Question

XP Right Click & Vid Rfrsh Slow when NIC Plugged in

Asked by: jennifer_borman

Hello to all!

A PC we have has recently started hanging during a right click (on icons) and various apps hang when the Network Adapter (NIC) is plugged into a Switch and X-Over to PC.  Therefore when the NIC has a signal and is enabled, the symtpoms occurr.  When haninging, I can drag a window around the screen, it wipes the desktop icons away like an eraser (wallpaper stays) and then the window is not refreshed when dragged, therefore 1000's of windows stay behind like Mouse Tracks (Video is not refreshing via system hang). When the NIC is either Disabled or detached, the PC works fine.  Here are the specs of the PC and the attempted fixes:

System Specs
---------------------------
Windows XP Pro SP1
Intel 3.0Ghz (800Mhz) HT
1G RAM
Gigabyte MB
NVidia GeforceFX 9500
Drives with MB RAID (2 Pair Striped - 2 Volumes Total)
1 System HDD (SATA Raid 10K Rpm) (WINXP here)
System has worked fine until recently.  User is not completely PC trained, therefore a COMPLETE backtrace of Installed Programs is vague at best.  


Attempted Fixes:
---------------------------
All Symptoms remained unless noted.

-Killed all but required services for system continuity - tested with each proc killed.

-Scanned with 3/31/04 NAV Definitions & Highest Heuristics, deepest scanning, etc. (Found Clean)

-Scanned with Lavasoft AdAware (Latest Ver) with 3/31/04 Reference File. - Nothing but cookies found.

-Adjusted AGP Apeture

-Adjusted Various NVidia Settings in Display & Adapter Properties.

-Removed all peripheral shortcuts from SEND TO folder.

-Removed NAV

-Reinstalled and Full LiveUpdate! performed with NAV

-Peformed Safe Mode Test (problem still occurred)

-Tested with Native Win2000 Domain (Local & Network Accounts)

-Tested with X-Over and A WinXP Home PC

-Joined and Disjoined (with testing) from the Domain.

-Configured with DHCP & Static IP Addressing

-Administrative and User Accounts tested (Locally & Network)

-Latest Drivers applied (remember system was not always like this)

-Dell ActiveSync with a Dell PDA was the latest item installed.

-----------

The user has ALOT of peripheral software and services running, but please keep in mind that I killed all procs down to the BARE minimum and symptoms still occurred.  Also remember that once the NIC is disconnected or disabled, things return to normal INSTANTLY

-----------
Finally, a pre-thank you to ALL who contribute.  Big time!  









This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2004-04-05 at 21:05:47ID20944666
Tags

xp

Topic

Windows XP Operating System

Participating Experts
2
Points
500
Comments
20

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. Diamond Viper V770D NVIDIA AGP
    I have the Diamond Viper V770D NVIDIA AGP graphics card with 32mb of RAM. I can not get my card to work with Redhat Linux 6.0. Any suggestions would be appreciated.
  2. nvidia geforce2 agp driver
    may i know where i can download the latest AGP driver for nvidia geforce2 graphics card? thank you!
  3. Kernel Source RPM
    I'm trying to load the NVIDIA drivers for my graphics card so I can start xwindows, however, when I run the installer from the command line I get this error: No precompiled kernel interface was found to match you kernel... Unable to find the kernel source tree for the curren...
  4. Will a new AGP 8X video card work in a 4X AGP Slot?
    Hi My PC (Pentium 4 2.8GHz) has an Abit mobo with an AGP 4X slot. Can I fit a modern AGP 8X card in here? (e.g. nVidia 5900). Will it work (albeit a little slower) or are the voltages wrong and it will blow up to a million pieces? Thanks

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: jennifer_bormanPosted on 2004-04-05 at 21:16:12ID: 10763012

Addition--------

-----------RUNNING Tasks---------------

system idle process
system
smss.exe
csrss.exe
winlogon.exe
services.exe
lsass.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
ccevtmgr.exe
spoolsv.exe
ctsvccda.exe
navapsvc.exe
nprotect.exe
nvsvc32.exe
nopdb.exe
mspmspsv.exe
explorer.exe
soundman.exe
ctsysvol.exe
ctdvddet.exe
cthelper.exe
shico.exe
bsclip.exe
qttask.exe
ccapp.exe
daemon.exe
anvshell.exe
hpztsb04.exe
hphmon03.exe
atix10.exe
msmsgs.exe
wcescomm.exe
rundll32.exe
acrotray.exe
hphipm09.exe
wcesmgr.exe
outlook.exe
helpctr.exe
helpsvc.exe
wmiprvse.exe
wmiprvse.exe
offprov.exe

--------RUNNING SERVICES (Not Tasks)---------

99.999% of all services are as per the initial installation of WinXP.  1 or two should have been changed.
 (Sorry about the Funny Layout)

      
Display Name      State
Alerter      Stopped
Application Layer Gateway Service      Stopped
Application Management      Stopped
Ati HotKey Poller      Stopped
ATI Smart      Stopped
Windows Audio      Running
Background Intelligent Transfer Service      Stopped
Computer Browser      Running
Symantec Event Manager      Running
Symantec Password Validation Service      Stopped
Indexing Service      Stopped
ClipBook      Stopped
COM+ System Application      Stopped
Creative Service for CDROM Access      Running
Cryptographic Services      Running
DHCP Client      Running
Logical Disk Manager Administrative Service      Stopped
Logical Disk Manager      Running
DNS Client      Running
Error Reporting Service      Running
Event Log      Running
COM+ Event System      Running
Fast User Switching Compatibility      Stopped
Help and Support      Running
Human Interface Device Access      Stopped
IMAPI CD-Burning COM Service      Stopped
Server      Running
Workstation      Running
TCP/IP NetBIOS Helper      Running
Messenger      Running
NetMeeting Remote Desktop Sharing      Stopped
Distributed Transaction Coordinator      Stopped
Windows Installer      Stopped
Norton AntiVirus Auto Protect Service      Running
Network DDE      Stopped
Network DDE DSDM      Stopped
Net Logon      Stopped
Network Connections      Running
Intel NCS NetService      Stopped
Network Location Awareness (NLA)      Running
Norton Unerase Protection      Running
NT LM Security Support Provider      Stopped
Removable Storage      Stopped
NVIDIA Driver Helper Service      Running
Plug and Play      Running
Pml Driver      Running
IPSEC Services      Running
Protected Storage      Running
Remote Access Auto Connection Manager      Stopped
Remote Access Connection Manager      Running
Remote Desktop Help Session Manager      Stopped
Routing and Remote Access      Stopped
Remote Registry      Running
Remote Procedure Call (RPC) Locator      Stopped
Remote Procedure Call (RPC)      Running
QoS RSVP      Stopped
Security Accounts Manager      Running
ScriptBlocking Service      Stopped
Smart Card Helper      Stopped
Smart Card      Stopped
Task Scheduler      Running
Secondary Logon      Running
System Event Notification      Running
Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)      Stopped
Shell Hardware Detection      Running
Speed Disk service      Running
Print Spooler      Running
System Restore Service      Running
SSDP Discovery Service      Running
Windows Image Acquisition (WIA)      Stopped
MS Software Shadow Copy Provider      Stopped
Performance Logs and Alerts      Stopped
Telephony      Running
Terminal Services      Running
Themes      Running
Telnet      Stopped
Distributed Link Tracking Client      Running
Upload Manager      Running
Universal Plug and Play Device Host      Stopped
Uninterruptible Power Supply      Stopped
Volume Shadow Copy      Stopped
Windows Time      Stopped
WebClient      Running
Windows Management Instrumentation      Running
WMDM PMSP Service      Running
Portable Media Serial Number      Running
Windows Management Instrumentation Driver Extensions      Stopped
WMI Performance Adapter      Stopped
Automatic Updates      Running
Wireless Zero Configuration      Running
X10 Device Network Service      Stopped



----Thanks!---

 

by: gemartiPosted on 2004-04-06 at 04:01:10ID: 10764580

Didn't see anything related to testing the memory.

Try this:

Windows Memory Diagnostic
http://oca.microsoft.com/en/windiag.asp

Exceprt:
The Windows Memory Diagnostic tests the Random Access Memory (RAM) on your computer for errors. The diagnostic includes a comprehensive set of memory tests. If you are experiencing problems while running Windows, you can use the diagnostic to determine whether the problems are caused by failing hardware, such as RAM or the memory system of your motherboard. Windows Memory Diagnostic is designed to be easy and fast. On most configurations, you can download the diagnostic, read the documentation, run the test and complete the first test pass in less than 30 minutes.

 

by: VeegertxPosted on 2004-04-06 at 06:42:44ID: 10765786

Try another NIC maybe? Sounds too simple but it sound's like its running off. Or is it the way its set up and what it accesses.

 

by: jennifer_bormanPosted on 2004-04-07 at 19:30:01ID: 10780347

I will attempt the RAM test, however I don't imagine that it is specifically applicable here.  I appreciate that response, but the symptoms take effect once the NIC is plugged in.  If it is disconnected, everything is fine.

I will disable the on-board NIC and will install a different NIC and try it out.

Appreciate all of your time.  Will let you know the outcome.  Any other suggestions are welcome.

 

by: gemartiPosted on 2004-04-08 at 03:22:48ID: 10782222

Well I figure you have to start somewhere. :)

Does the video card and the NIC share any of the same resource settings?

If yes then try changing the NIC's IRQ.

 

by: gemartiPosted on 2004-04-08 at 03:24:18ID: 10782229

You also might just need to re-seat the hardware (NIC, Video, and RAM).

 

by: VeegertxPosted on 2004-04-08 at 04:57:59ID: 10782611

As Gemarti said: Does the video card and the NIC share any of the same resource settings?
Another way to get it to change IRQ and stuff is simply a different slot in PC if available.

 

by: VeegertxPosted on 2004-04-08 at 05:01:06ID: 10782627

OOps sorry just realized what you said that its an onboard - too early in the morn
Yep disabling in BIOS and another card is only way to test that theory.

 

by: jennifer_bormanPosted on 2004-04-10 at 12:23:31ID: 10797967

Still here, will reply soon!

 

by: jennifer_bormanPosted on 2004-04-15 at 16:32:43ID: 10838012

Still alive, holidays!  Thanks for the patience!

 

by: jennifer_bormanPosted on 2004-04-26 at 20:59:24ID: 10924963

Okay, that was too long of a delay.  Anyway, I tried a different NIC after disabling the onboard NIC.  The machine still performs very slowly when the new NIC is plugged in and returns to normal performance when disconnected.

Any additional ideas?

I'm going to try a few more malware detectors.  Microsoft Word 2000 is particularly predictable in that it lags very badly when connected and is fine when disconnected.  I notice that a packet is sent every 1/2 second on the LAN link.  Link overhead aside, it appears a little too much and consistent to be a nominal inactive link.  Know what I mean?  But any other suggestions will be helpful.  I am going to throw a sniffer on the line and see what happens.

Thanks again!

 

by: VeegertxPosted on 2004-04-27 at 10:22:41ID: 10930863

Ok these are suspicious Tasks
shico.exe - whats starting it
bsclip.exe - whats starting it
daemon.exe - whats starting it
offprov.exe - I Found on internet = "I received from seafood@ucdavis.edu list some messages with this attached files like "hpdsx.exe" or offprov.exe" with W32/Magistr@MM virus!!! "
Is your Virus definitions up to date?

WMDM PMSP Service This service is installed with Windows Media Player 7. If you do not use Media Player, disable this service. This is XP forum so i thought you had XP, newest Media Player is 9.0b.

X10 Device Network Service - If it says X10 then its simply no good, I'd look at uninstalling whatever and stop/delete this service. X10 used to be known as spyware as I recall.

 

by: VeegertxPosted on 2004-04-27 at 10:28:24ID: 10930911

This is Autoruns
can tell you where and whats starting with your PC
http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml
I'm starting to think you have a Virus or spyware here.

 

by: jennifer_bormanPosted on 2004-04-28 at 19:36:57ID: 10945401

Okay,

   I've noted your suspicions about the services and procs running, however I found some more information that I feel is noteworthy.

   I threw a sniffer on the PC and allowed it to operate under normal conditions.  Especially when opening Microsoft Word documents (It likes to stall there when the NIC is in), it seems to arp like heck for my gateway (10.0.0.1).  It is also doing a DNS lookup for clr.verisign.com and www.verisign.com.

   I am not yet connected to the internet via DSL or dial-up.  I do have a DNS server and DHCP server that throws 10.0.0.1 as the default router/gateway.  THERE IS NO VALID gateway at 10.0.0.1 nor is there any normal host at that address, therefore the arp is never answered.  I changed the DHCP to not include a gateway IP, as well as giving it a valid host that is not actually a gateway, but to prevent it from arping and to see what it asks of the "gateway".

   After reboots of the PC with each different configuration setting, there is still no change.  No matter what IP is given for gateway, it still arps for 10.0.0.1.  I even flushed DNS Cache, etc.  I tried to manually give a localhost as well as a remote host on the network IP address for the sites listed (verisign).

   I am no good with certificates and CA's.  There are no know configs except for the default XP configs with the CAs.

   I am going to now double the points as this is getting deep.

  A thought just occurred to me, I am going to redirect the 10.0.0.1 address to a valid host to continue whatever TCP/IP process the box is trying to initiate.  Please mind you that the DNS lookup and the arp are coinciding.  They may be related but also may not be!

Thanks again!


 

by: VeegertxPosted on 2004-04-29 at 17:45:29ID: 10955024

Was about to suggest flushing that DNS. I do it after this. Read the notes I have in it about 2 parameter's that should not be there.
More on what these do is here  http://www.windows-help.net/WindowsXP/tune-24.html

------DNScache.reg below here--------

Windows Registry Editor Version 5.00
;If you find DWORD values MaxCacheEntryTtlLimit and/or NegativeCacheTime in the
;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters
;registry location, delete those.
;When present they will prevent Windows XP using the correct settings.
;After doing this flush the DNS cache for the changes to take effect
; @command prompt    ipconfig /flushdns

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters]
"MaxNegativeCacheTtl"=dword:00000000
"MaxCacheTtl"=dword:00003840
"MaxCacheEntryTtlLimit"=-
"NegativeCacheTime"=-

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
"QueryIpMatching"=dword:00000001

 

by: jennifer_bormanPosted on 2004-05-12 at 21:33:06ID: 11056195

You're going to love this...

   I threw a packet sniffer onto the NIC (onboard).  It was originally arping for my gateway.  No gateway in my network at this time.  I gave it one (a cisco router).  That didn't work.

   I then noticed that it was consistently looking for crl.verisign.com.  Especially when opening MS-Word or MS-Excel.

   Turns out that a Certificate shipped with NAV2003 expires on Jan. 7, 2004.  The mechanism that runs with this breaks to a certain extent and the performance of the PC is prone to dropping like a rock.  Symantec's temporary advice is to disable the "check the Certificate Revocation Listing" online.  I disabled that, and Voila!  All was well.  I will update the Cert. and check further with Symantec and Verisign about this.  Check it out, it's on both Verisign's and Symantec's web-site.

   Veegertx, I am going to award the points to you for the tenacious attack on this problem.  It was all very very appreciated.  Gemarti, I appreciate it as well.  Definitely.

  Feel free to let me know what you think.  Thanks again!

 

by: jennifer_bormanPosted on 2004-05-12 at 21:35:05ID: 11056200

ooo... noticed that I already described the crl thing.  Well, that was it.

 

by: jennifer_bormanPosted on 2004-05-12 at 21:37:00ID: 11056206

P.S.  I graded it "A" because I felt like we were on the right track.  

 

by: VeegertxPosted on 2004-05-13 at 06:16:54ID: 11058819

Good Grief lol
I never knew those thing's could be that bad to cause all that trouble. I gotta copy what you said and put it in my million note's where I don't have anything in order or a clue of what's in there.

jennifer
I would recommend you just get your point's back if you like since you solved on your own.

I'm not a point's hound, I just like helping people when I have time when I take a break from my amateur programming. I usually don't answer unless i think i know something or remember a certain thing I've either seen or read about a particular problem. Its good to learn new thing's BTW, and your's is certainly original to me.

http://maxxpsoft.com/

 

by: jennifer_bormanPosted on 2004-05-13 at 16:34:42ID: 11064282

Hey, it's no problem at all with the points.  I have to admit that I use the payment option and they give all the points you want.  Even if they weren't free, I would award them to you.  I appreciate the thought though.  We were definintely on the right track!

I also admit to having a notes bin.  I need to just bullet-point everything.  

-Jennifer

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...