Re: IE7 Hangs

Robert Aldwinckle · Mar 24, 2007

(cross-post added to XP Networking)

zackrspv said:
Symptom: IE7.0.5730.11 Hangs process on random pages (99%)

Cause: Unknown
Suspect Cause: Enabled Websites (Multimedia, flash, images, scripts,
etc)

Detail: IE7 Hangs randomlly on random pages (does not hang on the
same page all the time) when loading the page, or when the page is
fully loaded. System hangs the IE7 process at 99% causing the
application to fail to respond. Does not self resolve, must terminate
task and try again.

Troubleshooting Steps:

1. Ran IE7 in No-Addon's mode: Still hangs application
2. Removed all BHO's and Add-on's: Still Hangs
3. Reinstalled Java RE (6.0 beta as requested by Microsoft): Still
Hangs
4. Reinstalled Flash 8.0 (instead of 9.0 as requested by Adobe):
Still Hangs
5. Reinstalled Shockwave: Still Hangs
6. Disabled Java: Still Hangs
7. Disabled Javascript: Still Hangs
8. Disabled Activx: Still Hangs
9. Enabled HTTP 1.0 and 1.1: Still Hangs
10. Disabled DCOM: Still Hangs
11. Disabled Automatic Updates: Still Hangs
12. Reinstalled IE7 (Per Microsoft KB): Still Hangs
13. Reinstalled Windows XP SP2 Professional: Still Hangs
14. Reinstalled Windows XP SP2 Professional (NO UPDATES): Does not
Hang (IE6 installed)
15. After above reinstall, reinstalled IE7 without any updates:
Still Hangs
16. Ran Windows in Selective Startup (Disabled all non essential
services): Still Hangs
17. Ran Windows Defender: No Viruses or Spyware Found: Still Hangs
18. Ran SpyBot SD: No spyware found: Still Hangs
19. Ran Avast AVG: Still Hangs
20. Ran ScanDisk: No Disk Issuess: Still Hangs
21. Defragmented the Disk Drive: Still Hangs

I am not sure what else to do for troubleshooting here. I am inclined
to think it is a program instability with IE7 itself, but then when i
do this:

22. Installed FIreFox 2.x (recent version): Still Hangs in FireFox

So it can not be IE7, or it can not be IE7 alone. Perhaps something
wrong with WIndows XP.

The problem occurs quite frequently, roughly every 15-20 pages
(several minutes of surfing), and you have to kill the task to have
IE7 start again. What else can I do?

Give us a better symptom description than
"Hangs randomlly on random pages". ; }

E.g. see use netstat -ano | sort /+70 (in a cmd window)
and see if you have the same symptom that poster Ronny Sølversen
is reporting

http://www.microsoft.com/communitie...&p=1&tid=83affe32-d3bf-4f6e-8bce-c90f70875ad3

HTH

Robert Aldwinckle
---

zackrspv · Mar 25, 2007

Give us a better symptom description than
"Hangs randomlly on random pages". ; }

E.g. see use netstat -ano | sort /+70 (in a cmd window)
and see if you have the same symptom that poster Ronny Sølversen
is reporting

http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?&q...

HTH

Robert Aldwinckle
---- Hide quoted text -

- Show quoted text -

Hi!

Thank you for your responce, however there is not much more
information I can supply. I have included the netstat -ano | sort /
+70 command results for you.

During IE Hang:

Active Connections

TCP 127.0.0.1:12080 127.0.0.1:2511 TIME_WAIT
0
TCP 127.0.0.1:2313 127.0.0.1:12080 TIME_WAIT
0
TCP 127.0.0.1:2335 127.0.0.1:12080 TIME_WAIT
0
TCP 127.0.0.1:2469 127.0.0.1:12080 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2279 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2285 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2287 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2289 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2291 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2293 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2295 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2297 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2299 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2301 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2303 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2305 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2307 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2309 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2311 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2315 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2317 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2319 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2321 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2323 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2325 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2327 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2329 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2331 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2332 TIME_WAIT
0
TCP 192.168.2.5:2416 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2406 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2398 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2396 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2386 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2384 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2376 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2370 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2364 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2362 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2352 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2350 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2348 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2344 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2340 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2338 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2334 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2330 82.146.123.3:80 TIME_WAIT
0
TCP 192.168.2.5:2296 72.29.84.159:80 TIME_WAIT
0
TCP 192.168.2.5:2294 72.29.84.159:80 TIME_WAIT
0
TCP 192.168.2.5:2276 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2260 208.65.153.253:80 TIME_WAIT
0
TCP 192.168.2.5:2259 208.65.153.253:80 TIME_WAIT
0
TCP 192.168.2.5:2257 208.65.153.253:80 TIME_WAIT
0
TCP 192.168.2.5:2256 208.65.153.253:80 TIME_WAIT
0
TCP 192.168.2.5:2250 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2248 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2246 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2245 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2243 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2240 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2238 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2236 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2234 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2232 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2230 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2228 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2226 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2224 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2222 212.241.180.88:80 TIME_WAIT
0
TCP 192.168.2.5:2220 212.241.180.88:80 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2337 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2339 TIME_WAIT
0
TCP 192.168.2.5:2162 72.14.207.191:80 TIME_WAIT
0
TCP 192.168.2.5:2160 72.14.207.191:80 TIME_WAIT
0
TCP 192.168.2.5:2144 63.111.69.12:80 TIME_WAIT
0
TCP 192.168.2.5:2136 72.14.223.104:80 TIME_WAIT
0
TCP 192.168.2.5:2134 72.14.207.191:80 TIME_WAIT
0
TCP 192.168.2.5:2124 66.102.15.101:80 TIME_WAIT
0
TCP 192.168.2.5:2120 66.102.15.100:80 TIME_WAIT
0
TCP 192.168.2.5:2118 209.66.100.34:80 TIME_WAIT
0
TCP 192.168.2.5:2084 66.102.15.100:80 TIME_WAIT
0
TCP 192.168.2.5:2076 66.150.96.119:80 TIME_WAIT
0
TCP 192.168.2.5:2070 209.50.189.200:80 TIME_WAIT
0
TCP 192.168.2.5:2064 64.86.95.41:80 TIME_WAIT
0
TCP 192.168.2.5:2049 69.8.217.89:80 TIME_WAIT
0
TCP 192.168.2.5:2047 69.8.217.89:80 TIME_WAIT
0
TCP 192.168.2.5:2046 69.8.217.89:80 TIME_WAIT
0
TCP 192.168.2.5:2045 69.8.217.89:80 TIME_WAIT
0
TCP 192.168.2.5:2044 69.8.217.89:80 TIME_WAIT
0
TCP 192.168.2.5:2037 69.8.217.90:80 TIME_WAIT
0
TCP 192.168.2.5:2028 209.200.15.164:80 TIME_WAIT
0
TCP 192.168.2.5:2026 209.200.15.164:80 TIME_WAIT
0
TCP 192.168.2.5:2024 209.200.15.164:80 TIME_WAIT
0
TCP 192.168.2.5:2022 209.200.15.164:80 TIME_WAIT
0
TCP 192.168.2.5:2021 209.200.15.164:80 TIME_WAIT
0
TCP 192.168.2.5:2020 209.200.15.164:80 TIME_WAIT
0
TCP 192.168.2.5:2016 209.200.15.164:80 TIME_WAIT
0
TCP 192.168.2.5:2014 209.200.15.164:80 TIME_WAIT
0
TCP 192.168.2.5:2012 209.200.15.164:80 TIME_WAIT
0
TCP 192.168.2.5:1942 209.200.15.164:80 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2341 TIME_WAIT
0
TCP 192.168.2.5:1825 72.14.203.99:80 TIME_WAIT
0
TCP 192.168.2.5:1652 72.14.223.104:80 TIME_WAIT
0
TCP 192.168.2.5:1620 64.154.81.197:80 TIME_WAIT
0
TCP 192.168.2.5:1592 209.62.188.19:80 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2343 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2345 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2347 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2349 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2351 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2563 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2353 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2559 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2557 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2355 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2553 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2551 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2357 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2547 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2359 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2543 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2361 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2363 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2365 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2535 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2531 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2529 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2527 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2525 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2521 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2519 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2517 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2515 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2513 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2367 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2369 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2507 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2505 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2371 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2501 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2499 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2497 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2495 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2493 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2491 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2489 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2487 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2485 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2483 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2481 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2478 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2477 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2473 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2472 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2471 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2467 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2465 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2463 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2461 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2459 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2446 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2445 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2443 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2441 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2439 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2437 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2435 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2433 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2431 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2429 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2427 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2425 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2423 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2421 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2419 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2417 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2415 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2413 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2411 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2409 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2407 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2405 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2403 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2401 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2399 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2397 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2395 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2393 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2391 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2389 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2387 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2385 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2383 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2381 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2379 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2377 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2375 TIME_WAIT
0
TCP 127.0.0.1:12080 127.0.0.1:2373 TIME_WAIT
0
TCP 127.0.0.1:12025 0.0.0.0:0 LISTENING
1316
TCP 127.0.0.1:12119 0.0.0.0:0 LISTENING
1316
TCP 127.0.0.1:12143 0.0.0.0:0 LISTENING
1316
TCP 127.0.0.1:12110 0.0.0.0:0 LISTENING
1316
UDP 0.0.0.0:3456 *:*
1540
TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING
1540
TCP 0.0.0.0:443 0.0.0.0:0 LISTENING
1540
TCP 0.0.0.0:21 0.0.0.0:0 LISTENING
1540
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
1540
TCP 0.0.0.0:25 0.0.0.0:0 LISTENING
1540
TCP 127.0.0.1:12080 127.0.0.1:2561 ESTABLISHED
1564
TCP 127.0.0.1:12080 127.0.0.1:2555 ESTABLISHED
1564
TCP 127.0.0.1:12080 127.0.0.1:2548 ESTABLISHED
1564
TCP 127.0.0.1:12080 127.0.0.1:2545 ESTABLISHED
1564
TCP 127.0.0.1:12080 127.0.0.1:2540 ESTABLISHED
1564
TCP 192.168.2.5:1839 217.8.193.15:80 LAST_ACK
1564
TCP 192.168.2.5:2168 216.193.240.86:80 ESTABLISHED
1564
TCP 127.0.0.1:12080 127.0.0.1:2539 ESTABLISHED
1564
TCP 192.168.2.5:2504 72.14.223.104:80 ESTABLISHED
1564
TCP 192.168.2.5:2508 128.242.118.139:80 LAST_ACK
1564
TCP 192.168.2.5:2510 69.8.217.89:80 ESTABLISHED
1564
TCP 192.168.2.5:2512 209.160.11.9:80 LAST_ACK
1564
TCP 192.168.2.5:2538 209.160.11.9:80 ESTABLISHED
1564
TCP 192.168.2.5:2541 209.160.11.9:80 ESTABLISHED
1564
TCP 192.168.2.5:2542 209.160.11.9:80 ESTABLISHED
1564
TCP 192.168.2.5:2546 72.14.203.99:80 ESTABLISHED
1564
TCP 192.168.2.5:2550 208.113.140.186:80 CLOSE_WAIT
1564
TCP 192.168.2.5:2556 69.11.120.35:80 ESTABLISHED
1564
TCP 192.168.2.5:2562 128.30.52.34:80 CLOSE_WAIT
1564
TCP 127.0.0.1:12080 0.0.0.0:0 LISTENING
1564
TCP 127.0.0.1:12080 127.0.0.1:2537 ESTABLISHED
1564
TCP 127.0.0.1:12080 127.0.0.1:2503 ESTABLISHED
1564
TCP 127.0.0.1:12080 127.0.0.1:2509 ESTABLISHED
1564
TCP 192.168.2.5:2218 212.241.180.88:80 LAST_ACK
1564
UDP 0.0.0.0:13 *:*
1988
UDP 0.0.0.0:19 *:*
1988
UDP 0.0.0.0:17 *:*
1988
TCP 0.0.0.0:19 0.0.0.0:0 LISTENING
1988
TCP 0.0.0.0:17 0.0.0.0:0 LISTENING
1988
UDP 0.0.0.0:9 *:*
1988
TCP 0.0.0.0:13 0.0.0.0:0 LISTENING
1988
TCP 0.0.0.0:9 0.0.0.0:0 LISTENING
1988
TCP 0.0.0.0:7 0.0.0.0:0 LISTENING
1988
UDP 0.0.0.0:7 *:*
1988
TCP 127.0.0.1:1029 0.0.0.0:0 LISTENING
2096
TCP 192.168.2.5:1030 207.46.109.61:1863 ESTABLISHED
2480
UDP 127.0.0.1:1032 *:*
2480
TCP 127.0.0.1:2548 127.0.0.1:12080 ESTABLISHED
3056
TCP 127.0.0.1:2545 127.0.0.1:12080 ESTABLISHED
3056
TCP 127.0.0.1:2540 127.0.0.1:12080 ESTABLISHED
3056
TCP 127.0.0.1:2555 127.0.0.1:12080 ESTABLISHED
3056
TCP 127.0.0.1:2537 127.0.0.1:12080 ESTABLISHED
3056
TCP 127.0.0.1:2509 127.0.0.1:12080 ESTABLISHED
3056
TCP 127.0.0.1:2503 127.0.0.1:12080 ESTABLISHED
3056
UDP 127.0.0.1:1043 *:*
3056
TCP 127.0.0.1:2539 127.0.0.1:12080 ESTABLISHED
3056
TCP 127.0.0.1:2561 127.0.0.1:12080 ESTABLISHED
3056
TCP 192.168.2.5:139 0.0.0.0:0 LISTENING
4
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
4
UDP 192.168.2.5:138 *:*
4
UDP 0.0.0.0:445 *:*
4
UDP 192.168.2.5:137 *:*
4
UDP 0.0.0.0:500 *:*
552
UDP 0.0.0.0:4500 *:*
552
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
760
UDP 127.0.0.1:123 *:*
820
UDP 192.168.2.5:123 *:*
820
UDP 0.0.0.0:1149 *:*
868
UDP 0.0.0.0:1144 *:*
868
UDP 0.0.0.0:1028 *:*
868
Proto Local Address Foreign Address State
PID

I did the registry fix, outlined in that post you linked too, and the
hanging still happens.

zackrspv · Mar 25, 2007

Hi!

Thank you for your responce, however there is not much more
information I can supply. I have included the netstat -ano | sort /
+70 command results for you.
....

I did the registry fix, outlined in that post you linked too, and the
hanging still happens.

I wanted to also say that Opening a new IE window does not work, with
the CPU at 99% the window opens, but will not respond (simply stays at
connecting), I am unable to run many commands with the CPU at 99%.
Terminating the IE7 process, and then running the netstat command
again did not show the items above disappear; it just listed almost
all of them as Time_Wait. After around 5 minutes, I recieve the
following as the output:

Active Connections

TCP 192.168.2.5:2644 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2628 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2630 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2634 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2636 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2640 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2642 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2646 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2648 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2650 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2652 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2654 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2658 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2660 64.233.167.104:80 TIME_WAIT
0
TCP 192.168.2.5:2664 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2666 64.233.179.104:80 TIME_WAIT
0
TCP 192.168.2.5:2668 64.233.179.104:80 TIME_WAIT
0
TCP 127.0.0.1:12119 0.0.0.0:0 LISTENING
1316
TCP 127.0.0.1:12110 0.0.0.0:0 LISTENING
1316
TCP 127.0.0.1:12025 0.0.0.0:0 LISTENING
1316
TCP 127.0.0.1:12143 0.0.0.0:0 LISTENING
1316
TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING
1540
TCP 0.0.0.0:443 0.0.0.0:0 LISTENING
1540
TCP 0.0.0.0:25 0.0.0.0:0 LISTENING
1540
TCP 0.0.0.0:21 0.0.0.0:0 LISTENING
1540
UDP 0.0.0.0:3456 *:*
1540
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
1540
TCP 127.0.0.1:12080 0.0.0.0:0 LISTENING
1564
TCP 192.168.2.5:2168 216.193.240.86:80 ESTABLISHED
1564
TCP 0.0.0.0:9 0.0.0.0:0 LISTENING
1988
UDP 0.0.0.0:19 *:*
1988
UDP 0.0.0.0:7 *:*
1988
TCP 0.0.0.0:7 0.0.0.0:0 LISTENING
1988
TCP 0.0.0.0:19 0.0.0.0:0 LISTENING
1988
UDP 0.0.0.0:17 *:*
1988
TCP 0.0.0.0:13 0.0.0.0:0 LISTENING
1988
UDP 0.0.0.0:13 *:*
1988
UDP 0.0.0.0:9 *:*
1988
TCP 0.0.0.0:17 0.0.0.0:0 LISTENING
1988
TCP 127.0.0.1:1029 0.0.0.0:0 LISTENING
2096
UDP 127.0.0.1:1032 *:*
2480
TCP 192.168.2.5:1030 207.46.109.61:1863 ESTABLISHED
2480
UDP 127.0.0.1:2581 *:*
2668
UDP 192.168.2.5:138 *:*
4
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
4
UDP 0.0.0.0:445 *:*
4
TCP 192.168.2.5:139 0.0.0.0:0 LISTENING
4
UDP 192.168.2.5:137 *:*
4
UDP 0.0.0.0:500 *:*
552
UDP 0.0.0.0:4500 *:*
552
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
760
UDP 127.0.0.1:123 *:*
820
UDP 192.168.2.5:123 *:*
820
UDP 0.0.0.0:1149 *:*
868
UDP 0.0.0.0:1144 *:*
868
UDP 0.0.0.0:1028 *:*
868
Proto Local Address Foreign Address State
PID

So, I am not sure what else to do.

Robert Aldwinckle · Mar 25, 2007

(cross-post added to XP Networking)
....

Thank you for your responce, however there is not much more
information I can supply. I have included the netstat -ano | sort /

+70 command results for you.

FWIW I have never seen anything like this. I doesn't look healthy to me
but that's why I'm cross-posting to XP Networking. ; )

I guess we also need to know what task these PIDs represent.
E.g. apparently you have a local server running on port 12080.
What is it? Whatever it is seems to have been connected to
another task which has since been closed (e.g. I think that would
explain the 0 in the PID column.)

Oh. I see more of the same associated with PID 1564.
(E.g., connections started by it using that 12080 port again.)
Are you running a proxy such as FiddlerTool on that port perhaps?
And in that case, how do your problem symptoms change
if you get rid of the proxy?
It might be an idea to tack on some output from tasklist
to supplement this report or at least annotate for us some
of the PIDs your netstat command is displaying.

The port 80 things

80) are HTTP connections.
That's what I was expecting to see.
But again, many are in this TIME_WAIT PID = 0 state.
Judging by the number of such connections with
the same remote address I would guess that the value you
zapped was 18? However, I don't know if connections
which are in this state are constrained by the limit.
It might only be connections which are in the ESTABLISHED
state, for example, which would be counted before the limit
would take effect. (Again, I don't know.)

Anyway, I think you now have a more interesting symptom description
than just your "randomly hangs on random pages". ; )

Good luck

Robert
---

zackrspv · Mar 25, 2007

+70 command results for you.

FWIW I have never seen anything like this. I doesn't look healthy to me
but that's why I'm cross-posting to XP Networking. ; )

I guess we also need to know what task these PIDs represent.
E.g. apparently you have a local server running on port 12080.
What is it? Whatever it is seems to have been connected to
another task which has since been closed (e.g. I think that would
explain the 0 in the PID column.)

Oh. I see more of the same associated with PID 1564.
(E.g., connections started by it using that 12080 port again.)
Are you running a proxy such as FiddlerTool on that port perhaps?
And in that case, how do your problem symptoms change
if you get rid of the proxy?
It might be an idea to tack on some output from tasklist
to supplement this report or at least annotate for us some
of the PIDs your netstat command is displaying.

The port 80 things 80) are HTTP connections.
That's what I was expecting to see.
But again, many are in this TIME_WAIT PID = 0 state.
Judging by the number of such connections with
the same remote address I would guess that the value you
zapped was 18? However, I don't know if connections
which are in this state are constrained by the limit.
It might only be connections which are in the ESTABLISHED
state, for example, which would be counted before the limit
would take effect. (Again, I don't know.)

Anyway, I think you now have a more interesting symptom description
than just your "randomly hangs on random pages". ; )

Good luck

Robert
---

Hi!

I am not using any proxy; confirmed with IE settings, not even the
auto detect proxy box is checked, and no data in proxy fields. This
system does have .Net Studio on it. It also has Macromedia suite on
it (all apps, contribute as well). But nothing running as server. I
do not have any webserver installed, nor do i have IIS configured; IIS
is installed, however, but nothing setup.

I will do a surf around the next time it crashes and run the netstat
command, and then list what PID's those are for.

Thanks!

zackrspv · Mar 25, 2007

+70 command results for you.

FWIW I have never seen anything like this. I doesn't look healthy to me
but that's why I'm cross-posting to XP Networking. ; )

I guess we also need to know what task these PIDs represent.
E.g. apparently you have a local server running on port 12080.
What is it? Whatever it is seems to have been connected to
another task which has since been closed (e.g. I think that would
explain the 0 in the PID column.)

Well, IE just hung, and I ran the netstat command. Here are the
results:

TCP 127.0.0.1:12080 127.0.0.1:3251 TIME_WAIT 0
TCP 127.0.0.1:3259 127.0.0.1:12080 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3019 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3023 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3031 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3067 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3069 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3071 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3073 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3075 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3092 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3095 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3129 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3132 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3140 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3157 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3159 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3161 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3163 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3165 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3167 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3169 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3171 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3181 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3183 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3185 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3186 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3187 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3188 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3189 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3190 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3191 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3192 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3193 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3194 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3196 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3197 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3198 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3213 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3230 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3243 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3246 TIME_WAIT 0
TCP 192.168.2.5:3388 69.93.59.226:80 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3253 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3255 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3257 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3265 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3271 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3273 TIME_WAIT 0
TCP 192.168.2.5:3330 68.142.228.136:80 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3275 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3277 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3281 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3292 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3296 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3297 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3302 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3305 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3325 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3327 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3328 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3331 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3333 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3335 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3337 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3339 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3341 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3343 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3347 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3353 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3365 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3367 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3369 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3371 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3373 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3375 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3377 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3379 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3381 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3383 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3385 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3387 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3389 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3391 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3409 TIME_WAIT 0
TCP 192.168.2.5:3178 72.29.74.51:80 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3433 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3437 TIME_WAIT 0
TCP 127.0.0.1:12080 127.0.0.1:3442 TIME_WAIT 0
TCP 192.168.2.5:3008 208.65.153.251:80 TIME_WAIT 0
TCP 192.168.2.5:3014 72.14.223.104:80 TIME_WAIT 0
TCP 192.168.2.5:3016 72.14.223.104:80 TIME_WAIT 0
TCP 192.168.2.5:3120 86.59.13.26:80 TIME_WAIT 0
TCP 127.0.0.1:3261 127.0.0.1:12080 TIME_WAIT 0
TCP 127.0.0.1:12143 0.0.0.0:0 LISTENING 1316
TCP 127.0.0.1:12119 0.0.0.0:0 LISTENING 1316
TCP 127.0.0.1:12110 0.0.0.0:0 LISTENING 1316
TCP 127.0.0.1:12025 0.0.0.0:0 LISTENING 1316
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING 1540
TCP 0.0.0.0:25 0.0.0.0:0 LISTENING 1540
TCP 0.0.0.0:21 0.0.0.0:0 LISTENING 1540
UDP 0.0.0.0:3456 *:* 1540
TCP 0.0.0.0:443 0.0.0.0:0 LISTENING 1540
TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING 1540
TCP 192.168.2.5:3118 86.59.13.26:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3116 86.59.13.26:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3114 60.28.202.4:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3110 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3109 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3108 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3107 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3106 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3105 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3104 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3103 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3102 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3101 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3100 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3099 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3098 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3097 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3096 218.30.108.24:80 ESTABLISHED 1564
TCP 192.168.2.5:3066 64.119.183.130:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3064 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3062 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3060 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3058 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3057 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3054 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3053 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3050 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3048 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3046 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3044 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3042 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3040 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3038 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3036 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3034 216.92.206.51:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3022 64.34.168.124:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3151 68.142.213.135:80 ESTABLISHED 1564
TCP 192.168.2.5:3152 68.142.213.135:80 ESTABLISHED 1564
TCP 192.168.2.5:3153 68.142.213.135:80 ESTABLISHED 1564
TCP 192.168.2.5:3150 68.142.213.135:80 ESTABLISHED 1564
TCP 192.168.2.5:3122 86.59.13.26:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3124 64.233.167.147:80 ESTABLISHED 1564
TCP 192.168.2.5:3141 68.142.213.135:80 ESTABLISHED 1564
TCP 192.168.2.5:3142 68.142.213.135:80 ESTABLISHED 1564
TCP 192.168.2.5:3156 68.142.213.135:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3440 ESTABLISHED 1564
TCP 192.168.2.5:3160 218.30.108.24:80 LAST_ACK 1564
TCP 127.0.0.1:12080 127.0.0.1:3435 ESTABLISHED 1564
TCP 192.168.2.5:3166 58.49.57.20:80 LAST_ACK 1564
TCP 127.0.0.1:12080 127.0.0.1:3431 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3429 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3427 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3425 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3423 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3421 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3419 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3417 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3415 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3413 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3410 ESTABLISHED 1564
TCP 192.168.2.5:3207 82.143.202.118:80 CLOSE_WAIT 1564
TCP 127.0.0.1:12080 127.0.0.1:3407 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3405 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3403 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3401 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3396 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3395 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3394 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3393 ESTABLISHED 1564
TCP 192.168.2.5:3216 64.191.203.30:80 ESTABLISHED 1564
TCP 192.168.2.5:3218 82.143.202.118:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3231 72.14.207.93:80 ESTABLISHED 1564
TCP 192.168.2.5:3232 72.14.207.93:80 ESTABLISHED 1564
TCP 192.168.2.5:3233 72.14.207.93:80 ESTABLISHED 1564
TCP 192.168.2.5:3234 72.14.207.93:80 ESTABLISHED 1564
TCP 192.168.2.5:3235 72.14.207.93:80 ESTABLISHED 1564
TCP 192.168.2.5:3236 72.14.207.93:80 ESTABLISHED 1564
TCP 192.168.2.5:3237 72.14.207.93:80 ESTABLISHED 1564
TCP 192.168.2.5:3238 72.14.207.93:80 ESTABLISHED 1564
TCP 192.168.2.5:3240 72.14.207.93:80 ESTABLISHED 1564
TCP 192.168.2.5:3241 72.14.207.93:80 ESTABLISHED 1564
TCP 192.168.2.5:3242 72.14.207.93:80 ESTABLISHED 1564
TCP 192.168.2.5:3247 66.230.200.228:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3358 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3357 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3356 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3355 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3354 ESTABLISHED 1564
TCP 192.168.2.5:3264 66.230.200.100:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3349 ESTABLISHED 1564
TCP 192.168.2.5:3268 66.230.200.100:80 ESTABLISHED 1564
TCP 192.168.2.5:3270 66.230.200.100:80 ESTABLISHED 1564
TCP 192.168.2.5:3280 68.142.72.174:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3284 68.142.72.174:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3286 68.142.72.174:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3288 68.142.72.174:80 CLOSE_WAIT 1564
TCP 192.168.2.5:3306 216.246.93.11:80 ESTABLISHED 1564
TCP 192.168.2.5:3307 216.246.93.11:80 ESTABLISHED 1564
TCP 192.168.2.5:3309 216.246.93.11:80 ESTABLISHED 1564
TCP 192.168.2.5:3310 216.246.93.11:80 ESTABLISHED 1564
TCP 192.168.2.5:3311 216.246.93.11:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3323 ESTABLISHED 1564
TCP 192.168.2.5:3314 216.246.93.11:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3304 ESTABLISHED 1564
TCP 192.168.2.5:3143 68.142.213.135:80 ESTABLISHED 1564
TCP 192.168.2.5:3315 216.246.93.11:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3301 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3300 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3299 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3298 ESTABLISHED 1564
TCP 192.168.2.5:3316 216.246.93.11:80 ESTABLISHED 1564
TCP 192.168.2.5:3317 216.246.93.11:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3295 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3294 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3293 ESTABLISHED 1564
TCP 192.168.2.5:3318 216.246.93.11:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3291 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3290 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3289 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3287 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3285 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3283 ESTABLISHED 1564
TCP 192.168.2.5:3319 216.246.93.11:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3279 ESTABLISHED 1564
TCP 192.168.2.5:3320 216.246.93.11:80 ESTABLISHED 1564
TCP 192.168.2.5:3324 216.246.93.27:80 ESTABLISHED 1564
TCP 192.168.2.5:3350 69.93.59.226:80 ESTABLISHED 1564
TCP 192.168.2.5:3359 65.216.72.117:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3269 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3267 ESTABLISHED 1564
TCP 192.168.2.5:3360 65.216.72.117:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3263 ESTABLISHED 1564
TCP 192.168.2.5:3362 65.216.72.117:80 ESTABLISHED 1564
TCP 192.168.2.5:3363 65.216.72.117:80 ESTABLISHED 1564
TCP 192.168.2.5:3364 65.216.72.117:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 0.0.0.0:0 LISTENING 1564
TCP 192.168.2.5:3397 72.14.223.147:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3245 ESTABLISHED 1564
TCP 192.168.2.5:3398 72.14.223.147:80 ESTABLISHED 1564
TCP 192.168.2.5:3399 72.14.223.147:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3229 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3228 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3227 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3226 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3225 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3224 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3223 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3222 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3221 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3220 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3219 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3217 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3215 ESTABLISHED 1564
TCP 192.168.2.5:3400 72.14.223.147:80 ESTABLISHED 1564
TCP 192.168.2.5:3402 72.14.223.147:80 ESTABLISHED 1564
TCP 192.168.2.5:3404 72.14.223.147:80 ESTABLISHED 1564
TCP 192.168.2.5:3406 72.14.223.147:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3195 ESTABLISHED 1564
TCP 192.168.2.5:3408 69.93.59.226:80 ESTABLISHED 1564
TCP 192.168.2.5:3412 69.93.59.226:80 ESTABLISHED 1564
TCP 192.168.2.5:3414 69.93.59.226:80 ESTABLISHED 1564
TCP 192.168.2.5:3416 69.93.59.226:80 ESTABLISHED 1564
TCP 192.168.2.5:3418 69.93.59.226:80 ESTABLISHED 1564
TCP 192.168.2.5:3420 69.93.59.226:80 ESTABLISHED 1564
TCP 192.168.2.5:3422 69.93.59.226:80 ESTABLISHED 1564
TCP 192.168.2.5:3424 69.93.59.226:80 ESTABLISHED 1564
TCP 192.168.2.5:3426 69.93.59.226:80 ESTABLISHED 1564
TCP 192.168.2.5:3428 69.93.59.226:80 ESTABLISHED 1564
TCP 192.168.2.5:3430 69.93.59.226:80 ESTABLISHED 1564
TCP 192.168.2.5:3432 69.93.59.226:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3179 ESTABLISHED 1564
TCP 192.168.2.5:3436 69.93.59.226:80 ESTABLISHED 1564
TCP 192.168.2.5:3439 72.29.74.51:80 ESTABLISHED 1564
TCP 192.168.2.5:3441 72.29.74.51:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3021 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3033 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3035 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3037 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3039 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3041 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3139 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3138 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3137 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3136 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3135 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3134 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3133 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3043 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3131 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3130 ESTABLISHED 1564
TCP 192.168.2.5:3145 68.142.213.135:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3128 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3127 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3126 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3125 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3123 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3121 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3117 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3115 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3113 ESTABLISHED 1564
TCP 192.168.2.5:3146 68.142.213.135:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3094 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3093 ESTABLISHED 1564
TCP 192.168.2.5:3147 68.142.213.135:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3091 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3090 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3089 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3088 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3087 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3086 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3085 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3084 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3083 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3082 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3081 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3080 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3079 ESTABLISHED 1564
TCP 192.168.2.5:3148 68.142.213.135:80 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3303 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3045 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3047 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3049 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3065 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3063 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3061 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3059 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3056 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3055 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3052 ESTABLISHED 1564
TCP 127.0.0.1:12080 127.0.0.1:3051 ESTABLISHED 1564
TCP 192.168.2.5:3149 68.142.213.135:80 ESTABLISHED 1564
TCP 0.0.0.0:17 0.0.0.0:0 LISTENING 1988
TCP 0.0.0.0:19 0.0.0.0:0 LISTENING 1988
TCP 0.0.0.0:7 0.0.0.0:0 LISTENING 1988
UDP 0.0.0.0:19 *:* 1988
UDP 0.0.0.0:17 *:* 1988
UDP 0.0.0.0:13 *:* 1988
UDP 0.0.0.0:9 *:* 1988
UDP 0.0.0.0:7 *:* 1988
TCP 0.0.0.0:9 0.0.0.0:0 LISTENING 1988
TCP 0.0.0.0:13 0.0.0.0:0 LISTENING 1988
TCP 127.0.0.1:1029 0.0.0.0:0 LISTENING 2096
TCP 192.168.2.5:4622 207.46.109.61:1863 ESTABLISHED 2480
UDP 127.0.0.1:1032 *:* 2480
UDP 192.168.2.5:138 *:* 4
TCP 192.168.2.5:1299 192.168.2.4:139 ESTABLISHED 4
UDP 0.0.0.0:445 *:* 4
UDP 192.168.2.5:137 *:* 4
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4
TCP 192.168.2.5:139 0.0.0.0:0 LISTENING 4
UDP 0.0.0.0:4500 *:* 552
UDP 0.0.0.0:500 *:* 552
TCP 127.0.0.1:3421 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3419 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3417 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3415 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3413 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3410 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3407 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3405 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3403 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3401 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3396 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3395 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3394 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3393 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3358 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3357 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3356 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3355 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3354 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3349 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3323 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3304 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3303 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3301 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3300 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3299 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3298 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3295 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3294 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3293 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3291 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3290 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3289 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3287 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3285 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3283 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3279 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3269 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3267 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3263 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3427 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3429 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3245 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3229 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3228 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3227 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3226 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3225 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3224 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3223 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3222 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3221 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3220 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3219 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3217 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3423 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3195 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3179 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3139 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3138 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3137 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3136 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3135 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3134 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3133 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3131 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3130 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3128 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3127 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3126 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3125 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3123 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3121 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3117 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3115 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3113 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3094 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3093 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3091 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3090 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3089 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3088 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3087 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3086 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3085 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3084 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3083 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3082 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3081 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3080 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3079 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3065 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3063 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3061 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3059 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3056 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3055 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3052 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3051 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3049 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3047 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3045 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3043 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3041 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3039 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3037 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3035 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3033 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3021 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3431 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3435 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3440 127.0.0.1:12080 ESTABLISHED 588
TCP 127.0.0.1:3215 127.0.0.1:12080 ESTABLISHED 588
UDP 127.0.0.1:4627 *:* 588
TCP 127.0.0.1:3425 127.0.0.1:12080 ESTABLISHED 588
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 760
UDP 127.0.0.1:123 *:* 820
UDP 192.168.2.5:123 *:* 820
UDP 0.0.0.0:1028 *:* 868
UDP 0.0.0.0:3948 *:* 868
UDP 0.0.0.0:1149 *:* 868
UDP 0.0.0.0:1144 *:* 868
Proto Local Address Foreign Address State PID

Here is the PID list:

Image Name PID Session Name Session# Mem
Usage
========================= ====== ================ ========
============
System Idle Process 0 Console 0 28
K
System 4 Console 0 236
K
smss.exe 416 Console 0 388
K
csrss.exe 464 Console 0 4,400
K
winlogon.exe 496 Console 0 4,748
K
services.exe 540 Console 0 3,380
K
lsass.exe 552 Console 0 1,524
K
svchost.exe 692 Console 0 5,228
K
svchost.exe 760 Console 0 4,436
K
svchost.exe 820 Console 0 20,784
K
svchost.exe 868 Console 0 3,436
K
svchost.exe 1012 Console 0 3,784
K
spoolsv.exe 1136 Console 0 5,332
K
aswUpdSv.exe 1464 Console 0 228
K
ashServ.exe 1480 Console 0 15,408
K
inetinfo.exe 1540 Console 0 9,696
K
mdm.exe 1556 Console 0 3,260
K
sqlservr.exe 1608 Console 0 13,080
K
explorer.exe 1856 Console 0 20,388
K
nvsvc32.exe 1924 Console 0 3,360
K
tcpsvcs.exe 1988 Console 0 3,072
K
ashMaiSv.exe 1316 Console 0 1,088
K
ashWebSv.exe 1564 Console 0 12,476
K
alg.exe 2096 Console 0 3,504
K
wscntfy.exe 2180 Console 0 2,044
K
rundll32.exe 2228 Console 0 2,808
K
ashDisp.exe 2252 Console 0 1,816
K
localcooling.exe 2264 Console 0 18,080
K
napster.exe 2336 Console 0 2,720
K
qttask.exe 2360 Console 0 2,196
K
realsched.exe 2372 Console 0 228
K
jusched.exe 2388 Console 0 2,232
K
SoundMan.exe 2440 Console 0 2,648
K
ctfmon.exe 2468 Console 0 3,064
K
msmsgs.exe 2480 Console 0 7,844
K
iexplore.exe 588 Console 0 106,208
K
cmd.exe 3424 Console 0 2,668
K
wmiprvse.exe 2808 Console 0 5,944
K
notepad.exe 3228 Console 0 3,448
K
tasklist.exe 4024 Console 0 4,272
K

ashWebSv.exe is the Avast Antivirus web service (which scans website
connections for viruses)

Hopefully i provided more insight

Let me know!

zackrspv · Mar 25, 2007

I guess we also need to know what task these PIDs represent.
E.g. apparently you have a local server running on port 12080.
What is it? Whatever it is seems to have been connected to
another task which has since been closed (e.g. I think that would
explain the 0 in the PID column.)

This port is used by Avast when it's primary email scanning ports are
closed. As I do not have an email client installed on this system,
Port 12080 is used by Avast to scan web based email being sent and
recieved across my local network.

Oh. I see more of the same associated with PID 1564.
Are you running a proxy such as FiddlerTool on that port perhaps?
And in that case, how do your problem symptoms change
if you get rid of the proxy?
It might be an idea to tack on some output from tasklist
to supplement this report or at least annotate for us some
of the PIDs your netstat command is displaying.

Port 1564 is Avast Antivirus's web scanner. I, to my knowledge, am
not using a proxy

The port 80 things 80) are HTTP connections.
That's what I was expecting to see.
But again, many are in this TIME_WAIT PID = 0 state.
Judging by the number of such connections with
the same remote address I would guess that the value you
zapped was 18?

I used the registry change to make the Max connections per server to
10.

That is about all I know for now, I will post back if you have
anything else for me to try

I'm up for whatever, so just let me
know

zackrspv · Mar 25, 2007

The port 80 things 80) are HTTP connections.
That's what I was expecting to see.
But again, many are in this TIME_WAIT PID = 0 state.
Judging by the number of such connections with
the same remote address I would guess that the value you
zapped was 18? However, I don't know if connections
which are in this state are constrained by the limit.
It might only be connections which are in the ESTABLISHED
state, for example, which would be counted before the limit
would take effect. (Again, I don't know.)

What I did find out about the TIME_WAIT connections, from an online
source: http://www.port80software.com/200ok/archive/2004/12/07/205.aspx
is that netstat is reporting that the connection has not been
established, is not being torn down, but is in a que to be established
on the server. Further reading tells me that the number of
emphemerial connect ports may be becomming exhausted on my local
machine. With this understanding, I may know what the problem is.

I use an add-on for IE7 called stumbleupon. It is a great toolbar
that allows you to surf page after page based on your interests. This
feature works because it queries your interests to the StumbleUpon
database and then returns a web address for your browser to visit.
Often, when you click the button, the browser does nothing. So, I
decided to experiment.

Closing out IE, and waiting for all of my connections to flush to the
normal set, I opened IE7 again. I ran the command again, just to
verify that only the HTTP connect to google was up (google as my
homepage with streaming maps, etc). Then, I clicked on Stumbleupon
Button, and low and behold several connections were opened up in
Time_WAIT and then filled. I clicked again, and the same situation,
and again, and again and again. Eventually, I clicked the stumble
button and it did nothing. I ran the netstat command and saw a list
of about 8 TIME_WAIT connections.

So, my suposition is this: Because the stumble upon toolbar works by
grabbing a web address from a external database (off the stumbleupon
servers), and it allows you to press the button mutiple times without
seeing any activity, it is conceivable that the stumbleupon database
server is sending the browser tens of addresses to cache. I verified
this by simply waiting. I clicked the button, nothing happened.
Clicked it a few more times, nothing happened. And then just watched
the netstat output. Boom, a page appeared. Then, another, and
another, as if I was watching an automated browsing session.

It would apear that SU (stumbleupon) caches these actions when the
button is pressed, and pulls the address every single time. I am
going to send this information out to the SU help forum, and see what
they say.

But, please continue to help me identify what is causing this, or how
to fix it. If it is not SU, I want to ensure it is nothing IE7 or XP
related.

Thanks!

zackrspv · Mar 25, 2007

What I did find out about the TIME_WAIT connections, from an online
source: http://www.port80software.com/200ok/archive/2004/12/07/205.aspx
is that netstat is reporting that the connection has not been
established, is not being torn down, but is in a que to be established
on the server. Further reading tells me that the number of
emphemerial connect ports may be becomming exhausted on my local
machine. With this understanding, I may know what the problem is.

I use an add-on for IE7 called stumbleupon. It is a great toolbar
that allows you to surf page after page based on your interests. This
feature works because it queries your interests to the StumbleUpon
database and then returns a web address for your browser to visit.
Often, when you click the button, the browser does nothing. So, I
decided to experiment.

Closing out IE, and waiting for all of my connections to flush to the
normal set, I opened IE7 again. I ran the command again, just to
verify that only the HTTP connect to google was up (google as my
homepage with streaming maps, etc). Then, I clicked on Stumbleupon
Button, and low and behold several connections were opened up in
Time_WAIT and then filled. I clicked again, and the same situation,
and again, and again and again. Eventually, I clicked the stumble
button and it did nothing. I ran the netstat command and saw a list
of about 8 TIME_WAIT connections.

So, my suposition is this: Because the stumble upon toolbar works by
grabbing a web address from a external database (off the stumbleupon
servers), and it allows you to press the button mutiple times without
seeing any activity, it is conceivable that the stumbleupon database
server is sending the browser tens of addresses to cache. I verified
this by simply waiting. I clicked the button, nothing happened.
Clicked it a few more times, nothing happened. And then just watched
the netstat output. Boom, a page appeared. Then, another, and
another, as if I was watching an automated browsing session.

It would apear that SU (stumbleupon) caches these actions when the
button is pressed, and pulls the address every single time. I am
going to send this information out to the SU help forum, and see what
they say.

But, please continue to help me identify what is causing this, or how
to fix it. If it is not SU, I want to ensure it is nothing IE7 or XP
related.

Thanks!

Hum, I am not sure my suposition is correct. I decided just to go to
shockwave.com and look through their online games. I was fine for a
few moments, and then boom, it froze. I looked at the netstat again,
and there were still tons of TIME_WAITS, but they were the same as
from before. I will let it flush out, and then see what it does. If
it freezes again without me using the Stumbleupon toolbar, then I am
not sure what the problem is.

Robert Aldwinckle · Mar 26, 2007

....

ashWebSv.exe is the Avast Antivirus web service (which scans website
connections for viruses)

Hopefully i provided more insight Let me know!

Yes. You certainly did. I think that that is the main cause of your problem
symptoms. It *is* a proxy and I suspect it is completely redundant and
thus unnecessary overhead. E.g. as the OE MVP continually tell us:
scanning E-mail is unnecessary because, provided the AV app is hooked
in to the file system write procedure, scanning new files there will be just
as effective, more efficient and less disruptive. I think that the same idea
would apply even more significantly to HTTP traffic where such scanning
would cause an absurd overhead and disruption to normal message flow
for no very good effect.

As a test of this idea try disabling this "service" but for the purpose of the test
keep your browsing restricted to sites that you trust. See if your symptoms
change for the better then. If it helps you can then assess how useful it is
to you in general.

http://www.avast.com/eng/webshield_issues.html

Good luck

Robert
---

zackrspv · Mar 26, 2007

...

Yes. You certainly did. I think that that is the main cause of your problem
symptoms. It *is* a proxy and I suspect it is completely redundant and
thus unnecessary overhead. E.g. as the OE MVP continually tell us:
scanning E-mail is unnecessary because, provided the AV app is hooked
in to the file system write procedure, scanning new files there will be just
as effective, more efficient and less disruptive. I think that the same idea
would apply even more significantly to HTTP traffic where such scanning
would cause an absurd overhead and disruption to normal message flow
for no very good effect.

As a test of this idea try disabling this "service" but for the purpose of the test
keep your browsing restricted to sites that you trust. See if your symptoms
change for the better then. If it helps you can then assess how useful it is
to you in general.

http://www.avast.com/eng/webshield_issues.html

Good luck

Robert
---

Well,

I disabled the Outlook Exchange and Webmail Scanners, and then
continued to surf the internet. It still froze, but it did help the
connection issue. Instead of over 130+ connections listed with
netstat it was only around 60-70. So, I decided to disable WebScan as
well. This reduced netstat down to around 30-50, which is good. But,
IE7 still hung, and I had to restart it to get it to come back.

I decided that this is just an annoyance, so I wrote a script that
detects if IE7 is hung, kills it, and relaunches a new one. Extra
overhead, yes, but hey, at least I don't have to do it myself.

I supose i could remove Avast and get another scanner, though I am not
sure which one. Heck, I am not even sure if it is the AVG's problem,
it may still be IE7's issue. I could run without any AVG in place,
but that is one heck of a risk, so not worth testing on this PC
(production pc after all). Perhaps a program like Panda Antivirus, or
ClamAV, dunno, what would you reccomend?

Thanks!

Robert Aldwinckle · Mar 26, 2007

(cross-post to XP Security added)

zackrspv said:
Well,

I disabled the Outlook Exchange and Webmail Scanners, and then
continued to surf the internet. It still froze, but it did help the
connection issue. Instead of over 130+ connections listed with
netstat it was only around 60-70. So, I decided to disable WebScan as
well. This reduced netstat down to around 30-50, which is good. But,
IE7 still hung, and I had to restart it to get it to come back.

Is it happening less frequently too?

I decided that this is just an annoyance, so I wrote a script that
detects if IE7 is hung, kills it, and relaunches a new one. Extra
overhead, yes, but hey, at least I don't have to do it myself.

I supose i could remove Avast and get another scanner, though I am not
sure which one. Heck, I am not even sure if it is the AVG's problem,
it may still be IE7's issue. I could run without any AVG in place,

I didn't suggest that. I just want that scanner that is implemented
as a proxy out of the picture.

but that is one heck of a risk, so not worth testing on this PC
(production pc after all). Perhaps a program like Panda Antivirus, or
ClamAV, dunno, what would you reccomend?

No idea. I guess I should have cross-posted to XP security
instead of XP Networking? ; }

Thanks!

Good luck

Robert
---

zackrspv · Mar 27, 2007

I didn't suggest that. I just want that scanner that is implemented
as a proxy out of the picture.

I did remove that proxy scanner (webscan and email scan (outlook scan
too)) Stopped them all. And, while the number of TIME_WAIT's
decreased, the IE7 session still froze.

--Phillip

Robert Aldwinckle · Mar 27, 2007

zackrspv said:
I did remove that proxy scanner (webscan and email scan (outlook scan
too)) Stopped them all. And, while the number of TIME_WAIT's
decreased, the IE7 session still froze.

Others have found (with similar packages) that such changes may not occur
reliably unless the entire package is uninstalled and reconfigured when reinstalled.

E.g. presumably that change eliminated all connections with localecho port 12080
and any others related to the ashWebSv PID? If not, that would be clear evidence
that simply trying to disable the option was not enough. What's left?

Good luck

Robert
---

zackrspv · Mar 28, 2007

Others have found (with similar packages) that such changes may not occur
reliably unless the entire package is uninstalled and reconfigured when reinstalled.

E.g. presumably that change eliminated all connections with localecho port 12080
and any others related to the ashWebSv PID? If not, that would be clear evidence
that simply trying to disable the option was not enough. What's left?

Good luck

Robert
---

Hi!

Yep. By disabling those web scanners, the proxy host was gone:

TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING
1608
TCP 0.0.0.0:443 0.0.0.0:0 LISTENING
1608
TCP 0.0.0.0:25 0.0.0.0:0 LISTENING
1608
TCP 0.0.0.0:21 0.0.0.0:0 LISTENING
1608
UDP 0.0.0.0:3456 *:*
1608
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
1608
TCP 127.0.0.1:1030 0.0.0.0:0 LISTENING
2060
TCP 192.168.2.5:4872 67.19.196.154:80 LAST_ACK
3248
TCP 192.168.2.5:4871 67.19.196.154:80 LAST_ACK
3248
UDP 127.0.0.1:4827 *:*
3248
TCP 192.168.2.5:4932 208.113.136.198:80 LAST_ACK
3248
TCP 192.168.2.5:4873 67.19.196.154:80 LAST_ACK
3248
UDP 0.0.0.0:17 *:*
384
UDP 0.0.0.0:19 *:*
384
TCP 0.0.0.0:19 0.0.0.0:0 LISTENING
384
UDP 0.0.0.0:13 *:*
384
UDP 0.0.0.0:9 *:*
384
UDP 0.0.0.0:7 *:*
384
TCP 0.0.0.0:17 0.0.0.0:0 LISTENING
384
TCP 0.0.0.0:13 0.0.0.0:0 LISTENING
384
TCP 0.0.0.0:9 0.0.0.0:0 LISTENING
384
TCP 0.0.0.0:7 0.0.0.0:0 LISTENING
384
UDP 192.168.2.5:138 *:* 4
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4
UDP 192.168.2.5:137 *:* 4
TCP 192.168.2.5:4143 192.168.2.4:139 ESTABLISHED 4
TCP 192.168.2.5:139 0.0.0.0:0 LISTENING 4
UDP 0.0.0.0:445 *:* 4
UDP 0.0.0.0:4500 *:*
624
UDP 0.0.0.0:500 *:*
624
TCP 192.168.2.5:4807 68.142.214.24:80 LAST_ACK
708
TCP 192.168.2.5:4773 64.69.47.73:80 LAST_ACK
708
TCP 192.168.2.5:4743 80.77.113.31:80 LAST_ACK
708
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
832
UDP 192.168.2.5:123 *:*
892
UDP 127.0.0.1:123 *:*
892
UDP 0.0.0.0:4884 *:*
940
UDP 0.0.0.0:1026 *:*
940
UDP 0.0.0.0:1250 *:*
940
UDP 0.0.0.0:1251 *:*
940
Proto Local Address Foreign Address State
PID

The only other ports that are consistently open are the NTP (123) and
Default outbound connection (1030); ASH only has one network service
port opened, which has minimal impact. When surfing the web, the
netstat list above doesn't change much, not many more are added, so it
was indeed those proxy scanners that was providing at least part of
the problem. But, it is not the answer in whole. The IE7 process
still crashes. Later this week, I am going to use my test computer
without an AVG product on it and see if the results can be
replicated. If they can, then it is not the AVG software cuasing the
issue. If it not replicated then most likely Avast is causing the
issue.

That is about all i can do