Computer is slow to connect to the Internet and pictures are corrupted

[bicyclist]

Dave:

I ran the FRST and the log is below.  I had to download the program onto the other computer and transfer the program via USB stick to my computer; the program failed to download onto my computer.   

I did not find the second FRST log (Addition.txt).   I checked  my desktop, the directory where my FRST program is stored and ran, and that second log is not there (the first log [text log] is there though and I posted it below). 

On the first run of FRST, Comodo had a pop-up that said it would put the FRST program into the sandbox (to prevent the tool from running I think?) and I had a very brief opportunity to disable Comodo's actions (the pop-up disappeared)--I missed the opportunity--but nothing was under quarantine in the Comodo.   

I went ahead and ran the FRST and it generated the log below.   The Comodo pop-up did not return on subsequent runs of the FRST nor did any any other security programs pop-up during the FRST runs. 

I tried to run FRST as an administrator (after running it differently as a "Current user" as mentioned in the following paragraph) by right clicking on the program, clicking "Run as..." and, on the window "Which user account do you want to use to run this program?", I checked "The following user (Administrator)."  But the program will not run under administrator because I do not have a password for the administrator.   Is there something I need to do further to run as an administrator if this needed at this point? 

I ran the FRST under "Current user" with the feature "Protect my computer and data from unauthorized program activity" check marked and it generated the log below.  Let me know if you want me to run FRST with that feature unchecked.

I also ran FRST twice; once with the "Internet Services" checked and another time with "Internet Services " and "Other Services" checked and it generated the same log.  The whitelist you show is different than the one I had; mine had:

Internet Services
Windows Firewall
System Restore
Security Center/Action Center
Windows Update
Windows Defender
Other Services
 
Only one version of FRST was available/downloaded upon clicking on the link you provided--no selection was offered.

Thank you for helping me with these computer problems; I appreciate your patience. 



FRST log:    


Farbar Service Scanner Version: 26-07-2015
Ran by User (administrator) on 16-08-2015 at 16:47:32
Running from "C:\Documents and Settings\User\Desktop"
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Other Services:
==============


File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\afd.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\netbt.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\tcpip.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\ipsec.sys => File is digitally signed
C:\WINDOWS\system32\dnsrslvr.dll => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed

Extra List:
=======
AegisP(1) cmdHlp(18) Gpc(3) IPSec(5) NetBT(6) SbFw(15) SbFwHt(9) SBFWIMCLMP(7) sbtis(16) sbtisht(10) Tcpip(4)
0x0D00000005000000030000000400000012000 0000E0000000D00000001000000070000000900 00000A0000000F0000001000000006000000
IpSec Tag value is correct.

**** End of log ****

[SuperDave]

Comodo had a pop-up that said it would put the FRST program into the sandbox (to prevent the tool from running I think?)

Running a program in the sandbox is just a way of protecting your computer.

slow computer and corrupted pictures

What do you mean by slow computer. Is it genarally slow or just while surfing?
What happens with the pictures? Cannot open them? Any messages?

[bicyclist]

Dave,

My computer is not connecting to Internet websites properly; something is interfering with the normal display of pictures and text.  Some connections to the Internet are performed at normal speed (my e-mail and some websites) but most of the connections are slow to display and what is displayed is displayed poorly. 

My computer functions normally offline; my word document programs, files, and photos work normally and at normal speeds.   

While surfing the web I find that the problems are inconsistent--pictures and text not displayed normally.  Pictures are displayed in a banded format; the banded format includes images displayed in horizontal stripes across the image and the stripes consist of strange looking colors or an image is displayed in small rectangular pixels and/or a portion of the image is missing.  Text is sometimes scrambled or left justified on the page while on the Internet.     



Some specific examples of my computer problems (problems occur while surfing the Internet):

My home page, MSN, has not downloaded in the last six hours today; during the previous week I was able to download the top half of that webpage in about a minute or two up to twenty minutes. 

Upon trying to connect to some commercial type websites (the camping merchandise supply websites mentioned in my earlier replies) I sometimes get an error message "Content Encoding Error, the page you are trying to view cannot be shown because it uses an  invalid or unsupported form of compression."   Some websites fail completely to connect one day while partially connecting the next day--things are inconsistent.

The Campmor website is now providing text descriptions of the images in place of images; this is  fixed sometimes by reloading the page .   A few days ago I got almost everything in their normal format except for a few pictures that displayed in horizontal colored stripes that obscured the image.   

The Craigslist website is not displaying the "thumb" pictures of items and is only displaying text--normally I get pictures too on that page.  Only when I click on an item is the image of the item displayed (in a new page--this portion of is normal operation).  It is puzzling to me that a function is performing in a normal fashion while that function is downstream of a abnormally functioning operation.       

The REI website is only showing text left justified with a a few logos included rather than the normal layout of text and pictures evenly spread across the page.   Sometimes I get some pictures at the bottom of this page-- this problem too is inconsistent.

Text is sometimes displayed in incomprehensible language; this is sometimes fixed by reconnecting via the reload button. 

These problems occur while surfing the web with either of my browsers (Mozilla Firefox and Internet Explorer). 




       

[SuperDave]

Does it do this with different browsers?

[bicyclist]

Dave,

Yes, I have the same problems with both Internet Explorer and Mozilla Firefox browsers.   I listed those problems in my earlier replies; I apologize for those very long  replies--I'll try to keep my replies short.     

I tried both browsers again today and I am having the same image/picture quality issues on the camping merchandise websites and sometimes I can't connect to those websites at all though I repeatedly hit the refresh button.   

There is one slight/new development; I noticed there is that same strange looking small animated image of a skull in the center of a rotating green colored disk again on the Campmor site that I mentioned to you in an earlier reply (item #2, original post, July 30) when connecting to that site via the Internet Explorer browser.    But this time the image is displayed at the top of the page without any action taken on my part.    The skull image is not associated with any page advance button either--the image is displayed at the top of the page on connection to the page.   When I right click on the image I do not get a drop down menu.   I think that image means I have some malware though I'm not entirely sure.     

The rest of that Campmor page is not displaying normally via Internet Explorer; it shows the site's "Help" button information vertically on the page that is normally displayed only when you hit that button.   The rest of that toolbar, that is normally located at the very top of the page, is missing.   Also the second toolbar (the header logo) is displayed normally (horizontally across the page) but the header picture is missing. 

On the Mozilla Firefox browser that webpage is displayed normally except the header picture is displayed in small rectangular pixels and with some colored horizontal bands near the bottom of that picture.   Sometimes that picture is displayed with yellow and red tinting over the entire image.   The skull image is displayed when clicking for the next page of merchandise.

Also, I tried again to run my A/V again today and something really weird happened; it kept updating past the size of the update (407 MB and counting when it shows a 184 MB update size) and the update logo/pie-chart indicates a 100% update has occurred.   
   
 

[SuperDave]

What happens when you boot in Safe Mode with NetWorking?
**********************************************
Please download MiniToolBox to Desktop and run it.



Checkmark the following boxes:

• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• List content of Hosts
• List IP Configuration
• Lst Last 10 Event Viewer Errors
• List Users, Partitions and Memory Size
[/b]

Click Go and copy/paste the log (Result.txt) into your next post.
*************************************************************
Please go to Kaspersky website and perform an online antivirus scan.

1. Read through the requirements and privacy statement and click on Accept button.
2. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
3. When the downloads have finished, click on Settings.
4. Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
Spyware, Adware, Dialers, and other potentially dangerous programs
Archives

5. Click on My Computer under Scan.
6. Once the scan is complete, it will display the results. Click on View Scan Report.
7. You will see a list of infected items there. Click on Save Report As....
8. Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
9. Please post this log in your next reply.

[bicyclist]

Dave,

I tried Networking in Safe Mode and the same problems exist (picture problems and slow connectivity or no connectivity to websites). 

The Kaspersky Security Scan download will not run on my computer.  I get a Kaspersky page with a message that says "If the download does not start automatically, click here."  I clicked the "clicked here" several times on several tries of downloading the program--it would not start.

I was able to download the MiniToolBox on the other computer (it would not download on my computer) and transfer it to my computer via a USB stick.  The log is below.


MiniToolBox log:


MiniToolBox by Farbar  Version: 25-07-2015 01
Ran by User (administrator) on 26-08-2015 at 16:15:27
Running from "C:\Documents and Settings\User\Desktop"
Microsoft Windows XP Professional Service Pack 3 (X86)
Model: HP dc5000 SFF(PB477A) Manufacturer: Hewlett-Packard
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================


Windows IP Configuration



Successfully flushed the DNS Resolver Cache.


========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================

127.0.0.1       localhost

========================= IP Configuration: ================================

Broadcom NetXtreme Gigabit Ethernet for hp = Local Area Connection (Connected)


# ----------------------------------
# Interface IP Configuration         
# ----------------------------------
pushd interface ip


# Interface IP Configuration for "Local Area Connection"

set address name="Local Area Connection" source=dhcp
set dns name="Local Area Connection" source=dhcp register=PRIMARY
set wins name="Local Area Connection" source=dhcp


popd
# End of interface IP configuration




Windows IP Configuration



        Host Name . . . . . . . . . . . . : KenComputer

        Primary Dns Suffix  . . . . . . . :

        Node Type . . . . . . . . . . . . : Unknown

        IP Routing Enabled. . . . . . . . : No

        WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



        Connection-specific DNS Suffix  . :

        Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet for hp

        Physical Address. . . . . . . . . : 00-0F-20-6F-6B-2E

        Dhcp Enabled. . . . . . . . . . . : Yes

        Autoconfiguration Enabled . . . . : Yes

        IP Address. . . . . . . . . . . . : 192.168.1.34

        Subnet Mask . . . . . . . . . . . : 255.255.255.0

        Default Gateway . . . . . . . . . : 192.168.1.1

        DHCP Server . . . . . . . . . . . : 192.168.1.1

        DNS Servers . . . . . . . . . . . : 192.168.1.1

        Lease Obtained. . . . . . . . . . : Wednesday, August 26, 2015 1:20:44 PM

        Lease Expires . . . . . . . . . . : Saturday, August 29, 2015 1:20:44 PM

Server:  UnKnown
Address:  192.168.1.1

Name:    google.com
Address:  216.58.216.110



Pinging google.com [216.58.216.110] with 32 bytes of data:



Reply from 216.58.216.110: bytes=32 time=330ms TTL=53

Reply from 216.58.216.110: bytes=32 time=497ms TTL=53



Ping statistics for 216.58.216.110:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 330ms, Maximum = 497ms, Average = 413ms

Server:  UnKnown
Address:  192.168.1.1

Name:    yahoo.com
Addresses:  98.138.253.109, 206.190.36.45, 98.139.183.24



Pinging yahoo.com [98.138.253.109] with 32 bytes of data:



Reply from 98.138.253.109: bytes=32 time=55ms TTL=54

Reply from 98.138.253.109: bytes=32 time=56ms TTL=54



Ping statistics for 98.138.253.109:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 55ms, Maximum = 56ms, Average = 55ms



Pinging 127.0.0.1 with 32 bytes of data:



Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 0f 20 6f 6b 2e ...... Broadcom NetXtreme Gigabit Ethernet for hp - ThreatTrack Security Firewall NDIS IM Filter Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.1.1    192.168.1.34     20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1     1
      192.168.1.0    255.255.255.0     192.168.1.34    192.168.1.34     20
     192.168.1.34  255.255.255.255        127.0.0.1       127.0.0.1     20
    192.168.1.255  255.255.255.255     192.168.1.34    192.168.1.34     20
        224.0.0.0        240.0.0.0     192.168.1.34    192.168.1.34     20
  255.255.255.255  255.255.255.255     192.168.1.34    192.168.1.34     1
Default Gateway:       192.168.1.1
===========================================================================
Persistent Routes:
  None

========================= Event log errors: ===============================

Application errors:
==================
Error: (08/22/2015 11:20:53 PM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.

Error: (08/22/2015 07:17:32 PM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list cab from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: This operation returned because the timeout period expired.

Error: (08/22/2015 07:17:11 PM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.

Error: (08/22/2015 07:15:32 PM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list cab from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: This operation returned because the timeout period expired.

Error: (08/20/2015 10:30:19 AM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list cab from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The specified server cannot perform the requested operation.

Error: (08/20/2015 10:30:19 AM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list cab from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The specified server cannot perform the requested operation.

Error: (08/20/2015 10:30:19 AM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.

Error: (08/20/2015 10:30:19 AM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list cab from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The specified server cannot perform the requested operation.

Error: (08/20/2015 10:30:19 AM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.

Error: (08/20/2015 10:30:19 AM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.


System errors:
=============
Error: (12/25/2014 12:23:00 AM) (Source: Service Control Manager) (User: )
Description: The szkgfs service failed to start due to the following error:
%%2

Error: (12/25/2014 12:22:54 AM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
IntelIde
szkgfs

Error: (12/25/2014 12:22:53 AM) (Source: Service Control Manager) (User: )
Description: The IPSEC Services service terminated with the following error:
%%1747

Error: (12/23/2014 07:08:05 PM) (Source: Service Control Manager) (User: )
Description: The szkgfs service failed to start due to the following error:
%%2

Error: (12/23/2014 07:07:36 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
IntelIde
szkgfs

Error: (12/23/2014 07:07:33 PM) (Source: Service Control Manager) (User: )
Description: The IPSEC Services service terminated with the following error:
%%1747

Error: (12/23/2014 02:31:24 PM) (Source: Service Control Manager) (User: )
Description: The szkgfs service failed to start due to the following error:
%%2

Error: (12/23/2014 02:31:16 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
IntelIde
szkgfs

Error: (12/23/2014 02:31:15 PM) (Source: Service Control Manager) (User: )
Description: The IPSEC Services service terminated with the following error:
%%1747

Error: (12/22/2014 08:54:19 PM) (Source: Service Control Manager) (User: )
Description: The szkgfs service failed to start due to the following error:
%%2


Microsoft Office Sessions:
=========================
Error: (08/22/2015 11:20:53 PM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe data is invalid.

Error: (08/22/2015 07:17:32 PM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThis operation returned because the timeout period expired.

Error: (08/22/2015 07:17:11 PM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe data is invalid.

Error: (08/22/2015 07:15:32 PM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThis operation returned because the timeout period expired.

Error: (08/20/2015 10:30:19 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe specified server cannot perform the requested operation.

Error: (08/20/2015 10:30:19 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe specified server cannot perform the requested operation.

Error: (08/20/2015 10:30:19 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe data is invalid.

Error: (08/20/2015 10:30:19 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe specified server cannot perform the requested operation.

Error: (08/20/2015 10:30:19 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe data is invalid.

Error: (08/20/2015 10:30:19 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe data is invalid.


========================= Memory info: ===================================

Percentage of memory in use: 50%
Total physical RAM: 1527.48 MB
Available physical RAM: 751.35 MB
Total Virtual: 2905.03 MB
Available Virtual: 2054.26 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:74.53 GB) (Free:37.87 GB) NTFS

========================= Users: ========================================

User accounts for \\

Administrator            ASPNET                   Guest                   
HelpAssistant            SUPPORT_388945a0         User                     


**** End of log ****

[SuperDave]

Your internet connection appears to be ok. The only thing I can think of at this time is that the modem is causing these intermitten problems. Have you checked with your ISP?

[bicyclist]

Dave,

Regarding the checking with my ISP, the other computer is connected to the same modem and the other computer does not have the problems I am experiencing on my computer--there is a good connection; I think that means there is a problem in my computer.  Let me know if I'm missing something here and I'll make the inquiry. 

I tried disconnecting and reconnecting the cable between my computer and the switch at the modem--no change in performance/did not fix problems.

I tried Kaspersky Security Scan again but this time in Safe Mode on my computer.   I was able to get the startup executable file downloaded on the other computer and transferred to my computer via a USB stick.  Upon running the startup file on my computer in Safe Mode, my computer would not download the setup files of the application; the program almost completes downloading then stops.   I tried to download half a dozen times and it failed to download at the same point each time.     

I appreciate your help.     

[SuperDave]

Could you please check your Device Manager to see if there are any yellow warnings?

[bicyclist]

Dave,

I checked the Device Manager and there are no yellow warnings; I read the Computer Hope's section on "Identifying problems in Windows Device Manager" to understand what to examine.

By the way, on that Computer Hope page the pictures are corrupted (banded on the bottom half of the picture [top half of picture is OK] and that bottom half of the picture has a purple background color [normal background is white color]).  The text on that page is fine--no problems. 

[SuperDave]

Did you try another cable connecting your computer to the internet? Did you check your internet interface to make sure it's secure?

[bicyclist]

Dave,

I have not tried another cable yet; I have been able to connect to my e-mail and many websites on my computer through the existing cable.   If you think I need to check the cable, I'll bring my computer to the other/working computer and swap cables rather than purchase another long cable--OK?

How do you check the internet interface to make sure it is secure?   I couldn't find any specific instructions from the Computer Hope dictionary.       

[SuperDave]

Any way you swap the cable would be just fine. It could be something intermittent in the cable. If this is a pc just open the case and make sure the card is seated properly in the PCI slot.

[bicyclist]

Dave,

I had no luck with another cable connecting my PC to the Internet.   I have the same picture problems and connectivity issues with that new cable.   

I didn't find any problems with the cards.   I found all the cards (two) seated properly in their slots.