Driver issue? Involves svchost process and usb

[RedBlackHat]

Ok, first of all, foundhardware is not working properly. No new drivers cannot be installed OR removed, if I start "add/remove hardware" it says there is already an installation running.

Ok, before anyone helps me with that two installation error, consider this.
-I have done about 12 different fixes for that "two installations" error. Nothing worked, searched google up and down BUT I believe this is only a SYMPTOM and not the actual problem because...

When I plug in a new peripheral device via usb, the bubble does NOT pop up, UNLESS I shut down *one* of the many processes labeled "svchost"(usage is at 50%). After I do that, "found new hardware" bubble pops up, and I am able to install or remove drivers. I might have to do this several times during this process though.

This makes installing anything almost completely impossible, Device manager constantly crashes as does driver installs.

Other notes to ponder:
-When svchost is closed, it says "plug and play monitor found" but does not install correctly(though current chipset drivers are installed, note if I try to reinstall drivers they fail as well)
-Driver installs/uninstalls still fail in safe mode(obviously unless I close the svchost process)
-In device manager(when it works) There are multiple listings for monitor(3) and two listings for Display drivers...is this normal? DM crashes when removal is tried.

Have tried stopping extra start-up processes, removing temp files, etc.

I'm stuck!

[CCT]

I like these really tough ones!

Copy off all that you value, reformat and reinstall.

[RedBlackHat]

I like these really tough ones!

Copy off all that you value, reformat and reinstall.

So no computer CSI?

[RedBlackHat]

Windows update seems to stay @ 5%, and may open multiple yellow shields in task bar as well, none of which are clickable without an error

[RedBlackHat]

So simply put, this svchost process is causing mayhem.

One more thing to note, this svchost must somehow be connected to the taskbar. Cause when svchost shut down, the task bar reverts to "classic" xp style, and not the fancy new XP style.

[NooNoo]

OK, you need to find out what the svchost is doing

Svchost is a windows bucket of processes.
here is an explanation

Now assuming that you have XP home and not pro so you can use process explorer instead or you can download tasklist here

Make sure you have a REAL svchost running - check the path is in c:\windows\system32 and not running from elsewhere.

The number one cause is windows updates going mad, but not always. Have you tried just turning off windows updates?

[RedBlackHat]

Ok, I found a link pertaining to getting down to the nitty gritty with svchost *here*.

I'm assuming that is what you mean? And the "owner" of the computer said he did have previous issues with windows updater, but when I was on it, it was still trying to update, and had 3 or 4 yellow shields at the bottom trying to "download". So no, it was on.

[NooNoo]

Yes that is what I mean... disable windows update and see if things improve.

[RedBlackHat]

Also, I'm seeing that it might just not be for windows update, but another sub program running under that svchost...that is if it's even a real svchost file. I will check tomorrow.

[NooNoo]

Also, I'm seeing that it might just not be for windows update, but another sub program running under that svchost...that is if it's even a real svchost file. I will check tomorrow.

Yes, as I said in my previous post

Make sure you have a REAL svchost running - check the path is in c:\windows\system32 and not running from elsewhere.

The number one cause is windows updates going mad, but not always. Have you tried just turning off windows updates?

[CCT]

Pretty near 21 hours post-to-post and the issue persists.

Had you just copied and R&R'd last night, you would be a happy puppy today.

Considering people are prone to give out and store VERY PRIVATE information on their computers, once invaded, it is a GOOD thing to kill the sucker!

[RedBlackHat]

Pretty near 21 hours post-to-post and the issue persists.

Had you just copied and R&R'd last night, you would be a happy puppy today.

Considering people are prone to give out and store VERY PRIVATE information on their computers, once invaded, it is a GOOD thing to kill the sucker!

I can't get acces to the computer till Saturday so it's gonna have to wait till then.

R&R'd? And kill what sucker? The svchost(possible)virus?


Edit: OH, you mean, nuke and reinstall COMPLETELY....that is not an option, unless I can somehow find a way to bypass the activation of fast rip...since they went bankrupt, they don't give out unlock codes anymore!!!

[NooNoo]

Who went bankrupt?

[RedBlackHat]

Fast Rip, for silkscreening. http://www.equipmentzone.com/fastrip.html

[NooNoo]

it would seem that support is still available and they are still taking money and making sales.