EHttpSrv.exe goes nuts

[fanuelsen]

I have a problem on my Windows 2008 x64 server, when i check the event viewer i get thousands of these error reports:

Fault bucket 5710366, type 4
Event Name: APPCRASH
Response: None
Cab Id: 0

Problem signature:
P1: EHttpSrv.exe
P2: 4.0.437.0
P3: 4a0c1e1e
P4: StackHash_052c
P5: 6.0.6002.18005
P6: 49e0421d
P7: c0000374
P8: 00000000000aef37
P9:
P10:

Attached files:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report37c04fee\WER45CD.tmp.version.txt
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report37c04fee\WER45CE.tmp.appcompat.txt
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report37c04fee\WER462C.tmp.hdmp
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report37c04fee\WER4F74.tmp.mdmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report068995ed

Anyone knows what this is related to?

[SmackyTheFrog]

ehttpsrv is the module that is launched to pull down new definition files. If yours is crashing all over the place, I would recommend doing a full clean reinstall right off the bat and seeing if that makes a difference.

[rcash]

I had an issue with EhttpSrv.exe using 100% of the cpu on my win2008 box. I would reboot and it would go away until virus definitions were updated and it would start again.

I finally disabled providing updates via internal HTTP server (ehttpsrv.exe) and installed IIS as the update mirror server (instructions found here: http://kb.eset.com/esetkb/index?page=content&id=SOLN2270&actp=search&viewlocale=en_US&searchid=1254165275100) and things are much improved.

[bradtech]

I have to restart my eHTTPSrv.exe every hour or updates will fail, and the process will go up to 99% CPU usage..