|You could use msinfo or msinfo32 to see what is started or go to sysinternals for some special apps to diag it or try using the performance monitor log to get more data. |
Might be more simple to do go back to OEM state with a clean install. The install some good protection suite, update all service packs and use only a standard/limited user account. Follow that with a good hosts file and then create a image of the good start point.
1/3 of highway deaths are caused by drunks. The rest are by people who can't drive any better than a drunk.