Windows XP SP2 TCP Connection Limit (Event ID 4226)

With the release of Service Pack 2 (SP2) for Microsoft Windows XP, the SP2 has introduced a feature that limit concurrent TCP connection attempts that are possible to 10 per seconds. In Service Pack 1 or without Service Pack, there is no limit on concurrent TCP connection attemps.

This feature is introduced in order to reduce the threat of computer worms spreading too fast without control. With the limit, only a maximum of 10 connection attemps per second are allowed. This may have affects applications, servers and p2p programs that attemp to open many outbound connections at the same time.

To know if you’re hitting concurrent TCP connection attempts limit, use the Event Viewer. Under “System”, look for TCP/IP Warnings saying: “TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts”. It has the Event ID of 4226.

To change or remove the limit imposed on connection attempts in Windows XP SP2, you can use the following program that works on every language of Windows XP:

Event ID 4226 Patcher version 2.23d
Website: http://www.lvllord.de/

Update: TCP/IP simultaneous connection limit patch for Windows Vista

You might want to back up the tcpip.sys, although the program has the ability to restore tcpip.sys to original state.

45 Responses to “Windows XP SP2 TCP Connection Limit (Event ID 4226)”

  1. Andre
    October 9th, 2009 15:51
    45

    Trojan in the patch, greedy motherf*rs!

  2. borhan
    August 8th, 2009 18:35
    44

    my speed was suddenlly drop to 5 kb than i install it and really it give a sudden boost which take the speed to 15 kb.i never used any software that give the result so efficiently .i dont know would it be same again after boot. but definitly i m goonna use it again and again

  3. Waqas
    July 10th, 2009 19:58
    43

    Guyzz..Relaxx ..jUST Install..Believe me There is Nothing in it.Its Compelety Clean..iT WORKED superbebely for me.no problems at all.I have xp sp2.

  4. Le anti-feature… « JP’s Web Place
    July 6th, 2009 15:48
    42

    [...] Nell’esempio si tratta della limitazione al numero massimo di connessioni TCP apribili contemporaneamente presente in alcune versioni di Windows: inserire quel blocco ha comportato certamente uno sforzo supplementare per gli sviluppatori di Microsoft, sforzo che però verrà ripagato dalla possibilità di vendere versioni con e senza tale limite, ovviamente con prezzi ben diversi. Ufficialmente questa “feature” è stata introdotta per diminuire la diffusione di eventuali worms sulla Rete (cfr. post come questo)… [...]

  5. Half-Open Outbound TCP Connections Limit Removed in Windows 7 and Vista SP2 (No Patch Required) » My Digital Life
    June 7th, 2009 18:33
    41

    [...] patcher? Microsoft introduces a limit (of 10) to restrict number of allowed simultaneous outgoing half-open TCP connections in Windows XP SP2 in a bid to prevent virus or malicious program to make unlimited infectious connections to other [...]

  6. Paulo Rio de Janeiro
    April 8th, 2009 01:20
    40

    BTW,

    What’s much weird is (please see post below) is that the number of half connections has been changed after applying the patch. It`s now 50 but still the limit is effective.
    Please, can anyone help me?
    Thanks

    Paulo

  7. Paulo Rio de Janeiro
    April 8th, 2009 01:00
    39

    Hi!
    I`ve just applied and re-applied patch and it’s still not overcaming XP SP2 limit.
    Can anyone please give me some help?
    Thanks in advance.

    Paulo

  8. Zack
    April 5th, 2009 12:22
    38

    RTFM…

  9. Alex
    February 3rd, 2009 08:53
    37

    Lol what a fcking morrons here LOL someone kill me please

  10. TCP-Z Free Download (Half Open TCP/IP Memory Patcher for x86 and x64 Windows 7, Vista and XP) » My Digital Life
    January 15th, 2009 00:56
    36

    [...] than and contains all features of most other TCP/IP half-open connection limit patchers such as Event ID 4226 Patcher, EvID4226 Fix, TCP/IP Patch, VistaTCPPatch, Half-Open Limit Fix and etc. It supports patching of [...]

  11. Jeff
    January 14th, 2009 17:01
    35

    Listen up, morons, numbskulls, fuckwits, and retards: The reason your malware detection system sees the file as a trojan is because it acts exactly like what they’re trained to look for. It’s called heuristics. That file makes a change to a system file that is not “supposed” to be changed. Much like a trojan that edits some nearly random key’s value. There are some other similarities, but the point is, it is not malware. It’s not a trojan, it’s not a virus (learn the difference before you spout your stupid bullshit here and everywhere else, please?), it’s perfectly clean. It’s linked from bleepingcomputer.com, for Christ’s sake.

    And ali, I would help you, but I don’t feel chavs ought to be on the internet. Especially poseurs. You put it on your “data server”, did you? That’d be your first problem, you installed it on an imaginary computer that you don’t have and even if you did you wouldn’t want to install it there. Keep it realz, homie g peaceout

    Just die already.

  12. Javier
    January 11th, 2009 06:04
    34

    The file is Spyware!!!!!!!!!
    Don´t Install run or decompress it in your computer!!!!!!!!!!
    I repeat, it´´s spyware!!!!!!!!!!

  13. ali hasan
    December 22nd, 2008 21:07
    33

    i uzed dat patch in my data server which installed “windows xp professional service pack 2). it seemz work fine coz all the detail which it should show ,it showz , but damn tcp/ip 10 user limit never changed , i user default 10 to 50 user mathod and also custom userz like 20/30/xxx . but no , it doesn’t work. can any body help me out, i alsoo try to run it in safemode, but no damn naver workz :( , person really will b appreciated if he found the solution for me, plz , thx in advance

  14. ali hassan
    December 22nd, 2008 21:02
    32

    i uzed dat patch in my data server which installed “windows xp professional service pack 2). it seekz work find coz all the detaila which it should show it showz , but damn tcp/ip 10 user limit never changed , i user default 10 to 50 user mathod and also custom userz like 20/30/xxx . but no , it doesn’t work. can any body help me out, i alsoo try to run it in safemode, but no damn naver workz :( , person really will b appreciated if he found the solution for me, plz , thx in advance

  15. JCK
    December 22nd, 2008 02:50
    31

    I suggest those claiming virus undetected should change their antivirus system.

  16. JCK
    December 22nd, 2008 02:48
    30

    Virus! believe me or not is up to u!

  17. Moon
    December 1st, 2008 04:11
    29

    There is no trojan in there and the patch worked like a charm for me. I bought a new pc with windows xp home some weeks ago and utorrent would constantly get tracker timeouts after a short while. Since I used the patch everything works without a problem. Using a firewall, antivirus and processguard, I would definately have noticed any trojan it would have contained.

  18. ddon
    November 18th, 2008 21:00
    28

    you guys are talkin bullshit there no virus in there

  19. franco
    November 10th, 2008 21:53
    27

    ATTENZIONE !!!
    Il file patch tanto famoso dalla Lvllord è in realtà un TROJAN downloader !!!!!!!!

  20. Lucas
    November 6th, 2008 10:24
    26

    Do not download this piece of shit patch. It did the exact opposite of what it is suppose to, I now get jack shit download speed and uninstalling it doesn’t fix it. Now I have to look for a way to fix it.

  21. Windows Half-Open Limit Fix (Patch) Free Download to Remove XP, Vista and Server 2003 (32 and 64-bit) TCP 4226 Connection Attempts Limit » My Digital Life
    October 15th, 2008 02:09
    25

    [...] outbound half-open TCP/IP connection? For Windows XP, LvlLord.de wrote an automated tool EventID 4226 Patcher to patch the binary of tcpip.sys without user manual intervention. However, for Windows Vista, [...]

  22. Hatterasman
    September 11th, 2008 13:54
    24

    Does the Event 4226 patch work with XP Pro SP3? I already know that it works with SP2 if it is done correctly.

  23. mathuzar
    September 7th, 2008 15:36
    23

    please help!!!
    How can I configure my dialer to call and receive phone line usig usb external voice modem.
    I don’t use internet.
    I use phone line only.

  24. KiNG
    August 6th, 2008 23:58
    22

    Damn it, i still got a BSOD :

    Driver_IRQL_LESS_OR_EQUAL

    It only happens when azareus vuze runs.

    Help me out.

  25. KiNG
    August 6th, 2008 21:32
    21

    Hey, thanks for posting this tip, i was passing through hell with VUZE AZAREUS, until my mind stroke me the idea of increasing connection, now i can forget about DRIVER_IRQL_LESS_OR_EQUAL.

    Funny though it is simple.

    Keep posting dude.

  26. Jake
    July 19th, 2008 18:38
    20

    How can I patch the XP x64 bit TCP system?
    the latest “Event ID 4226 Patcher version 2.23d” doesn’t work.. :(
    Maybe because it’s updated with SP2 !?

    Please help..

  27. Salem
    June 20th, 2008 16:47
    19

    Loosers! Every body don’t download this crap file , it fucked system and doesn’t work perfectly . i prefere to doit manually if there is anyway !

  28. Anon
    May 4th, 2008 06:25
    18

    So instead of fixing the exploits worms use, they simple cripple the system and call it a fix. Fucking microshit retards!

  29. Simo
    April 28th, 2008 10:48
    17

    lol, keep in mind that the patch didn’t work on your computer. That doesn’t mean it doesn’t work.

    I just upgraded my limit from 10 to 50 with that program (It was the EvID4226Patch.exe).

    So thanks for these instructions!

  30. lol
    April 25th, 2008 00:47
    16

    The patch fucked up my PC!
    the firewall intrusions are blocking traffic every seoncd!!

    don’t download this crap FILE IT Didn’t work

    fuck off biotch

  31. Rusty
    March 13th, 2008 08:25
    15

    Lvlord’s patcher is crap. It doesn’t work. It simply disables the event 4226, doesn’t actually remove the limit of 10 half-open connections.

  32. nubia
    December 1st, 2007 05:03
    14

    I’m trying to use the LvlLord’s TCP/IP patcher on my OS which is Windows Vista. When the dos screen comes up, it tells me that there is an error. The error says: Error read file “C:\Windows\System32\Drivers\TCPIP.SYS” at position 0. Press any key to continue. I can’t get to press “Y” as it won’t allow me pass the error screen. Any help here? is there one suitable to run on Vista?

  33. AcidGawd
    May 30th, 2007 09:21
    13

    When I try to do LvlLord’s patch I am told that the following files could not be renamed:
    -\I386\TCPIP.SY_

    Please rename these files manually.

    How do I do this?

  34. SODEVE » Blog Archive » How To Setup VPN In Your Office and Access It From Home.
    May 8th, 2007 23:02
    12

    [...] are good to go. Please note that Windows XP SP has limited connection. Check this article on how to remove the limitation. It would be better if you use your Windows 2000 Server/Windows 2003 Server as the VPN server since [...]

  35. Windows Vista tcpip.sys Connection Limit Patch for Event ID 4226 » My Digital Life
    April 9th, 2007 03:30
    11

    [...] half-open (incomplete) outbound TCP connection attempts per second that the system can make, as in Windows XP SP2, in order to protect the system from being used by malicious programs, such as viruses and worms, [...]

  36. Download Speed Problem? « PutraWorks
    March 26th, 2007 23:25
    10

    [...] And this -> Windows Xp Sp2 Tcp Connection Limit Event Id 4226 [...]

  37. Vista Network Connections - Error
    February 18th, 2007 02:46
    9

    [...] Vista Network Connections Is there a Vista network connection limit thing just like SP2 of XP has? example of the SP2 limit: http://www.mydigitallife.info/2005/1…event-id-4226/ [...]

  38. Serdal Kagan
    February 8th, 2007 22:11
    8

    Hello,

    I used it but it didnt work. My system WinXP Pro SP2 opened in Safe Mode and when I run this file, said “do you want to change limit to 50″ I said yes. Restarted system but what is the problem??? Please help me.

  39. Richard
    November 20th, 2006 19:31
    7

    The file is not infected. It just does something that a virus/worm might also want to do (to increase its transmission rate). So it is correctly reported as having virus like behaviour.

    Google* “Event ID 4226″ and read the comments on David Kaspar’s blog (top link for me).

    * Of course I really mean “use a non-specific internet search tool that will not sue you for using their name as a verb”. c.f. “Hoover”

  40. Alex
    November 18th, 2006 11:25
    6

    The File is infected. You loosers!

  41. Wguimb
    November 9th, 2006 14:58
    5

    FYI — AVG scan of the ZIP file containing the Event ID 4226 Patcher version 2.23d is infected with embedded object HackTool.AB

  42. slip
    August 31st, 2006 14:47
    4

    It doesen’t work with my system, WTF?

  43. Watch Streaming p2p Live TV on the Internet » My Digital Life
    January 6th, 2006 18:38
    3

    [...] Disable Windows XP Service Pack 2 TCP Connection Limit [...]

  44. ppStream Connection Limit in Configuration Settings » My Digital Life
    January 4th, 2006 13:18
    2

    [...] Note: TCP connection limit of Microsoft Windows XP SP2 must be altered to higher value in order for this tweak to work properly. [...]

  45. ppStream - P2P based Streaming Media (P2P Internet TV) » My Digital Life
    January 2nd, 2006 02:46
    1

    [...] Note: If you’re using Windows XP with SP2, you need to patch the limit of simultaneous TCP/IP connection of 10 to higher number, i.e. 100. Note: As the ppStream will download media stream at optimum speed of about 372 kbps, so it’s best to have a faster Internet connection to have better experience. 512 kbps is simply not enough. [...]

Leave a Reply

You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Subscribe to comments feature has been disabled. To receive notification of latest comments posted, subscribe to My Digital Life Comments RSS feed or register to receive new comments in daily email digest.

New Articles

Incoming Search Terms for the Article

xp tcp patch - windows xp connection limit - xp connection limit - windows xp 10 connection TCP limit - Windows XP TCP/IP connection limit and Event ID 4226 patch - TCPIP connection limit - windows xp max connection - xp tcp connection limit - xp max connections patch - tcp limit - windows xp tcp patch - increase tcp connections xp - tcp patch xp - max connection XP - windows xp 10 connection limit - tcp 4226 - xp connection patch - office 2003 user limit - windows xp connection limit patch - remove tcp limit - windows xp maximum connections - xp simultaneous connections - max tcp connections - max tcp connections xp - winxp connection - Windows XP TCP/IP conecition limit and event ID 4226 - window xp 10 connections limit - windows xp connections patch - 4226 tcp ip has reached the security limit imposed on the number of concurrent tcp connect attempts - windows xp event 4226 - xp 10 connection limit - xp connections patch - simultaneous tcp connections - TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts. - xp tcpip patch - increase tcp ip connections xp - crack for xp 10 concurrent connections - EventID 4226 Patcher Version 2.23d virus - SP2-TCP-Patch - patch tcp windows server 2003 - tcp/ip crack - Increase TCP Connection Attempts [SP2 only] - windows xp connection limitations - windows xp tcpip patch - windows xp Specify the Maximum Number of TCP/IP Connections - Windows TPC IP limit - xp 10 connection limit BYPASS - xp connection limit patch - Sp2 TCP Patch - tcp patch connections -