Member Avatar for jaishankar

Hello guys iam using a 256 kbps dsl broadband connection, but still its very slow, the pages take one min to load, i think the reason for this is the process running in the background, i have scanned my system with hijackthis and iam posting the results. Could any one help in finding out the suspicious entries and the way to remove them i could i disable all the automatic updates. Iam using windows xp sp2 with mcafee antivirus 2005

Logfile of HijackThis v1.99.1
Scan saved at 4:20:13 PM, on 11/22/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Jai Shankar\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat

7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat

7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat

7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\RunOnce: [washindex] C:\Program Files\Washer\washidx.exe "Jai Shankar"
O4 - HKCU\..\RunOnce: [washindex] C:\Program Files\Washer\washidx.exe "Jai Shankar"
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat

7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat

7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat

7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat

7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat

7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat

7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat

7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat

7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} -

C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) -

http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,90/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -


O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) -

http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,23/mcgdmgr.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{66F63C3B-171A-4971-BC6E-20BC86CF6491}: NameServer =
O17 - HKLM\System\CS1\Services\Tcpip\..\{66F63C3B-171A-4971-BC6E-20BC86CF6491}: NameServer =
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner -

%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

  • 3 Contributors
  • 5 Replies
  • 292 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by chrisbliss18

Dani AI

Generated

A compact, practical checklist that ties together the suggestions already posted by and and gives safe next steps for ’s slow-DSL / HijackThis situation.

Start by separating line vs. PC problems: reboot the modem and the PC, connect the computer directly to the modem (no router), and run an external speed/latency test to get a baseline. Record the modem’s sync rate and any signal metrics shown on its status page. If the line metrics look healthy but throughput is still poor, the problem is almost certainly on the PC or in the network stack rather than the ISP wiring.

On the PC, gather precise evidence before removing anything. Basic useful checks include watching network I/O over time, listing active TCP connections and owning processes, and mapping a suspicious PID back to an executable. Useful built‑in commands (run from an elevated prompt) are:

netstat -ano
tasklist /FI "PID eq <pid>"
netsh winsock reset

Supplement these with Process Explorer or TCPView for clearer process/connection views. If third‑party network hooks, packet‑capture services, or download managers are present and not intentionally installed, temporarily disable or uninstall them, then reboot and retest. If Winsock/LSP problems are suspected, a winsock reset is a safe, low‑impact fix (backup and restore point first).

For HijackThis items: create a System Restore point and registry backup before altering startup keys or services. Use Safe Mode + offline/full AV and anti‑malware scans for cleanup; reserve manual HijackThis removals for entries identified confidently by experienced removal guides or forum experts. Automatic updates should not be disabled entirely — configure Windows and antivirus updates to notify or run on a schedule so definitions and security patches remain current while avoiding unexpected background traffic.

Recommended Answers

All 5 Replies

Member Avatar for w1r3sp33d

I have worked on some 128k and 256k DSL lines that were quite slow. You might want to set your MTU to 1492 and see if it helps with the speed.

Also, I would pull up Windows Task Manager and watch your network utilization while your PC is idle. How much traffic are you sending?

Member Avatar for jaishankar

I have worked on some 128k and 256k DSL lines that were quite slow. You might want to set your MTU to 1492 and see if it helps with the speed.

Also, I would pull up Windows Task Manager and watch your network utilization while your PC is idle. How much traffic are you sending?

Sir, can u b some more clear, wat is mtu were can i find this in windows. As per the traffic, when iam not browsing, its sending 103950 bytes and receiving 362933 bytes per min

Member Avatar for chrisbliss18

First, you need to make sure that you have installed the line filters on all of your phone jacks that have phones plugged into them and on the line that goes to your modem. Make sure that all the phone cords are connected to the correct port on the filter.

Next, I recommend stopping by Broadband Reports and running their and their Tweak Test. The Speed Test will test your connection speed and report any potential issues. The Tweak Test will recommend modificiations you can make to potentially improve your connection's performance and will tell you how to make those modifications.

Finally, it is possible that your line was not properly set up. Call your ISP and report that you are not getting high-speed throughput. Ask them to run a diagnosis on the line and to send someone out to test your setup and connections if they don't find a problem on the line. Be aware that, depending on who your ISP is, you may be charged for this service. I have DSL with SBC, and all the service call charges are covered under my contract.

Member Avatar for jaishankar

First, you need to make sure that you have installed the line filters on all of your phone jacks that have phones plugged into them and on the line that goes to your modem. Make sure that all the phone cords are connected to the correct port on the filter.

Next, I recommend stopping by Broadband Reports and running their and their Tweak Test. The Speed Test will test your connection speed and report any potential issues. The Tweak Test will recommend modificiations you can make to potentially improve your connection's performance and will tell you how to make those modifications.

Finally, it is possible that your line was not properly set up. Call your ISP and report that you are not getting high-speed throughput. Ask them to run a diagnosis on the line and to send someone out to test your setup and connections if they don't find a problem on the line. Be aware that, depending on who your ISP is, you may be charged for this service. I have DSL with SBC, and all the service call charges are covered under my contract.

Thanx Chrisbliss 18, i have tried clicking on the links of broadband report, speed test, and tweak test, but iam getin this messg

Tue Nov 22 18:43:16 EST 2005
==================================================
is offline right now.

Hardware gremlins, bad drive, hot-swap was 'hot freeze scsi bus'
and now we're running a long consistency check.

Tue Nov 22 20:38:10 EST 2005

ok, this is taking much longer than expected. Online again later
tonight, maybe MUCH later!

---
Did you ever want to write like a journalist? Now you can!
Check out these English exercises
You will become disillusioned with the quality of mainstream news
grammar in no time!

.. and - here? is, some! punctuation: fun!

Member Avatar for chrisbliss18

Try going to the site again. It seems to be back up and running.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.