Ping and shared folders problem

J

Jonny Two Shoes

Expert Member
Joined
Nov 13, 2006
Messages
4,542
Reaction score
17
Location
Gauteng
I can't figure this one out...

Dell Latitude D630 Windows XP SP3, joined to a company domain, all network settings are default and nothing has changed. Uses DHCP connected via ethernet cable.

Yet I cannot ping this PC or find it to access shared folders from another PC on the domain. I can however ping out and access everything from the network via this PC.

The problem started when the user wanted to get scanning set up from an HP networked printer to his PC. When the scan and testing from the printer constantly failed I had to dig further and found one cannot even ping his PC (request timed out).

I have tried the usual IPconfig flushdns release reset. I have turned off Windows firewall, I have even followed a bunch of commands to re-install the windows Firewall just in case it was faulty.

I also uninstalled the VPN BlackICE firewall although that was a long shot and don't think it works in the same way or would affect the PC, and as far as I can tell there is no other firewall on this PC.

I have uninstalled and reinstalled network adapter.

Disabled McAfee AV but there are no firewalls or port blocking rules I can find there either.

Enabled everything in the ICMP settings of windows firewall.

Checked for any unknown hidden processes but nothing stands out.

Checked the IPCONFIG to see if all settings were right and IP is set within range etc... which is all normal.

Tried a different known working network point and cable.

Everything else appears to be working fine, I am right now posting this from problem PC on the net within company network. I am even able to remote desktop from this laptop to my desktop on the network, as I have been using that to ping back and forth.

Anything short of reformatting does anyone have any other suggestions? As I was typing this just thought I am going to quickly rejoin to domain and also try a static IP but any other suggestions may help :) thanks
 
Last edited:
You are going to hate me, but do a dump on the interface.
Can you see your incoming packets?
Not packets in reply to outgoing connections from that machine, I mean packets incoming (connection started from another machine)

Is this just a simple local lan, or are there devices between you and this laptop (IE Firewall/router)
 
Start it up in Safe mode with networking,try contacting it then
 
Having a meeting soon so will only be able to check it out again afterwards or on Monday but thanks for the quick responses.

@tau1z it is part of a large domain but all PC's I am trying to reach and ping it from are behind the same switch. Every other node is working fine and all are in the same LAN ie no firewall or router. Just of course the DHCP server which I am not permitted to play with as I am PC Support :p not network admin.
 
Uninstall McAfee, install NOD32. McAfee has a weird internal firewall... at least that is my experience.
 
Corporate policy = McAfee only with EPO :( no others allowed. But this is standardized throughout the company worldwide and settings cannot be changed locally on the PC even with local admin rights.
 
@agentrfr I uninstalled McAfee but still having the same problem.

@PsyWulf Yes in safe mode with networking I am able to ping the PC. Which lead me on to starting up again and disabling every single process I could 1 by 1 but still nada. A complete virus scan with updated definitions also revealed nothing :/ although granted we use McAfee.

@tau1z what exactly did you mean by dump on interface? Sorry for stupid question... did you mean export all of the network settings using the netsh interface ipv4 dump? So that you could take a look at it or something?. EDIT: Oh and I have tested 3 times and there is definately network activity as soon as I ping this PC, so it is being blocked somewhere still but is coming through which narrows it down to local PC for sure :/ I am running out of ideas lol.

I also searched as much as I could for any suspect hidden files but also nothing. If all else fails I may need to reformat but any other suggestion are welcome until I resort to that.
 
Last edited:
If you ping the computer name.. whem ping returns with pinging x.x.x.x is that IP the same as the IP on the laptop itself?

reason it could be that the laptop has more then one A Host record on your DNS server..

Sorry I reread OP post..

Nevermind
 
Last edited:
Jonny Two Shoes said:
@PsyWulf Yes in safe mode with networking I am able to ping the PC. Which lead me on to starting up again and disabling every single process I could 1 by 1 but still nada. A complete virus scan with updated definitions also revealed nothing :/ although granted we use McAfee.
Click to expand...

If safe mode works and normal doesn't for pinging - an application/service/LSP is interfering. A Hijackthis log would be best to pinpoint such an issue
 
Hi there,

Here is the log, I haven't spotted anything immediately suspect though. I have replaced the company name with **** stars.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:14:54 PM, on 1/21/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Cisco Systems\SSL VPN Client\agent.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\CRYPTO~1\bin\eus.exe
C:\Program Files\Cisco Systems\AVPN Client\cvpnd.exe
C:\Program Files\iPass\iPassConnect\iPCAgent.exe
C:\Program Files\lotus\notes\nslsvice.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\StacSV.exe
C:\Program Files\ISS\Proventia Desktop\vpatch.exe
C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\Wuser32.exe
C:\WINDOWS\system32\CCM\CcmExec.exe
C:\WINDOWS\system32\mfevtps.exe
C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe
C:\Program Files\McAfee\VirusScan Enterprise\engineserver.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\McAfee\Common Framework\udaterui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iPass\iPassConnect\downloader\ipccheck.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by ****** ******
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://pac.lb.******.corp/cgi-bin/pac.pl
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: yes - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\DLA\DLASHX_W.DLL
O2 - BHO: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files\Mindjet\MindManager 8\Mm8InternetExplorer.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
O4 - HKCU\..\Run: [Driver Control Manager v2.1] C:\DOCUME~1\a-****jx\LOCALS~1\Temp\MCCS.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [TSClientAXDisabler] cmd.exe /C "%systemroot%\Installer\TSClientMsiTrans\tscdsbl.bat" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'Default user')
O4 - Global Startup: ****** ****** AVPN Client 4-8-01_0300.lnk = C:\Program Files\Cisco Systems\AVPN Client\vpngui.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Send to Mindjet MindManager - {2F72393D-2472-4F82-B600-ED77F354B7FF} - C:\Program Files\Mindjet\MindManager 8\Mm8InternetExplorer.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=about:blank
O15 - Trusted Zone: *.web.******.com
O15 - Trusted Zone: *.******.com
O15 - Trusted Zone: http://*.csg
O15 - Trusted Zone: *.ibenefits.com
O15 - Trusted Zone: *.myretirementplan.com
O15 - Trusted Zone: *.one******.com
O15 - Trusted Zone: *.ross.com
O15 - Trusted Zone: http://*.rpdinstallprinters
O15 - Trusted Zone: http://*.rpdinstallsoftware
O15 - Trusted Zone: *.web.******.com (HKLM)
O15 - Trusted Zone: *.******.com (HKLM)
O15 - Trusted Zone: http://*.csg (HKLM)
O15 - Trusted Zone: *.ibenefits.com (HKLM)
O15 - Trusted Zone: *.myretirementplan.com (HKLM)
O15 - Trusted Zone: *.one******.com (HKLM)
O15 - Trusted Zone: *.ross.com (HKLM)
O15 - Trusted Zone: http://*.rpdinstallprinters (HKLM)
O15 - Trusted Zone: http://*.rpdinstallsoftware (HKLM)
O16 - DPF: JavaConnect - file://C:\Documents and Settings\Administrator\Local Settings\Temp\SISD\JavaConnect.cab
O16 - DPF: Sametime BC 651FP1 - file://C:\Documents and Settings\Administrator\Local Settings\Temp\SISD\STBroadcastClient.cab
O16 - DPF: Sametime DA 651FP1 - file://C:\Documents and Settings\Administrator\Local Settings\Temp\SISD\STDirectoryApplet.cab
O16 - DPF: Sametime MRC 651FP1 - file://C:\Documents and Settings\Administrator\Local Settings\Temp\SISD\STMeetingRoomClient.cab
O16 - DPF: {1E40C477-ECA7-48DC-A9FC-D4F77A365442} (STURLConnection Control) - file://C:\Documents and Settings\Administrator\Local Settings\Temp\SISD\STUrlConLoader.cab
O16 - DPF: {264AED84-12F1-4CA1-8AA7-EB939AE58D8D} (STCWeb Control) - STCWeb.cab
O16 - DPF: {53F92AF2-3C1E-4A63-B2EA-2E33DA6286B7} (STAutoAway Control) - file://C:\Documents and Settings\Administrator\Local Settings\Temp\SISD\STAutoAwayLoader.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1250248366063
O16 - DPF: {8F0DF9DB-AA5A-4ED0-9176-1C4A9C762C59} (JNILoader Control) - file://C:\Documents and Settings\Administrator\Local Settings\Temp\SISD\STJNILoader.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://******.webex.com/client/T26L/nbr/ieatgpc.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = international.intra.******.com
O17 - HKLM\Software\..\Telephony: DomainName = international.intra.******.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = international.intra.******.com
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: CRYPTOCard EUS (cc-eus) - Alexandria Software Consulting - C:\PROGRA~1\CRYPTO~1\bin\eus.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\AVPN Client\cvpnd.exe
O23 - Service: iPassConnectEngine - iPass - C:\Program Files\iPass\iPassConnect\iPassConnectEngine.exe
O23 - Service: iPCAgent - iPass, Inc. - C:\Program Files\iPass\iPassConnect\iPCAgent.exe
O23 - Service: Lotus Notes Single Logon - IBM Corp - C:\Program Files\lotus\notes\nslsvice.exe
O23 - Service: McAfee Engine Service (McAfeeEngineService) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\engineserver.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe
O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\WINDOWS\system32\mfevtps.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\WINDOWS\system32\StacSV.exe
O23 - Service: Cisco Systems, Inc. STC Agent (STCAgent) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\SSL VPN Client\\agent.exe
O23 - Service: ISS Buffer Overflow Exploit Prevention (VPatch) - Internet Security Systems, Inc. - C:\Program Files\ISS\Proventia Desktop\vpatch.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

--
End of file - 9653 bytes
 
Last edited:
Use the McAfee icon in the system tray to disable the firewall.
Use the McAfee icon in the system tray to access the Host Intrusion Protection and disable it.
 
Cruelty said:
Use the McAfee icon in the system tray to disable the firewall.
Use the McAfee icon in the system tray to access the Host Intrusion Protection and disable it.
Click to expand...

Unfortunately I can't. Even with full admin rights most of the settings are greyed out as though it is being controlled by some sort of policy (epo?). Although those settings are general and should affect more users I think.

Thanks for suggestion though.

EDIT: Actually I see there is a password prompt to unlock user interface. Although I am sure this password is only made known to network admins or higher up. I know our network admin will just tell me to format reinstall anyway and not touch the settings.
 
Try mcafee as the password,maybe the sysadmins were sleeping and didn't change it from defaults :P Uninstall that crap
 
This is weird. I am about to format reinstall the PC but thought I would try one last time to see if I could ping to it and access shared folders.

Lo and behold it works.

WTF?!?

Now even the scanner from the HP Office Copier is able to pick up the shared folder.

Thanks for all your help though you guys. I am going to keep an eye on this one for a while and see if it behaves.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X