| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 87911 | 2008-03-08 22:45:00 | BitComet download problem. (TCP/IP Half-OpenConnection) | gza (13233) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 647467 | 2008-03-08 22:45:00 | Unable to change the half open connection with the BitComet v0.93. I rolled back to 0.93 from 0.99 as 0.99 doesn't have Torrent Portal & 0.99 was playing up same as o.93 is. I am only getting a half percent (about 5MB) of download over night 96Hours). I figured out that it was the TCP/IP Half open setting that is part of WinXP SP2 & this is verified in "Computer Management>Event Viewer>System " where I'm told " TCP/IP has reached the security limit imposed on the concurrent TCP connect attempts". I was able to change this number from 10 to 50 or whatever number, but cannot do it now.When I open BitComet 'Preferences' & go to alter the settings which I set weeks ago,at 200, I'm informed that "This version of TCPIP.SYS is not supported to be modified". The TCPIP.SYS Version I am using is 5.1.2600.3244 I tried installing a tool (EvID) from BitCommet webpage that was meant to allow the changes & speed up ones downloads. It did eff all & as itwas found by my AV's & Spyware tools to be known as "HackTool.EVID" or "HackTool.AB", "Appl/Tool.EvID4226.A" to be a High risk trojan & Keylogger, I gave it the order of the boot. Long story.... anyone have any info to assist my getting back to a decent download speed ? Much obliged. HP Compaq Presario S3010AN AMD XP2000+ 1.67GHz WXP Pro SP2 768 MB DDR PC2100 |
gza (13233) | ||
| 647468 | 2008-03-08 23:00:00 | ps. I feel that I shouldn't have to alter the settings. I was not having any problems with downloading with the TCP/IP settings at 50 Concurrent Connections. Never had it stop downloading at all. I have recently installed My XP Media centre OS and wonder if this OS might have something to do with the problem. Can't see why it should. |
gza (13233) | ||
| 647469 | 2008-03-08 23:13:00 | SP2 updates TCPIP.SYS to allow less half open connections as a security measure Instructions and the proper patch can be found here www.speedguide.net That one shouldn't give any problems with your AV, if it does, just ignore it - because: Recent false virus-notifications Some AntiVir Software vendors added the patcher into their virus-definitions. The patcher is often detected as 'Tool/EvID'. But as a first info: The patcher ist NO VIRUS. Some virus and trojanwriter uses the same technique to increase the limit. After that its easier for them to spread to other computers in the internet. This runs without knowledge of the user. So he is not informed about what's going on. With the patcher here, every user can decide on his own if he wants to change the file and if yes how high the limit should be. Also the user will be warned if he chooses to high limits, as already infected machines will spread existent viruses and trojans easier to the net. So everybody can choose on its own and is not forced to. The patcher itself does not contain malware. The virus-notification therefore should be seen as an information that this program contains the functionality to increase the limit. If that program is not known or has not been installed you can delete it. I hope I have answered some questions. LvlLord BitComet is horrible though, last time I went near it there were ads and crap all over the place. using uTorrent now, and I would never go back |
Agent_24 (57) | ||
| 647470 | 2008-03-09 01:36:00 | Very good tool - used it quite a number of times on different machines :) After you have set the # to 50 (or more) and exited, windows will probably warn you ... Windows File Protection Files that are required for Windows to run properly have been replaced by unrecognized versions. To maintain system stability, Windows must restore the original versions of these files. Insert your BLA BLA Hit the cancel on this... Even then Windows will say again "Are you sure you want to keep these unrecognised etc etc and more M$ dribble " Click "yes I want to keep the friggin thing - now go away" button and finally Bill will stop hassling you about it :) |
bevy121 (117) | ||
| 647471 | 2008-03-09 10:07:00 | Thanks guys. I re-got the patcher & installed it twice, once to change the limit to '10' which didn't change anything in the half-Open connections so I installed again and chose '100', this time I received the MS pop-ups that bevy121 mentions and followed instructions, alas, still no change: same thing, "This version of TCPIP.SYS is not supported to be modified". I read on the same webpage ( www.speedguide.net ) a method of manually changing the tcpip using a 'Hex Editor'. New to me, I'll get the 'Editor' but not try it immediately. I'm thinking that I will uninstall/re-install BitComet and see if this accomplishes my task. If not I'll try another BitTorrent program. BitComet is the only one I've used past 2-3 years & haven't had a prob till last two days. A year or so ago, I tried the then latest releases of 'Azuerus' and 'ABC', the latter recommended to me by a tech from 'Whoosh",for its ease of use. Unfortunately, I couldn't get to grips with either of them so I stuck with what I knew. I read some bad reports on 'BC' back then but "rather the devil...." etc. "uTorrent" ? might give it a look. I'll definately not tinker with the Hex Editor. just yet. Thanks for your help. gza |
gza (13233) | ||
| 647472 | 2008-03-09 11:17:00 | Hmm thats strange - I have all MS updates and Im on XP Pro as well, but I have no probs with LvlLord's patcher. I've just changed my max half open connections again twice to check it! OK then Here's a tool to try - just tried it myself, works well and much simpler to do :) Download xp-AntiSpy Setup (xp-antispy.org) and install it (it's under half a meg) Run it and you'll see 3 tabs at the top Select "Special" and then "Connection limit" After you click "OK I got it" to the warning - you will see what your current 3 settings are. 1. build (mine is 3244 which is the newer one I think) 2. Already patched (Yes or No) 3 . Max Connections (mine=100) If it's not already patched, the "Patch" button will be clickable. Set the number you want first, then click it! Reboot, and run it again and see what it says now |
bevy121 (117) | ||
| 647473 | 2008-03-09 22:37:00 | bevy121 sorry I'm half day late replying. I didn't expect a reply that time of night. I will download & try the program you mention and post the result shortly. I haven't had a new mention in Com. Management>Event Viewer>System about the TCP/IP connection since I started running BitComet about 12.30am last night. There were 3 consecutive mentions of it yesterday morning, @ 5, 8 & 9am. Maybe may turning computer off during the day reset the connection count. Probably not. Anyway, I'll get on with the " xp_ AntiSpy Setup" business and post a report. cheers |
gza (13233) | ||
| 647474 | 2008-03-09 23:38:00 | Well I did all the things you mentioned, results are- Build - 3244 Already Patched - Yes Max. Connections - 100 Offset - 0x04f6a2 So I figure that the re-install/run of EvID4226 has done the change as was said last night during the command Prompts to change the TCPIP limits. Strange how I still get the " This version of TCPIP is not supported to be modified" in the 'Current Half-Open Limit' box & that the 'New Half-Open Limit' box where one can change the number of connection limit, is grayed out & unusable. Still no warning in event viewer for TCPIP. That's a good sign. Spyware Doctor was the only security measure in my com to raise an alert when I went to install EvID4226 last night. In fact it was the only thing to find & make a mention of it. Avast4 Pro, SpyBot S&D, & Trojan Remover not a whisper. My com is fully updated with MS and all else. I did a search for tcpip.sys and there are 4 files in C:WINDOWS/System32/Drivers for it. tcpip C:\WINDOWS\$NTUninstallKB941644$ TCPIP C:\WINDOWS\system32\drivers (MS: 8/5/2004 TCPIP.SYS C:\WINDOWS\SYSTEM32\drivers (2/23/2008, ORIGINAL)(?) tcpip C:\WINDOWS\$hf_mig$\KB941664\SP2QFE There's also another one: tcpip6(IPv6 driver, MS protocol driver 8/5/2004. Uninstall tempts. haha Patches? no worries, there's enough in this box for Elastoplast to consider me to be a serious competitor! ;) Thanks for your help gza |
gza (13233) | ||
| 647475 | 2008-03-09 23:48:00 | Its probably spyware doctor thats screwing things up . It can block things writing to the registry and it also conflicts with some programs . As Agent said that patch isnt a virus, I've used that same patch on these, with the latest tcpip . sys update, no prob at all . I've changed it to 300 not 100 . That patch, if you havent figured it out makes a copy of the original tcpip . sys file . Thats why you'll see original when you do a search for tcpip . sys (its the original non-patched tcpip . sys file) . The first folder you posted will be the uninstall for the tcpip . sys update (3244) . |
Speedy Gonzales (78) | ||
| 647476 | 2008-03-10 00:40:00 | Ah as I suspected might be the case - LvlLord's patch did do the job! :) Good to be able to check that with xp-AntiSpy tho - at least you know for sure now. PS - After aplying LvlLord's patch the machine needs to be rebooted before the new Max Connection limit takes effect - that may have been why. Did you rebbot after doing it yesterday? Great to see you got it sorted in the end. :thumbs: |
bevy121 (117) | ||
| 1 2 | |||||