MShome not accessible - authentication package unknown 2

[pmonett]

I have been gnashing my teeth on this one for a while now. I have 3 machines connected to a DSL modem/router (home network). Each machine runs XP Pro, each machine can connect to the Internet without any problem.
Since the router is a new purchase, I ran the Connection Wizard on each machine individually. For each, I chose the Other option, then the Hub Connect option. That is where the fun starts. On two of my PCs, it did not work well. Only one of three can connect to MShome without problems.
For the two that have problems, the error message is different. One says that a "specified" authentication package is unknown, but does not specify which one. The other tellsm e that the servers for the workgroup are unavailable (normal, there aren't any servers).
When I try the network disk option on the third machine, it fails to complete execution on both of the others.
I have even tried to uninstall the network port in the Device Manager and reinstall the network, but it seems to come back with exactly the same settings - and issues.

What can I do ?

Pascal.

 

[bcastner]

Your router will supply all the information needed for your machines to connect; you do not want to run the network wizard.

On each machine:
. given them an identical Workgroup name. (right-click My Computer, properties, Computer Name. In addition to the workgroup name, give each computer a unique name of <= 14 characters.

. Now you need to set some values in Network properties. Set the machine to obtain its IP address automaticly. Click the Advanced Button, WINS tab, and enable Netbios over TCP/IP.

. You need to decide on which model you want to use: Simple File Sharting, or the Windows 2000 type model. Set the value appropriatly and identicly on each machine.

http://www.practicallynetworked.com/sharing/xp_filesharing/index.htm

Reboot each machine. If you choose not to use Simple File sharing, make an entry on each machine for the username and passwords of the other two machined -- you do this by making them new users on each machine.

Finally, make sure there are no firewall issues.

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q298804

 

[pmonett]

Things are getting better. I checked the Netbios over TCP option on all PCs, and two are now looking OK.
The third is still resisting. It no longer tells me that servers are not available, instead, it gives me the package error. All PCs have the same network config now. Both other PCs can see the third in the home network, but cannot access the shared drives anymore.
Are there any network-specific services that I need to have ?

Pascal.

 

[pmonett]

Situation not really better. Curiously, when I reboot the PC, I get around five to ten minutes of normal connectivity. After that time, the connection is no longer available until I reboot the PC.
I am using simple sharing on all PCs.

Any ideas ?

Pascal.

 

[linney]

With Auditing enabled, the various items in the Event Viewer Security Log contain a wealth of information which may assist you, not to mention what else is available from the System folder.

See if the Winsock fix mentioned in the following article is of any use.

WinXP Connectivity Issues
Lost Connectivity after Registry or Malware Cleanup
faq779-4625

How to troubleshoot TCP/IP connectivity with Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;314067&FR=1&PA=1&SD=HSCH

How to troubleshoot network connectivity problems

http://support.microsoft.com/default.aspx?scid=kb;en-us;325487&FR=1&PA=1&SD=HSCH

Simple File Sharing- enabled

http://www.practicallynetworked.com/sharing/xp/filesharing.htm

Simple File Sharing - disabled

http://www.practicallynetworked.com/sharing/xp_filesharing/index.htm

http://www.michna.com/kb/wxnet.htm

 

[pmonett]

Okay, I have finally gotten down to the root of the issue : W32/Sdbot.LYF

Some bloodsucking scum has managed to drop this filth through my firewall and it was screwing up the network like crazy.
Thankfully, I happened to notice Monday evening that the DSL router was signalling a whole lot of activity on my PCs network connection, for no good reason.
That led me to checking the processes that were running, and then my stupidity was there in plain sight. Something called erun.pif was running. Sorry, but there is no good reason for a PIF file to run on my PC for anything longer than a millisecond.
I purged it simply by shutting it down, then searching for erun.pif in my Windows folder. A manual search turned up the file in the System32 folder (as usual).

I can see why it slipped in, since I was doing some DMZ learning. Seems like I've got a lot more to learn. My anti-virus has some things to learn too.

Does anyone know of a some sort of a Process Cop (cousin of Start Cop) that could alert me when an unknown process is launched ? Apart from a firewall, of course.

And what could I use to monitor Internet network usage ? In other words, how can I know when my PC is connecting to the Internet when I haven't asked it to ?

Pascal.

 

[linney]

Two programs for you to check out are, Process Guard and Port Explorer.

http://www.diamondcs.com.au/index.php?page=products

Another one is Reg Defend.

http://www.ghostsecurity.com/

 

[pmonett]

linney, you are a treasure trove of interesting links.

Thank you all for your help !

Pascal.