Delayed display of console window

Hi,

For a few weeks now, I've had a delay of ~5 seconds before the console
window (or command prompt) gets displayed. As I use it a lot, this is
becoming very annoying. This occurs:

- Whenever I start the command prompt from the start menu;
- Whenever I start a batch file by clicking on it--note that executables
started by the batch file do run immediately, although the console
display will be delayed;
- If a console executable is started by any GUI, even if hidden,
symptoms of a delay can be observed (e.g. any other console executable
started during that 5-second delay will be stalled).

I have checked my anti-virus, and it's not the cause (the problem
persists if I disable, or even uninstall it). I have no idea what caused
it; maybe some Windows update, as I could not find any install I would
have done when it started.

I monitored what happened with Process Monitoring and noticed that,
during these seconds, several instances of the processes at the end of
this message occur.

After that, several operations from lsass.exe on HKLM\SECURITY\Policy
take place, and then the console will display.

Does anybody have an idea? Anything you would suggest I look for?

Thanks in advance.

Kind regards,

Raph


svchost.exe 976 RegQueryValue
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\Default
NAME NOT FOUND Length: 44
svchost.exe 976 RegEnumKey
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx} SUCCESS
Index: 0, Name:
##?#IDE#xxxxxx_________________________CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}
svchost.exe 976 RegOpenKey
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}

SUCCESS Desired Access: Read
svchost.exe 976 RegQueryValue
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}\DeviceInstance

SUCCESS Type: REG_SZ, Length: 152, Data:
IDE\xxxxxx_________________________CP100-10\4&2d40dc40&0&0.0.0
svchost.exe 976 RegEnumKey
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}

SUCCESS Index: 0, Name: #
svchost.exe 976 RegOpenKey
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}\#

SUCCESS Desired Access: Read
svchost.exe 976 RegOpenKey
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}\#\Control

SUCCESS Desired Access: Read
svchost.exe 976 RegQueryValue
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}\#\Control\Linked

SUCCESS Type: REG_DWORD, Length: 4, Data: 1
svchost.exe 976 RegCloseKey
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}\#\Control

SUCCESS
svchost.exe 976 RegQueryValue
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}\#\SymbolicLink

SUCCESS Type: REG_SZ, Length: 238, Data:
\\?\IDE#xxxxxx_________________________CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}
svchost.exe 976 RegCloseKey
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}\#

SUCCESS
svchost.exe 976 RegEnumKey
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}

SUCCESS Index: 1, Name: Control
svchost.exe 976 RegOpenKey
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}\Control

SUCCESS Desired Access: Read
svchost.exe 976 RegOpenKey
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}\Control\Control

NAME NOT FOUND Desired Access: Read
svchost.exe 976 RegCloseKey
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}\Control

SUCCESS
svchost.exe 976 RegEnumKey
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}

NO MORE ENTRIES Index: 2, Length: 512
svchost.exe 976 RegCloseKey
HKLM\System\CurrentControlSet\Control\DeviceClasse s\{xxxxxx}\##?#IDE#xxxxxx_________________________ CP100-10#4&2d40dc40&0&0.0.0#{xxxxxx}

SUCCESS

(I replaced several strings with xxxxxx for privacy reasons)