Slow upload speeds help needed.

**XAversionX** · 12-29-09, 05:13 PM

I have contacted my ISP about this issue and they seem clueless. I have changed my modem and router numerous times but cant seem to get a decent upload speed.

If I remember correctly I am supposed to get 5mb down 1.5 up and I am not getting anywhere near that on my upload speed. Downloads seem fine.

I have scanned my computer for: viruses/trojans, malware and spyware and nothing has been found.

My OS is Windows XP.

Any help would be greatly appreciated.

**XAversionX** · 12-29-09, 10:32 PM

Couldnt edit my post, this is what the TCP analyzer gave me from this site;

« SpeedGuide.net TCP Analyzer Results »
Tested on: 12.29.2009 23:30
IP address: 69.124.xxx.xxx
Client OS: Windows XP

TCP options string: 020405b40103030201010402
MSS: 1460
MTU: 1500
TCP Window: 256960 (multiple of MSS)
RWIN Scaling: 2 bits (2^2=4)
Unscaled RWIN : 64240
Recommended RWINs: 64240, 128480, 256960, 513920, 1027840
BDP limit (200ms): 10278kbps (1285KBytes/s)
BDP limit (500ms): 4111kbps (514KBytes/s)
MTU Discovery: ON
TTL: 48
Timestamps: OFF
SACKs: ON
IP ToS: 00000000 (0)

**trogers** · 12-29-09, 11:12 PM

Post a Hijackthis log.

**XAversionX** · 12-30-09, 05:52 AM

Im assuming your talking about Trend Micro's hijackthis: If not please tell me. This is what it came up with;

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:54:28 AM, on 12/30/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O9 - Extra button: HP Clipbook - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Smart Select - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1249509538078
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...Uploader55.cab
O16 - DPF: {A5A76EA0-7B92-4707-9DBF-6F6FE56A6800} (Pure Networks Security Scan) - http://scan.networkmagic.com/nmscan/...ship-WD.V1.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/Optimize3/pcpitstop2.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{80248705-1ED3-455F-842A-6624816DD047}: NameServer = 167.206.251.129,167.206.251.130
O20 - AppInit_DLLs: *DISABLED**DISABLED**DISABLED**DISABLED*
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\WINDOWS\system32\STacSV.exe

--
End of file - 7160 bytes

**trogers** · 12-30-09, 09:25 AM

These two services are probably eating up lots of CPU time:

C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe

Start / Run and in the box type services.msc and press enter/click OK. Go down to Windows Search and double click on it. Stop the service and then disable it from starting.

Use Hijackthis to remove this entry:

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

**XAversionX** · 12-30-09, 05:04 PM

I did both of what you said, uploads moved up to aprox 40kb a sec. Still not the best but a lot better then 1 kb! Thanks.

Anything else I can try?

Also, my windows media player is keeps freezing when I try to enable media sharing, is that because of the files i removed?

**trogers** · 12-30-09, 08:45 PM

Try the following with TCP Optimizer:

General Settings tab:
Custom settings - check
Modify All Network Adapters - check
network adapter selection - your NIC
MTU - 1500
TTL - 64
TCP Receive Window - 128480
MTU Discovery - Yes
Black Hole Detect - No
Selective Acks - Yes
Max Duplicate ACKs - 2
TCP 1323 Options:
Windows Scaling - checked
Timestamps - uncheck

Advanced Settings tab:
Max Connections per Server - 10
Max Connections per 1.0 Server - 10
LocalPriority - 5
Host Priority - 6
DNSPriority - 7
NetbtPriority - 8
Lan Browsing speedup - optimized
QoS: NonBestEffortLimit - 0
ToS: DisableUserTOSSetting - 0
ToS: DefaultTOSValue - 80
MaxNegativeCacheTtl - 0
NetFailureCacheTime - 0
NegativeSOACache Time - 0
LAN Request Buffer Size - 32768

Also, deep scan your comp and ensure it is free from malware.

**XAversionX** · 12-31-09, 02:00 AM

I have scanned my computer again using 'Malwarebytes' and didnt find anything. Any program you might suggest to ensure the comp is clean?

**trogers** · 12-31-09, 04:38 AM

Do a tracert to www.yahoo.com and post.

**XAversionX** · 12-31-09, 03:58 PM

Something is wrong with the Yahoo option so I did Petersen;

Traceroute Output
From www.petersen.net Port Orange, FL, US to 69.124.159.116

--------------------------------------------------------------------------------

traceroute to 69.124.159.116 (69.124.159.116), 128 hops max, 40 byte packets
1 gw (192.168.1.1) 0.708 ms 0.706 ms 1.000 ms
2 * * *
3 gig-7-0-7-103.orldfldlnd-rtr1.cfl.rr.com (24.95.230.20) 10.993 ms 11.315 ms 10.675 ms
4 gig4-0-0.orldflaabv-rtr3.cfl.rr.com (24.95.228.189) 13.169 ms 11.934 ms 11.609 ms
5 77.228.95.24.cfl.res.rr.com (24.95.228.77) 16.759 ms 14.635 ms 20.198 ms
6 ge-1-3-0.cr1.atl20.tbone.rr.com (66.109.6.104) 21.282 ms 20.985 ms 20.035 ms
7 ae-4-0.cr0.dca10.tbone.rr.com (66.109.6.33) 39.380 ms 37.379 ms 48.761 ms
8 ae-0-0.cr0.dca20.tbone.rr.com (66.109.6.31) 42.033 ms 47.772 ms 40.474 ms
9 ae-3-0.cr0.nyc30.tbone.rr.com (66.109.6.29) 51.550 ms 47.195 ms 46.014 ms
10 ae-1-0.pr0.nyc20.tbone.rr.com (66.109.6.163) 43.282 ms 43.763 ms 81.348 ms
11 66.109.9.134 (66.109.9.134) 48.584 ms 47.659 ms 47.337 ms
12 64.15.0.194 (64.15.0.194) 56.852 ms 46.879 ms 46.087 ms
13 rtr2-tg10-1.mhe.whplny.cv.net (64.15.8.30) 127.935 ms 251.878 ms 259.989 ms
14 ool-4353e196.dyn.optonline.net (67.83.225.150) 51.240 ms 51.874 ms 49.210 ms
15 433be01e.cst.lightpath.net (67.59.224.30) 47.180 ms 47.038 ms 46.869 ms
16 * * *
17 * * *
18 * * *
19 * * *

**trogers** · 12-31-09, 04:33 PM

See nothing extraordinary with the ping times.

Is uTorrent running during testing of upload speed?

**XAversionX** · 12-31-09, 08:31 PM

I closed all programs before testing.

**trogers** · 12-31-09, 09:20 PM

Uninstall Pure Network Security Scan and PCPitStop and use Hijackthis to remove the following:

C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

O16 - DPF: {A5A76EA0-7B92-4707-9DBF-6F6FE56A6800} (Pure Networks Security Scan) - http://scan.networkmagic.com/nmscan/...ship-WD.V1.cab

16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/Optimize3/pcpitstop2.dll

O20 - AppInit_DLLs: *DISABLED**DISABLED**DISABLED**DISABLED*

Google Chrome should need only one process entry to work

C:\Documents and Settings\Aversion\Local Settings\Application Data\Google\Chrome\Application\chrome.exe