From what I can see...it seems to be the adsl router provides 'infected' DHCP Lease Option 252.

When Windows Proxy Settings (LAN Automatically detect setting) was turned off or if you setup Static IP (instead of Obtain IP address and obtain DNS server address automatically)......chrome will load up fast just fine.

Android and Linux OS seems to be unaffected as both don't make use of WPAD (Web Proxy Auto-Discovery Protocol). Not sure about IOS....

Changing the router/modem seems to fix the problem.

Damn it.
Seem like W3410N and W7100 got hijacked by some malware?
Or wrong default domain configuration?


Both modem are using 'domain.name' as Connection-specific DNS Suffix.
What is your result when you run 'nslookup domain.name'?

server : UNKNOWN
Address : 192.168.1.1

Got the same as yours when using TM supplied adsl router.

Result from new adsl router:



Guess our TM Innacomm modem/routers have some sort of unknown vulnerabilities being exploited right now EDIT: or being exploited for some time without us knowing. The only reason why we noticed it = the proxy server we "supposed" to connect is down.
I simply propose my company IT guys to buy new and modern adsl routers. Give up on the old one.

This post has been edited by JohnLai: Sep 28 2017, 11:39 AM

I'd been looking solution for this, so new ADSL modem should be able to solve this problem? Damn, I even had to download Windows update manually.

For my PC windows update last checked at 25 September while my dad PC last checked at 26 September, which is kinda weird, I was kinda expecting the same timing since both PC is connected to the same router.

This post has been edited by Xaive: Sep 30 2017, 10:52 AM

Yes, I can confirm this, replacing the adsl router fixed it.

A simple reset for Innacomm modem will not solve it.....technically, resetting the Innacomm modem/router and reconfiguring it again will fix it....however, it get "re-infected" within 30 minutes to an hour the moment it connected to Internet.
In case you wanna know, remote management and other unnecessary services inside the modem/router are properly disabled. SPI firewall is enabled. No IPv6 is enabled. Password for both TMAdmin and TMUser are changed.

High probability it is either backdoor or some unknown vulnerability.....the fact is.....we have no idea how long our windows pc have been connected to that proxy server.

edit: grammar correction

This post has been edited by JohnLai: Sep 30 2017, 02:38 PM

That's why I changed my ADSL modem router when I first got it as the Innacomm modem/router is very unreliable and full of vulnerabilities. If you go to Shodan, TM routers, specifically the Dir-615, are the worse to be exploited as the DNS servers in that particular router are all totally compromised based on what I can see.

This post has been edited by SilentVampire: Sep 30 2017, 02:45 PM

I ran the nslookup it shows a non-authoritative server name domain.name.domain.name with ip 202.71.99.194, I typed the IP into the urlbar it opened up Chrome download location asking to save. Does it help?

This post has been edited by Xaive: Sep 30 2017, 03:19 PM

Nope, that file is empty.
Previously, that IP was used to redirect user who mistyped URL or domain to TM custom advertisement page.
Beside...it should be 'domain.name' , not 'domain.name.domain.name'.

time to pay for a new modem~

thanks.

Edit 1st Oct: Everything just went back normal today. I don't know what have I done~ Wew

This post has been edited by Xaive: Oct 1 2017, 09:19 AM

Any good modem (modem only, not modem router) to recommend?

I just found a way to repro the problem, I hope this could help you. There's this program called Cok Auto Mouse Clicker, once you installed this, all the problems occurred; uninstalled it solve everything.

Cok Auto Mouse Clicker?
Unrelated as company PCs don't have such software installed in first place.

So, I used back the innacomm modem/router and installed that clicker on one of the pc, then uninstalled it. Still same slowdown issue after few minutes.

EDIT:
Maybe you already disabled "automatically detects settings" at LAN Settings or you use Static IP configuration?

In any case though....one can run chrome://net-internals/#events at google chrome to check how the connection is made.

EDITV2: Look for ID 124......I just saw your edited post on 1 October, maybe the something inside the router redirected the connection to another server since you said you didn't change anything before and the speed suddenly back to fast? Then, filter PROXY_SCRIPT_DECIDER.

This post has been edited by JohnLai: Oct 2 2017, 04:02 PM

testing

Can someone post instructions on how get enable IPV6 for Dlink-2730E. Thanks.

I am using Dlink 880L, IPV6 works, but only for less than 24 hours. Everyday have to restart.
Anything that route trough IPV6, eg. Youtube, Play Store, Tumblr, Whatsapp will stop working after a while.

IPV6 still in infant stage in Malaysia.
Therefore, it is not stable and not recommended to setup IPV6

Not recommended as the integration is still very early stages. Stick with IPv4.

Definitely not. I wouldn’t recommend it.

Precisely
dun understand some users still want to use IPV6 in Malaysia.
They thought Malaysia is already move up to the standard using IPV6.
Sigh!
I can say IPV6 still long way to go...

guys, can this modem D-Link DSL-2730E connect unifi lite 10mbps?

No.