A couple of weeks ago I downloaded a new msn toolbar and I noticed
that it slowed down my internet connection because web pages weren't
loading as fast. Even after I uninstalled it the websites I usually go
to were loading alot slower than usual. I have tried looking for
spyware with ad-aware and spbot search and destroy and nothing came
up. I even did an anti-virus scan with Norton Anti- Virues 2005 and
still nothing. Finally as a last resort I used my system restore disk
to wipe the hard drive. I expected my computer to run like new but the
connection is still slow. I even tried going to my computer->my
network places->view network connections -> local area
conection->configure ->advanced->link speed and change it from auto
mode to 100 full mode. Even after changing this I tried redownloading
Norton Personal Firewall 2005 and the transfer rate was 4k/sec. I am
running Windows Xp home edition and have dsl. Would it make a
difference if I reinstalled the software from Verizon? What else can I
do??? Please help. |
Request for Question Clarification by
sublime1-ga
on
16 Aug 2005 17:56 PDT
It could have been coincidental that your speed dropped
subsequent to the msn toolbar download. It may just be a
change in the connectivity provided by your ISP. Are you
using a cable modem? What brand? You might just try doing
a hard reset of the cable modem. Are you using a router
as a hardware firewall? Resetting that at the same time
might help as well.
Let me know...
sublime1-ga
|
Request for Question Clarification by
livioflores-ga
on
16 Aug 2005 20:48 PDT
It coulb be a pestware infection on your computer, please, just in
case, colud you post a HijackThis log as a clarification, see for
instructions here:
"HijackThis Tutorial - How to use HijackThis to remove Browser
Hijackers & Spyware":
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42
Specially at this section:
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42#HowToUse
|
Clarification of Question by
whutupbioootch-ga
on
16 Aug 2005 21:15 PDT
I'm using a westell dsl modem that Verizon sent me. I don't believe
it's cable. I'm not using it as a hardware firewall. I turn the modem
off every night - does that count as a 'hard reset'?
|
Clarification of Question by
whutupbioootch-ga
on
16 Aug 2005 21:37 PDT
Logfile of HijackThis v1.99.1
Scan saved at 12:36:25 AM, on 8/17/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\System32\Atiptaxx.exe
C:\WINDOWS\system32\qttask.exe
C:\Program Files\Trend Micro\PC-cillin 2000\Pop3trap.exe
C:\Program Files\Trend Micro\PC-cillin 2000\WebTrapNT.exe
C:\WINDOWS\System32\ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Trend Micro\PC-cillin 2000\PNTIOMON.exe
C:\Program Files\Trend Micro\PC-cillin 2000\pccntupd.exe
C:\Program Files\Apoint\Apntex.exe
c:\progra~1\Support.com\client\bin\tgcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Trend Micro\PC-cillin 2000\Tmntsrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Steven\Desktop\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.msn.co
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.hotmail.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.sony.com/vaiopeople
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
http://www.sony.com/vaiopeople
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://www.sony.com/vaiopeople
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
- C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} -
C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} -
C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKLM\..\Run: [QuickTime Task] C:\WINDOWS\system32\qttask.exe
O4 - HKLM\..\Run: [Pop3trap.exe] "C:\Program Files\Trend
Micro\PC-cillin 2000\Pop3trap.exe"
O4 - HKLM\..\Run: [WebTrapNT.exe] "C:\Program Files\Trend
Micro\PC-cillin 2000\WebTrapNT.exe"
O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program
files\support.com\client\lserver\server.vbs
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Real-time Monitor.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
Office\Office10\OSA.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} -
C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links -
{c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
C:\WINDOWS\System32\Shdocvw.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) -
http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo
Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec
Corporation - C:\Program Files\Common Files\Symantec
Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation
- C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec
Corporation - C:\Program Files\Common Files\Symantec
Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec
Corporation - C:\Program Files\Common Files\Symantec
Shared\ccSetMgr.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec
Corporation - C:\Program Files\Common Files\Symantec
Shared\SNDSrvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation -
C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program
Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Inc.
- C:\Program Files\Trend Micro\PC-cillin 2000\Tmntsrv.exe
|
Request for Question Clarification by
livioflores-ga
on
16 Aug 2005 22:23 PDT
Your HJT log seems to be clean, so the problem is probably due to a
misconfiguration (hardware and/or software) or may be driver related.
|
Request for Question Clarification by
sublime1-ga
on
06 Sep 2005 12:59 PDT
Any progress to report? Did disabling Norton auto-protect have
any effect?
If not, I'd recommend a trip over to DSLreports.com.
Their speed test page can test and verify your download speed:
http://www.dslreports.com/stest
Then use their tweak test page to get feedback on your DSL
connection. They also provide a link to a system tweaker
called DrTCP, and a tutorial on how to use it:
http://www.dslreports.com/tweaks
These tools can possibly help you determine the cause of
your problem. The speed test page is down temporarily,
but will be usable again soon, I'm sure.
Let me know...
sublime1-ga
|