MoUSO Core Worker High CPU Process on Windows: What It Is, Why It Spikes, and How to Fix It By Will Wisser Posted on September 14, 2025 2 min read 0 29 MoUSO (USO) Core Worker is part of Windows’ Update Session Orchestrator (USO)—the component that scans for, downloads, and installs updates in the background. When USO is active, you’ll see MoUSO Core Worker Process in Task Manager. High CPU usually means it’s actively scanning or applying updates, or it’s stuck retrying due to a hiccup. It is a legitimate Windows component (not malware). Typical Symptoms Noticeable CPU spikes and fan noise, often right after boot, resume, or a recent update. The PC refuses to sleep and powercfg /requests shows MoUsoCoreWorker.exe holding a power request. Windows Update shows “Pending install” or repeats errors; Task Manager lists MoUSO Core Worker using CPU for long periods. Likely Causes A normal but heavy update scan or installation cycle. Corrupted update cache in SoftwareDistribution or catroot2, or a partially downloaded/failed update. Delivery Optimization aggressively fetching or sharing update content. Power-request locks while updates try to finish, preventing sleep. Security note: Do not permanently disable Windows Update or related services. That undermines patch hygiene and exposes the system to vulnerabilities. The steps below resolve the loop without sacrificing security. Quick Triage (2–5 Minutes) Check Windows Update and restart. Open Settings → Windows Update → Check for updates, install everything offered, then restart the PC. Many spikes disappear once USO completes its work. Run the Windows Update troubleshooter. Settings → System → Troubleshoot → Other troubleshooters → Windows Update → Run. Reboot afterwards. See what’s blocking sleep (optional). In an elevated terminal, run: powercfg /requests If MoUsoCoreWorker.exe appears, complete the steps below to clear it. The Definitive Step-by-Step Fix (Safest → Strongest) Step 1 — Finish and Cleanly Restart Updates Settings → Windows Update → Check for updates → Install → Restart. After reboot, give the system a few minutes. If CPU remains high and there’s no visible progress, continue. Step 2 — Tame Delivery Optimization Settings → Windows Update → Advanced options → Delivery Optimization. Turn Allow downloads from other PCs Off, or restrict it to Devices on my local network. On managed or low-resource devices, prefer conservative Delivery Optimization settings. Step 3 — Reset the Windows Update Cache Use an elevated Windows Terminal (Admin). Stop services, rename caches, restart services, then check for updates again. net stop wuauserv net stop bits net stop cryptsvc ren C:\Windows\SoftwareDistribution SoftwareDistribution.old ren C:\Windows\System32\catroot2 catroot2.old net start cryptsvc net start bits net start wuauserv Return to Settings → Windows Update → Check for updates, install what’s found, and reboot. You can delete the .old folders later. Step 4 — Repair Component Store and System Files (DISM + SFC) In an elevated terminal, run: DISM /Online /Cleanup-Image /RestoreHealth sfc /scannow Restart after both complete and retest CPU usage. Step 5 — Restart Update Services and Verify Scheduled Tasks Open services.msc and restart Windows Update (wuauserv) and Background Intelligent Transfer Service (BITS). Open Task Scheduler → Microsoft → Windows → UpdateOrchestrator and ensure tasks are present and not disabled. Do not delete these tasks. Step 6 — Clear Power Requests (Systems That Won’t Sleep) If powercfg /requests continues to show MoUsoCoreWorker.exe after steps 1–5, you can temporarily override it while you finish troubleshooting: powercfg /requestsoverride process MoUsoCoreWorker.exe execution To review existing overrides later: powercfg /requestsoverride Use overrides cautiously—they hide the symptom but don’t fix the underlying update condition. Prefer completing updates and reboots to clear the lock naturally. Step 7 — Check Logs (Advanced / IT) USO logs help identify whether scan, download, install, or commit is failing. C:\ProgramData\USOShared\Logs Pair these with a generated WindowsUpdate.log to pinpoint the failing phase. Prevention Tips (Security-First) Stay current. Apply quality updates promptly and restart to complete servicing; this prevents USO backlog loops. Keep Delivery Optimization conservative on metered or low-resource devices. Avoid “tweakers.” Third-party tools that disable update components often create CPU/sleep problems later. Create restore points/backups before big update waves, especially on systems that run 24/7. FAQ Is MoUSO Core Worker safe?Is MoUSO Core Worker safe?Yes. It’s a built-in Windows Update component. High CPU usually means it’s scanning, installing, or stuck due to cache corruption. Can I disable it?Can I disable it?No. Disabling USO or Windows Update breaks patching and increases risk. Use the reset and repair steps above. My PC won’t sleep and powercfg /requests shows MoUsoCoreWorker.exe.My PC won’t sleep and powercfg /requests shows MoUsoCoreWorker.exe.Finish updates and reboot. If needed, use the temporary override in Step 6 while you complete the fixes. Editor’s note: These procedures keep systems quiet and secure by resolving MoUSO loops without undermining patch hygiene.
How to decrypt ransomware [Jul 2021] File-encrypting ransomware is undoubtedly the worst type of malicious code as of yet. In …