Windows firewall slowing gigabit network speed.
Ok i was having troubles with network file copys from a win XP computer setup as sort of a home file server. When using windows explorer to copy files from the XP box to the Win7 box over a gigabit network the speeds averaged 10-15MB/sec. This is extremely slow for a gigabit network. So i started investigating and notice that if i reboot the Win 7 machine and do a file transfer as soon as it boots it runs at 50-100MB/sec. Then after the Win 7 machine runs for a few minutes the speed drops back to the 10-15MB/sec speed. So i figure its gotta be something loading up thats slowing performance. I then go and make sure all software and drivers are up to date. This did not help. I read about network throttling index and turned it off using ffffffff registry edit also turned the SystemResponsiveness to 100. This did not help. So i turn off firewall internet connection sharing and that did not help. So i turn off superfetch and that did not help. So i turned off Remote differential compression and that did not help. So i turned off MMCS and that did not help. At this point im going crazy and i came across a post on a forum somewhere that a guy turned off his windows firewall and it helped him. So i turn off the win firewall and it did not help. However i played with that and found what did help. If i open task manager and in the services tab find windows firewall. Right click it and choose go to process and end the windows fire wall process svchost.exe which is usually always over 10,000k as far as memory use. Now i go back to the service tab and windows firewall service is stopped. Wait about 1 minute and turn on the service again. Now go to process and its always under 10,000k mem use. After doing all that my network speeds are full speed gigabit 50-100MB/sec. And it will stay this fast until i reboot my PC. I can do this in a matter of minutes and fix my speed issue but was wondering if this helps anyone else with a network speed problem and if there is a fix or reason this could be happening.Any advice you could give to fix this would be greatly appreciated. Just incase you need it here is my system info copyed from everest. I am not using the Atheros Lan that come on the M3A motherboard because it had issues with drivers and windows 7 .So the realtech Lan is the one im using. And the Atheros MB built in lan is turned off in the BIOS. Robert Field Value Computer Computer Type ACPI x64-based PC Operating System Microsoft Windows 7 Ultimate OS Service Pack - Internet Explorer 8.0.7600.16385 DirectX DirectX 11.0 Computer Name ROBERTR728-PC (Dads PC) User Name RobertR728 Logon Domain RobertR728-PC Date / Time 2009-10-30 / 07:25 Motherboard CPU Type DualCore AMD Athlon Black Edition 7750, 3200 MHz (16 x 200) Motherboard Name Asus M3A (3 PCI, 2 PCI-E x1, 1 PCI-E x16, 4 DDR2 DIMM, Audio, Gigabit LAN) Motherboard Chipset AMD 770, AMD K10 System Memory 4096 MB (DDR2-800 DDR2 SDRAM) DIMM1: Samsung M3 78T2863EHS-CF7 1 GB DDR2-800 DDR2 SDRAM (6-6-6-18 @ 400 MHz) (5-5-5-15 @ 333 MHz) (4-4-4-12 @ 266 MHz) DIMM2: Samsung M3 78T2863EHS-CF7 1 GB DDR2-800 DDR2 SDRAM (6-6-6-18 @ 400 MHz) (5-5-5-15 @ 333 MHz) (4-4-4-12 @ 266 MHz) DIMM3: Samsung M3 78T2863EHS-CF7 1 GB DDR2-800 DDR2 SDRAM (6-6-6-18 @ 400 MHz) (5-5-5-15 @ 333 MHz) (4-4-4-12 @ 266 MHz) DIMM4: Samsung M3 78T2863EHS-CF7 1 GB DDR2-800 DDR2 SDRAM (6-6-6-18 @ 400 MHz) (5-5-5-15 @ 333 MHz) (4-4-4-12 @ 266 MHz) BIOS Type AMI (07/01/08) Communication Port Communications Port (COM1) Display Video Adapter NVIDIA GeForce 8800 GT (512 MB) Video Adapter NVIDIA GeForce 8800 GT (512 MB) 3D Accelerator nVIDIA GeForce 8800 GT Monitor Generic PnP Monitor [NoDB] (14451924) Monitor Generic PnP Monitor [NoDB] (D44F500664) Multimedia Audio Adapter Realtek ALC883 @ ATI SB600 - High Definition Audio Controller Storage IDE Controller Standard Dual Channel PCI IDE Controller IDE Controller Standard Dual Channel PCI IDE Controller Storage Controller AS55F0FU IDE Controller Floppy Drive Floppy disk drive Disk Drive ST3500630AS ATA Device (500 GB, 7200 RPM, SATA-II) Disk Drive WDC WD7500AACS-65D6B0 ATA Device (698 GB, IDE) Optical Drive ATAPI iHAP222 9 ATA Device Optical Drive HL-DT-ST DVD-ROM GDR8164B ATA Device (16x/52x DVD-ROM) Optical Drive WZYBORM U7KHIRGD SCSI CdRom Device SMART Hard Disks Status OK Partitions C: (NTFS) 160.2 GB (41.4 GB free) D: (NTFS) 233.6 GB (107.1 GB free) E: (NTFS) 152.6 GB (40.4 GB free) F: (NTFS) 152.9 GB (20.2 GB free) G: (NTFS) 234.7 GB (49.5 GB free) H: (NTFS) 230.3 GB (142.1 GB free) Total Size 1164.4 GB (400.7 GB free) Input Keyboard HID Keyboard Device Mouse HID-compliant mouse Network Primary IP Address 192.168.5.128 Primary MAC Address Network Adapter Realtek PCI GBE Family Controller (192.168.5.128) Peripherals Printer Canon MX300 series FAX Printer Canon MX300 series Printer Printer Fax Printer Microsoft XPS Document Writer Printer PageManager PDF Writer USB1 Controller ATI SB600 - OCHI USB Controller USB1 Controller ATI SB600 - OCHI USB Controller USB1 Controller ATI SB600 - OCHI USB Controller USB1 Controller ATI SB600 - OCHI USB Controller USB1 Controller ATI SB600 - OCHI USB Controller USB1 Controller VIA Vectro VT6212 PCI-USB Universal Host Controller USB1 Controller VIA Vectro VT6212 PCI-USB Universal Host Controller USB2 Controller ATI SB600 - EHCI USB 2.0 Controller USB2 Controller VIA Vectro VT6212 USB 2.0 Enhanced Host Controller USB Device General Purpose USB Hub USB Device USB Composite Device USB Device USB Input Device USB Device USB Input Device DMI DMI BIOS Vendor American Megatrends Inc. DMI BIOS Version 1001 DMI System Manufacturer System manufacturer DMI System Product System Product Name DMI System Version System Version DMI System Serial Number System Serial Number DMI System UUID 00020003-00040005-00060007-00080009 DMI Motherboard Manufacturer ASUSTeK Computer INC. DMI Motherboard Product M3A DMI Motherboard Version Rev 1.xx DMI Motherboard Serial Number MB-1234567890 DMI Chassis Manufacturer Chassis Manufacture DMI Chassis Version Chassis Version DMI Chassis Serial Number Chassis Serial Number DMI Chassis Asset Tag Asset-1234567890 DMI Chassis Type Desktop Case
October 30th, 2009 3:30pm

Hi, To check the issue, please boot the system to Safe Mode with networking and see how it works. If it works fine this time, I suspect there are some conflicts, and please try the following method to find it out: How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7 Meanwhile, could you please gather the following information for our further research? 1. Start Task Manager, click View Select Columns and select PID (Process Identifier). 2. Then provide us the PID of the svchost.exe process. 3. In an elevated command prompt, run the following command: tasklist /svc Please attach the result to this thread. Thanks. Nicholas Li - MSFT
Free Windows Admin Tool Kit Click here and download it now
October 31st, 2009 11:58am

First thank you for the advice it was the service from malwarebytes anti malware that was slowing my network. I cannot thank you enough and i shouls have thought of eliminating services on my own. So thank you again for the advice. now after removing the malwarebytes software and returning startup to normal im at full network speed. I also alerted malwarebytes of the trouble thru there forum to see if they know of a fix. now below is the other info you requested i did it before and after removing the malwarebytes software. svchost.exe pid=1388 is the process i was ending. Microsoft Windows [Version 6.1.7600] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Users\RobertR728>tasklist /svc Image Name PID Services ========================= ======== ============================================ System Idle Process 0 N/A System 4 N/A smss.exe 300 N/A csrss.exe 464 N/A wininit.exe 516 N/A csrss.exe 548 N/A services.exe 572 N/A lsass.exe 600 KeyIso, SamSs lsm.exe 608 N/A winlogon.exe 736 N/A svchost.exe 768 DcomLaunch, PlugPlay, Power nvvsvc.exe 828 nvsvc svchost.exe 868 RpcEptMapper, RpcSs MsMpEng.exe 916 MsMpSvc svchost.exe 1020 AudioSrv, Dhcp, eventlog, HomeGroupProvider, lmhosts, wscsvc svchost.exe 152 AudioEndpointBuilder, CscService, hidserv, HomeGroupListener, Netman, PcaSvc, SysMain, TrkWks, UmRdpService, UxSms, WdiSystemHost, wudfsvc audiodg.exe 604 N/A svchost.exe 528 AeLookupSvc, BITS, Browser, CertPropSvc, gpsvc, IKEEXT, iphlpsvc, LanmanServer, MMCSS, ProfSvc, RasMan, Schedule, SENS, SessionEnv, ShellHWDetection, Themes, Winmgmt, wuauserv svchost.exe 1100 EventSystem, fdPHost, netprofm, nsi, SstpSvc, WdiServiceHost, WinHttpAutoProxySv nvvsvc.exe 1192 N/A svchost.exe 1220 CryptSvc, Dnscache, LanmanWorkstation, NlaSvc, TapiSrv, TermService spoolsv.exe 1356 Spooler svchost.exe 1388 BFE, DPS, MpsSvc taskhost.exe 1516 N/A AppleMobileDeviceService. 1612 Apple Mobile Device dwm.exe 1628 N/A explorer.exe 1652 N/A msseces.exe 1880 N/A mDNSResponder.exe 1948 Bonjour Service svchost.exe 1984 FDResPub, SSDPSRV, upnphost LSSrvc.exe 2020 LightScribeService WrtMon.exe 1584 N/A LightScribeControlPanel.e 1688 N/A DTLite.exe 460 N/A PDAgent.exe 1448 PDAgent SeaPort.exe 1076 SeaPort TCPSVCS.EXE 960 simptcp sppsvc.exe 2052 sppsvc nvSCPAPISvr.exe 2088 Stereo Service svchost.exe 2128 stisvc vds.exe 2216 vds WrtProc.exe 2268 N/A reader_sl.exe 2288 N/A oodiag.exe 2316 O&O DiskImage vdsldr.exe 2356 N/A UltraMon.exe 2440 N/A iTunesHelper.exe 2472 N/A mbamgui.exe 2488 N/A OpWareSE4.exe 2724 N/A hfs232.exe 2768 N/A WmiPrvSE.exe 2936 N/A PDAgentS1.exe 3100 N/A SmartCapture.exe 3244 N/A SearchIndexer.exe 3272 WSearch iPodService.exe 3312 iPod Service wmpnetwk.exe 3520 WMPNetworkSvc ObjectDock.exe 3548 N/A RTSHookInterop.exe 3680 N/A Dock64.exe 3752 N/A SearchFilterHost.exe 3224 N/A svchost.exe 3848 p2pimsvc, p2psvc, PNRPsvc SearchProtocolHost.exe 3900 N/A MpCmdRun.exe 4028 N/A firefox.exe 4132 N/A svchost.exe 4852 SDRSVC notepad.exe 4280 N/A mbamservice.exe 4396 MBAMService cmd.exe 1096 N/A conhost.exe 4068 N/A WmiPrvSE.exe 2816 N/A tasklist.exe 3008 N/A C:\Users\RobertR728> Here is the list after removing Malwarebytes anti malware software. And mbamservice.exe 4396 MBAMService is now gone and so is my troubles with network speed. It also appears to have speed up my hard drive access speeds to :) Microsoft Windows [Version 6.1.7600] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Users\RobertR728>tasklist /svc Image Name PID Services ========================= ======== ============================================ System Idle Process 0 N/A System 4 N/A smss.exe 300 N/A csrss.exe 464 N/A wininit.exe 516 N/A csrss.exe 548 N/A services.exe 572 N/A lsass.exe 600 KeyIso, SamSs lsm.exe 608 N/A winlogon.exe 692 N/A svchost.exe 772 DcomLaunch, PlugPlay, Power nvvsvc.exe 828 nvsvc svchost.exe 868 RpcEptMapper, RpcSs MsMpEng.exe 924 MsMpSvc svchost.exe 360 AudioSrv, Dhcp, eventlog, HomeGroupProvider, lmhosts, wscsvc svchost.exe 152 AudioEndpointBuilder, CscService, hidserv, HomeGroupListener, Netman, PcaSvc, SysMain, TrkWks, UmRdpService, UxSms, WdiSystemHost, wudfsvc svchost.exe 1036 BITS, Browser, CertPropSvc, gpsvc, IKEEXT, iphlpsvc, LanmanServer, ProfSvc, RasMan, Schedule, SENS, SessionEnv, ShellHWDetection, Themes, Winmgmt, wuauserv svchost.exe 1068 EventSystem, fdPHost, netprofm, nsi, SstpSvc, WdiServiceHost, WinHttpAutoProxySv nvvsvc.exe 1188 N/A svchost.exe 1216 CryptSvc, Dnscache, LanmanWorkstation, NlaSvc, TapiSrv, TermService spoolsv.exe 1356 Spooler svchost.exe 1420 BFE, DPS, MpsSvc taskhost.exe 1528 N/A dwm.exe 1604 N/A AppleMobileDeviceService. 1632 Apple Mobile Device explorer.exe 1656 N/A msseces.exe 1892 N/A WrtMon.exe 1976 N/A mDNSResponder.exe 1988 Bonjour Service svchost.exe 2024 FDResPub, SSDPSRV, upnphost, wcncsvc LSSrvc.exe 1144 LightScribeService LightScribeControlPanel.e 1788 N/A PDAgent.exe 1404 PDAgent SeaPort.exe 1888 SeaPort TCPSVCS.EXE 1968 simptcp DTLite.exe 1168 N/A nvSCPAPISvr.exe 2084 Stereo Service svchost.exe 2120 stisvc vds.exe 2212 vds WrtProc.exe 2256 N/A iTunesHelper.exe 2360 N/A UltraMon.exe 2368 N/A oodiag.exe 2388 O&O DiskImage vdsldr.exe 2432 N/A OpWareSE4.exe 2512 N/A hfs232.exe 2636 N/A PDAgentS1.exe 3164 N/A SmartCapture.exe 3260 N/A iPodService.exe 3296 iPod Service SearchIndexer.exe 3328 WSearch wmpnetwk.exe 3492 WMPNetworkSvc ObjectDock.exe 3504 N/A RTSHookInterop.exe 3644 N/A Dock64.exe 3720 N/A svchost.exe 2548 p2pimsvc, p2psvc, PNRPsvc firefox.exe 1600 N/A mstsc.exe 4456 N/A SearchProtocolHost.exe 3684 N/A SearchFilterHost.exe 4396 N/A cmd.exe 4720 N/A conhost.exe 4528 N/A tasklist.exe 4864 N/A dllhost.exe 4656 N/A WmiPrvSE.exe 720 N/A C:\Users\RobertR728> Again THANK YOU a thousand times Robert UPDATE: After talking with staff at Malwarebytes. It seems that there IP Protection is what causes the problem. So i can still run Malwarebytes anti malware protection with the real time protection enabled but just turn off the IP Protection and its still working with full network speed. If they come up with a solution to fix the IP Protection i will post back here. Robert
October 31st, 2009 4:06pm

First thank you for the advice it was the service from malwarebytes anti malware that was slowing my network. I cannot thank you enough and i shouls have thought of eliminating services on my own. So thank you again for the advice. now after removing the malwarebytes software and returning startup to normal im at full network speed. I also alerted malwarebytes of the trouble thru there forum to see if they know of a fix. now below is the other info you requested i did it before and after removing the malwarebytes software. svchost.exe pid=1388 is the process i was ending. Microsoft Windows [Version 6.1.7600] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Users\RobertR728>tasklist /svc Image Name PID Services ========================= ======== ============================================ System Idle Process 0 N/A System 4 N/A smss.exe 300 N/A csrss.exe 464 N/A wininit.exe 516 N/A csrss.exe 548 N/A services.exe 572 N/A lsass.exe 600 KeyIso, SamSs lsm.exe 608 N/A winlogon.exe 736 N/A svchost.exe 768 DcomLaunch, PlugPlay, Power nvvsvc.exe 828 nvsvc svchost.exe 868 RpcEptMapper, RpcSs MsMpEng.exe 916 MsMpSvc svchost.exe 1020 AudioSrv, Dhcp, eventlog, HomeGroupProvider, lmhosts, wscsvc svchost.exe 152 AudioEndpointBuilder, CscService, hidserv, HomeGroupListener, Netman, PcaSvc, SysMain, TrkWks, UmRdpService, UxSms, WdiSystemHost, wudfsvc audiodg.exe 604 N/A svchost.exe 528 AeLookupSvc, BITS, Browser, CertPropSvc, gpsvc, IKEEXT, iphlpsvc, LanmanServer, MMCSS, ProfSvc, RasMan, Schedule, SENS, SessionEnv, ShellHWDetection, Themes, Winmgmt, wuauserv svchost.exe 1100 EventSystem, fdPHost, netprofm, nsi, SstpSvc, WdiServiceHost, WinHttpAutoProxySv nvvsvc.exe 1192 N/A svchost.exe 1220 CryptSvc, Dnscache, LanmanWorkstation, NlaSvc, TapiSrv, TermService spoolsv.exe 1356 Spooler svchost.exe 1388 BFE, DPS, MpsSvc taskhost.exe 1516 N/A AppleMobileDeviceService. 1612 Apple Mobile Device dwm.exe 1628 N/A explorer.exe 1652 N/A msseces.exe 1880 N/A mDNSResponder.exe 1948 Bonjour Service svchost.exe 1984 FDResPub, SSDPSRV, upnphost LSSrvc.exe 2020 LightScribeService WrtMon.exe 1584 N/A LightScribeControlPanel.e 1688 N/A DTLite.exe 460 N/A PDAgent.exe 1448 PDAgent SeaPort.exe 1076 SeaPort TCPSVCS.EXE 960 simptcp sppsvc.exe 2052 sppsvc nvSCPAPISvr.exe 2088 Stereo Service svchost.exe 2128 stisvc vds.exe 2216 vds WrtProc.exe 2268 N/A reader_sl.exe 2288 N/A oodiag.exe 2316 O&O DiskImage vdsldr.exe 2356 N/A UltraMon.exe 2440 N/A iTunesHelper.exe 2472 N/A mbamgui.exe 2488 N/A OpWareSE4.exe 2724 N/A hfs232.exe 2768 N/A WmiPrvSE.exe 2936 N/A PDAgentS1.exe 3100 N/A SmartCapture.exe 3244 N/A SearchIndexer.exe 3272 WSearch iPodService.exe 3312 iPod Service wmpnetwk.exe 3520 WMPNetworkSvc ObjectDock.exe 3548 N/A RTSHookInterop.exe 3680 N/A Dock64.exe 3752 N/A SearchFilterHost.exe 3224 N/A svchost.exe 3848 p2pimsvc, p2psvc, PNRPsvc SearchProtocolHost.exe 3900 N/A MpCmdRun.exe 4028 N/A firefox.exe 4132 N/A svchost.exe 4852 SDRSVC notepad.exe 4280 N/A mbamservice.exe 4396 MBAMService cmd.exe 1096 N/A conhost.exe 4068 N/A WmiPrvSE.exe 2816 N/A tasklist.exe 3008 N/A C:\Users\RobertR728> Here is the list after removing Malwarebytes anti malware software. And mbamservice.exe 4396 MBAMService is now gone and so is my troubles with network speed. It also appears to have speed up my hard drive access speeds to :) Microsoft Windows [Version 6.1.7600] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Users\RobertR728>tasklist /svc Image Name PID Services ========================= ======== ============================================ System Idle Process 0 N/A System 4 N/A smss.exe 300 N/A csrss.exe 464 N/A wininit.exe 516 N/A csrss.exe 548 N/A services.exe 572 N/A lsass.exe 600 KeyIso, SamSs lsm.exe 608 N/A winlogon.exe 692 N/A svchost.exe 772 DcomLaunch, PlugPlay, Power nvvsvc.exe 828 nvsvc svchost.exe 868 RpcEptMapper, RpcSs MsMpEng.exe 924 MsMpSvc svchost.exe 360 AudioSrv, Dhcp, eventlog, HomeGroupProvider, lmhosts, wscsvc svchost.exe 152 AudioEndpointBuilder, CscService, hidserv, HomeGroupListener, Netman, PcaSvc, SysMain, TrkWks, UmRdpService, UxSms, WdiSystemHost, wudfsvc svchost.exe 1036 BITS, Browser, CertPropSvc, gpsvc, IKEEXT, iphlpsvc, LanmanServer, ProfSvc, RasMan, Schedule, SENS, SessionEnv, ShellHWDetection, Themes, Winmgmt, wuauserv svchost.exe 1068 EventSystem, fdPHost, netprofm, nsi, SstpSvc, WdiServiceHost, WinHttpAutoProxySv nvvsvc.exe 1188 N/A svchost.exe 1216 CryptSvc, Dnscache, LanmanWorkstation, NlaSvc, TapiSrv, TermService spoolsv.exe 1356 Spooler svchost.exe 1420 BFE, DPS, MpsSvc taskhost.exe 1528 N/A dwm.exe 1604 N/A AppleMobileDeviceService. 1632 Apple Mobile Device explorer.exe 1656 N/A msseces.exe 1892 N/A WrtMon.exe 1976 N/A mDNSResponder.exe 1988 Bonjour Service svchost.exe 2024 FDResPub, SSDPSRV, upnphost, wcncsvc LSSrvc.exe 1144 LightScribeService LightScribeControlPanel.e 1788 N/A PDAgent.exe 1404 PDAgent SeaPort.exe 1888 SeaPort TCPSVCS.EXE 1968 simptcp DTLite.exe 1168 N/A nvSCPAPISvr.exe 2084 Stereo Service svchost.exe 2120 stisvc vds.exe 2212 vds WrtProc.exe 2256 N/A iTunesHelper.exe 2360 N/A UltraMon.exe 2368 N/A oodiag.exe 2388 O&O DiskImage vdsldr.exe 2432 N/A OpWareSE4.exe 2512 N/A hfs232.exe 2636 N/A PDAgentS1.exe 3164 N/A SmartCapture.exe 3260 N/A iPodService.exe 3296 iPod Service SearchIndexer.exe 3328 WSearch wmpnetwk.exe 3492 WMPNetworkSvc ObjectDock.exe 3504 N/A RTSHookInterop.exe 3644 N/A Dock64.exe 3720 N/A svchost.exe 2548 p2pimsvc, p2psvc, PNRPsvc firefox.exe 1600 N/A mstsc.exe 4456 N/A SearchProtocolHost.exe 3684 N/A SearchFilterHost.exe 4396 N/A cmd.exe 4720 N/A conhost.exe 4528 N/A tasklist.exe 4864 N/A dllhost.exe 4656 N/A WmiPrvSE.exe 720 N/A C:\Users\RobertR728> Again THANK YOU a thousand times Robert UPDATE: After talking with staff at Malwarebytes. It seems that there IP Protection is what causes the problem. So i can still run Malwarebytes anti malware protection with the real time protection enabled but just turn off the IP Protection and its still working with full network speed. If they come up with a solution to fix the IP Protection i will post back here. Robert Hey Robert, uhm, why doesnt the IP Protection STAY OFF, when I right click the tray and select it so it turns off. But when I boot up my PC again it is turned on again?
Free Windows Admin Tool Kit Click here and download it now
December 18th, 2009 2:11pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics