Articles

My internet loads pages very slow

June 15, 2010 at 15:35:45
Specs: Microsoft Windows XP Professional, 3.79 GHz / 3582 MB

Recently I have been experiencing difficulties loading pages on the internet. This problem occurs on all web-browsers that I had(IE, Firefox, and Google chrome.) It just happen recently for about 3 weeks now, and some days it run normally however on others it's just really slow. I have tried restarting my PC when it was acting slow but that did not solve the problem. This PC has been infected with lots of virus once like Internet Security 2010 but I removed them using MalwareBytes-AntiMalware. However I have seem to lost all my restore points so therefore I do not have a safe restore point I can restore my computer to. I also have a laptop at my house who is sharing the same internet router as my PC but it runs fine so I figured it was my Computer that is the problem not my router. I am using wireless network to connect from my PC to my router. I never have this problems where pages load really slow before so I do not know what do. Please if anyone could help me.

See More: My internet loads pages very slow

Report •


#1
June 15, 2010 at 16:39:36

What does...

http://SpeedTest.net

say your speed is?

Also, can you post a NETSTAT/B report?

http://commandwindows.com/netstat.htm


Report •

#2
June 15, 2010 at 17:53:50

How about starting more basic, do a disc clean up and then a disc defragment.

You have to be a little bit crazy to keep you from going insane.
If all else fails, read instructions.


Report •

#3
June 15, 2010 at 20:11:46

I tried Disk Clean up and Disk Defrag. but they seem didn't fix the problem.

Speed Test Result:
http://www.speedtest.net/result/848...

NETSTAT/B report:

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Cuong>NETSTAT/B

Active Connections

Proto Local Address Foreign Address State PID
TCP cuongxp:32254 s456.sureserver.com:smtp SYN_SENT 2972
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:32255 l1-01.eds.webinmotion.net:smtp SYN_SENT
2972
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:32259 dmx.n2net.net:smtp SYN_SENT 2972
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:32264 pv-in-f27.1e100.net:smtp SYN_SENT 2972
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:32265 ns1.webcraftcs.com:smtp SYN_SENT 2972
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:32266 mail.e-rice.net:smtp SYN_SENT 2972
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:32268 mxl144v2.mxlogic.net:smtp SYN_SENT 2972
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:32269 mail.networksolutionsemail.com:smtp SYN_SENT
2972
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:32270 gw-in-f27.1e100.net:smtp SYN_SENT 2972
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:32272 s7b2.psmtp.com:smtp SYN_SENT 2972
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:32478 mx-ha01.web.de:smtp SYN_SENT 2996
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:31725 ad.ghura.pl:31726 ESTABLISHED 7584
[firefox.exe]

TCP cuongxp:31726 ad.ghura.pl:31725 ESTABLISHED 7584
[firefox.exe]

TCP cuongxp:31733 ad.ghura.pl:31734 ESTABLISHED 7584
[firefox.exe]

TCP cuongxp:31734 ad.ghura.pl:31733 ESTABLISHED 7584
[firefox.exe]

TCP cuongxp:31754 64.191.104.213:21325 ESTABLISHED 2988
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:31771 ip-212-117-165-21.server.lu:5612 ESTABLISHED
2980
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:31984 78.159.121.48:31211 ESTABLISHED 2996
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:32007 78.159.121.48:23113 ESTABLISHED 2972
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\WS2_32.dll
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\kernel32.dll
[svchost.exe]

TCP cuongxp:5152 ad.ghura.pl:31727 CLOSE_WAIT 1752
[jqs.exe]

TCP cuongxp:32477 hosted.by.pacificrack.com:3491 TIME_WAIT
0

C:\Documents and Settings\Cuong>


Report •

Related Solutions

#4
June 16, 2010 at 17:43:00

You have a lot of SMTP ports open to

http://www.robtex.com/dns/mail.netw...

(Which by the way has been black listed)

Do you run an mail server or do you use Outlook or Outlook Express or FireBird or any kind of mail server? Chances are you have it checking your mail too often which is eating up your bandwidth. Try adjusting it a little.

If you DON'T then you may have a hijacked computer that is being used as a mail server for a SPAMMER; then I would suggest running some kind of Virus scan. I like Malwarebyes...

http://www.malwarebytes.org/

Also be aware that 3 Gb/s is not that fast anymore. If this is a Cable modem then you will see that speed drop drastically at peak times like...

8:00 AM
12:00 PM
6:00 PM

Because your neighbors are sharing part of that band width. DSL does not have the same problem but it has problems with speed the further you get from the Main Office.

P.S. You also have ports open with...

http://www.who.is/whois-ip/ip-addre...

http://www.superpages.com/bp/Scrant...

Are you running some kind of monitoring software on your computer. You may have installed the CD that came with your ISP when you subscribed and it installed something on your computer that monitors it. Try uninstalling if that is the case.

P.S.S.

You are also connected to...

http://www.robtex.com/dns/hosted.by...

Which is not black listed but the fact that it has the word CRAK in the name is not a good sign.


Report •

#5
June 17, 2010 at 10:25:23

I have ran scan with MBAM but it found no malicious items.

Then by googling a bit I found SUPERAntiSpyware and I ran a full scan with that. The results of the scan found lots of tracking cookies and trojans. However, I did not remove it because I want to see if these were what affecting my Computer. Once I know for sure then I will remove them either manual or using SUPERAntiSpyware. Here are the screenshots of what I found in SAS:


http://img401.imageshack.us/i/69469...

http://img717.imageshack.us/i/21244...

http://img824.imageshack.us/i/52446...

PS: The last link is the path to the first item found by SAS, it got cut off when I was taking the screenshot.

Please see if these are any harmful items and tips on how to remove them permanently. I greatly Thank you all for all your help.


Report •

#6
June 17, 2010 at 12:24:38

Have no idea. You may want to post this to the Security forum. They would know.

I still think your major problem is your ISP has monitoring software on it. Uninstall any of the stuff your ISP may have had you install when you first got setup.


Report •

#7
June 18, 2010 at 15:26:39

The cookies are no big deal, but they can be cleared from within your browser if you wish.

Trojans are much more worrying and manual removals can be risky - it is rarely just one file. If SAS can remove them I would let it. Otherwise you need to Google the trojan name and see if there is anything out there designed to remove it (or offers a full manual procedure).

The S&V forum is a good place to ask, as already given.


Google is NOT the only Search Engine!


Report •

#8
June 18, 2010 at 20:50:16

Apparently what you have been using as a full time antivirus program is not sufficient. Remove everything that the recommended programs can and rescan with a few more just to be sure. After this, uninstall any program you do not specifically use in add/remove programs. Install Process Explorer (from microsoft) so you can see everything that is running on your system (in more detail than with Task Manager) so you have more control over your system. Then replace you antivirus program with a more reliable program and keep it up to date (save Malwarebytes and SuperAntiSpyware for spot checks).
As above, if you are not sure you have removed the Trojans completely, go to the antivirus forum for additional help (or delete the partition completely and begin reinstalling everything from scratch --- usually a last resort though)

You have to be a little bit crazy to keep you from going insane.
If all else fails, read instructions.


Report •


Ask Question