Challenging network problem result of w32.spybot.worm

[Del LaCount]

I recently had two computers on my network get infected
by the spybot worm. Since cleaning it out I have found
that I am having problems shring files accross the
network. What makes it challenging is the following
scenario. Infected computers still show up in View
Workgroup Computers but when I try to access one of them
I get a message stating "\\ComputerName is not
accessible. You might not have permission to use this
network resource. Contact the administrator of this
server to find out if you have access permissions.
Access is denied". The strange part is that some of us
have a shortcut to a shared folder on that computer.
Double cliicking on the shortcut still works. The shared
folder opens right up. This makes me think that the
sharing is still working but something is whacked with
permissions? I spent an entire day trying to track down
info in the knowledge base but have yet to find anything
that helped. One thing I did find that seemed odd was
that ipconfig /all turned up a node type of "unknown".

I would prefer not to have to wipe out the drive to fix
this id at all possible.

Any help would be appreciated.

Del

 

[Guest]

i feel your pain!

i have exactly the same problem with the w32 spybot worm, i cleaned it off my pc but now i cant access my other xp computers files, i can see the computer in the workgroup and click on it to open up its shared drives but from there on everything is blocked, i cant access the shared folders and if I try to copy ,rename or delete anything i just get access denied.

also i can not access this computer from the computer mentioned above, i cant even open the computer in my workgroup folder i just get the same old access denied message.

The strange thing is tho is that i can share an internet connection, the other computer can access the internet through this computers internet connection using ICS but i cant share files or printers because everything I try to do gets the access denied error message.

simple file sharing is on and the guest account is activated on both pcs but i still cant get through to share files.

Both pcs have XP PRO

A solution would be welcomed!

 

[Guest]

i have found out a little more about the worm.

It turns out that it modifys the winsock.exe app in windows\system32

this component is basicly the core technology behind networking

It modifys it somehow but the worm itself is very hard to get rid off

Although anti virus software may of deleted it, parts of it will remain in the registry and in other parts of the system.

It a nightmare to completely remove and also a nightmare to fix the damage it does to the network (of which i'm still trying to solve)

 

[Steve Winograd [MVP]]

i have found out a little more about the worm.

It turns out that it modifys the winsock.exe app in windows\system32

this component is basicly the core technology behind networking

It modifys it somehow but the worm itself is very hard to get rid off

Although anti virus software may of deleted it, parts of it will remain in the registry and in other parts of the system.

It a nightmare to completely remove and also a nightmare to fix the damage it does to the network (of which i'm still trying to solve)

Try the two steps shown at the end of this Microsoft Knowledge Base
article:

How to determine and recover from Winsock2 corruption
http://support.microsoft.com/?id=811259
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com