NetBIOS over TCP/IP cannot be enabled, does not keep

I

info

Hi

I wonder if you can help me here. I have 2 PC which used to networked
no problem. File & Printer Sharing is the task i need.

- I have checked on computer browser and have restarted them
- have updated and enabled NetBIOS over TCP/IP
- i have tested with both designating a fixed ip and DHCP and both does
not make any changes

When you do an ipconfig /all ... it keeps showing up as

"NetBIOS over TCP/IP as disabled"

As a result, there is I cannot keep these 2 computers working to share
folders/printers (which i need). It worked all OK before, until a PC
(may be infected by adware/spyware/virus) hooked up to our LAN and may
have done something. We have isolated all computers, latest virus scan
and adware has been used to remove the obvious malicious.

All the PCs have no problem surfing, getting connected to MSN or
others. We just cannot ENABLED the NetBIOS over TCP/IP.. I wonder if
anyone knows why ?

I have not gone into the registry yet, but i have tried all resources
and manipulation, troubleshooting and still my 2 PCc cannot be
connected P2P.

Rgds
Daniel
 
C

Chuck

Hi

I wonder if you can help me here. I have 2 PC which used to networked
no problem. File & Printer Sharing is the task i need.

- I have checked on computer browser and have restarted them
- have updated and enabled NetBIOS over TCP/IP
- i have tested with both designating a fixed ip and DHCP and both does
not make any changes

When you do an ipconfig /all ... it keeps showing up as

"NetBIOS over TCP/IP as disabled"

As a result, there is I cannot keep these 2 computers working to share
folders/printers (which i need). It worked all OK before, until a PC
(may be infected by adware/spyware/virus) hooked up to our LAN and may
have done something. We have isolated all computers, latest virus scan
and adware has been used to remove the obvious malicious.

All the PCs have no problem surfing, getting connected to MSN or
others. We just cannot ENABLED the NetBIOS over TCP/IP.. I wonder if
anyone knows why ?

I have not gone into the registry yet, but i have tried all resources
and manipulation, troubleshooting and still my 2 PCc cannot be
connected P2P.

Rgds
Daniel

Daniel,

Look under services. What is the status of "TCP/IP NetBIOS Helper" aka LMHosts?
<http://nitecruzr.blogspot.com/2005/06/services-running-on-your-computer.html>
http://nitecruzr.blogspot.com/2005/06/services-running-on-your-computer.html

And check for LSP / Winsock corruption, particularly after a malware problem.
This is (can be) a painful process. Be persistent here.
<http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html>
http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html
 
B

BOYTOYS

Chuck. Thanks, I will try your suggestions today..I am pretty sure it
was the adware/spyware initial hit or the removal process that may have
caused it. It was working perfectly fine before the infected PC was
attached to our LAN.

Daniel
 
C

Chuck

Chuck. Thanks, I will try your suggestions today..I am pretty sure it
was the adware/spyware initial hit or the removal process that may have
caused it. It was working perfectly fine before the infected PC was
attached to our LAN.

That'll be LSP / Winsock, then, Daniel. Though you may end up checking
individual components afterwards too. We'll be here to advise you further.
 
B

BOYTOYS

C

Chuck

I used the Winsock XP fix downloaded and it did it for one of the PC
and the other. Both can be seen in the workgroup, NetBIOS over TCP/IP
is now enabled, i can see it in MY NETWORK PLACE.

The only thing that needs figuring out is it says the computer is not
accessible yet...

OK, now it's time to diagnose the problem. Run "browstat status" and "ipconfig
/all" from each computer.
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp>
http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp
 
B

BOYTOYS

Chuck
Thx, some how i don't have browstat command. This is the ipconfig.txt
output for the host i need to share files with others PCs..

I notice NODE TYPE is unknown although other ppl claims that it has to
be either p2p or whatever.

I still cannot access the files and folders. At
practicallynetworked.com, they says i should not use the plain simple
file sharing but use ICS control list method. I personally think that
is not the root cause.

What is your suggestion for my next step ?

Thanks again, really appreciate your help..

Daniel
---------------------

Windows IP Configuration



Host Name . . . . . . . . . . . . : DELL

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



Media State . . . . . . . . . . . : Media disconnected

Description . . . . . . . . . . . : Intel(R) PRO/100 S Desktop
Adapter

Physical Address. . . . . . . . . : 00-02-B3-4D-08-C9



Ethernet adapter Local Area Connection 2:



Connection-specific DNS Suffix . : no-domain-set.bellcanada

Description . . . . . . . . . . . : Intel 8255x-based PCI
Ethernet Adapter (10/100)

Physical Address. . . . . . . . . : 00-B0-D0-D0-8A-AE

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.2.10

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.2.1

DHCP Server . . . . . . . . . . . : 192.168.2.1

DNS Servers . . . . . . . . . . . : 192.168.2.1

Lease Obtained. . . . . . . . . . : Tuesday, November 21, 2006
2:03:19 PM

Lease Expires . . . . . . . . . . : Friday, November 24, 2006
2:03:19 PM
 
B

BOYTOYS

The following ipconfig /all is the other PC which also have problems. I
cannot access from either direction. I am stuck...
------------------

Windows IP Configuration



Host Name . . . . . . . . . . . . : compaq1pos

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . : no-domain-set.bellcanada

Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
Connection

Physical Address. . . . . . . . . : 00-04-23-25-21-40

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.2.13

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.2.1

DHCP Server . . . . . . . . . . . : 192.168.2.1

DNS Servers . . . . . . . . . . . : 192.168.2.1

192.168.2.1

Lease Obtained. . . . . . . . . . : Tuesday, November 21, 2006
3:14:55 PM

Lease Expires . . . . . . . . . . : Friday, November 24, 2006
3:14:55 PM
 
C

Chuck

Chuck
Thx, some how i don't have browstat command. This is the ipconfig.txt
output for the host i need to share files with others PCs..

I notice NODE TYPE is unknown although other ppl claims that it has to
be either p2p or whatever.

I still cannot access the files and folders. At
practicallynetworked.com, they says i should not use the plain simple
file sharing but use ICS control list method. I personally think that
is not the root cause.

What is your suggestion for my next step ?

Thanks again, really appreciate your help..

Daniel

Daniel,

Auggh. Here's my usual instructions.

Let's look at "browstat status" and "ipconfig /all", from each computer, so we
can diagnose the problem. Read this article, and linked articles, and follow
instructions precisely (download browstat!):
<http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp>
http://nitecruzr.blogspot.com/2005/05/troubleshooting-network-neighborhood.html#AskingForHelp

You gotta download it (it's not hard to do though).
 
C

Chuck

The following ipconfig /all is the other PC which also have problems. I
cannot access from either direction. I am stuck...
------------------

Windows IP Configuration



Host Name . . . . . . . . . . . . : compaq1pos

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . : no-domain-set.bellcanada

Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
Connection

Physical Address. . . . . . . . . : 00-04-23-25-21-40

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.2.13

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.2.1

DHCP Server . . . . . . . . . . . : 192.168.2.1

DNS Servers . . . . . . . . . . . : 192.168.2.1

192.168.2.1

Lease Obtained. . . . . . . . . . : Tuesday, November 21, 2006
3:14:55 PM

Lease Expires . . . . . . . . . . : Friday, November 24, 2006
3:14:55 PM

Daniel,

Both ipconfig logs are normal. You do NOT need P2P ("Peer-Peer) node type.
Node Type Unknown is fine.
<http://nitecruzr.blogspot.com/2005/05/reading-ipconfig-and-diagnosing.html>
http://nitecruzr.blogspot.com/2005/05/reading-ipconfig-and-diagnosing.html

I think the browstat logs will be useful though.
 
B

BOYTOYS

Chuck
Here is the browstat status from one of the compaq1pos
It says something could not open key in registry ..error=5

what could that be? i am working on the other browstat for the dell

-----------------

Status for domain POS_WORKGROUP on transport
\Device\NetBT_Tcpip_{13DB378D-FCA2-4FEE-9C51-1B7118B8355A}
Browsing is active on domain.
Master browser name is: DELL
Could not open key in registry, error = 5 Unable to determine
build of browser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master DELL
\\DELL
There are 2 servers in domain POS_WORKGROUP on transport
\Device\NetBT_Tcpip_{13DB378D-FCA2-4FEE-9C51-1B7118B8355A}
There are 2 domains in domain POS_WORKGROUP on transport
\Device\NetBT_Tcpip_{13DB378D-FCA2-4FEE-9C51-1B7118B8355A}
 
B

BOYTOYS

Status for domain POS_WORKGROUP on transport
\Device\NetBT_Tcpip_{2BA2F985-2095-4D06-9CAA-6A94EC47DA07}
Browsing is active on domain.
Master browser name is: DELL
Master browser is running build 2600
1 backup servers retrieved from master DELL
\\DELL
Unable to retrieve server list from DELL: 1230
 
C

Chuck

I read it and still not sure what i can do to resolve them.

OK Daniel,

Let's recap your symptoms, most recently first.
1) Browstat: "Unable to retrieve server list from DELL: 1230" is an SMB problem,
caused by the NetBT setting, or service, not running.
<http://support.microsoft.com/kb/318332/>
http://support.microsoft.com/kb/318332/
2) Browstat: "Could not open key in registry, error = 5". Which computer did
you get this on? PLEASE for each browstat or ipconfig, explicitly label each
one. What OS (Windows XP Home? XP Pro? Other Windows?) is on each computer?
Details are essential. If XP Pro, with Simple File Sharing enabled or disabled?
3) Browstat: "There are 2 domains in domain POS_WORKGROUP" indicates a segmented
workgroup.
4) I don't see either ipconfig showing the NetBT problem any more. That doesn't
mean that your problems are over.

What personal firewall or other security products do you have on each computer?
<http://nitecruzr.blogspot.com/2005/05/your-personal-firewall-can-either-help.html>
http://nitecruzr.blogspot.com/2005/05/your-personal-firewall-can-either-help.html

If nothing here, repeat the LSP / Winsock procedure, each tool one at a time
until all 7 tools report nothing to do. Seriously, sometimes it will take
multiple passes.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top