Problem

Windows Update does not work with November 2013 updates and causes svchost.exe to run at 100% CPU

Resolution

1. Download and install the Cumulative Security Update for the corresponding Internet Explorer version for December (KB 2898785):

http://technet.microsoft.com/en-us/security/bulletin/ms13-097

2. Reboot the server

3. Run the Microsoft Update again

Note: Axway tests all Critical, High (Important), and Moderate Priority Updates on the latest version of EMF (6.5) and SM (6.5) and on the most current supported windows platform only (Windows 2003 SP2 with SQL 2005 SP3). This is the list of the tested and certified updates from December 2013:

https://support.axway.com/kb/173447/language/en

BACKGROUND:

The problem with svchost.exe running at 100% seems to be dating from September. It affects primarily Windows XP and Windows Server 2003 machines running IE6 or IE7.  There were few reports of this happening on IE8. The Microsoft Update community were able to identify the issue, "it stemmed from inefficiencies in the Windows Update Agent processing long lists of superseded updates.  And the problem was exponential in that each additional superseded item took twice as long as the previous item to evaluate.  With lists as long as 40+ superseded items, the processing cost on SVCHOST via the Windows Update Agent had an exceptional impact on client PCs.

Due to security requirements, the Internet Explorer product was required to continue building a chain longer than what is normally permitted in Windows Update.  Over time, this exception exacerbated the previously unknown inefficiency in the Windows Update Agent."

More about the issue can be found on the following Microsoft forum:

http://answers.microsoft.com/en-us/windows/forum/windows_xp-windows_update/windows-update-doesnt-work-with-nov2013-updates/d84e7493-9169-4cb9-b4c2-8229bdde8b2f?page=3