internet speed problems

tiburon · Post by **tiburon** » Wed Nov 24, 2010 7:47 pm

I'm starting to believe that the speed problem with the other
system is that it is not fully supported by Win7

Rocky_Grim · Post by **Rocky_Grim** » Wed Nov 24, 2010 7:53 pm

Yah it seams really weird that the one computer is working correctly, but the other one isn't. Well, I mean it works right in XP, but if you boot into Windows 7 the speed is slow.

The p5ql-em system is working perfectly. Is the TCP Analyzer on the problematic computer still reporting the same results, and the same speeds?

tiburon · Post by **tiburon** » Wed Nov 24, 2010 8:21 pm

getting alot of problems on the system that i did the winsock fix
on. looks like i'm gonna have to do some repair work

Rocky_Grim · Post by **Rocky_Grim** » Wed Nov 24, 2010 8:28 pm

This is weird. There is something fishy taking place on this machine. Using TCP Optimizer or resetting the winsock should not cause problems. I have never had anyone experience any problems from either. Is there anyway you can restore the system to a point that you know for sure works? Then maybe you can try again?

Are you sure you used the Winsock repair batch file and not the WinsockFix for Windows XP on a Windows 7 install?

tiburon · Post by **tiburon** » Wed Nov 24, 2010 8:28 pm

Rocky_Grim wrote:Yah it seams really weird that the one computer is working correctly, but the other one isn't. Well, I mean it works right in XP, but if you boot into Windows 7 the speed is slow.

The p5ql-em system is working perfectly. Is the TCP Analyzer on the problematic computer still reporting the same results, and the same speeds?

yes no real changes. i even took the backup that TCP Optimizer
put on the p5ql-em machine and put it on the p5wd2 machine and that didn't
make and difference.
gonna do a repair on it in the morning and start over

tiburon · Post by **tiburon** » Wed Nov 24, 2010 8:31 pm

Rocky_Grim wrote:This is weird. There is something fishy taking place on this machine. Using TCP Optimizer or resetting the winsock should not cause problems. I have never had anyone experience any problems from either. Is there anyway you can restore the system to a point that you know for sure works? Then maybe you can try again?

funny you should ask. i can't get into system restore but no biggey. i have 12tb
of storage space on another machine and p5wd2 machine is backed up nightly so I'm good.

tiburon · Post by **tiburon** » Wed Nov 24, 2010 8:35 pm

Rocky_Grim wrote:This is weird. There is something fishy taking place on this machine. Using TCP Optimizer or resetting the winsock should not cause problems. I have never had anyone experience any problems from either. Is there anyway you can restore the system to a point that you know for sure works? Then maybe you can try again?

Are you sure you used the Winsock repair batch file and not the WinsockFix for Windows XP on a Windows 7 install?

i will double check as soon as i can get it to boot again ;-)

Rocky_Grim · Post by **Rocky_Grim** » Wed Nov 24, 2010 8:39 pm

Well, sorry this happened I am not sure what caused it. Its a good thing you got a backup. To me it seams something was corrupted on the Windows 7 install. Well, if you are still willing to try to work this out I can try to help you some more tomorrow. I have also sent a private message to some of the other guys that help out here. Hopefully I will hear from one of them tomorrow as well. Once again I am sorry this happened.

Rocky_Grim · Post by **Rocky_Grim** » Wed Nov 24, 2010 8:44 pm

After looking at http://windows7themes.net/winsock-fix-f ... ows-7.html it doesn't have a link to WinsockFix for Xp so you got the right file. At the top of that page it even says its easy for winsock and TCP/IP settings to become corrupt. I think these settings were corrupt to begin with that is why we were unable to correct it.

tiburon · Post by **tiburon** » Wed Nov 24, 2010 8:48 pm

Hell ya this is what its about.
I, like the everybody else wants a top running system with no problems but
what good is it if we can't learn.

I've been working on computers since back
in 1974. been building them since 1985 and can't think of a time when i didn't enjoy every bit of it.
This is what i do in my spare time to relax!! The idea is to see how far we can push the envelope, break it and then fix it.

I love this stuff. Only wish i could get a job doing it.

Rocky_Grim · Post by **Rocky_Grim** » Wed Nov 24, 2010 8:53 pm

Hahaha I hear ya. I love it to. I am 28 I been working on computer since I was about 14. I am always trying to learn something new. I like a good old challenge every once in a while.

tiburon · Post by **tiburon** » Wed Nov 24, 2010 8:57 pm

Hey, thanks for all your efforts. I'll try to keep you posted tomorrow after i
do a restore. Got to do family and turkey so hopefully i can get it done early
in the A.M. catch up with ya then.

Rocky_Grim · Post by **Rocky_Grim** » Wed Nov 24, 2010 9:05 pm

No problem at all. Thanks for your patience. Yeah, I got a busy day tomorrow to. If I am not able to get on in the morning I will be on around this time. Have a good Thanksgiving. See you tomorrow.

Rocky_Grim · Post by **Rocky_Grim** » Thu Nov 25, 2010 11:36 am

I have got some good new for ya. I was misinformed about the TCP Analyzer needing to report RWIN Scaling: 2 bits (2^2=4). RWIN can change with each analyzer test due to auto-tuning.

Due the fallowing on the problematic Windows 7 system.=

Run a online virus scan using Trend Micro HouseCall. Remove any virus or spyware if any is found. Run TCP Optimizer, select optimal, apply, and reboot. Make sure your network card duplex setting is set to auto. If you have a firewall running on the computer temporarily disable it. Turn off anything using your Internet connection. Run a speed test at http://speedtest.comcast.net to the closest location to you. Post your results from the speed test, and turn your firewall back on if you have one. Finally, post one last TCP Analyzer test using Internet Explorer.

tiburon · Post by **tiburon** » Thu Nov 25, 2010 1:36 pm

goodmorning
running the scan now

tiburon · Post by **tiburon** » Thu Nov 25, 2010 2:35 pm

scan finished. found 2 items. did removal.
restarted system, disabled firewall and anti-virus
here are results before running TCP Optimizer

« SpeedGuide.net TCP Analyzer Results »
Tested on: 11.25.2010 14:34
IP address: 174.52.xx.xxx
Client OS: Windows 7

TCP options string: 020405b40103030801010402
MSS: 1460
MTU: 1500
TCP Window: 65536 (NOT multiple of MSS)
RWIN Scaling: 8 bits (2^8=256)
Unscaled RWIN : 256
Recommended RWINs: 64240, 128480, 256960, 513920, 1027840
BDP limit (200ms): 2621kbps (328KBytes/s)
BDP limit (500ms): 1049kbps (131KBytes/s)
MTU Discovery: ON
TTL: 52
Timestamps: OFF
SACKs: ON
IP ToS: 00100000 (32)
Precedence: 001 (priority)
Delay: 0 (normal delay)
Throughput: 0 (normal throughput)
Reliability: 0 (normal reliability)
Cost: 0 (normal cost)
Check bit: 0 (correct)
DSCP (DiffServ): CS1 001000 (8) - class 1 (RFC 2474). Similar forwarding behavior to the ToS Precedence field.

tiburon · Post by **tiburon** » Thu Nov 25, 2010 2:53 pm

ok I applied TCP Optimizer.
here are the results.

« SpeedGuide.net TCP Analyzer Results »
Tested on: 11.25.2010 14:48
IP address: 174.52.xx.xxx
Client OS: Windows 7

TCP options string: 020405b40103030801010402
MSS: 1460
MTU: 1500
TCP Window: 65536 (NOT multiple of MSS)
RWIN Scaling: 8 bits (2^8=256)
Unscaled RWIN : 256
Recommended RWINs: 64240, 128480, 256960, 513920, 1027840
BDP limit (200ms): 2621kbps (328KBytes/s)
BDP limit (500ms): 1049kbps (131KBytes/s)
MTU Discovery: ON
TTL: 52
Timestamps: OFF
SACKs: ON
IP ToS: 00100000 (32)
Precedence: 001 (priority)
Delay: 0 (normal delay)
Throughput: 0 (normal throughput)
Reliability: 0 (normal reliability)
Cost: 0 (normal cost)
Check bit: 0 (correct)
DSCP (DiffServ): CS1 001000 (8) - class 1 (RFC 2474). Similar forwarding behavior to the ToS Precedence field.

i do see an increase in the download speed after the virus scan
and a small increase in the upload speed but the TCP Analyzer results don't
seem to have changed.
what do you think.
i think we are on to something

here are the results from DSLReports tweak test. this may help

1. Your Tweakable SettingsReceive Window (RWIN): 1048064
Window Scaling: 8
Path MTU Discovery: ON
RFC1323 Window Scaling: ON
RFC1323 Time Stamping: OFF
Selective Acks: ON
MSS requested: 1460
TTL: unknown
TTL remaining: 50
TOS flags: none set
2. Test DownloadActual data bytes sent: 901361
Actual data packets: 619
Max packet sent (MTU): 1500
Max packet recd (MTU): 1470
Retransmitted packets: 0
sacks you sent: 0
pushed data pkts: 80
data transmit time: 2.172 secs
our max idletime: 151.4 ms
transfer rate: 370993 bytes/sec
transfer rate: 2967 kbits/sec
transfer efficiency: 100%

tiburon · Post by **tiburon** » Thu Nov 25, 2010 3:16 pm

observation:
i have run several anti virus and anti malware scans on that system
and have not seen a reference to the files that house call has found.

however during the past few weeks while trying to fix the speed problem,
one of the files listed by housecall was showing up at intermittent
times as a glitch when i re-booted the system.
thoughts:
the various tweaks that i have applied have been interacting with
this file and is at least part of the problem.

i have searched various sites for the files found and have not found anything
to show me what they are.

tiburon · Post by **tiburon** » Thu Nov 25, 2010 3:23 pm

i think the next step is to re-run house call with a full scan again
then depending on the results, run the tests then the TCP Optimizer again.
maybe try the winsock repair again.

Rocky_Grim · Post by **Rocky_Grim** » Thu Nov 25, 2010 9:10 pm

Hey,
Sorry I couldn't get back to you sooner. I think we are starting to narrow things down now. It is good to see we are producing results in the right direction. I think it would be a good idea to run another scan with HouseCall. Can you download HiJackThis and post the log here? This will help me be able to see what is all running on your system, and if there is anything harmful or suspicious left. Could you run a speed test at speedtest.net just for comparison? If the computer is connected to a router try to force 100 full duplex. See if that increases your upload speed. As for the TCP Analyzer results, a TCP Window of 65536 suggests your using google chrome? Try running it with IE. Let me know what you figure out.

tiburon · Post by **tiburon** » Fri Nov 26, 2010 7:54 am

Rocky_Grim
I restarted the system this morning.
un-installed two programs that i use for downloading videos from Youtube.
one was Orbiter the other was Xilisoft
turned off some start up items in System Configuration
Cyberlink PowerDVD and associated programs
MSOffice
Adobe acrobat reader and manager
disabled the firewall and anti-virus

opened Firefox (I don't use Chrome and don't have it installed) and ran a speedtest.
Download and Upload speeds were at maximum

I then set System Configuration back to normal startup. re-started computer
and made sure that all anti-virus and firewall were running
and did another speedtest.
Download and Upload speeds were still at top speeds

this was quite a surprise.
I am going to re-install both programs that i un-installed to see if i can re-create the problem and then will post all results.

Edit:
Rather than re-installing the programs I think it might be better to do a system restore point back
to where it was last night when i left off. And then try to re-create the changes I made this morning one by one.
that may be the only way to actually re-create the problem and track down the fix.

tiburon · Post by **tiburon** » Fri Nov 26, 2010 10:31 am

Update:
Tried to do a system restore. after restart system restore was not fully successful.
at this point i did a backup recovery returning the computer back to yesterday morning at
5:41 AM. this should be prior to any virus removal or program un-install.

speedtest using IE 8

TCP Analyzer using IE 8

« SpeedGuide.net TCP Analyzer Results »
Tested on: 11.26.2010 10:30
IP address: 174.52.xx.xxx
Client OS: Windows 7

TCP options string: 020405b40103030801010402
MSS: 1460
MTU: 1500
TCP Window: 65536 (NOT multiple of MSS)
RWIN Scaling: 8 bits (2^8=256)
Unscaled RWIN : 256
Recommended RWINs: 64240, 128480, 256960, 513920, 1027840
BDP limit (200ms): 2621kbps (328KBytes/s)
BDP limit (500ms): 1049kbps (131KBytes/s)
MTU Discovery: ON
TTL: 52
Timestamps: OFF
SACKs: ON
IP ToS: 00100000 (32)
Precedence: 001 (priority)
Delay: 0 (normal delay)
Throughput: 0 (normal throughput)
Reliability: 0 (normal reliability)
Cost: 0 (normal cost)
Check bit: 0 (correct)
DSCP (DiffServ): CS1 001000 (8) - class 1 (RFC 2474). Similar forwarding behavior to the ToS Precedence field.

this shows that the problem now exists

now i am going to run Housecall online anti-virus tool

tiburon · Post by **tiburon** » Fri Nov 26, 2010 10:50 am

performed scan with Haousecall.
results: BSOD followed by system re-boot.

performed another scan with housecall
results: BSOD at the moment that 2 threats were detected

the only file threat i could see was a file named vbanotxt.sys

I am going to try to delete this file then run another scan with Housecall.

tiburon · Post by **tiburon** » Fri Nov 26, 2010 11:49 am

I deleted the file "vaanotxt.sys" then ran another scan with HouseCall and got
another BSOD. after the system re-booted i ran another scan with HouseCall and
did not get a BSOD.

the scan completed and returned with no items detected.

i then ran the following tests with Firefox browser and as expected there was a marked improvement of the download speed and no increase in the upload speed.

also the results of the TCP Analyzer test is showing the
TCP Window at 65536 (NOT multiple of MSS)

I am going to do a restart and if there are any changes I will post them.

« SpeedGuide.net TCP Analyzer Results »
Tested on: 11.26.2010 11:45
IP address: 174.52.xx.xxx
Client OS: Windows 7

TCP options string: 020405b40103030801010402
MSS: 1460
MTU: 1500
TCP Window: 65536 (NOT multiple of MSS)
RWIN Scaling: 8 bits (2^8=256)
Unscaled RWIN : 256
Recommended RWINs: 64240, 128480, 256960, 513920, 1027840
BDP limit (200ms): 2621kbps (328KBytes/s)
BDP limit (500ms): 1049kbps (131KBytes/s)
MTU Discovery: ON
TTL: 52
Timestamps: OFF
SACKs: ON
IP ToS: 00100000 (32)
Precedence: 001 (priority)
Delay: 0 (normal delay)
Throughput: 0 (normal throughput)
Reliability: 0 (normal reliability)
Cost: 0 (normal cost)
Check bit: 0 (correct)
DSCP (DiffServ): CS1 001000 (8) - class 1 (RFC 2474). Similar forwarding behavior to the ToS Precedence field.

tiburon · Post by **tiburon** » Fri Nov 26, 2010 12:11 pm

After the restart I ran a speedtest and TCP Anylizer and was no changes.
i then disabled Xilisoft Download Youtube Toolbar 1.1.3 in Firefox and
ran the speedtest and TCP Analyzer again. there were no changes in either test.

I then re-enabled the Xilisoft add on and disabled OneClick YouTube Downloader 1.0.5
and re ran both tests.

as you can see below, the speedtest has changed with a dramatic increase of the upload speed. Also you can see the results of the TCP Analyzer have changes with a TCP Window value of 65700 (Multiple of MSS)

« SpeedGuide.net TCP Analyzer Results »
Tested on: 11.26.2010 12:08
IP address: 174.52.xx.xxx
Client OS: Windows 7

TCP options string: 020405b40103030201010402
MSS: 1460
MTU: 1500
TCP Window: 65700 (multiple of MSS)
RWIN Scaling: 2 bits (2^2=4)
Unscaled RWIN : 16425
Recommended RWINs: 64240, 128480, 256960, 513920, 1027840
BDP limit (200ms): 2628kbps (329KBytes/s)
BDP limit (500ms): 1051kbps (131KBytes/s)
MTU Discovery: ON
TTL: 52
Timestamps: OFF
SACKs: ON
IP ToS: 00100000 (32)
Precedence: 001 (priority)
Delay: 0 (normal delay)
Throughput: 0 (normal throughput)
Reliability: 0 (normal reliability)
Cost: 0 (normal cost)
Check bit: 0 (correct)
DSCP (DiffServ): CS1 001000 (8) - class 1 (RFC 2474). Similar forwarding behavior to the ToS Precedence field.

tiburon · Post by **tiburon** » Fri Nov 26, 2010 12:23 pm

I am going to take one more step. I wil run TCP Optimizer again, re-boot the system then run the TCP Analyzer
and the speedtest again and post the results

tiburon · Post by **tiburon** » Fri Nov 26, 2010 12:38 pm

Applied TCP Optimizer using optimal settings.
re-booted the system.

Using the Administrator Command Prompt I get the following:

Current settings

C:\Users\dbarker>netsh int tcp show global
Querying active state...

TCP Global Parameters
----------------------------------------------
Receive-Side Scaling State : enabled
Chimney Offload State : enabled
NetDMA State : enabled
Direct Cache Acess (DCA) : enabled
Receive Window Auto-Tuning Level : normal
Add-On Congestion Control Provider : ctcp
ECN Capability : enabled
RFC 1323 Timestamps : disabled

using firefox i got the following results:

« SpeedGuide.net TCP Analyzer Results »
Tested on: 11.26.2010 12:36
IP address: 174.52.xx.xxx
Client OS: Windows 7

TCP options string: 020405b40103030201010402
MSS: 1460
MTU: 1500
TCP Window: 65700 (multiple of MSS)
RWIN Scaling: 2 bits (2^2=4)
Unscaled RWIN : 16425
Recommended RWINs: 64240, 128480, 256960, 513920, 1027840
BDP limit (200ms): 2628kbps (329KBytes/s)
BDP limit (500ms): 1051kbps (131KBytes/s)
MTU Discovery: ON
TTL: 52
Timestamps: OFF
SACKs: ON
IP ToS: 00100000 (32)
Precedence: 001 (priority)
Delay: 0 (normal delay)
Throughput: 0 (normal throughput)
Reliability: 0 (normal reliability)
Cost: 0 (normal cost)
Check bit: 0 (correct)
DSCP (DiffServ): CS1 001000 (8) - class 1 (RFC 2474). Similar forwarding behavior to the ToS Precedence field.

DSLReports tweak test:

1. Your Tweakable Settings
Receive Window (RWIN): 928000
Window Scaling: 8
Path MTU Discovery: ON
RFC1323 Window Scaling: ON
RFC1323 Time Stamping: OFF
Selective Acks: ON
MSS requested: 1460
TTL: unknown
TTL remaining: 50
TOS flags: none set

2. Test Download
Actual data bytes sent: 1025461
Actual data packets: 704
Max packet sent (MTU): 1500
Max packet recd (MTU): 1470
Retransmitted packets: 1
sacks you sent: 0
pushed data pkts: 87
data transmit time: 2.097 secs
our max idletime: 134.5 ms
transfer rate: 439641 bytes/sec
transfer rate: 3517 kbits/sec
transfer efficiency: 99%

tiburon · Post by **tiburon** » Fri Nov 26, 2010 12:41 pm

Ok this is as far as I have gotten. I need some feed back.

Don't forget that part of the problem seems to be 2 files that I found and removed with
Trend Micro HouseCall

Rocky_Grim · Post by **Rocky_Grim** » Sat Nov 27, 2010 1:00 pm

Sorry, I was not able to get back to you sooner. The hollidays prevented me. Your last TCP Analyzer test looks good, and your speeds have returned to normal. Are you still noticing any BSOD? What symptoms are you having now?

tiburon · Post by **tiburon** » Sat Nov 27, 2010 4:26 pm

Howdy,
no everything is running great.
still have some lag when running large BD movies
but that's about it.
all logs are looking clean too.
thanks

Rocky_Grim · Post by **Rocky_Grim** » Sat Nov 27, 2010 5:23 pm

Glad to hear everything is working good. I was getting worried. Let me know if you end up having any other speed related issues. I will keep my fingers crossed.