redapple75 10 Geschrieben 14. November 2014 Melden Teilen Geschrieben 14. November 2014 In unserer Umgebung kommen mehrere Windows 2008 R2 Standard Server zum Einsatz.Alle Server werden über einen internen WSUS mit Updates versorgt. Alle für die Server zutreffenden Updates sind über den WSUS installiert worden. Seit kurzem steigt die Prozessorlast der Maschinen sowie die Arbeitsspeichernutzung rasant an.Folgende Prozesse verursachen die hohe Last:svchost.exetrustedinstaller.exeNachdem folgende Dienste deaktiviert wurden ist die Last wieder im grünen Bereich:Windows UpdateWindows Modules InstallerSobald diese wieder aktiviert werden geht die Last wieder hoch. Ein Scan auf schadhaften Code wurde durchgeführt, alles im grünen Bereich. Auffällig ist das cbs.log (c:\windows\logs\cbs\), in dem aufgeführt wird das einige Pakete nicht geöffnet werden können.2014-11-13 12:22:28, Info CBS Starting TrustedInstaller initialization.2014-11-13 12:22:28, Info CBS Loaded Servicing Stack v6.1.7601.17592 with Core: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.17592_none_672ce6c3de2cb17f\cbscore.dll2014-11-13 12:22:30, Info CSI 00000001@2014/11/13:11:22:30.723 WcpInitialize (wcp.dll version 0.0.0.6) called (stack 0x7fef68df0ad 0x7fef6cc9849 0x7fef6c934e3 0xffbee97c 0xffbed799 0xffbedb2f)2014-11-13 12:22:30, Info CBS Could not load SrClient DLL from path: SrClient.dll. Continuing without system restore points.2014-11-13 12:22:30, Info CSI 00000002@2014/11/13:11:22:30.754 WcpInitialize (wcp.dll version 0.0.0.6) called (stack 0x7fef68df0ad 0x7fef6d16816 0x7fef6ce2aac 0x7fef6c935b9 0xffbee97c 0xffbed799)2014-11-13 12:22:30, Info CSI 00000003@2014/11/13:11:22:30.754 WcpInitialize (wcp.dll version 0.0.0.6) called (stack 0x7fef68df0ad 0x7fefa818738 0x7fefa818866 0xffbee474 0xffbed7de 0xffbedb2f)2014-11-13 12:22:30, Info CBS Ending TrustedInstaller initialization.2014-11-13 12:22:30, Info CBS Starting the TrustedInstaller main loop.2014-11-13 12:22:30, Info CBS TrustedInstaller service starts successfully.2014-11-13 12:22:30, Info CBS SQM: Initializing online with Windows opt-in: False2014-11-13 12:22:30, Info CBS SQM: Cleaning up report files older than 10 days.2014-11-13 12:22:30, Info CBS SQM: Requesting upload of all unsent reports.2014-11-13 12:22:30, Info CBS SQM: Failed to start upload with file pattern: C:\Windows\servicing\sqm\*_std.sqm, flags: 0x2 [hrESULT = 0x80004005 - E_FAIL]2014-11-13 12:22:30, Info CBS SQM: Failed to start standard sample upload. [hrESULT = 0x80004005 - E_FAIL]2014-11-13 12:22:30, Info CBS SQM: Queued 0 file(s) for upload with pattern: C:\Windows\servicing\sqm\*_all.sqm, flags: 0x62014-11-13 12:22:30, Info CBS SQM: Warning: Failed to upload all unsent reports. [hrESULT = 0x80004005 - E_FAIL]2014-11-13 12:22:30, Info CBS No startup processing required, TrustedInstaller service was not set as autostart, or else a reboot is still pending.2014-11-13 12:22:30, Info CBS NonStart: Checking to ensure startup processing was not required.2014-11-13 12:22:30, Info CSI 00000004 IAdvancedInstallerAwareStore_ResolvePendingTransactions (call 1) (flags = 00000004, progress = NULL, phase = 0, pdwDisposition = 0x121fe502014-11-13 12:22:30, Info CSI 00000005 Creating NT transaction (seq 1), objectname [6]"(null)"2014-11-13 12:22:30, Info CSI 00000006 Created NT transaction (seq 1) result 0x00000000, handle 0x1f82014-11-13 12:22:30, Info CSI 00000007@2014/11/13:11:22:30.848 CSI perf trace:CSIPERF:TXCOMMIT;31472014-11-13 12:22:30, Info CBS NonStart: Success, startup processing not required as expected.2014-11-13 12:22:30, Info CBS Startup processing thread terminated normally2014-11-13 12:22:30, Info CSI 00000008 CSI Store 2120736 (0x0000000000205c20) initialized2014-11-13 12:22:30, Info CBS Session: 30408500_488376500 initialized by client WinMgmt.2014-11-13 12:22:52, Info CBS Session: 30408500_488376500 finalized. Reboot required: no [hrESULT = 0x00000000 - S_OK]2014-11-13 12:23:59, Info CBS Archived backup log: C:\Windows\Logs\CBS\CbsPersist_20141113112228.cab.2014-11-13 12:25:42, Info CBS Session: 30408500_2402439000 initialized by client WindowsUpdateAgent.2014-11-13 12:25:42, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:25:42, Info CBS Session: 30408500_2402439001 initialized by client WindowsUpdateAgent.2014-11-13 12:25:42, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:25:42, Info CBS Session: 30408500_2402595250 initialized by client WindowsUpdateAgent.2014-11-13 12:25:42, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:25:42, Info CBS Session: 30408500_2402595251 initialized by client WindowsUpdateAgent.2014-11-13 12:25:42, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:25:42, Info CBS Session: 30408500_2402595252 initialized by client WindowsUpdateAgent.2014-11-13 12:25:42, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:25:51, Info CBS Session: 30408500_2489782750 initialized by client WindowsUpdateAgent.2014-11-13 12:25:51, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:25:51, Info CBS Session: 30408500_2490095250 initialized by client WindowsUpdateAgent.2014-11-13 12:25:51, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:25:51, Info CBS Session: 30408500_2490251500 initialized by client WindowsUpdateAgent.2014-11-13 12:25:51, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:25:53, Info CBS Session: 30408500_2518376500 initialized by client WindowsUpdateAgent.2014-11-13 12:25:55, Info CBS Session: 30408500_2529782750 initialized by client WindowsUpdateAgent.2014-11-13 12:26:13, Info CSI 00000009 [sR] Verifying 1 components2014-11-13 12:26:13, Info CSI 0000000a [sR] Beginning Verify and Repair transaction2014-11-13 12:26:14, Info CSI 0000000b Repair results created:POQ 0 starts:0: Move File: Source = [l:192{96}]"\SystemRoot\WinSxS\Temp\PendingRenames\208328a234ffcf01030000000c0b200a._0000000000000000.cdf-ms", Destination = [l:104{52}]"\SystemRoot\WinSxS\FileMaps\_0000000000000000.cdf-ms"POQ 0 ends.2014-11-13 12:26:14, Info CSI 0000000c [sR] Verify complete2014-11-13 12:26:14, Info CBS Session: 30408500_2727751500 initialized by client WindowsUpdateAgent.2014-11-13 12:26:56, Info CBS Session: 30408500_3147907750 initialized by client WindowsUpdateAgent.2014-11-13 12:26:56, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:26:56, Info CBS Session: 30408500_3148064000 initialized by client WindowsUpdateAgent.2014-11-13 12:26:56, Info CBS Session: 30408500_3148220250 initialized by client WindowsUpdateAgent.2014-11-13 12:26:56, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:26:56, Info CBS Session: 30408500_3148220251 initialized by client WindowsUpdateAgent.2014-11-13 12:26:56, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:26:57, Info CBS Session: 30408500_3150407750 initialized by client WindowsUpdateAgent.2014-11-13 12:26:57, Info CBS Session: 30408500_3157751500 initialized by client WindowsUpdateAgent.2014-11-13 12:26:57, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:26:57, Info CBS Session: 30408500_3157907750 initialized by client WindowsUpdateAgent.2014-11-13 12:26:57, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:26:57, Info CBS Session: 30408500_3157907751 initialized by client WindowsUpdateAgent.2014-11-13 12:26:57, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:26:57, Info CBS Session: 30408500_3157907752 initialized by client WindowsUpdateAgent.2014-11-13 12:26:57, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:26:57, Info CBS Session: 30408500_3157907753 initialized by client WindowsUpdateAgent.2014-11-13 12:26:57, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:27:39, Info CBS Session: 30408500_3574157750 initialized by client WindowsUpdateAgent.2014-11-13 12:27:47, Info CBS Session: 30408500_3655095250 initialized by client WindowsUpdateAgent.2014-11-13 12:27:48, Info CBS Session: 30408500_3663845250 initialized by client WindowsUpdateAgent.2014-11-13 12:27:48, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:27:48, Info CBS Session: 30408500_3663845251 initialized by client WindowsUpdateAgent.2014-11-13 12:27:48, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:27:48, Info CBS Session: 30408500_3663845252 initialized by client WindowsUpdateAgent.2014-11-13 12:27:48, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:27:48, Info CBS Session: 30408500_3664001500 initialized by client WindowsUpdateAgent.2014-11-13 12:27:48, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:27:48, Info CBS Session: 30408500_3664001501 initialized by client WindowsUpdateAgent.2014-11-13 12:27:48, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:27:48, Info CBS Session: 30408500_3664001502 initialized by client WindowsUpdateAgent.2014-11-13 12:27:48, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:27:48, Info CBS Session: 30408500_3664157750 initialized by client WindowsUpdateAgent.2014-11-13 12:27:48, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]2014-11-13 12:29:59, Info CBS Session: 30408501_684346704 initialized by client WindowsUpdateAgent.2014-11-13 12:30:00, Info CBS Read out cached package applicability for package: Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-TopLevel~31bf3856ad364e35~amd64~~7.1.7601.16492, ApplicableState: 112, CurrentState:1122014-11-13 12:30:00, Info CBS Session: 30408501_684815454 initialized by client WindowsUpdateAgent.2014-11-13 12:30:00, Info CBS Read out cached package applicability for package: Package_for_KB2862335~31bf3856ad364e35~amd64~~6.1.1.2, ApplicableState: 112, CurrentState:1122014-11-13 12:30:00, Info CBS Session: 30408501_684971704 initialized by client WindowsUpdateAgent.2014-11-13 12:30:00, Info CBS Read out cached package applicability for package: Package_for_KB3003057~31bf3856ad364e35~amd64~~11.2.1.0, ApplicableState: 112, CurrentState:1122014-11-13 12:30:00, Info CBS Session: 30408501_685596704 initialized by client WindowsUpdateAgent.2014-11-13 12:30:00, Info CBS Read out cached package applicability for package: Package_for_KB2656356~31bf3856ad364e35~amd64~~6.1.1.1, ApplicableState: 80, CurrentState:1122014-11-13 12:30:00, Info CBS Session: 30408501_686846704 initialized by client WindowsUpdateAgent.2014-11-13 12:30:00, Info CBS Read out cached package applicability for package: Package_for_KB2862330~31bf3856ad364e35~amd64~~6.1.2.0, ApplicableState: 112, CurrentState:1122014-11-13 12:30:00, Info CBS Session: 30408501_687002954 initialized by client WindowsUpdateAgent.2014-11-13 12:30:00, Info CBS Read out cached package applicability for package: Package_for_KB2544893~31bf3856ad364e35~amd64~~6.1.1.1, ApplicableState: 112, CurrentState:1122014-11-13 12:30:00, Info CBS Session: 30408501_687002955 initialized by client WindowsUpdateAgent.2014-11-13 12:30:00, Info CBS Read out cached package applicability for package: Package_for_KB2690533~31bf3856ad364e35~amd64~~6.1.1.0, ApplicableState: 112, CurrentState:1122014-11-13 12:30:00, Info CBS Session: 30408501_687159204 initialized by client WindowsUpdateAgent.2014-11-13 12:30:00, Info CBS Read out cached package applicability for package: Microsoft-Hyper-V-Integration-Services-Package~31bf3856ad364e35~amd64~~6.3.9600.17388, Es scheint als würde versucht Windows Update Pakete nach zu installieren. Über Ideen für Lösungsansätze, Anregungen usw. würde ich mich sehr freuen.Vielen Dank für die Hilfe ! Gruß Benny Zitieren Link zu diesem Kommentar
Sunny61 772 Geschrieben 14. November 2014 Melden Teilen Geschrieben 14. November 2014 Downloade die aktuelle Version und installiere es auf einem betroffenen Server: http://support.microsoft.com/kb/947821/en-us Hier noch eine Erklärung zu dem Tool: http://www.thewindowsclub.com/checksur-system-update-readiness-tool Zitieren Link zu diesem Kommentar
Empfohlene Beiträge
Schreibe einen Kommentar
Du kannst jetzt antworten und Dich später registrieren. Falls Du bereits ein Mitglied bist, logge Dich jetzt ein.