Network down after virus attack

G

Guest

After a recent virus attack my network quit functioning properly. I can view
all my connections and I can view the shared files of the windows ME machine,
but btoh my XP machines were infected and cleaned, but now I can view the
shared files on either one of those machines from the ME machine.

It asks for a password for \\oldpc\IPC$ (example oldpc is one of the XP
machines).
I removed all the shares but can't figure out how to remove the IPC$. That
machine has my shared printer which is the real headache.

i've read that one of the virus files I had could cause this problem
(win32.seenbot) but I haven't found a solution to correct the problem. Help!
 
R

Robert L [MS-MVP]

make sure netlogon service is running. also check the event viewer for any errors.

ipc$ errors IPC$ Issues. "Resources: \\computername\IPC$" Resource: \\ computername \IPC$ - An extended error has occurred. "You must provide a password to make this ...
www.chicagotech.net/ipc$errors.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
After a recent virus attack my network quit functioning properly. I can view
all my connections and I can view the shared files of the windows ME machine,
but btoh my XP machines were infected and cleaned, but now I can view the
shared files on either one of those machines from the ME machine.

It asks for a password for \\oldpc\IPC$ (example oldpc is one of the XP
machines).
I removed all the shares but can't figure out how to remove the IPC$. That
machine has my shared printer which is the real headache.

i've read that one of the virus files I had could cause this problem
(win32.seenbot) but I haven't found a solution to correct the problem. Help!
 
G

Guest

The Netlogon service stops right away and has a mesaage saying services nit
working will stop. Below is also a warning message from Event Viewer;
==============================================
Windows saved user OLDPC\Jerome Byrd registry while an application or
service was still using the registry during log off. The memory used by the
user's registry has not been freed. The registry will be unloaded when it is
no longer in use.

This is often caused by services running as a user account, try configuring
the services to run in either the LocalService or NetworkService account.

==============================================
 
G

Guest

Robert L said:
make sure netlogon service is running. also check the event viewer for any errors.

ipc$ errors IPC$ Issues. "Resources: \\computername\IPC$" Resource: \\ computername \IPC$ - An extended error has occurred. "You must provide a password to make this ...
www.chicagotech.net/ipc$errors.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
After a recent virus attack my network quit functioning properly. I can view
all my connections and I can view the shared files of the windows ME machine,
but btoh my XP machines were infected and cleaned, but now I can view the
shared files on either one of those machines from the ME machine.

It asks for a password for \\oldpc\IPC$ (example oldpc is one of the XP
machines).
I removed all the shares but can't figure out how to remove the IPC$. That
machine has my shared printer which is the real headache.

i've read that one of the virus files I had could cause this problem
(win32.seenbot) but I haven't found a solution to correct the problem

Hi Chuck, can you help me here. I still can't open the shared folders on my
XP machines.. My network worked fine until my kids downloaded a virus. All
viruses appear to be gone. Thanks for any help.

Windows IP Configuration

Host Name . . . . . . . . . . . . : OLDPC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : homeportal.2wire.net

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : homeportal.2wire.net
Description . . . . . . . . . . . : NVIDIA nForce MCP Networking Adapter
Physical Address. . . . . . . . . : 00-40-CA-2F-88-B1
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 172.16.1.33
Subnet Mask . . . . . . . . . . . : 255.255.0.0
IP Address. . . . . . . . . . . . : fe80::240:caff:fe2f:88b1%4
Default Gateway . . . . . . . . . : 172.16.0.1
DHCP Server . . . . . . . . . . . : 172.16.0.1
DNS Servers . . . . . . . . . . . : 172.16.0.1
fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
Lease Obtained. . . . . . . . . . : Thursday, March 09, 2006 7:57:34 PM
Lease Expires . . . . . . . . . . : Thursday, March 09, 2006 8:57:34 PM

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : fe80::5445:5245:444f%5
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Automatic Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . : homeportal.2wire.net
Description . . . . . . . . . . . : Automatic Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : AC-10-01-21
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : fe80::5efe:172.16.1.33%2
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Disabled
posted by jaybyrd at 5:47 PM 0 comments

PC Chuck, or anyone, can you help me with my Network?
I've had a network setup successfully for about 3 yrs and it was relatively
easy to set up until recently. I believe my kids downloaded a virus that
changed my settings. I think I've removed all viruses and spyware but now I
can't access my XP machines via the file and print sharing.
Setup:
3-machines - Dessktop with Windows XP, Laptop w/ Windows XP and a desktop
running Windows ME. I can view files on the ME PC from either XP machine but
I can't view open the folders on either XP machine from any of the the other
two. Although I can See the PC and all pings are successful.
The laptop is connected through wireless router and the desktops are in the
same room connected through a hub. Thanks for any assistance.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top