Improper Uploading Speeds (uTorrent)

[SacredCultivator]

Dear Readers,

I woke up this morning and noticed that my torrents weren't seeding.

Every now and then, the speeds might spike up a bit, last a few seconds and then slowly plummet back to 1kB.

I tested to see if it might be my net, reset modem, ran a speed test, and upload is normal 80kB-ish

So I wasn't too sure what might have caused this, and I was hoping that my ISP (Champion Broadband) didn't decide to throttle, checked the BAD ISP's from Azureus's wiki, and my ISp isnt listed there.

Ran a viruscan with Avira AntiVir Premium, and came up clean.

So I thought I'd post a HiJackThis Log to see if anything there might be the culprit.

(Overnight, my seeding was normal), so I'm not too sure what might have caused the problem overnight, as I didn't install/change anything within that timeframe.

---

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 9:57:25 AM, on 7/26/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\brsvc01a.exe

C:\WINDOWS\system32\brss01a.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir Desktop\sched.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Avira\AntiVir Desktop\avguard.exe

C:\WINDOWS\system32\Brmfrmps.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\NetLimiter 2 Pro\nlsvc.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\NetLimiter 2 Pro\NLClient.exe

C:\Program Files\WallMaster\wallmast.exe

C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\Program Files\Digsby\lib\digsby-app.exe

c:\program files\winamp\winamp.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Chris La\Application Data\uTorrent\uTorrent.exe

C:\Program Files\megui\MeGUI.exe

C:\Program Files\Digsby\lib\aspell\bin\aspell.exe

C:\Documents and Settings\Chris La\Desktop\asdf\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/

O1 - Hosts: 148.244.43.5 www.bancomer.com

O1 - Hosts: 148.244.43.5 bancomer.com

O1 - Hosts: 148.244.43.5 www.bancomer.com.mx

O1 - Hosts: 148.244.43.5 bancomer.com.mx

O1 - Hosts: 148.244.43.5 bbvanet.com.mx

O1 - Hosts: 148.244.43.5 www.bbvanet.com.mx

O1 - Hosts: 192.193.230.100 www.banamex.com.mx

O1 - Hosts: 192.193.230.100 banamex.com.mx

O1 - Hosts: 192.193.230.100 www.banamex.com

O1 - Hosts: 192.193.230.100 banamex.com

O1 - Hosts: 200.57.47.69 see.sbi.com.mx

O1 - Hosts: 200.57.47.69 scotiabank.com.mx

O1 - Hosts: 200.57.47.69 scotiabankinverlat.com

O1 - Hosts: 200.57.47.69 scotiabankinverlat.com.mx

O1 - Hosts: 200.57.47.69 www.see.sbi.com.mx

O1 - Hosts: 200.57.47.69 www.scotiabank.com.mx

O1 - Hosts: 200.57.47.69 www.scotiabankinverlat.com

O1 - Hosts: 200.57.47.69 www.scotiabankinverlat.com.mx

O1 - Hosts: 200.57.47.69 inverweb3.scotiabankinverlat.com

O1 - Hosts: 200.57.47.69 www.inverweb3.scotiabankinverlat.com

O1 - Hosts: 200.76.36.117 bb.com.mx

O1 - Hosts: 200.76.36.117 secure4.bb.com.mx

O1 - Hosts: 200.76.36.117 secure10.bb.com.mx

O1 - Hosts: 200.76.36.117 www.bb.com.mx

O1 - Hosts: 200.76.36.117 www.secure10.bb.com.mx

O1 - Hosts: 200.76.36.117 www.secure4.bb.com.mx

O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - Startup: WallMaster Pro.lnk = C:\Program Files\WallMaster\wallmast.exe

O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1233795727968

O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe

O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe

O23 - Service: NetLimiter (nlsvc) - Locktime Software - C:\Program Files\NetLimiter 2 Pro\nlsvc.exe

--

End of file - 5635 bytes

---

[karachidude]

there might hav been something wrong at the site server to which u were seeding,at the time u noticed.like if folks at piratebay are upgrading or maintaining, that should have effects on seeders,leeches and uploaders.maybe nothings wrong at ur side but the other.

just guessing

[SokraT]

it happens with me sometimes. i try some tweaking and i always give up to another torrent or a direct link.

[SacredCultivator]

hmmm tried other trackers and no luck... So I guess I'll just wait 1 more day and see if anything happens.

As the speeds and stuff are fluctuating to where I'm not 100% sure if it's my end/ ISp's end/ and whatnot... Given that the ISP did say theya re fully functional now.

[shought]

It's probably not something on your end because it happened overnight and as you said you didn't change anything. Do you have a firewall/IP blocker installed, if so could you post their logs?

Also try disabling AV, firewall and any other process that might intervene in any possible way before starting the download(stop it before you close everything, start if after you closed it).

[SacredCultivator]

Not even any firewall/IP blocker, so can't really post any of their logs.

The AV didn't do anything =/

And just curious for my HiJackThis fine?

Been a long while since i've done one and those sites are sorta catching my eyes.

[shought]

Yeah, they caught my attention as well but I checked their IPs and most of them matched(some where outdated though), I'd recommend removing these from your hosts file(you know how to edit your hosts file right?).

I just noticed this:

O23 - Service: NetLimiter (nlsvc) - Locktime Software - C:\Program Files\NetLimiter 2 Pro\nlsvc.exe

[SacredCultivator]

^For the HOsts... which to delete?

As for NetLimiter, I've had it installed for wlel over half a year and never had any problems, and I only use it to limit one program, Share. Not for uTorrent.

So not too sure there...

And NOW, I can 'upload' but then max is 30kB, and I know that still isn't right...

So after today, I might call in a tech.

[shought]

If I were you I'd call your ISP first and ask them if they imply any kind of throttling techniques.

Maybe you could try disabling NetLimiter anyway? Also try turning on 'Protocol encryption' in uTorrent and change the port you're using.

You can remove them all, so all these:

148.244.43.5		  www.bancomer.com
148.244.43.5		  bancomer.com
148.244.43.5		  www.bancomer.com.mx
148.244.43.5		  bancomer.com.mx
148.244.43.5		  bbvanet.com.mx
148.244.43.5		  www.bbvanet.com.mx
192.193.230.100	   www.banamex.com.mx
192.193.230.100	   banamex.com.mx
192.193.230.100	   www.banamex.com
192.193.230.100	   banamex.com
200.57.47.69		  see.sbi.com.mx
200.57.47.69		  scotiabank.com.mx
200.57.47.69		  scotiabankinverlat.com
200.57.47.69		  scotiabankinverlat.com.mx
200.57.47.69		  www.see.sbi.com.mx
200.57.47.69		  www.scotiabank.com.mx
200.57.47.69		  www.scotiabankinverlat.com
200.57.47.69		  www.scotiabankinverlat.com.mx
200.57.47.69		  inverweb3.scotiabankinverlat.com
200.57.47.69		  www.inverweb3.scotiabankinverlat.com
200.76.36.117		 bb.com.mx
200.76.36.117		 secure4.bb.com.mx
200.76.36.117		 secure10.bb.com.mx
200.76.36.117		 www.bb.com.mx
200.76.36.117		 www.secure10.bb.com.mx
200.76.36.117		 www.secure4.bb.com.mx

[SacredCultivator]

Okay deleted them all.

Currently have NetLimiter Disabled

And hmmm I guess I should ask about if they happened to have implemented any new throttling methods.

For uTorrent have always had that 'Protocal Encyrption' enabled and Forced.

EDIT:

I don't know if this matters as I never tried till now...

When I try to "Repair" my connection, it does everything until the end and 'errors' by saying that it couldn't reset the DNS or something... So not too sure if that has always been like that, since i haven't done it till now as I never had problems.

"Windows could not finish repairing the problem because the following action cannot be complted:

Clearing the DNS cache"

[HX1]

The DNS cache could very well have something to do with your problem..

I would try shutting down all of your programs but before shutting down uTorrent, go to Options and General.. then Clear Privacy Data...

Then do a disk clean-up, this will wipe any and all un-necessary temp files you may have in your system.

Then Shutdown, not Reboot...unplug your router, wait a few minutes.. Then plug in your router...and start your system.

There was also a Realtek Network Card update the other night through Microsoft Updates > Custom... so you might ant to check that if you keep having issues. You may also want to update your filters for the program if you have any running or in use.

When you restart your router it will acquire a new IP ( hopefully ) ... IF when you boot your system you do not have Internet, then Repair the connection..( if you have a wireless card, you may have to try repairing it as well, I have had this weird thing going on since I installed VirtualBox between my wireless card and my Lan card.. but it works..LOL )

This should force the DNS Cache to renew, if that doesn't work go into your router and try following the instructions at OpenDNS.com for using them in a router.. If switching your DNS servers doesn't change it then something is locking it.. that shouldn't be.

I would then try a (def)healthy torrent like one for OpenOffice.. and see what kind of speed you get then...

EDIT: Trying 'Enable' instead of 'forced' as well

EDIT2: net.max_halfopen... what is your number there.. ( Advanced>..) and have you ever applied a half-open limiter fix of any kind?

[SacredCultivator]

Thanks for those suggestions as anything I haven't done is helpful, although atm, for uTorrent seems NOW it can ul stably at 30kB, which still isnt' corrected, this applies to other upload sites/ speed tests.

Anyway, shall give your suggestions a try after I finish a few things.

As for my Network card, it isn't realtek, which is sorta out of the ordinary, mines a "Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller'

What 'filters' are you speakin of?

Will switch uTorrent to 'Enable" opposed to 'Forced"

net.max_halfopen is set at 8, and I am not 100% sure if I apply a limiter fix on this PC or not...

---

EDIT:

Okay I was able to find an update to my Network Card, but that did nothing.

Turned off my PC, unplugged / waited a minute and replugged my Router and cable modem.

Turned PC back on and still couldn't repair connection, same ClearDNS error.

Also registered at OpenDNS, and changed ot the DNS Servers they provided, but no difference, and still can't Repair...

Tried ipconfig /flushdns in Command Prompt... and can't because I get the message:

"Windows IP Configuration

Could not flush the DNS Resolver Cache: Function Failed during execution."

Ahh.. I just realize di had the DNS service turned off which caused those errors, but no difference in regard to speeds.

[shought]

There's definitely something wrong with your DNS (cache)...

Try this: http://www.xp-smoker.com/freeware.html (both of them). Do note that any currently installed LSPs might get uninstalled, so you might have to reinstall some programs.

[DKT27]

I had this repair problem for some time. It was the ISP or wrong config of connection, check them both.

[SacredCultivator]

@Shought: Okay applied those two... Have yet to restart, but I can already see how it restores things to default settings as I was checking with TCPOptimizer.

When I'm done with a few things, shall restart my PC to see if there are any changes.

---

EDIT:

Okay that did absolutely nothing, so I just reapplied my TCPOptimizer settings, was worth a try though =/

[shought]

:bag:

Before you restored your old settings you should've checked if you were able to flush your DNS cache(Repair network) now. Could you please check if it does work now(because this application I mentioned did more than change some registry values)?

[Bizarre™]

@Cultivator:

Try this:

1. Click Start > Run > cmd.exe

2. Execute the following commands:

a.) netsh int ip reset resetlog.txt

b.) netsh dump

3. Restart your computer.

[DKT27]

Warning! The above method will reset all of your connection settings, it will also forget your manually config IP in your network connection.

[SacredCultivator]

@Shought: Yes I was able to flush the DNS, that issue was becuase i had the sevice disabled without realizing it.

@Bizarre: Will try that once I finish this download, which seems to be taking a while =P

[Bizarre™]

@DKT27:

That was my intention... a full reset :)

@Cultivator:

If you have any programs that bind themselves to your network connection, I suggest that your reinstall them.

[DKT27]

Back up your config or write it anywhere.

[karachidude]

instead of doin all that,u could back up and do a format and clean installation.Much less time consuming and if that doesnt help,there something wrong at the other side.

just a suggestion.but the information and recommendations by the people are offcourse insightful.

[DKT27]

Don't mind but reinstalling the OS means reinstalling everything and what if the OS didn't created the problem?

[karachidude]

thats what i m sayin.a brand new system insatallation.if that doesnt work problem at the other end.

[SacredCultivator]

Bah, gave up ><, so I ended up scheduling for a Technician to come and look, so I'll update for those that might be interested when they come and report what is causing it.