Page 1 of 1

Please Check my Settings

Posted: Fri Apr 30, 2010 11:29 pm
by MCpoolish
« SpeedGuide.net TCP Analyzer Results »
Tested on: 04.30.2010 23:25
IP address: 203.87.xxx.xx
Client OS: Windows XP

TCP options string: 020405b4010303010101080a000000000000000001010402
MSS: 1460
MTU: 1500
TCP Window: 128480 (multiple of MSS)
RWIN Scaling: 1 bits (2^1=2)
Unscaled RWIN : 64240
Recommended RWINs: 64240, 128480, 256960, 513920, 1027840
BDP limit (200ms): 5139kbps (642KBytes/s)
BDP limit (500ms): 2056kbps (257KBytes/s)
MTU Discovery: ON
TTL: 43
Timestamps: ON
SACKs: ON
IP ToS: 00000000 (0)


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:20:25 AM, on 5/1/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\GetRight\GetRight.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtblfs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: GetRight.lnk = C:\Program Files\GetRight\GetRight.exe
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O8 - Extra context menu item: Download with GetRight Pro - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Pro Browser - C:\Program Files\GetRight\GRbrowse.htm
O9 - Extra button: &Virtual keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O20 - AppInit_DLLs: ,C:\DOCUME~1\ALLUSE~1\AVP9\mzvkbd3.dll,C:\DOCUME~1\ALLUSE~1\AVP9\kloehk.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe

--
End of file - 5056 bytes


Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Home>tracert http://www.yahoo.com

Tracing route to any-fp.wa1.b.yahoo.com [209.191.122.70]
over a maximum of 30 hops:

1 9 ms 6 ms 9 ms 192.168.224.1
2 73 ms 82 ms 56 ms 203.87.204.69
3 51 ms 9 ms 21 ms 121.1.4.241
4 20 ms 19 ms 31 ms 121.54.9.154
5 49 ms 63 ms 76 ms 203.111.226.42
6 81 ms 29 ms 56 ms 203.111.226.41
7 79 ms 32 ms 46 ms 119.92.129.109.static.pldt.net [119.92.129.109]

8 56 ms 26 ms 19 ms 58.71.0.158
9 258 ms 211 ms 200 ms if-15-0.mcore3.LAA-LosAngeles.as6453.net [216.6.
84.25]
10 316 ms 281 ms 386 ms if-3-0-0-926.core1.dtx-dallas.as6453.net [216.6.
53.21]
11 279 ms 369 ms 376 ms ix-5-0.core1.DTX-Dallas.as6453.net [216.6.53.2]

12 440 ms 480 ms 394 ms ae2-p100.msr1.mud.yahoo.com [216.115.104.105]
13 448 ms 426 ms 424 ms te-7-1.fab2-a-gdc.mud.yahoo.com [209.191.78.139]

14 384 ms 426 ms 426 ms UNKNOWN-209-191-78-175.yahoo.com [209.191.78.175
]
15 352 ms 334 ms 313 ms ir1.fp.vip.mud.yahoo.com [209.191.122.70]

Trace complete.

C:\Documents and Settings\Home>


Image


I pay for 2mbps

Posted: Sat May 01, 2010 12:10 am
by Rollingstone
1 9 ms 6 ms 9 ms 192.168.224.1
2 73 ms 82 ms 56 ms 203.87.204.69
3 51 ms 9 ms 21 ms 121.1.4.241
4 20 ms 19 ms 31 ms 121.54.9.154
5 49 ms 63 ms 76 ms 203.111.226.42
6 81 ms 29 ms 56 ms 203.111.226.41
7 79 ms 32 ms 46 ms 119.92.129.109.static.pldt.net [119.92.129.109]

8 56 ms 26 ms 19 ms 58.71.0.158
9 258 ms 211 ms 200 ms if-15-0.mcore3.LAA-LosAngeles.as6453.net [216.6.
84.25]
10 316 ms 281 ms 386 ms if-3-0-0-926.core1.dtx-dallas.as6453.net [216.6.
53.21]
11 279 ms 369 ms 376 ms ix-5-0.core1.DTX-Dallas.as6453.net [216.6.53.2]

12 440 ms 480 ms 394 ms ae2-p100.msr1.mud.yahoo.com [216.115.104.105]
13 448 ms 426 ms 424 ms te-7-1.fab2-a-gdc.mud.yahoo.com [209.191.78.139]

14 384 ms 426 ms 426 ms UNKNOWN-209-191-78-175.yahoo.com [209.191.78.175
]
15 352 ms 334 ms 313 ms ir1.fp.vip.mud.yahoo.com [209.191.122.70]
How to read tracert :

Hop 1 : shows signals between modem & PC, It should be 1ms 1ms 1ms ! Higher or occur * or Request timed out=> not good !

Hop 2: shows signals between modem & ISP It should range from 10 to 40 ms ! Higher or occur * or Request timed out => not good !

From Hop 3 to trace complete : ISP Network Signals, * or Request timed out => Not Good !

How to fix Hop 1 & 2 issue :

+Turn off modem/router for 10 minutes, relocate them to some place that are a few feet away from ALL other electrical devices, including apart from each other.Also, make sure you do not coil up any excess length of signal or power cables.

Then do a tracert again ! Hope this helps !

If not :

Do a full scan for malware/spyware with :

Ad-aware
Spybot Search & Destroy
Superantispyware

Posted: Sat May 01, 2010 5:01 pm
by MCpoolish
Rollingstone wrote:How to read tracert :

Hop 1 : shows signals between modem & PC, It should be 1ms 1ms 1ms ! Higher or occur * or Request timed out=> not good !

Hop 2: shows signals between modem & ISP It should range from 10 to 40 ms ! Higher or occur * or Request timed out => not good !

From Hop 3 to trace complete : ISP Network Signals, * or Request timed out => Not Good !

How to fix Hop 1 & 2 issue :

+Turn off modem/router for 10 minutes, relocate them to some place that are a few feet away from ALL other electrical devices, including apart from each other.Also, make sure you do not coil up any excess length of signal or power cables.

Then do a tracert again ! Hope this helps !

If not :

Do a full scan for malware/spyware with :

Ad-aware
Spybot Search & Destroy
Superantispyware
I did already full scan. No spyware/malware or whatsoever detected in my comp.

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Home>tracert http://www.yahoo.com

Tracing route to any-fp.wa1.b.yahoo.com [209.191.122.70]
over a maximum of 30 hops:

1 * * * Request timed out.
2 10 ms 16 ms 11 ms 203.87.204.69
3 7 ms 11 ms 11 ms 121.1.4.241
4 11 ms 9 ms 11 ms 121.54.9.154
5 11 ms 9 ms 14 ms 203.87.132.130
6 14 ms 8 ms 19 ms 203.111.226.41
7 10 ms 24 ms 16 ms 119.92.129.109.static.pldt.net [119.92.129.109]

8 8 ms 9 ms 11 ms 58.71.0.158
9 205 ms 209 ms 209 ms if-15-0.mcore3.laa-losangeles.as6453.net [216.6.
84.25]
10 236 ms 236 ms 238 ms if-3-0-0-926.core1.dtx-dallas.as6453.net [216.6.
53.21]
11 279 ms 276 ms 291 ms ix-5-0.core1.dtx-dallas.as6453.net [216.6.53.2]

12 266 ms 264 ms 271 ms ae2-p100.msr1.mud.yahoo.com [216.115.104.105]
13 283 ms 274 ms 276 ms te-9-2.fab1-a-gdc.mud.yahoo.com [209.191.78.151]

14 284 ms 279 ms 270 ms UNKNOWN-209-191-78-171.yahoo.com [209.191.78.171
]
15 265 ms 291 ms 279 ms ir1.fp.vip.mud.yahoo.com [209.191.122.70]

Trace complete.

WEB100 Enabled Statistics:
Checking for Middleboxes . . . . . . . . . . . . . . . . . . Done
checking for firewalls . . . . . . . . . . . . . . . . . . . Done
running 10s outbound test (client-to-server [C2S]) . . . . . 283.0kb/s
running 10s inbound test (server-to-client [S2C]) . . . . . . 400.57kb/s

------ Client System Details ------
OS data: Name = Windows XP, Architecture = x86, Version = 5.1
Java data: Vendor = Sun Microsystems Inc., Version = 1.6.0_16

------ Web100 Detailed Analysis ------
Cable modem/DSL/T1 link found.
Link set to Full Duplex mode
No network congestion discovered.
Good network cable(s) found
Normal duplex operation found.

Web100 reports the Round trip time = 203.41 msec; the Packet size = 1460 Bytes; and
There were 8 packets retransmitted, 81 duplicate acks received, and 88 SACK blocks received
The connection was idle 0 seconds (0%) of the time
S2C throughput test: Packet queuing detected: 7.48%
This connection is receiver limited 7.67% of the time.
Increasing the the client's receive buffer (17.0 KB) will improve performance
This connection is network limited 92.13% of the time.
Excessive packet loss is impacting your performance, check the auto-negotiate function on your local PC and network switch

Web100 reports TCP negotiated the optional Performance Settings to:
RFC 2018 Selective Acknowledgment: ON
RFC 896 Nagle Algorithm: ON
RFC 3168 Explicit Congestion Notification: OFF
RFC 1323 Time Stamping: OFF
RFC 1323 Window Scaling: OFF

Server 'nitro.ucsc.edu' is not behind a firewall. [Connection to the ephemeral port was successful]
Client is probably behind a firewall. [Connection to the ephemeral port failed]
Packet size is preserved End-to-End
Server IP addresses are preserved End-to-End
Information: Network Address Translation (NAT) box is modifying the Client's IP address
Server says [203.87.xxx.xxx] but Client says [192.168.xxx.xxx]


C:\Documents and Settings\Home>

Image

Image

very confusing o_o

Posted: Sat May 01, 2010 11:40 pm
by Rollingstone
How about modem/router position ?

Log into modem/router & check Downstream rate !

Posted: Sun May 02, 2010 8:39 am
by MCpoolish
Rollingstone wrote:How about modem/router position ?

Log into modem/router & check Downstream rate !
don't have modem. It's a Motorola Canopy Antenna :)

Oh btw I used cable nuts. Is this Ok?

Download: 2000kbps
Upload: 256kbps
Latency: 500ms
MTU: 1500
DefaultReceiveWindow =
DefaultSendWindow =
DisableAddressSharing = 1
InitialLargeBufferCount = 200
InitialMediumBufferCount = 480
InitialSmallBufferCount = 640
LargeBufferSize = 819200
MaxFastTransmit = 64000
MediumBufferSize = 150400
Priority Boost = 0
SmallBufferSize = 12800
TransmitWorker = 32
FastSendDatagramThreshhold = 4096
EnableFastRouteLookup = 1
EnablePMTUDiscovery = 1
IgnorePushBitsOnReceives = 0
GlobalMaxTcpWindowSize =
MaxFreeTcbs = 8000
MaxHashTableSize = 16384
MaxNormLookupMemory = 5000000
SackOpts = 1
SynAttackProtect = 1
Tcp1323Opts = 1
TcpLogLevel = 1
TcpMaxDupAttacks = 3
TcpMaxHalfOpen = 100
TcpMaxHalfOpenRetired = 80
TcpRecvSegmentSize = 1460
TcpSendSegmentSize = 1460
TcpTimedWaitDelay = 30
TcpUseRFC1122UrgentPointer = 0
TcpWindowSize =
MaxConnectionsPer1_0Server = 10
MaxConnectionsPerServer = 8
DefaultTimeToLive =
DefaultUserTOSSetting =
TcpMaxDataRetransmissions = 6
DefaultTOSValue =

Other Options are Blank.

« SpeedGuide.net TCP Analyzer Results »
Tested on: 05.02.2010 08:45
IP address: 203.87.xxx.xx
Client OS: Windows XP

TCP options string: 020405b40103030001010402
MSS: 1460
MTU: 1500
TCP Window: 17520 (multiple of MSS)
RWIN Scaling: 0 bits
Unscaled RWIN : 17520
Recommended RWINs: 64240, 128480, 256960, 513920, 1027840
BDP limit (200ms): 701kbps (88KBytes/s)
BDP limit (500ms): 280kbps (35KBytes/s)
MTU Discovery: ON
TTL: 107
Timestamps: OFF
SACKs: ON
IP ToS: 00000000 (0)

Posted: Sun May 02, 2010 9:03 am
by Rollingstone
TCP Window: 17520 (multiple of MSS)
Should be 128480 !

Enter value:
DefaultReceiveWindow = 128480

Posted: Sun May 02, 2010 3:28 pm
by MCpoolish
Rollingstone wrote:Should be 128480 !

Enter value:
Ok. One more thing. My speedtest shows that i got 1.6mbps connection. But the thing is that my download speed seems to be too slow? I only got 50~70kb/s max. it should be arround 200 right?

Posted: Sun May 02, 2010 11:29 pm
by Rollingstone
I only got 50~70kb/s max. it should be arround 200 right?
Try other servers like Mediafire , RS or MU !

Posted: Mon May 03, 2010 4:25 am
by MCpoolish
Rollingstone wrote:Try other servers like Mediafire , RS or MU !
yeah i did. same speed still.Most of the files I downloaded is from MU or RS sometimes Mediafire. I use the firefox default download manager.

Posted: Mon May 03, 2010 5:20 am
by Rollingstone
I use the firefox default download manager.
How about IDM ?

Posted: Mon May 03, 2010 6:43 pm
by MCpoolish
Rollingstone wrote:How about IDM ?
I just want to ask if do Half Open Limit can do help about this? And what numbers should I put in?

Posted: Mon May 03, 2010 10:08 pm
by Rollingstone
Try 100 !
Canopy Antenna
Strong Signal ? Not sure !

Posted: Tue May 04, 2010 5:07 am
by MCpoolish
Rollingstone wrote:Try 100 !



Strong Signal ? Not sure !
I check my Antenna and it says 2~3 Jitter. Is it good? or bad? BTW i used IDM now and check my download speed. I got 140kbps~160kpbs Max HalfOpenLimit set to 50.