Windows stability problems

[themusgrat]

Yeah, I should prolly try that. I'll run it in safe mode, and see if it changes anything, then I'll post all my processes, cuz I don't know at all about most of them.

 

[Slikkster]

Well, at some point, his time has to be factored into the equation.

If you do choose to reformat, don't forget to backup your Outlook Express (if that's what you use).

Here's an easy way to do it:

http://www.iopus.com/guides/free-oe-backup.htm

 

[themusgrat]

Wow, nothing is wrong in safe mode, I don't get any errors, and My Computer responds perfectly... So give me a second and I'll post my processes.

EDIT:
In safe mode I have
sdmcp.exe; 4 instances of svchost.exe, 1 is local service, 2 networks, and system
taskmgr.exe
lsass.exe
services.exe
winlogon.exe
csrss.exe
smsss.exe
explorer.exe
system
system idle process

And in regular mode, these 60 or so processes, varies without me doing anything, from 60 to 64

aolsoftware.exe
WinCinemaMgr.exe
reader_sl.exe
ctfmon.exe
mssysmgr.exe
unsecapp.exe
RcMan.exe
IconX.exe
Core.exe
rundll32.exe
msmsgs.exe
MtdAcq.exe
CTDetect.exe
avgnt.exe
avgcc.exe
dumprep.exe
rundll32.exe
VPTray.exe
ccApp.exe
wmiprvse.exe
rundll32.exe
qttask.exe
nvraidservice.exe
jusched.exe
CTHELPER.exe
explorer.exe
alg.exe
MsPMSPSv.exe
aim6.exe
DefWatch.exe
CTSVCCDA.EXE
ccSetMgr.exe
spoolsv.exe
ups.exe
ccEvtMgr.exe
svchost.exe
avgemc.exe
svchost.exe
avgupsvc.exe
schost.exe
avgamsvr.exe
OSDMenu.exe
AluSchedulerSvc.exe
avguard.exe
sched.exe
svchost.ese
svchost.exe
lsass.exe
services.exe
winlogon.exe
csrss.exe
smss.exe
Rtvscan.exe
Tmas.exe
sdctray.exe
nvsvc32.exe
taskmgr.exe
MOVIEL~1.EXE
MDM.EXE
System
System Idle Process



EDIT 2: Oh, and I tried the steps listed on the linky above, but they didn't help, and besides, the one that said start whatever on startup was not checked anyway.

 

[Slikkster]

Ok, you've given a helpful clue. Sdmcp.exe is a service that runs "Stardock" applications. This is not a core Windows service. I would consider stopping that service as a test, and see about your stability.

Also, read this thread...only about 3 answers and a quick read...so could be helpful.

http://www.wincustomize.com/articles.aspx?sid=1&aid=89904&c=1

 

[themusgrat]

I edited in the regular processes above.

 

[ScrapSilicon]

Originally posted by: themusgrat
Wow, nothing is wrong in safe mode, I don't get any errors, and My Computer responds perfectly... So give me a second and I'll post my processes.

EDIT:
In safe mode I have
sdmcp.exe *; 4 instances of svchost.exe, 1 is local service, 2 networks, and system
taskmgr.exe
lsass.exe
services.exe
winlogon.exe
csrss.exe
smsss.exetoo many s' or ?
explorer.exe
system
system idle process

And in regular mode, these 60 or so processes, varies without me doing anything, from 60 to 64

aolsoftware.exe
WinCinemaMgr.exe
reader_sl.exe
ctfmon.exe
mssysmgr.exe
unsecapp.exe
RcMan.exe
IconX.exe
Core.exe
rundll32.exe
msmsgs.exe
MtdAcq.exe
CTDetect.exe
avgnt.exe
avgcc.exe
dumprep.exe
rundll32.exe
VPTray.exe
ccApp.exe
wmiprvse.exe
rundll32.exe
qttask.exe
nvraidservice.exe
jusched.exe
CTHELPER.exe
explorer.exe
alg.exe
MsPMSPSv.exe
aim6.exe
DefWatch.exe
CTSVCCDA.EXE
ccSetMgr.exe
spoolsv.exe
ups.exe
ccEvtMgr.exe
svchost.exe
avgemc.exe
svchost.exe
avgupsvc.exe
schost.exe
avgamsvr.exe
OSDMenu.exe
AluSchedulerSvc.exe
avguard.exe
sched.exe
svchost.ese
svchost.exe
lsass.exe
services.exe
winlogon.exe
csrss.exe
smss.exe
Rtvscan.exe
Tmas.exe
sdctray.exe
nvsvc32.exe
taskmgr.exe
MOVIEL~1.EXE
MDM.EXE
System
System Idle Process



EDIT 2: Oh, and I tried the steps listed on the linky above, but they didn't help, and besides, the one that said start whatever on startup was not checked anyway.

end task all in bold(the one marked with an asterisk is not good to see in safe mode) ..discover what progs are associated with the ones in bold(exception is known .exe like msn messenger, aim, etc.) possibly you might be better off following this advice ...

And if you have a spare hard drive around i'd throw it in and install xp on it just to see if it runs normal from another hard drive.

 

[dball3]

well i have a page that says core.exe may be a bad file http://virusinfo.prevx.com/pxparall.asp?PXC=61709845065 that's the link if you wanna check it out, i'll keep checkin for more info about the processes, you should definetly type msconfig at the run dialogue go to the start up tab, and deselect anything suspect.

 

[themusgrat]

Ok, again, ty for all the help. So like I would slap a spare HD in, but I'm in college, and I don't have the money for one, and I certainly don't have one lying around... dorm spaces can be amazingly small... I'm downloading the Prev1 CORE.EXE remover thing right now, so we'll see if that was it. Also, tell me exactly which services I should stop when I type msconfig. I went to the last page, selected "hide microsoft services" or something like that, and there were only a few listed there.

EDIT: I installed the CORE.EXE thing, but it found nothing. Uh, I deselected all of the startyp things, but again, nothing happened. You guys need to tell me exactly where to look for that. Now I'm gonna start ending random processes one by one, so I'll edit again soon. And yes, I put too many ss's on smss.exe.

EDIT 2: So far, I can't end RcMan.exe Rtvscan.exe, and CTHELPER.EXE, and PXConsole.exe says, error, access denied. The other 3 just do nothing, no matter how many times I try to end them. And, after ending all those, nothing has changed. Could it have to do with the fact that in safe mode, there are 4 instances of svchost.exe, and in regular mode, there are 5?

 

[Slikkster]

Are you running TWO antivirus programs at the same time? Your service list shows both Norton and AVG anti-virus executables. That's a recipe for problems.

 

[dball3]

try to follow the steps on this page, it seems like it does the trick, http://www.computing.net/security/wwwboard/forum/17540.html

 

[themusgrat]

I'll try the stuff on that linky now, it looks good. And I only installed a bunch of anit virus programs after this problem started. Should I uninstall the ones that don't help? Or just leave my main and uninstall the rest?

 

[Slikkster]

Should have had you do this before, but please do this now.

Download and run "HijackThis".

Choose the "Do a System Scan and save a Logfile" option.

Copy/paste everything from the logfile and post it here. The logfile will show up in notepad on your screen automatically. Just copy/paste it.

We'll take a look at the contents. Might be something obvious that we're missing because of info we don't have right now.


(Need to unzip download): http://www.merijn.org/files/hijackthis.zip

 

[themusgrat]

Ok, here it is.

Logfile of HijackThis v1.99.1
Scan saved at 11:57:27 AM, on 9/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5700.0006)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Prevx1\PXAgent.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ups.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\CTHELPER.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\nvraidservice.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\dumprep.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Prevx1\PXConsole.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\Creative\Shared Files\Media Sniffer\MtdAcq.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Electronic Arts\EA Downloader\Core.exe
C:\Program Files\Stardock\Object Desktop\IconX\IconX.exe
C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Stardock\Object Desktop\Component Tray\sdctray.exe
C:\Program Files\Trend Micro\Tmas\Tmas.exe
C:\Program Files\Common Files\AOL\1154297700\ee\aolsoftware.exe
C:\Program Files\Creative\MediaSource\RemoteControl\OSDMenu.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\taskmgr.exe
C:\DOCUME~1\admin\LOCALS~1\Temp\Temporary Directory 2 for hijackthis.zip\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Malicious Scripts Scanner - {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users\Application Data\Prevx\pxbho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NVRaidService] C:\WINDOWS\system32\nvraidservice.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [VSF07] C:\Program Files\Residential Technology Configuration Utility 7.21\vsscan.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [PrevxOne] C:\Program Files\Prevx1\PXConsole.exe
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [MtdAcq] C:\Program Files\Creative\Shared Files\Media Sniffer\MtdAcq.exe /s
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EA Downloader\Core.exe -silent
O4 - HKCU\..\Run: [DesktopX] "C:\Program Files\Stardock\Object Desktop\IconX\IconX.exe"
O4 - HKCU\..\Run: [RemoteCenter] C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Nero\Ahead\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Stardock Central.lnk = C:\Program Files\Stardock\Object Desktop\Component Tray\sdctray.exe
O4 - Global Startup: Trend Micro Anti-Spyware.lnk = C:\Program Files\Trend Micro\Tmas\Tmas.exe
O4 - Global Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://bigdog.baylor.edu
O15 - Trusted Zone: http://burs4.baylor.edu
O15 - Trusted Zone: http://its01.baylor.edu
O15 - Trusted Zone: http://mail.baylor.edu
O15 - Trusted Zone: http://psoftwt.baylor.edu
O15 - Trusted Zone: http://raymond.baylor.edu
O15 - Trusted Zone: http://rmsweb.baylor.edu
O15 - Trusted Zone: http://*.baylor.edu
O15 - Trusted Zone: http://bigdog.baylor.edu (HKLM)
O15 - Trusted Zone: http://burs4.baylor.edu (HKLM)
O15 - Trusted Zone: http://its01.baylor.edu (HKLM)
O15 - Trusted Zone: http://mail.baylor.edu (HKLM)
O15 - Trusted Zone: http://psoftwt.baylor.edu (HKLM)
O15 - Trusted Zone: http://raymond.baylor.edu (HKLM)
O15 - Trusted Zone: http://rmsweb.baylor.edu (HKLM)
O15 - Trusted Zone: http://*.baylor.edu (HKLM)
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.2.2.89.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.johannrain-softwareentwicklung.de/EN/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftup...86/client/wuweb_site.cab?1157677208234
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup...86/client/muweb_site.cab?1142998552312
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,1,0,4846/mcfscan.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15021/CTPID.cab
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WBSrv - C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\Program Files\Stardock\Object Desktop\IconPackager\iprepair.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NcrSmpMgr - Unknown owner - C:\NcrSmpMgr\smpmgrsr.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

 

[Slikkster]

Turn off/uninstall all those extra anti-virus programs. You only need one. I'm assuming it's your Norton, right?

Secondly, take a look at this support article. Do any of these devices listed (or services) apply to you? Look carefully at the list:

http://support.microsoft.com/default.aspx?scid=kb;en-us;819017

 

[themusgrat]

That did it, I had to stop the Windows Image Acquisition Service, and there we go- no more delays. Well, thank you sooo much all the ppl who helped, especially Slikkster, I know that you all didn't get some of that just off the top of your head, it took a little time. But you made me super happy, so hopefully it was worth it to you.

 

[Slikkster]

Glad it worked out. It took some rereading of your original posts to look in that direction. Good luck. Make sure you're only running ONE antivirus program, too.