: c:\windows\system32\wuaueng.dll
2016-05-13 09:08:08:809 5656 1e94 Service *************
2016-05-13 09:08:08:819 5656 1e94 Service ** START ** Service: Service startup
2016-05-13 09:08:08:819 5656 1e94 Service *********
2016-05-13 09:08:08:819 5656 1e94 Agent * WU client version 7.6.7600.320
2016-05-13 09:08:08:819 5656 1e94 Agent * Base directory: C:\Windows\SoftwareDistribution
2016-05-13 09:08:08:819 5656 1e94 Agent * Access type: No proxy
2016-05-13 09:08:08:829 5656 1e94 Agent * Network state: Connected
2016-05-13 09:08:14:520 2144 1d30 Misc =========== Logging initialized (build: 7.6.7600.320, tz: -0700) ===========
2016-05-13 09:08:14:520 2144 1d30 Misc = Process: C:\Windows\LTSvc\LTSVC.exe
2016-05-13 09:08:14:520 2144 1d30 Misc = Module: C:\Windows\system32\wuapi.dll
2016-05-13 09:08:14:520 2144 1d30 COMAPI ----------- COMAPI: IUpdateServiceManager::AddService2 -----------
2016-05-13 09:08:14:520 2144 1d30 COMAPI - Service ID = {7971f918-a847-4430-9279-4a52d1efe18d}
2016-05-13 09:08:14:520 2144 1d30 COMAPI - Allow pending registration = Yes; Allow online registration = Yes; Register service with AU = Yes
2016-05-13 09:08:14:520 2144 1d30 COMAPI - Authorization cab path = <NULL>
2016-05-13 09:08:14:530 5656 1cec Report CWERReporter::Init succeeded
2016-05-13 09:08:14:530 5656 1cec Agent *********** Agent: Initializing Windows Update Agent ***********
2016-05-13 09:08:14:530 5656 1cec Agent * Prerequisite roots succeeded.
2016-05-13 09:08:14:530 5656 1cec Agent *********** Agent: Initializing global settings cache ***********
2016-05-13 09:08:14:530 5656 1cec Agent * WSUS server: <NULL>
2016-05-13 09:08:14:530 5656 1cec Agent * WSUS status server: <NULL>
2016-05-13 09:08:14:530 5656 1cec Agent * Target group: (Unassigned Computers)
2016-05-13 09:08:14:530 5656 1cec Agent * Windows Update access disabled: No
2016-05-13 09:08:14:590 5656 1cec DnldMgr Download manager restoring 0 downloads
2016-05-13 09:08:14:600 2144 1d30 COMAPI - Added service, URL = https://fe2.update.microsoft.com/v6/
2016-05-13 09:08:14:600 2144 1d30 COMAPI -------------
2016-05-13 09:08:14:600 2144 1d30 COMAPI -- START -- COMAPI: Search [ClientId = LabTech]
2016-05-13 09:08:14:600 2144 1d30 COMAPI ---------
2016-05-13 09:08:14:600 2144 1d30 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = LabTech]
2016-05-13 09:08:14:710 5656 1e94 Report *********** Report: Initializing static reporting data ***********
2016-05-13 09:08:14:710 5656 1e94 Report * OS Version = 6.1.7601.1.0.65792
2016-05-13 09:08:14:710 5656 1e94 Report * OS Product Type = 0x00000030
2016-05-13 09:08:14:720 5656 1e94 Report * Computer Brand = TOSHIBA
2016-05-13 09:08:14:720 5656 1e94 Report * Computer Model = Satellite L55-A
2016-05-13 09:08:14:720 5656 1e94 Report * Bios Revision = 1.40
2016-05-13 09:08:14:720 5656 1e94 Report * Bios Name = InsydeH2O Version 03.72.301.40
2016-05-13 09:08:14:720 5656 1e94 Report * Bios Release Date = 2014-04-28T00:00:00
2016-05-13 09:08:14:720 5656 1e94 Report * Locale ID = 1033

2016-05-13 09:08:14:720 5656 ef4 Agent *************
2016-05-13 09:08:14:720 5656 ef4 Agent ** START ** Agent: Finding updates [CallerId = LabTech]
2016-05-13 09:08:14:720 5656 ef4 Agent *********
2016-05-13 09:08:14:720 5656 ef4 Agent * Online = Yes; Ignore download priority = No
2016-05-13 09:08:14:720 5656 ef4 Agent * Criteria = "IsInstalled=1 or IsInstalled=0"
2016-05-13 09:08:14:720 5656 ef4 Agent * ServiceID = {00000000-0000-0000-0000-000000000000} Third party service
2016-05-13 09:08:14:720 5656 ef4 Agent * Search Scope = {Machine}
2016-05-13 09:08:14:720 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:08:14:740 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:14:740 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\TMPC935.tmp with dwProvFlags 0x00000080:
2016-05-13 09:08:14:750 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:14:750 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\v6-win7sp1-wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:08:14:760 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:17:301 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\v6-win7sp1-wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:08:17:311 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:17:321 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:08:17:321 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:17:331 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\TMPD354.tmp with dwProvFlags 0x00000080:
2016-05-13 09:08:17:341 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:17:341 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:08:17:351 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:17:351 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\TMPD374.tmp with dwProvFlags 0x00000080:
2016-05-13 09:08:17:361 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:17:361 5656 ef4 Agent Checking for updated auth cab for service 7971f918-a847-4430-9279-4a52d1efe18d at http://ds.download.windowsupdate.com.../v6-muauth.cab
2016-05-13 09:08:17:361 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab with dwProvFlags 0x00000080:
2016-05-13 09:08:17:361 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:17:491 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab with dwProvFlags 0x00000080:
2016-05-13 09:08:17:501 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:36:549 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:08:36:559 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:36:559 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP1E79.tmp with dwProvFlags 0x00000080:
2016-05-13 09:08:36:569 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:36:569 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\v6-muredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:08:36:579 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:36:609 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\v6-muredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:08:36:619 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:36:619 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:08:36:629 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:36:629 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP1EB8.tmp with dwProvFlags 0x00000080:
2016-05-13 09:08:36:639 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:36:639 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:08:36:649 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:36:649 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMP1ED9.tmp with dwProvFlags 0x00000080:
2016-05-13 09:08:36:659 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:08:36:659 5656 ef4 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2016-05-13 09:08:36:659 5656 ef4 PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://fe2.update.microsoft.com/v6/...ce/client.asmx
2016-05-13 09:08:53:982 5656 ef4 Driver Matched driver to device ACPI\TOS1150
2016-05-13 09:08:53:982 5656 ef4 Driver Status: 0x180000a, ProblemNumber: 00000000
2016-05-13 09:08:53:982 5656 ef4 Driver Matched driver to device PCI\VEN_168C&DEV_0036&SUBSYS_061211AD&REV_01
2016-05-13 09:08:53:982 5656 ef4 Driver Status: 0x180200a, ProblemNumber: 00000000
2016-05-13 09:08:53:982 5656 ef4 Driver Matched driver to device MONITOR\DELA0B3
2016-05-13 09:08:53:982 5656 ef4 Driver Status: 0x180600a, ProblemNumber: 00000000
2016-05-13 09:08:53:982 5656 ef4 Driver Matched driver to device PCI\VEN_8086&DEV_0166&SUBSYS_FA101179&REV_09
2016-05-13 09:08:53:982 5656 ef4 Driver Status: 0x180200a, ProblemNumber: 00000000
2016-05-13 09:08:54:312 5656 1e94 AU ########### AU: Initializing Automatic Updates ###########
2016-05-13 09:08:54:342 5656 1e94 AU # AU disabled through Policy
2016-05-13 09:08:54:342 5656 1e94 AU # Will interact with non-admins (Non-admins are elevated (User preference))
2016-05-13 09:08:54:342 5656 1e94 AU Initializing featured updates
2016-05-13 09:08:54:342 5656 1e94 AU Found 0 cached featured updates
2016-05-13 09:08:54:342 5656 1e94 AU Successfully wrote event for AU health state:0
2016-05-13 09:08:54:342 5656 1e94 AU Successfully wrote event for AU health state:0
2016-05-13 09:08:54:352 5656 1e94 AU AU finished delayed initialization
2016-05-13 09:09:20:097 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:09:20:097 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:09:20:113 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMPC890.tmp with dwProvFlags 0x00000080:
2016-05-13 09:09:20:129 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:09:20:129 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\v6-muredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:09:20:129 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:09:20:160 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\v6-muredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:09:20:160 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:09:20:160 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:09:20:175 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:09:20:175 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMPC8CF.tmp with dwProvFlags 0x00000080:
2016-05-13 09:09:20:175 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:09:20:175 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab with dwProvFlags 0x00000080:
2016-05-13 09:09:20:191 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:09:20:191 5656 ef4 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\TMPC8E0.tmp with dwProvFlags 0x00000080:
2016-05-13 09:09:20:191 5656 ef4 Misc Microsoft signed: NA
2016-05-13 09:09:20:191 5656 ef4 PT +++++++++++ PT: Synchronizing extended update info +++++++++++
2016-05-13 09:09:20:191 5656 ef4 PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://fe2.update.microsoft.com/v6/...ce/client.asmx
2016-05-13 09:09:23:873 5656 1e94 AU Can not perform non-interactive scan if AU is interactive-only
2016-05-13 09:34:35:688 5656 1e94 AU ########### AU: Uninitializing Automatic Updates ###########
2016-05-13 09:34:35:688 5656 ef4 Agent * WARNING: Failed to filter search results, error = 0x8024000B
2016-05-13 09:34:35:797 5656 ef4 Agent *********
2016-05-13 09:34:35:797 5656 ef4 Agent ** END ** Agent: Finding updates [CallerId = LabTech]
2016-05-13 09:34:35:797 5656 ef4 Agent *************
2016-05-13 09:34:35:938 2144 1abc COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = LabTech]
2016-05-13 09:34:35:938 5656 1e94 Agent Sending shutdown notification to client
2016-05-13 09:34:35:953 2144 1c4c COMAPI WARNING: Received service shutdown/self-update notification.
2016-05-13 09:34:35:969 5656 1e94 Report CWERReporter finishing event handling. (00000000)
2016-05-13 09:34:35:969 5656 1e94 Report CWERReporter finishing event handling. (00000000)
2016-05-13 09:34:35:969 5656 1e94 Report CWERReporter finishing event handling. (00000000)
2016-05-13 09:34:35:969 2144 1abc COMAPI - Updates found = 0
2016-05-13 09:34:35:969 2144 1abc COMAPI - WARNING: Exit code = 0x00000000, Result code = 0x8024001E
2016-05-13 09:34:35:969 2144 1abc COMAPI ---------
2016-05-13 09:34:35:969 2144 1abc COMAPI -- END -- COMAPI: Search [ClientId = LabTech]
2016-05-13 09:34:35:969 2144 1abc COMAPI -------------
2016-05-13 09:34:35:969 2144 1d30 COMAPI WARNING: Operation failed due to earlier error, hr=8024001E
2016-05-13 09:34:35:969 2144 1d30 COMAPI FATAL: Unable to perform synchronous search. (hr=8024001E)
2016-05-13 09:34:36:281 5656 1e94 Service *********
2016-05-13 09:34:36:281 5656 1e94 Service ** END ** Service: Service exit [Exit code = 0x240001]
2016-05-13 09:34:36:281 5656 1e94 Service *************

thanks for that.
Very interesting according to that log
you are only running W7,
But the update agent is for W7 service pack 1 >> uninstall it <<.
THEN
please use this link to update to SP1.
https://www.google.co.uk/url?sa=t&rc...PPILw2f2MIkU4w


IF your computer is showing this (see screenshot).
please tell me BEFORE proceeding to update to SP1

On a final note it may be that you do not have download rights to W7 as your model was sold with W8.

Roy

The computer does show that it is Service Pack 1.

isnt this OS Version number windows 7 with SP1?
2016-05-13 09:08:14:710 5656 1e94 Report * OS Version = 6.1.7601.1.0.65792

I believe the computer came with Windows 7. Even if I downgraded and went to Windows 7 there shouldn't be any problem with downloading windows updates. Its been done in the past. I have downgraded/upgraded to other versions of windows on other computers and have always been able to download windows updates.

any other ideas?

When ever this computer checks for windows updates CPU spikes up to 100% Will not go down at all.

I have updated the windows update agent.
I have ran a few fix it tools from microsoft.
I have determined its the windows update agent service causing CPU spikes because when I kill the service everything is back to normal.
I have scanned for viruses using, eset, hitmanpro, malwarebytes, and adwcleaner
I have deleted the softwaredistribution folder
i tried to install the windows update readiness tool. Nothing was found. Take a look at the log file below

-I have attached the windowsupdate.log file

Any ideas?

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 26.0
2016-05-12 11:58

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 1618