Networking with XP pro

#1 November 10th 04, 09:55 PM

Hello all,

I have problems with connecting two PC's with XP pro SP2 with standard NIC's
and a cross cable.
The main PC (MAIN) cannot see the second PC (KIDS) unless the last one is in
safe mode. The second one can see the main and also can access shared
drives.
I tried Chuck's advice to run PSLIST to see the differences between the safe
mode and full mode. In addition, i followed his advice to run the Process
Explorer (nice program btw) and shut down all the processes that were
present in full mode but not in safe mode.
However, no luck so far.
Is it sure that it is the second PC that causes the problems? It is the one
with the least programs installed? Firewall is disabled, no 3rd party
firewall are running there.
The funny thing is that when I try to change the IP address on MAIN to the
one that is given to KIDS, XP says the IP address is in use. So in some way,
MAIN can see KIDS.

here are the copies of the PS list outputs:

for the safe mode:

PsList 1.26 - Process Information Lister

Copyright (C) 1999-2004 Mark Russinovich

Sysinternals - www.sysinternals.com

Process information for KIDS:

Name Pid Pri Thd Hnd Priv CPU Time Elapsed Time

Idle 0 0 1 0 0 0:02:25.278 0:00:00.000

System 4 8 46 221 0 0:00:09.453 0:00:00.000

smss 260 11 3 21 164 0:00:00.270 0:02:54.410

csrss 316 13 11 247 1836 0:00:05.127 0:02:47.560

winlogon 340 13 20 243 4532 0:00:01.331 0:02:43.164

services 384 9 16 238 2008 0:00:00.510 0:02:36.304

lsass 396 9 18 272 2188 0:00:08.582 0:02:35.743

svchost 548 8 22 204 2736 0:00:00.100 0:02:27.642

svchost 624 8 9 181 1684 0:00:00.220 0:02:25.028

svchost 696 8 36 654 9388 0:00:00.921 0:02:23.586

svchost 708 8 4 54 1152 0:00:00.060 0:02:23.326

svchost 772 8 3 75 1184 0:00:00.080 0:02:22.374

explorer 1124 8 10 290 11480 0:00:14.140 0:01:56.557

cmd 1436 8 1 32 2028 0:00:00.070 0:00:24.385

pslist 1448 13 2 70 800 0:00:00.070 0:00:00.290

and for the normal login:

PsList 1.26 - Process Information Lister

Copyright (C) 1999-2004 Mark Russinovich

Sysinternals - www.sysinternals.com

Process information for KIDSPC:

Name Pid Pri Thd Hnd Priv CPU Time Elapsed Time

Idle 0 0 1 0 0 0:20:36.397 0:00:00.000

System 4 8 52 288 0 0:00:10.695 0:00:00.000

smss 308 11 3 21 164 0:00:00.040 0:21:22.484

csrss 356 13 12 369 1920 0:00:02.763 0:21:19.840

winlogon 380 13 20 443 6276 0:00:03.044 0:21:18.418

services 424 9 17 279 2100 0:00:03.454 0:21:18.117

lsass 436 9 22 329 3732 0:00:16.413 0:21:18.067

svchost 588 8 20 206 2756 0:00:00.280 0:21:16.815

svchost 632 8 10 222 1768 0:00:00.340 0:21:16.365

svchost 668 8 73 1258 11792 0:00:04.025 0:21:16.215

svchost 712 8 5 72 1284 0:00:00.090 0:21:16.094

svchost 752 8 6 128 1584 0:00:00.080 0:21:15.223

spoolsv 912 8 15 155 3308 0:00:00.200 0:21:13.361

SAgent2 1044 8 10 80 1384 0:00:00.050 0:21:05.980

tcpsvcs 1192 8 2 74 1160 0:00:00.090 0:21:05.629

snmp 1220 8 5 155 1404 0:00:00.100 0:21:05.499

svchost 1260 8 5 131 2456 0:00:00.220 0:21:05.459

alg 1580 8 6 104 1192 0:00:00.060 0:21:01.554

wscntfy 228 8 1 29 620 0:00:00.040 0:01:54.274

explorer 552 8 12 324 10480 0:00:10.024 0:01:52.982

WCESCOMM 820 8 2 64 1168 0:00:00.030 0:01:31.100

rundll32 584 8 2 56 10224 0:00:00.981 0:01:18.492

cmd 1424 8 1 32 2044 0:00:00.080 0:01:17.271

pslist 852 13 2 70 812 0:00:00.030 0:00:00.160

and the ipconfig /all for MAIN:

Windows IP-configuratie

Host-naam . . . . . . . . . . . .: MAIN

Primair DNS-achtervoegsel. . . . .:

Knooppunttype: . . . . . . . . . .: onbekend

IP-routering ingeschakeld. . . . .: ja

WINS-proxy ingeschakeld . . . . . : nee

DNS-achtervoegselzoeklijst. . . . : dyndsl.zonnet.nl

Ethernet-adapter LAN-verbinding 2:

Verbindingsspec. DNS-achtervoegsel:

Beschrijving . . . . . . . . . . .:

VIA Rhine II Fast Ethernet Adapter

Fysiek adres. . . . . . . . . . . : 00-0A-E6-60-04-6E

DHCP ingeschakeld:. . . . . . . . : nee

IP-adres. . . . . . . . . . . . . : 192.168.0.1

Subnetmasker. . . . . . . . . . . : 255.255.255.0

Standaardgateway. . . . . . . . . :

Ethernet-adapter ZONNETADSL:

Verbindingsspec. DNS-achtervoegsel: dyndsl.zonnet.nl

Beschrijving . . . . . . . . . . .:

ADSL USB MODEM LAN Adapter

Fysiek adres. . . . . . . . . . . : 00-D0-41-12-C1-A7

DHCP ingeshakeld. . . . . . . . . : ja

Autom. configuratie ingeschakeld. : ja

IP-adres. . . . . . . . . . . . . : 81.59.155.220

Subnetmasker. . . . . . . . . . . : 255.255.224.0

Standaardgateway. . . . . . . . . : 81.59.128.1

DHCP-server . . . . . . . . . . . : 81.59.128.1

DNS-servers . . . . . . . . . . . : 62.58.50.5

62.58.50.6

Lease verkregen . . . . . . . . . : woensdag 10 november 2004
22:23:53

Lease verlopen . . . . . . . . . : woensdag 10 november 2004
23:23:53

and the IPCONFIG /all for KIDS:

Windows IP-configuratie

Host-naam . . . . . . . . . . . .: KIDS

Primair DNS-achtervoegsel. . . . .:

Knooppunttype . . . . . . . . . . : gemengd

IP-routering ingeschakeld. . . . .: nee

WINS-proxy ingeschakeld . . . . . : nee

Ethernet-adapter LAN-verbinding 4:

Verbindingsspec. DNS-achtervoegsel:

Beschrijving . . . . . . . . . . .:

Realtek RTL8139 Family PCI Fast Ethernet NIC

Fysiek adres. . . . . . . . . . . : 00-40-F4-6E-FA-18

DHCP ingeschakeld:. . . . . . . . : nee

IP-adres. . . . . . . . . . . . . : 192.168.0.3

Subnetmasker. . . . . . . . . . . : 255.255.255.0

Standaardgateway. . . . . . . . . :

Any help appreciated.

Chuck: thanks for all your advice already , my mail address in previous
postings was fake.

Paul

#2 November 10th 04, 10:01 PM

www.careyholzman.com/netfixes.htm

Carey

"papaul" wrote in message
...
Hello all,

I have problems with connecting two PC's with XP pro SP2 with standard
NIC's and a cross cable.
The main PC (MAIN) cannot see the second PC (KIDS) unless the last one is
in safe mode. The second one can see the main and also can access shared
drives.
I tried Chuck's advice to run PSLIST to see the differences between the
safe mode and full mode. In addition, i followed his advice to run the
Process Explorer (nice program btw) and shut down all the processes that
were present in full mode but not in safe mode.
However, no luck so far.
Is it sure that it is the second PC that causes the problems? It is the
one with the least programs installed? Firewall is disabled, no 3rd party
firewall are running there.
The funny thing is that when I try to change the IP address on MAIN to the
one that is given to KIDS, XP says the IP address is in use. So in some
way, MAIN can see KIDS.

here are the copies of the PS list outputs:

for the safe mode:

PsList 1.26 - Process Information Lister

Copyright (C) 1999-2004 Mark Russinovich

Sysinternals - www.sysinternals.com

Process information for KIDS:

Name Pid Pri Thd Hnd Priv CPU Time Elapsed
Time

Idle 0 0 1 0 0 0:02:25.278
0:00:00.000

System 4 8 46 221 0 0:00:09.453
0:00:00.000

smss 260 11 3 21 164 0:00:00.270
0:02:54.410

csrss 316 13 11 247 1836 0:00:05.127
0:02:47.560

winlogon 340 13 20 243 4532 0:00:01.331
0:02:43.164

services 384 9 16 238 2008 0:00:00.510
0:02:36.304

lsass 396 9 18 272 2188 0:00:08.582
0:02:35.743

svchost 548 8 22 204 2736 0:00:00.100
0:02:27.642

svchost 624 8 9 181 1684 0:00:00.220
0:02:25.028

svchost 696 8 36 654 9388 0:00:00.921
0:02:23.586

svchost 708 8 4 54 1152 0:00:00.060
0:02:23.326

svchost 772 8 3 75 1184 0:00:00.080
0:02:22.374

explorer 1124 8 10 290 11480 0:00:14.140
0:01:56.557

cmd 1436 8 1 32 2028 0:00:00.070
0:00:24.385

pslist 1448 13 2 70 800 0:00:00.070
0:00:00.290

and for the normal login:

PsList 1.26 - Process Information Lister

Copyright (C) 1999-2004 Mark Russinovich

Sysinternals - www.sysinternals.com

Process information for KIDSPC:

Name Pid Pri Thd Hnd Priv CPU Time Elapsed
Time

Idle 0 0 1 0 0 0:20:36.397
0:00:00.000

System 4 8 52 288 0 0:00:10.695
0:00:00.000

smss 308 11 3 21 164 0:00:00.040
0:21:22.484

csrss 356 13 12 369 1920 0:00:02.763
0:21:19.840

winlogon 380 13 20 443 6276 0:00:03.044
0:21:18.418

services 424 9 17 279 2100 0:00:03.454
0:21:18.117

lsass 436 9 22 329 3732 0:00:16.413
0:21:18.067

svchost 588 8 20 206 2756 0:00:00.280
0:21:16.815

svchost 632 8 10 222 1768 0:00:00.340
0:21:16.365

svchost 668 8 73 1258 11792 0:00:04.025
0:21:16.215

svchost 712 8 5 72 1284 0:00:00.090
0:21:16.094

svchost 752 8 6 128 1584 0:00:00.080
0:21:15.223

spoolsv 912 8 15 155 3308 0:00:00.200
0:21:13.361

SAgent2 1044 8 10 80 1384 0:00:00.050
0:21:05.980

tcpsvcs 1192 8 2 74 1160 0:00:00.090
0:21:05.629

snmp 1220 8 5 155 1404 0:00:00.100
0:21:05.499

svchost 1260 8 5 131 2456 0:00:00.220
0:21:05.459

alg 1580 8 6 104 1192 0:00:00.060
0:21:01.554

wscntfy 228 8 1 29 620 0:00:00.040
0:01:54.274

explorer 552 8 12 324 10480 0:00:10.024
0:01:52.982

WCESCOMM 820 8 2 64 1168 0:00:00.030
0:01:31.100

rundll32 584 8 2 56 10224 0:00:00.981
0:01:18.492

cmd 1424 8 1 32 2044 0:00:00.080
0:01:17.271

pslist 852 13 2 70 812 0:00:00.030
0:00:00.160

and the ipconfig /all for MAIN:

Windows IP-configuratie

Host-naam . . . . . . . . . . . .: MAIN

Primair DNS-achtervoegsel. . . . .:

Knooppunttype: . . . . . . . . . .: onbekend

IP-routering ingeschakeld. . . . .: ja

WINS-proxy ingeschakeld . . . . . : nee

DNS-achtervoegselzoeklijst. . . . : dyndsl.zonnet.nl

Ethernet-adapter LAN-verbinding 2:

Verbindingsspec. DNS-achtervoegsel:

Beschrijving . . . . . . . . . . .:

VIA Rhine II Fast Ethernet Adapter

Fysiek adres. . . . . . . . . . . : 00-0A-E6-60-04-6E

DHCP ingeschakeld:. . . . . . . . : nee

IP-adres. . . . . . . . . . . . . : 192.168.0.1

Subnetmasker. . . . . . . . . . . : 255.255.255.0

Standaardgateway. . . . . . . . . :

Ethernet-adapter ZONNETADSL:

Verbindingsspec. DNS-achtervoegsel: dyndsl.zonnet.nl

Beschrijving . . . . . . . . . . .:

ADSL USB MODEM LAN Adapter

Fysiek adres. . . . . . . . . . . : 00-D0-41-12-C1-A7

DHCP ingeshakeld. . . . . . . . . : ja

Autom. configuratie ingeschakeld. : ja

IP-adres. . . . . . . . . . . . . : 81.59.155.220

Subnetmasker. . . . . . . . . . . : 255.255.224.0

Standaardgateway. . . . . . . . . : 81.59.128.1

DHCP-server . . . . . . . . . . . : 81.59.128.1

DNS-servers . . . . . . . . . . . : 62.58.50.5

62.58.50.6

Lease verkregen . . . . . . . . . : woensdag 10 november 2004
22:23:53

Lease verlopen . . . . . . . . . : woensdag 10 november 2004
23:23:53

and the IPCONFIG /all for KIDS:

Windows IP-configuratie

Host-naam . . . . . . . . . . . .: KIDS

Primair DNS-achtervoegsel. . . . .:

Knooppunttype . . . . . . . . . . : gemengd

IP-routering ingeschakeld. . . . .: nee

WINS-proxy ingeschakeld . . . . . : nee

Ethernet-adapter LAN-verbinding 4:

Verbindingsspec. DNS-achtervoegsel:

Beschrijving . . . . . . . . . . .:

Realtek RTL8139 Family PCI Fast Ethernet NIC

Fysiek adres. . . . . . . . . . . : 00-40-F4-6E-FA-18

DHCP ingeschakeld:. . . . . . . . : nee

IP-adres. . . . . . . . . . . . . : 192.168.0.3

Subnetmasker. . . . . . . . . . . : 255.255.255.0

Standaardgateway. . . . . . . . . :

Any help appreciated.

Chuck: thanks for all your advice already , my mail address in previous
postings was fake.

Paul

#3 November 10th 04, 11:10 PM

On Wed, 10 Nov 2004 22:55:30 +0100, "papaul" wrote:

Hello all,

I have problems with connecting two PC's with XP pro SP2 with standard NIC's
and a cross cable.
The main PC (MAIN) cannot see the second PC (KIDS) unless the last one is in
safe mode. The second one can see the main and also can access shared
drives.
I tried Chuck's advice to run PSLIST to see the differences between the safe
mode and full mode. In addition, i followed his advice to run the Process
Explorer (nice program btw) and shut down all the processes that were
present in full mode but not in safe mode.
However, no luck so far.
Is it sure that it is the second PC that causes the problems? It is the one
with the least programs installed? Firewall is disabled, no 3rd party
firewall are running there.
The funny thing is that when I try to change the IP address on MAIN to the
one that is given to KIDS, XP says the IP address is in use. So in some way,
MAIN can see KIDS.
SNIP

Paul,

Let's see exactly what your problem is. Do some diagnostic work please.

Take the following code (everything inside the "#######"). (Did I get the names
and ip addresses right)?

Copy the code, precisely as it is keyed, into Notepad.
Save the file as "cdiag.cmd", as type "All Files", into folder "C:\Windows".
Run it by Start - Run - "cdiag".
Wait patiently.
When Notepad opens up displaying c:\cdiag.txt, first check Format and ensure
that Word Wrap is NOT checked! Then, copy the entire contents and paste it into
your next post.

Do this from both Main and Kids please.

#######
@echo off
@echo. c:\cdiag.txt
@echo Start diagnosis for %computername% c:\cdiag.txt
for %%a in (Main Kids 192.168.0.1 192.168.0.3 127.0.0.1) do (
@echo. c:\cdiag.txt
@echo Target %%a c:\cdiag.txt
ping %%a c:\cdiag.txt
net view %%a c:\cdiag.txt
)
@echo End diagnosis for %computername% c:\cdiag.txt
notepad c:\cdiag.txt
#######

Cheers,
Chuck
--
Paranoia comes from experience - and is not necessarily a bad thing.

#4 November 11th 04, 07:09 PM

Chuck wrote in message . ..
On Wed, 10 Nov 2004 22:55:30 +0100, "papaul" wrote:

Hello all,

I have problems with connecting two PC's with XP pro SP2 with standard NIC's
and a cross cable.
The main PC (MAIN) cannot see the second PC (KIDS) unless the last one is in
safe mode. The second one can see the main and also can access shared
drives.
I tried Chuck's advice to run PSLIST to see the differences between the safe
mode and full mode. In addition, i followed his advice to run the Process
Explorer (nice program btw) and shut down all the processes that were
present in full mode but not in safe mode.
However, no luck so far.
Is it sure that it is the second PC that causes the problems? It is the one
with the least programs installed? Firewall is disabled, no 3rd party
firewall are running there.
The funny thing is that when I try to change the IP address on MAIN to the
one that is given to KIDS, XP says the IP address is in use. So in some way,
MAIN can see KIDS.
SNIP

Paul,

Let's see exactly what your problem is. Do some diagnostic work please.

Take the following code (everything inside the "#######"). (Did I get the names
and ip addresses right)?

Copy the code, precisely as it is keyed, into Notepad.
Save the file as "cdiag.cmd", as type "All Files", into folder "C:\Windows".
Run it by Start - Run - "cdiag".
Wait patiently.
When Notepad opens up displaying c:\cdiag.txt, first check Format and ensure
that Word Wrap is NOT checked! Then, copy the entire contents and paste it into
your next post.

Do this from both Main and Kids please.

#######
@echo off
@echo. c:\cdiag.txt
@echo Start diagnosis for %computername% c:\cdiag.txt
for %%a in (Main Kids 192.168.0.1 192.168.0.3 127.0.0.1) do (
@echo. c:\cdiag.txt
@echo Target %%a c:\cdiag.txt
ping %%a c:\cdiag.txt
net view %%a c:\cdiag.txt
)
@echo End diagnosis for %computername% c:\cdiag.txt
notepad c:\cdiag.txt
#######

Cheers,
Chuck

ok here they are.
results from running at main:

Start diagnosis for MAIN

Target Main
Pingen naar Main [81.59.149.176] met 32 byte gegevens:Antwoord van
81.59.149.176: bytes=32 tijd1 ms TTL=128Antwoord van 81.59.149.176:
bytes=32 tijd1 ms TTL=128Antwoord van 81.59.149.176: bytes=32 tijd1
ms TTL=128Antwoord van 81.59.149.176: bytes=32 tijd1 ms
TTL=128Ping-statistieken voor 81.59.149.176: Pakketten: verzonden =
4, ontvangen = 4, verloren = 0 (0% verlies).De gemiddelde tijd voor
het uitvoeren van ‚‚n bewerking in milliseconden: Minimum = 0ms,
Maximum = 0ms, Gemiddelde = 0msGedeelde bronnen op Main

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target Kids
Pingen naar Kids [192.168.0.3] met 32 byte gegevens:Time-out bij
opdracht.Time-out bij opdracht.Time-out bij opdracht.Time-out bij
opdracht.Ping-statistieken voor 192.168.0.3: Pakketten: verzonden =
4, ontvangen = 0, verloren = 4 (100% verlies).
Target 192.168.0.1
Pingen naar 192.168.0.1 met 32 byte gegevens:Antwoord van 192.168.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms TTL=128Antwoord
van 192.168.0.1: bytes=32 tijd1 ms TTL=128Ping-statistieken voor
192.168.0.1: Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n bewerking
in milliseconden: Minimum = 0ms, Maximum = 0ms, Gemiddelde =
0msGedeelde bronnen op 192.168.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.3
Pingen naar 192.168.0.3 met 32 byte gegevens:Time-out bij
opdracht.Time-out bij opdracht.Time-out bij opdracht.Time-out bij
opdracht.Ping-statistieken voor 192.168.0.3: Pakketten: verzonden =
4, ontvangen = 0, verloren = 4 (100% verlies).
Target 127.0.0.1
Pingen naar 127.0.0.1 met 32 byte gegevens:Antwoord van 127.0.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 127.0.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128Antwoord van
127.0.0.1: bytes=32 tijd1 ms TTL=128Ping-statistieken voor 127.0.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0 (0%
verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n bewerking in
milliseconden: Minimum = 0ms, Maximum = 0ms, Gemiddelde =
0msGedeelde bronnen op 127.0.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

End diagnosis for MAIN

results from running at kids:

Start diagnosis for KIDS

Target Main
Ping-aanvraag kan host Main niet vinden. Controleer de naam en probeer
het
opnieuw.

Target Kids

Pingen naar KIDS [192.168.0.3] met 32 byte gegevens:

Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 192.168.0.3:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op Kids

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer HP C LaserJet 4500-PS
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.1

Pingen naar 192.168.0.1 met 32 byte gegevens:

Antwoord van 192.168.0.1: bytes=32 tijd=2 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=2 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128

Ping-statistieken voor 192.168.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n
bewerking in milliseconden:
Minimum = 1ms, Maximum = 2ms, Gemiddelde = 1ms
Gedeelde bronnen op 192.168.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.3

Pingen naar 192.168.0.3 met 32 byte gegevens:

Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 192.168.0.3:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op 192.168.0.3

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer HP C LaserJet 4500-PS
SharedDocs Schijf
De opdracht is voltooid.

Target 127.0.0.1

Pingen naar 127.0.0.1 met 32 byte gegevens:

Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 127.0.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op 127.0.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer HP C LaserJet 4500-PS
SharedDocs Schijf
De opdracht is voltooid.

End diagnosis for KIDS

I double checked with a laptop: indeed I good get normal contact with
main but not with kids.

Many thanks!
Paul

#5 November 11th 04, 09:30 PM

On 11 Nov 2004 11:09:46 -0800, (Paul) wrote:

Chuck wrote in message . ..
On Wed, 10 Nov 2004 22:55:30 +0100, "papaul" wrote:

Hello all,

I have problems with connecting two PC's with XP pro SP2 with standard NIC's
and a cross cable.
The main PC (MAIN) cannot see the second PC (KIDS) unless the last one is in
safe mode. The second one can see the main and also can access shared
drives.
I tried Chuck's advice to run PSLIST to see the differences between the safe
mode and full mode. In addition, i followed his advice to run the Process
Explorer (nice program btw) and shut down all the processes that were
present in full mode but not in safe mode.
However, no luck so far.
Is it sure that it is the second PC that causes the problems? It is the one
with the least programs installed? Firewall is disabled, no 3rd party
firewall are running there.
The funny thing is that when I try to change the IP address on MAIN to the
one that is given to KIDS, XP says the IP address is in use. So in some way,
MAIN can see KIDS.
SNIP

Paul,

Let's see exactly what your problem is. Do some diagnostic work please.

Take the following code (everything inside the "#######"). (Did I get the names
and ip addresses right)?

Copy the code, precisely as it is keyed, into Notepad.
Save the file as "cdiag.cmd", as type "All Files", into folder "C:\Windows".
Run it by Start - Run - "cdiag".
Wait patiently.
When Notepad opens up displaying c:\cdiag.txt, first check Format and ensure
that Word Wrap is NOT checked! Then, copy the entire contents and paste it into
your next post.

Do this from both Main and Kids please.

#######
@echo off
@echo. c:\cdiag.txt
@echo Start diagnosis for %computername% c:\cdiag.txt
for %%a in (Main Kids 192.168.0.1 192.168.0.3 127.0.0.1) do (
@echo. c:\cdiag.txt
@echo Target %%a c:\cdiag.txt
ping %%a c:\cdiag.txt
net view %%a c:\cdiag.txt
)
@echo End diagnosis for %computername% c:\cdiag.txt
notepad c:\cdiag.txt
#######

Cheers,
Chuck

ok here they are.

SNIP diagnostics

I double checked with a laptop: indeed I good get normal contact with
main but not with kids.

Many thanks!
Paul

Paul,

OK, you have an interesting situation.

Please translate the text inside the "#######". Babelfish gives:
Ping-aanvraag are possible does not leap about Main to find. Check the name and
try it again. %-}
#######
Ping-aanvraag kan host Main niet vinden. Controleer de naam en probeer
het opnieuw.
#######

When Main pings itself by name, it uses its WAN address 81.59.149.176, and gets
replies. It also gets replies when pinging itself as 192.168.0.1. It resolves
Kids properly as 192.168.0.3, but gets no replies.

When Kids pings Main by name, we get the reply that Babelfish earns its title
from (All those of the Judeo-Christian heritage know of the Tower Of Babel).
I'm guessing "...no route to target..." or something similar but your input is
necessary here. Kids resolves its address, and pings itself successfully, as
192.168.0.3. Kids can ping Main successfully as 192.168.0.1.

Did you run cdiag when booted under Safe, or Normal, mode? I don't see Kids
being able to "net view Main" successfully, as your earlier post implies. Do
you only have to boot Kids into Safe Mode to get access both ways?

Cheers,
Chuck
--
Paranoia comes from experience - and is not necessarily a bad thing.

#6 November 11th 04, 10:20 PM

Chuck, I removed the thread from this mail to make it a bit clearer:

I found a difference between my kids pc in full mode, and my laptop in
full mode, my main pc in full mode (and of course the kids pc in safe
mode)

When using PE, in one of the svchost.exe, there is a service called
iprip (RIP listener) that only shows up in the kids PC full mode.
Could this be the guy causing the problems? If yes, how can I remove
it?

thanks

Paul

#7 November 11th 04, 10:45 PM

On 11 Nov 2004 14:20:22 -0800, *email_address_deleted* (Paul) wrote:

Chuck, I removed the thread from this mail to make it a bit clearer:

I found a difference between my kids pc in full mode, and my laptop in
full mode, my main pc in full mode (and of course the kids pc in safe
mode)

When using PE, in one of the svchost.exe, there is a service called
iprip (RIP listener) that only shows up in the kids PC full mode.
Could this be the guy causing the problems? If yes, how can I remove
it?

Paul,

That's a new one to me.
http://www.dslreports.com/forum/rema...6749~mode=flat
http://www.blackviper.com/WinXP/servicecfg.htm

You should be able to disable it using (Start - Run) - services.msc. I'd be
very curious about why it's running in the first place though.
1) Can you disable it?
2) Does disabling it help the problem?
3) Does it stay disabled, after you reboot a couple times?

Cheers,
Chuck
--
Paranoia comes from experience - and is not necessarily a bad thing.

#8 November 12th 04, 07:02 AM

Chuck wrote in message . ..
On 11 Nov 2004 11:09:46 -0800, (Paul) wrote:

Chuck wrote in message . ..
On Wed, 10 Nov 2004 22:55:30 +0100, "papaul" wrote:

Hello all,

I have problems with connecting two PC's with XP pro SP2 with standard NIC's
and a cross cable.
The main PC (MAIN) cannot see the second PC (KIDS) unless the last one is in
safe mode. The second one can see the main and also can access shared
drives.
I tried Chuck's advice to run PSLIST to see the differences between the safe
mode and full mode. In addition, i followed his advice to run the Process
Explorer (nice program btw) and shut down all the processes that were
present in full mode but not in safe mode.
However, no luck so far.
Is it sure that it is the second PC that causes the problems? It is the one
with the least programs installed? Firewall is disabled, no 3rd party
firewall are running there.
The funny thing is that when I try to change the IP address on MAIN to the
one that is given to KIDS, XP says the IP address is in use. So in some way,
MAIN can see KIDS.
SNIP

Paul,

Let's see exactly what your problem is. Do some diagnostic work please.

Take the following code (everything inside the "#######"). (Did I get the names
and ip addresses right)?

Copy the code, precisely as it is keyed, into Notepad.
Save the file as "cdiag.cmd", as type "All Files", into folder "C:\Windows".
Run it by Start - Run - "cdiag".
Wait patiently.
When Notepad opens up displaying c:\cdiag.txt, first check Format and ensure
that Word Wrap is NOT checked! Then, copy the entire contents and paste it into
your next post.

Do this from both Main and Kids please.

#######
@echo off
@echo. c:\cdiag.txt
@echo Start diagnosis for %computername% c:\cdiag.txt
for %%a in (Main Kids 192.168.0.1 192.168.0.3 127.0.0.1) do (
@echo. c:\cdiag.txt
@echo Target %%a c:\cdiag.txt
ping %%a c:\cdiag.txt
net view %%a c:\cdiag.txt
)
@echo End diagnosis for %computername% c:\cdiag.txt
notepad c:\cdiag.txt
#######

Cheers,
Chuck

ok here they are.

SNIP diagnostics

I double checked with a laptop: indeed I good get normal contact with
main but not with kids.

Many thanks!
Paul

Paul,

OK, you have an interesting situation.

Please translate the text inside the "#######". Babelfish gives:
Ping-aanvraag are possible does not leap about Main to find. Check the name and
try it again. %-}
#######
Ping-aanvraag kan host Main niet vinden. Controleer de naam en probeer
het opnieuw.
#######

When Main pings itself by name, it uses its WAN address 81.59.149.176, and gets
replies. It also gets replies when pinging itself as 192.168.0.1. It resolves
Kids properly as 192.168.0.3, but gets no replies.

When Kids pings Main by name, we get the reply that Babelfish earns its title
from (All those of the Judeo-Christian heritage know of the Tower Of Babel).
I'm guessing "...no route to target..." or something similar but your input is
necessary here. Kids resolves its address, and pings itself successfully, as
192.168.0.3. Kids can ping Main successfully as 192.168.0.1.

Did you run cdiag when booted under Safe, or Normal, mode? I don't see Kids
being able to "net view Main" successfully, as your earlier post implies. Do
you only have to boot Kids into Safe Mode to get access both ways?

Cheers,
Chuck

Chuck: the text between the Aterix reads:

Ping-request cannot find host Main. Check name and try again.

Indeed I only have to restart kids in safe mode to get both way
networking enabled. I don't have to do anything with Main. I ran cdiag
under normal mode. I will check it tonight whether I did everything
well.

thanks

Paul

#9 November 12th 04, 07:12 AM

On 11 Nov 2004 23:02:24 -0800, (Paul) wrote:

Chuck wrote in message . ..
On 11 Nov 2004 11:09:46 -0800, (Paul) wrote:

Chuck wrote in message . ..
On Wed, 10 Nov 2004 22:55:30 +0100, "papaul" wrote:

Hello all,

I have problems with connecting two PC's with XP pro SP2 with standard NIC's
and a cross cable.
The main PC (MAIN) cannot see the second PC (KIDS) unless the last one is in
safe mode. The second one can see the main and also can access shared
drives.
I tried Chuck's advice to run PSLIST to see the differences between the safe
mode and full mode. In addition, i followed his advice to run the Process
Explorer (nice program btw) and shut down all the processes that were
present in full mode but not in safe mode.
However, no luck so far.
Is it sure that it is the second PC that causes the problems? It is the one
with the least programs installed? Firewall is disabled, no 3rd party
firewall are running there.
The funny thing is that when I try to change the IP address on MAIN to the
one that is given to KIDS, XP says the IP address is in use. So in some way,
MAIN can see KIDS.
SNIP

Paul,

Let's see exactly what your problem is. Do some diagnostic work please.

Take the following code (everything inside the "#######"). (Did I get the names
and ip addresses right)?

Copy the code, precisely as it is keyed, into Notepad.
Save the file as "cdiag.cmd", as type "All Files", into folder "C:\Windows".
Run it by Start - Run - "cdiag".
Wait patiently.
When Notepad opens up displaying c:\cdiag.txt, first check Format and ensure
that Word Wrap is NOT checked! Then, copy the entire contents and paste it into
your next post.

Do this from both Main and Kids please.

#######
@echo off
@echo. c:\cdiag.txt
@echo Start diagnosis for %computername% c:\cdiag.txt
for %%a in (Main Kids 192.168.0.1 192.168.0.3 127.0.0.1) do (
@echo. c:\cdiag.txt
@echo Target %%a c:\cdiag.txt
ping %%a c:\cdiag.txt
net view %%a c:\cdiag.txt
)
@echo End diagnosis for %computername% c:\cdiag.txt
notepad c:\cdiag.txt
#######

Cheers,
Chuck

ok here they are.

SNIP diagnostics

I double checked with a laptop: indeed I good get normal contact with
main but not with kids.

Many thanks!
Paul

Paul,

OK, you have an interesting situation.

Please translate the text inside the "#######". Babelfish gives:
Ping-aanvraag are possible does not leap about Main to find. Check the name and
try it again. %-}
#######
Ping-aanvraag kan host Main niet vinden. Controleer de naam en probeer
het opnieuw.
#######

When Main pings itself by name, it uses its WAN address 81.59.149.176, and gets
replies. It also gets replies when pinging itself as 192.168.0.1. It resolves
Kids properly as 192.168.0.3, but gets no replies.

When Kids pings Main by name, we get the reply that Babelfish earns its title
from (All those of the Judeo-Christian heritage know of the Tower Of Babel).
I'm guessing "...no route to target..." or something similar but your input is
necessary here. Kids resolves its address, and pings itself successfully, as
192.168.0.3. Kids can ping Main successfully as 192.168.0.1.

Did you run cdiag when booted under Safe, or Normal, mode? I don't see Kids
being able to "net view Main" successfully, as your earlier post implies. Do
you only have to boot Kids into Safe Mode to get access both ways?

Cheers,
Chuck

Chuck: the text between the Aterix reads:

Ping-request cannot find host Main. Check name and try again.

Indeed I only have to restart kids in safe mode to get both way
networking enabled. I don't have to do anything with Main. I ran cdiag
under normal mode. I will check it tonight whether I did everything
well.

thanks

Paul

I'll look forward to your next post, Paul.

Cheers,
Chuck
--
Paranoia comes from experience - and is not necessarily a bad thing.

#10 November 12th 04, 09:55 PM

Chuck wrote in message . ..
On 11 Nov 2004 14:20:22 -0800, *email_address_deleted* (Paul) wrote:

Chuck, I removed the thread from this mail to make it a bit clearer:

I found a difference between my kids pc in full mode, and my laptop in
full mode, my main pc in full mode (and of course the kids pc in safe
mode)

When using PE, in one of the svchost.exe, there is a service called
iprip (RIP listener) that only shows up in the kids PC full mode.
Could this be the guy causing the problems? If yes, how can I remove
it?

Paul,

That's a new one to me.
http://www.dslreports.com/forum/rema...6749~mode=flat
http://www.blackviper.com/WinXP/servicecfg.htm

You should be able to disable it using (Start - Run) - services.msc. I'd be
very curious about why it's running in the first place though.
1) Can you disable it?
2) Does disabling it help the problem?
3) Does it stay disabled, after you reboot a couple times?

Cheers,
Chuck

Ok chuck, no luck so far: I can disable the services via:

network connections tab advanced subtab Windows optional networking
components

where I can selectnetworking services. When clicking details I see
that my two "good' PC's (Main and laptop) only have
Internet Gateway Device Discovery and Control Client
checked whereas my kids PC has more items checked. I unchecked them
(they then remain off after restarting) but it didn't work. I
obviously got rid of the RIP listener service.

I also ran your macro on main and kids with kids both in full mode and
safe mode. I disabled my internet connection so I got rid of the
unnecesary stuff:
What I see is that pinging from MAIN to KIDS works fine when KIDS is
in safe mode, both by name and ip address. In full mode it doesn't
work at all.
When pinging Main from kids it always works with IP address but never
with name.

Hope you find some hint. I am getting a little more desperado.

thanks
Paul

ran at main with kids in full mode:

Start diagnosis for MAIN

Target Main
Pingen naar Main [192.168.0.1] met 32 byte gegevens:Antwoord van
192.168.0.1: bytes=32 tijd1 ms TTL=128Antwoord van 192.168.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms
TTL=128Ping-statistieken voor 192.168.0.1: Pakketten: verzonden =
4, ontvangen = 4, verloren = 0 (0% verlies).De gemiddelde tijd voor
het uitvoeren van ‚‚n bewerking in milliseconden: Minimum = 0ms,
Maximum = 0ms, Gemiddelde = 0msGedeelde bronnen op Main

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target Kids
Ping-aanvraag kan host Kids niet vinden. Controleer de naam en probeer
hetopnieuw.
Target 192.168.0.1
Pingen naar 192.168.0.1 met 32 byte gegevens:Antwoord van 192.168.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms TTL=128Antwoord
van 192.168.0.1: bytes=32 tijd1 ms TTL=128Ping-statistieken voor
192.168.0.1: Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n bewerking
in milliseconden: Minimum = 0ms, Maximum = 0ms, Gemiddelde =
0msGedeelde bronnen op 192.168.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.3
Pingen naar 192.168.0.3 met 32 byte gegevens:Time-out bij
opdracht.Time-out bij opdracht.Time-out bij opdracht.Time-out bij
opdracht.Ping-statistieken voor 192.168.0.3: Pakketten: verzonden =
4, ontvangen = 0, verloren = 4 (100% verlies).
Target 127.0.0.1
Pingen naar 127.0.0.1 met 32 byte gegevens:Antwoord van 127.0.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 127.0.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128Antwoord van
127.0.0.1: bytes=32 tijd1 ms TTL=128Ping-statistieken voor 127.0.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0 (0%
verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n bewerking in
milliseconden: Minimum = 0ms, Maximum = 0ms, Gemiddelde =
0msGedeelde bronnen op 127.0.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

End diagnosis for MAIN
============================================
and then ran at main with kids in safe mode:

Start diagnosis for MAIN

Target Main
Pingen naar Main [192.168.0.1] met 32 byte gegevens:Antwoord van
192.168.0.1: bytes=32 tijd1 ms TTL=128Antwoord van 192.168.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms
TTL=128Ping-statistieken voor 192.168.0.1: Pakketten: verzonden =
4, ontvangen = 4, verloren = 0 (0% verlies).De gemiddelde tijd voor
het uitvoeren van ‚‚n bewerking in milliseconden: Minimum = 0ms,
Maximum = 0ms, Gemiddelde = 0msGedeelde bronnen op Main

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target Kids
Pingen naar Kids [192.168.0.3] met 32 byte gegevens:Antwoord van
192.168.0.3: bytes=32 tijd=2 ms TTL=128Antwoord van 192.168.0.3:
bytes=32 tijd=1 ms TTL=128Antwoord van 192.168.0.3: bytes=32 tijd=1 ms
TTL=128Antwoord van 192.168.0.3: bytes=32 tijd=1 ms
TTL=128Ping-statistieken voor 192.168.0.3: Pakketten: verzonden =
4, ontvangen = 4, verloren = 0 (0% verlies).De gemiddelde tijd voor
het uitvoeren van ‚‚n bewerking in milliseconden: Minimum = 1ms,
Maximum = 2ms, Gemiddelde = 1msGedeelde bronnen op Kids

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.1
Pingen naar 192.168.0.1 met 32 byte gegevens:Antwoord van 192.168.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms TTL=128Antwoord
van 192.168.0.1: bytes=32 tijd1 ms TTL=128Ping-statistieken voor
192.168.0.1: Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n bewerking
in milliseconden: Minimum = 0ms, Maximum = 0ms, Gemiddelde =
0msGedeelde bronnen op 192.168.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.3
Pingen naar 192.168.0.3 met 32 byte gegevens:Antwoord van 192.168.0.3:
bytes=32 tijd=2 ms TTL=128Antwoord van 192.168.0.3: bytes=32 tijd=1 ms
TTL=128Antwoord van 192.168.0.3: bytes=32 tijd=1 ms TTL=128Antwoord
van 192.168.0.3: bytes=32 tijd=1 ms TTL=128Ping-statistieken voor
192.168.0.3: Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n bewerking
in milliseconden: Minimum = 1ms, Maximum = 2ms, Gemiddelde =
1msGedeelde bronnen op 192.168.0.3

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
SharedDocs Schijf
De opdracht is voltooid.

Target 127.0.0.1
Pingen naar 127.0.0.1 met 32 byte gegevens:Antwoord van 127.0.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 127.0.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128Antwoord van
127.0.0.1: bytes=32 tijd1 ms TTL=128Ping-statistieken voor 127.0.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0 (0%
verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n bewerking in
milliseconden: Minimum = 0ms, Maximum = 0ms, Gemiddelde =
0msGedeelde bronnen op 127.0.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

End diagnosis for MAIN
====================================
then ran at KIDS in full mode:

Start diagnosis for KIDS

Target Main
Ping-aanvraag kan host Main niet vinden. Controleer de naam en probeer
het
opnieuw.

Target Kids

Pingen naar KIDS [192.168.0.3] met 32 byte gegevens:

Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 192.168.0.3:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op Kids

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer HP C LaserJet 4500-PS
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.1

Pingen naar 192.168.0.1 met 32 byte gegevens:

Antwoord van 192.168.0.1: bytes=32 tijd=2 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=2 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128

Ping-statistieken voor 192.168.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n
bewerking in milliseconden:
Minimum = 1ms, Maximum = 2ms, Gemiddelde = 1ms
Gedeelde bronnen op 192.168.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.3

Pingen naar 192.168.0.3 met 32 byte gegevens:

Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 192.168.0.3:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op 192.168.0.3

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer HP C LaserJet 4500-PS
SharedDocs Schijf
De opdracht is voltooid.

Target 127.0.0.1

Pingen naar 127.0.0.1 met 32 byte gegevens:

Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 127.0.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op 127.0.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer HP C LaserJet 4500-PS
SharedDocs Schijf
De opdracht is voltooid.

End diagnosis for KIDS

==============================
and finally for KIDS in safe mode:

Start diagnosis for KIDS

Target Main
Ping-aanvraag kan host Main niet vinden. Controleer de naam en probeer
het
opnieuw.

Target Kids

Pingen naar KIDS [192.168.0.3] met 32 byte gegevens:

Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 192.168.0.3:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op Kids

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.1

Pingen naar 192.168.0.1 met 32 byte gegevens:

Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128

Ping-statistieken voor 192.168.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n
bewerking in milliseconden:
Minimum = 1ms, Maximum = 1ms, Gemiddelde = 1ms
Gedeelde bronnen op 192.168.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.3

Pingen naar 192.168.0.3 met 32 byte gegevens:

Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 192.168.0.3:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op 192.168.0.3

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
SharedDocs Schijf
De opdracht is voltooid.

Target 127.0.0.1

Pingen naar 127.0.0.1 met 32 byte gegevens:

Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 127.0.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ‚‚n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op 127.0.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
SharedDocs Schijf
De opdracht is voltooid.

End diagnosis for KIDS
==============================

#11 November 13th 04, 02:49 AM

On 12 Nov 2004 13:55:29 -0800, (Paul) wrote:

Chuck wrote in message . ..
On 11 Nov 2004 14:20:22 -0800, *email_address_deleted* (Paul) wrote:

Chuck, I removed the thread from this mail to make it a bit clearer:

I found a difference between my kids pc in full mode, and my laptop in
full mode, my main pc in full mode (and of course the kids pc in safe
mode)

When using PE, in one of the svchost.exe, there is a service called
iprip (RIP listener) that only shows up in the kids PC full mode.
Could this be the guy causing the problems? If yes, how can I remove
it?

Paul,

That's a new one to me.
http://www.dslreports.com/forum/rema...6749~mode=flat
http://www.blackviper.com/WinXP/servicecfg.htm

You should be able to disable it using (Start - Run) - services.msc. I'd be
very curious about why it's running in the first place though.
1) Can you disable it?
2) Does disabling it help the problem?
3) Does it stay disabled, after you reboot a couple times?

Cheers,
Chuck

Ok chuck, no luck so far: I can disable the services via:

network connections tab advanced subtab Windows optional networking
components

where I can selectnetworking services. When clicking details I see
that my two "good' PC's (Main and laptop) only have
Internet Gateway Device Discovery and Control Client
checked whereas my kids PC has more items checked. I unchecked them
(they then remain off after restarting) but it didn't work. I
obviously got rid of the RIP listener service.

I also ran your macro on main and kids with kids both in full mode and
safe mode. I disabled my internet connection so I got rid of the
unnecesary stuff:
What I see is that pinging from MAIN to KIDS works fine when KIDS is
in safe mode, both by name and ip address. In full mode it doesn't
work at all.
When pinging Main from kids it always works with IP address but never
with name.

Hope you find some hint. I am getting a little more desperado.

thanks
Paul

SNIP

Paul,

Have patience please. This is getting interesting.

Please review the summary which I created, and, since you can read Dutch a hella
better than I can (I hope) please verify that my conclusions are correct:

From Main (kids Full)

Target Main - OK/OK

Target Kids - NO

Target 192.168.0.1 - OK/OK

Target 192.168.0.3 - NO

From Main (Kids Safe)

Target Main - OK/OK

Target Kids - OK/OK

Target 192.168.0.1 - OK/OK

Target 192.168.0.3 - OK/OK

From Kids (Full)

Target Main - NO

Target Kids - OK/OK

Target 192.168.0.1 - OK/OK

Target 192.168.0.3 - OK/OK

From Kids (Safe)

Target Main - NO

Target Kids - OK/OK

Target 192.168.0.1 - OK/OK

Target 192.168.0.3 - OK/OK

Even with Kids in Safe Mode, Kids has a name resolution problem with Main. Kids
can always access Main (by IP address, but not by name). Actually, access from
Kids doesn't change in Full vs Safe Modes.

Main, OTOH, has no access to Kids (by name or by IP address) unless Kids is in
Safe Mode.

Please extract IPConfig x 3 - Once for Main, then twice for Kids - once in
Normal Mode, again in Safe Mode.

Then we're going to do HijackThis from Kids in Normal Mode.

Get HijackThis:
HijackThis http://www.majorgeeks.com/download.php?det=3155

Create a separate folder for HijackThis, such as C:\HijackThis - copy the
downloaded file there. Then, run HijackThis ("Scan"). Do NOT make any changes
immediately. Save the HJT Log.
http://forums.spywareinfo.com/index.php?showtopic=227
http://forums.spywareinfo.com/index.php?showtopic=11150

Post the HijackThis log here, along with the IPConfig x 3.

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

#12 November 13th 04, 04:06 AM

Tip #3

www.careyholzman.com/netfixes.htm

Carey

"Paul" wrote in message
m...
Chuck wrote in message
. ..
On 11 Nov 2004 14:20:22 -0800, *email_address_deleted* (Paul) wrote:

Chuck, I removed the thread from this mail to make it a bit clearer:

I found a difference between my kids pc in full mode, and my laptop in
full mode, my main pc in full mode (and of course the kids pc in safe
mode)

When using PE, in one of the svchost.exe, there is a service called
iprip (RIP listener) that only shows up in the kids PC full mode.
Could this be the guy causing the problems? If yes, how can I remove
it?

Paul,

That's a new one to me.
http://www.dslreports.com/forum/rema...6749~mode=flat
http://www.blackviper.com/WinXP/servicecfg.htm

You should be able to disable it using (Start - Run) - services.msc. I'd
be
very curious about why it's running in the first place though.
1) Can you disable it?
2) Does disabling it help the problem?
3) Does it stay disabled, after you reboot a couple times?

Cheers,
Chuck

Ok chuck, no luck so far: I can disable the services via:

network connections tab advanced subtab Windows optional networking
components

where I can selectnetworking services. When clicking details I see
that my two "good' PC's (Main and laptop) only have
Internet Gateway Device Discovery and Control Client
checked whereas my kids PC has more items checked. I unchecked them
(they then remain off after restarting) but it didn't work. I
obviously got rid of the RIP listener service.

I also ran your macro on main and kids with kids both in full mode and
safe mode. I disabled my internet connection so I got rid of the
unnecesary stuff:
What I see is that pinging from MAIN to KIDS works fine when KIDS is
in safe mode, both by name and ip address. In full mode it doesn't
work at all.
When pinging Main from kids it always works with IP address but never
with name.

Hope you find some hint. I am getting a little more desperado.

thanks
Paul

ran at main with kids in full mode:

Start diagnosis for MAIN

Target Main
Pingen naar Main [192.168.0.1] met 32 byte gegevens:Antwoord van
192.168.0.1: bytes=32 tijd1 ms TTL=128Antwoord van 192.168.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms
TTL=128Ping-statistieken voor 192.168.0.1: Pakketten: verzonden =
4, ontvangen = 4, verloren = 0 (0% verlies).De gemiddelde tijd voor
het uitvoeren van ,,n bewerking in milliseconden: Minimum = 0ms,
Maximum = 0ms, Gemiddelde = 0msGedeelde bronnen op Main

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target Kids
Ping-aanvraag kan host Kids niet vinden. Controleer de naam en probeer
hetopnieuw.
Target 192.168.0.1
Pingen naar 192.168.0.1 met 32 byte gegevens:Antwoord van 192.168.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms TTL=128Antwoord
van 192.168.0.1: bytes=32 tijd1 ms TTL=128Ping-statistieken voor
192.168.0.1: Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ,,n bewerking
in milliseconden: Minimum = 0ms, Maximum = 0ms, Gemiddelde =
0msGedeelde bronnen op 192.168.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.3
Pingen naar 192.168.0.3 met 32 byte gegevens:Time-out bij
opdracht.Time-out bij opdracht.Time-out bij opdracht.Time-out bij
opdracht.Ping-statistieken voor 192.168.0.3: Pakketten: verzonden =
4, ontvangen = 0, verloren = 4 (100% verlies).
Target 127.0.0.1
Pingen naar 127.0.0.1 met 32 byte gegevens:Antwoord van 127.0.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 127.0.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128Antwoord van
127.0.0.1: bytes=32 tijd1 ms TTL=128Ping-statistieken voor 127.0.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0 (0%
verlies).De gemiddelde tijd voor het uitvoeren van ,,n bewerking in
milliseconden: Minimum = 0ms, Maximum = 0ms, Gemiddelde =
0msGedeelde bronnen op 127.0.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

End diagnosis for MAIN
============================================
and then ran at main with kids in safe mode:

Start diagnosis for MAIN

Target Main
Pingen naar Main [192.168.0.1] met 32 byte gegevens:Antwoord van
192.168.0.1: bytes=32 tijd1 ms TTL=128Antwoord van 192.168.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms
TTL=128Ping-statistieken voor 192.168.0.1: Pakketten: verzonden =
4, ontvangen = 4, verloren = 0 (0% verlies).De gemiddelde tijd voor
het uitvoeren van ,,n bewerking in milliseconden: Minimum = 0ms,
Maximum = 0ms, Gemiddelde = 0msGedeelde bronnen op Main

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target Kids
Pingen naar Kids [192.168.0.3] met 32 byte gegevens:Antwoord van
192.168.0.3: bytes=32 tijd=2 ms TTL=128Antwoord van 192.168.0.3:
bytes=32 tijd=1 ms TTL=128Antwoord van 192.168.0.3: bytes=32 tijd=1 ms
TTL=128Antwoord van 192.168.0.3: bytes=32 tijd=1 ms
TTL=128Ping-statistieken voor 192.168.0.3: Pakketten: verzonden =
4, ontvangen = 4, verloren = 0 (0% verlies).De gemiddelde tijd voor
het uitvoeren van ,,n bewerking in milliseconden: Minimum = 1ms,
Maximum = 2ms, Gemiddelde = 1msGedeelde bronnen op Kids

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.1
Pingen naar 192.168.0.1 met 32 byte gegevens:Antwoord van 192.168.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 192.168.0.1: bytes=32 tijd1 ms TTL=128Antwoord
van 192.168.0.1: bytes=32 tijd1 ms TTL=128Ping-statistieken voor
192.168.0.1: Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ,,n bewerking
in milliseconden: Minimum = 0ms, Maximum = 0ms, Gemiddelde =
0msGedeelde bronnen op 192.168.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.3
Pingen naar 192.168.0.3 met 32 byte gegevens:Antwoord van 192.168.0.3:
bytes=32 tijd=2 ms TTL=128Antwoord van 192.168.0.3: bytes=32 tijd=1 ms
TTL=128Antwoord van 192.168.0.3: bytes=32 tijd=1 ms TTL=128Antwoord
van 192.168.0.3: bytes=32 tijd=1 ms TTL=128Ping-statistieken voor
192.168.0.3: Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ,,n bewerking
in milliseconden: Minimum = 1ms, Maximum = 2ms, Gemiddelde =
1msGedeelde bronnen op 192.168.0.3

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
SharedDocs Schijf
De opdracht is voltooid.

Target 127.0.0.1
Pingen naar 127.0.0.1 met 32 byte gegevens:Antwoord van 127.0.0.1:
bytes=32 tijd1 ms TTL=128Antwoord van 127.0.0.1: bytes=32 tijd1 ms
TTL=128Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128Antwoord van
127.0.0.1: bytes=32 tijd1 ms TTL=128Ping-statistieken voor 127.0.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0 (0%
verlies).De gemiddelde tijd voor het uitvoeren van ,,n bewerking in
milliseconden: Minimum = 0ms, Maximum = 0ms, Gemiddelde =
0msGedeelde bronnen op 127.0.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

End diagnosis for MAIN
====================================
then ran at KIDS in full mode:

Start diagnosis for KIDS

Target Main
Ping-aanvraag kan host Main niet vinden. Controleer de naam en probeer
het
opnieuw.

Target Kids

Pingen naar KIDS [192.168.0.3] met 32 byte gegevens:

Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 192.168.0.3:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ,,n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op Kids

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer HP C LaserJet 4500-PS
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.1

Pingen naar 192.168.0.1 met 32 byte gegevens:

Antwoord van 192.168.0.1: bytes=32 tijd=2 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=2 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128

Ping-statistieken voor 192.168.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ,,n
bewerking in milliseconden:
Minimum = 1ms, Maximum = 2ms, Gemiddelde = 1ms
Gedeelde bronnen op 192.168.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.3

Pingen naar 192.168.0.3 met 32 byte gegevens:

Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 192.168.0.3:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ,,n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op 192.168.0.3

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer HP C LaserJet 4500-PS
SharedDocs Schijf
De opdracht is voltooid.

Target 127.0.0.1

Pingen naar 127.0.0.1 met 32 byte gegevens:

Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 127.0.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ,,n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op 127.0.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer HP C LaserJet 4500-PS
SharedDocs Schijf
De opdracht is voltooid.

End diagnosis for KIDS

==============================
and finally for KIDS in safe mode:

Start diagnosis for KIDS

Target Main
Ping-aanvraag kan host Main niet vinden. Controleer de naam en probeer
het
opnieuw.

Target Kids

Pingen naar KIDS [192.168.0.3] met 32 byte gegevens:

Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 192.168.0.3:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ,,n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op Kids

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.1

Pingen naar 192.168.0.1 met 32 byte gegevens:

Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128
Antwoord van 192.168.0.1: bytes=32 tijd=1 ms TTL=128

Ping-statistieken voor 192.168.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ,,n
bewerking in milliseconden:
Minimum = 1ms, Maximum = 1ms, Gemiddelde = 1ms
Gedeelde bronnen op 192.168.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
BIGVIDEO (E) Schijf
main_C Schijf
main_D30Gb Schijf
Printer Printer EPSON Stylus COLOR 680
Printer2 Printer Microsoft Office Document Image
Writer
SharedDocs Schijf
De opdracht is voltooid.

Target 192.168.0.3

Pingen naar 192.168.0.3 met 32 byte gegevens:

Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128
Antwoord van 192.168.0.3: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 192.168.0.3:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ,,n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op 192.168.0.3

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
SharedDocs Schijf
De opdracht is voltooid.

Target 127.0.0.1

Pingen naar 127.0.0.1 met 32 byte gegevens:

Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128
Antwoord van 127.0.0.1: bytes=32 tijd1 ms TTL=128

Ping-statistieken voor 127.0.0.1:
Pakketten: verzonden = 4, ontvangen = 4, verloren = 0
(0% verlies).De gemiddelde tijd voor het uitvoeren van ,,n
bewerking in milliseconden:
Minimum = 0ms, Maximum = 0ms, Gemiddelde = 0ms
Gedeelde bronnen op 127.0.0.1

Sharenaam Type Gebruikt als Opmerking

-------------------------------------------------------------------------------
C_kids Schijf
SharedDocs Schijf
De opdracht is voltooid.

End diagnosis for KIDS
==============================

#13 November 13th 04, 05:09 PM

Chuck wrote in message . ..
On 12 Nov 2004 13:55:29 -0800, (Paul) wrote:

Chuck wrote in message . ..
On 11 Nov 2004 14:20:22 -0800, *email_address_deleted* (Paul) wrote:

Chuck, I removed the thread from this mail to make it a bit clearer:

I found a difference between my kids pc in full mode, and my laptop in
full mode, my main pc in full mode (and of course the kids pc in safe
mode)

When using PE, in one of the svchost.exe, there is a service called
iprip (RIP listener) that only shows up in the kids PC full mode.
Could this be the guy causing the problems? If yes, how can I remove
it?

Paul,

That's a new one to me.
http://www.dslreports.com/forum/rema...6749~mode=flat
http://www.blackviper.com/WinXP/servicecfg.htm

You should be able to disable it using (Start - Run) - services.msc. I'd be
very curious about why it's running in the first place though.
1) Can you disable it?
2) Does disabling it help the problem?
3) Does it stay disabled, after you reboot a couple times?

Cheers,
Chuck

Ok chuck, no luck so far: I can disable the services via:

network connections tab advanced subtab Windows optional networking
components

where I can selectnetworking services. When clicking details I see
that my two "good' PC's (Main and laptop) only have
Internet Gateway Device Discovery and Control Client
checked whereas my kids PC has more items checked. I unchecked them
(they then remain off after restarting) but it didn't work. I
obviously got rid of the RIP listener service.

I also ran your macro on main and kids with kids both in full mode and
safe mode. I disabled my internet connection so I got rid of the
unnecesary stuff:
What I see is that pinging from MAIN to KIDS works fine when KIDS is
in safe mode, both by name and ip address. In full mode it doesn't
work at all.
When pinging Main from kids it always works with IP address but never
with name.

Hope you find some hint. I am getting a little more desperado.

thanks
Paul

SNIP

Paul,

Have patience please. This is getting interesting.

Please review the summary which I created, and, since you can read Dutch a hella
better than I can (I hope) please verify that my conclusions are correct:

From Main (kids Full)

Target Main - OK/OK

Target Kids - NO

Target 192.168.0.1 - OK/OK

Target 192.168.0.3 - NO

From Main (Kids Safe)

Target Main - OK/OK

Target Kids - OK/OK

Target 192.168.0.1 - OK/OK

Target 192.168.0.3 - OK/OK

From Kids (Full)

Target Main - NO

Target Kids - OK/OK

Target 192.168.0.1 - OK/OK

Target 192.168.0.3 - OK/OK

From Kids (Safe)

Target Main - NO

Target Kids - OK/OK

Target 192.168.0.1 - OK/OK

Target 192.168.0.3 - OK/OK

Even with Kids in Safe Mode, Kids has a name resolution problem with Main. Kids
can always access Main (by IP address, but not by name). Actually, access from
Kids doesn't change in Full vs Safe Modes.

Main, OTOH, has no access to Kids (by name or by IP address) unless Kids is in
Safe Mode.

Please extract IPConfig x 3 - Once for Main, then twice for Kids - once in
Normal Mode, again in Safe Mode.

Then we're going to do HijackThis from Kids in Normal Mode.

Get HijackThis:
HijackThis http://www.majorgeeks.com/download.php?det=3155

Create a separate folder for HijackThis, such as C:\HijackThis - copy the
downloaded file there. Then, run HijackThis ("Scan"). Do NOT make any changes
immediately. Save the HJT Log.
http://forums.spywareinfo.com/index.php?showtopic=227
http://forums.spywareinfo.com/index.php?showtopic=11150

Post the HijackThis log here, along with the IPConfig x 3.

chuck, I agree with you summary. here are the ipconfigs:

1) main

Windows IP-configuratie

Host-naam . . . . . . . . . . . .: Main
Primair DNS-achtervoegsel. . . . .:
Knooppunttype: . . . . . . . . . .: onbekend
IP-routering ingeschakeld. . . . .: ja
WINS-proxy ingeschakeld . . . . . : nee

Ethernet-adapter LAN-verbinding 2:

Verbindingsspec. DNS-achtervoegsel:
Beschrijving . . . . . . . . . . .:
VIA Rhine II Fast Ethernet Adapter
Fysiek adres. . . . . . . . . . . : 00-0A-E6-60-04-6E
DHCP ingeschakeld:. . . . . . . . : nee
IP-adres. . . . . . . . . . . . . : 192.168.0.1
Subnetmasker. . . . . . . . . . . : 255.255.255.0
Standaardgateway. . . . . . . . . :

Ethernet-adapter ZONNETADSL:

Status van medium . . . . . . . . : medium ontkoppeld
Beschrijving . . . . . . . . . . .:
ADSL USB MODEM LAN Adapter
Fysiek adres. . . . . . . . . . . : 00-D0-41-12-C1-A7

2) kids full mode

Windows IP-configuratie

Host-naam . . . . . . . . . . . .: KIDS
Primair DNS-achtervoegsel. . . . .:
Knooppunttype . . . . . . . . . . : gemengd
IP-routering ingeschakeld. . . . .: nee
WINS-proxy ingeschakeld . . . . . : nee

Ethernet-adapter LAN-verbinding 4:

Verbindingsspec. DNS-achtervoegsel:
Beschrijving . . . . . . . . . . .:
Realtek RTL8139 Family PCI Fast Ethernet NIC
Fysiek adres. . . . . . . . . . . : 00-40-F4-6E-FA-18
DHCP ingeschakeld:. . . . . . . . : nee
IP-adres. . . . . . . . . . . . . : 192.168.0.3
Subnetmasker. . . . . . . . . . . : 255.255.255.0
Standaardgateway. . . . . . . . . :
DNS-servers . . . . . . . . . . . : 192.168.0.254

3) kids safe mode

Windows IP-configuratie

Host-naam . . . . . . . . . . . .: KIDS
Primair DNS-achtervoegsel. . . . .:
Knooppunttype . . . . . . . . . . : gemengd
IP-routering ingeschakeld. . . . .: nee
WINS-proxy ingeschakeld . . . . . : nee

Ethernet-adapter LAN-verbinding 4:

Verbindingsspec. DNS-achtervoegsel:
Beschrijving . . . . . . . . . . .:
Realtek RTL8139 Family PCI Fast Ethernet NIC
Fysiek adres. . . . . . . . . . . : 00-40-F4-6E-FA-18
DHCP ingeschakeld:. . . . . . . . : nee
IP-adres. . . . . . . . . . . . . : 192.168.0.3
Subnetmasker. . . . . . . . . . . : 255.255.255.0
Standaardgateway. . . . . . . . . :
DNS-servers . . . . . . . . . . . : 192.168.0.254

Than the hijackdata:

Logfile of HijackThis v1.98.2
Scan saved at 17:01:24, on 13-11-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S00MT 2.EXE
C:\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL =
http://www.turtlefind.com/search/%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL
= nov
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.turtlefind.com/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.turtlefind.com/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant
= http://www.turtlefind.com/search/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant
= http://www.turtlefind.com/search/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
C:\WINDOWS\SYSTEM\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet
Settings,ProxyServer = http=192.168.0.254:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName
= Koppelingen
O2 - BHO: ZIBho Class - {029CA12C-89C1-46a7-A3C7-82F2F98635CB} -
C:\Program Files\Kontiki\bin\bh309190.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} -
C:\PROGRA~1\FLASHGET\jccatch.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} -
C:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft
ActiveSync\WCESCOMM.EXE"
O4 - Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Get It With Kontiki - res://C:\Program
Files\Kontiki\bin\bh309190.dll/201
O8 - Extra context menu item: Ontvang alles met FlashGet - C:\Program
Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Ontvang met FlashGet - C:\Program
Files\FlashGet\jc_link.htm
O9 - Extra button: Create Mobile Favorite -
{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft
ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F}
- C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... -
{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft
ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
- (no file)
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} -
C:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet -
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} -
C:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683}
- C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O16 - DPF: {4E15D681-1D20-11D4-8B72-000021DA1956} -
http://www.4daagsefoto.nl/plugin/4daagse.exe
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield
International Setup Player) -
http://www.installengine.com/engine/isetup.cab
O16 - DPF: {FE8287E9-5F43-11D3-ABCA-00105A5C1F46} (HouseCall Control)
- http://www.housecall.nl/housecall/xscan4.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{12C97ECA-95FD-4B99-828F-5C7125427CDC}:
NameServer = 192.168.0.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{12C97ECA-95FD-4B99-828F-5C7125427CDC}:
NameServer = 192.168.0.254

Hope this helps you and me!

thanks Paul

#14 November 13th 04, 07:03 PM

On 13 Nov 2004 09:09:37 -0800, *email_address_deleted* (Paul) wrote:

SNIP

chuck, I agree with you summary. here are the ipconfigs:

1) main

Windows IP-configuratie

Host-naam . . . . . . . . . . . .: Main
Primair DNS-achtervoegsel. . . . .:
Knooppunttype: . . . . . . . . . .: onbekend
IP-routering ingeschakeld. . . . .: ja
WINS-proxy ingeschakeld . . . . . : nee

Ethernet-adapter LAN-verbinding 2:

Verbindingsspec. DNS-achtervoegsel:
Beschrijving . . . . . . . . . . .:
VIA Rhine II Fast Ethernet Adapter
Fysiek adres. . . . . . . . . . . : 00-0A-E6-60-04-6E
DHCP ingeschakeld:. . . . . . . . : nee
IP-adres. . . . . . . . . . . . . : 192.168.0.1
Subnetmasker. . . . . . . . . . . : 255.255.255.0
Standaardgateway. . . . . . . . . :

Ethernet-adapter ZONNETADSL:

Status van medium . . . . . . . . : medium ontkoppeld
Beschrijving . . . . . . . . . . .:
ADSL USB MODEM LAN Adapter
Fysiek adres. . . . . . . . . . . : 00-D0-41-12-C1-A7

2) kids full mode

Windows IP-configuratie

Host-naam . . . . . . . . . . . .: KIDS
Primair DNS-achtervoegsel. . . . .:
Knooppunttype . . . . . . . . . . : gemengd
IP-routering ingeschakeld. . . . .: nee
WINS-proxy ingeschakeld . . . . . : nee

Ethernet-adapter LAN-verbinding 4:

Verbindingsspec. DNS-achtervoegsel:
Beschrijving . . . . . . . . . . .:
Realtek RTL8139 Family PCI Fast Ethernet NIC
Fysiek adres. . . . . . . . . . . : 00-40-F4-6E-FA-18
DHCP ingeschakeld:. . . . . . . . : nee
IP-adres. . . . . . . . . . . . . : 192.168.0.3
Subnetmasker. . . . . . . . . . . : 255.255.255.0
Standaardgateway. . . . . . . . . :
DNS-servers . . . . . . . . . . . : 192.168.0.254

3) kids safe mode

Windows IP-configuratie

Host-naam . . . . . . . . . . . .: KIDS
Primair DNS-achtervoegsel. . . . .:
Knooppunttype . . . . . . . . . . : gemengd
IP-routering ingeschakeld. . . . .: nee
WINS-proxy ingeschakeld . . . . . : nee

Ethernet-adapter LAN-verbinding 4:

Verbindingsspec. DNS-achtervoegsel:
Beschrijving . . . . . . . . . . .:
Realtek RTL8139 Family PCI Fast Ethernet NIC
Fysiek adres. . . . . . . . . . . : 00-40-F4-6E-FA-18
DHCP ingeschakeld:. . . . . . . . : nee
IP-adres. . . . . . . . . . . . . : 192.168.0.3
Subnetmasker. . . . . . . . . . . : 255.255.255.0
Standaardgateway. . . . . . . . . :
DNS-servers . . . . . . . . . . . : 192.168.0.254

Than the hijackdata:

Logfile of HijackThis v1.98.2
Scan saved at 17:01:24, on 13-11-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S00M T2.EXE
C:\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL =
http://www.turtlefind.com/search/%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL
= nov
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.turtlefind.com/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.turtlefind.com/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant
= http://www.turtlefind.com/search/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant
= http://www.turtlefind.com/search/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
C:\WINDOWS\SYSTEM\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet
Settings,ProxyServer = http=192.168.0.254:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName
= Koppelingen
O2 - BHO: ZIBho Class - {029CA12C-89C1-46a7-A3C7-82F2F98635CB} -
C:\Program Files\Kontiki\bin\bh309190.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} -
C:\PROGRA~1\FLASHGET\jccatch.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} -
C:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft
ActiveSync\WCESCOMM.EXE"
O4 - Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Get It With Kontiki - res://C:\Program
Files\Kontiki\bin\bh309190.dll/201
O8 - Extra context menu item: Ontvang alles met FlashGet - C:\Program
Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Ontvang met FlashGet - C:\Program
Files\FlashGet\jc_link.htm
O9 - Extra button: Create Mobile Favorite -
{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft
ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F}
- C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... -
{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft
ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
- (no file)
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} -
C:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet -
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} -
C:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683}
- C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O16 - DPF: {4E15D681-1D20-11D4-8B72-000021DA1956} -
http://www.4daagsefoto.nl/plugin/4daagse.exe
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield
International Setup Player) -
http://www.installengine.com/engine/isetup.cab
O16 - DPF: {FE8287E9-5F43-11D3-ABCA-00105A5C1F46} (HouseCall Control)
- http://www.housecall.nl/housecall/xscan4.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{12C97ECA-95FD-4B99-828F-5C7125427CDC}:
NameServer = 192.168.0.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{12C97ECA-95FD-4B99-828F-5C7125427CDC}:
NameServer = 192.168.0.254

Hope this helps you and me!

thanks Paul

Paul,

What is 192.168.0.254?

Have we examined these diagnostics yet?
http://support.microsoft.com/?id=318584
http://support.microsoft.com/?id=811259

Give LSP-Fix http://www.cexx.org/lspfix.htm, WinsockFix
http://www.tacktech.com/display.cfm?ttid=257, or WinsockXPFix
http://www.spychecker.com/program/winsockxpfix.html a shot.

If no help yet, reset TCP/IP.
http://support.microsoft.com/?id=299357

Start - Run - "cmd". Type "netsh int ip reset c:\netsh.txt" into the command
window.

I'm researching NBT diagnostics too. More questions tomorrow (your time) (I
think - where are you anyway?).

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

#15 November 13th 04, 08:08 PM

Chuck,

192.168.0.254 is the preferred DNS server

I am in europe

I will try the suggestions

Thanks

Paul

"Chuck" schreef in bericht
...
On 13 Nov 2004 09:09:37 -0800, *email_address_deleted* (Paul) wrote:

SNIP

chuck, I agree with you summary. here are the ipconfigs:

1) main

Windows IP-configuratie

Host-naam . . . . . . . . . . . .: Main
Primair DNS-achtervoegsel. . . . .:
Knooppunttype: . . . . . . . . . .: onbekend
IP-routering ingeschakeld. . . . .: ja
WINS-proxy ingeschakeld . . . . . : nee

Ethernet-adapter LAN-verbinding 2:

Verbindingsspec. DNS-achtervoegsel:
Beschrijving . . . . . . . . . . .:
VIA Rhine II Fast Ethernet Adapter
Fysiek adres. . . . . . . . . . . : 00-0A-E6-60-04-6E
DHCP ingeschakeld:. . . . . . . . : nee
IP-adres. . . . . . . . . . . . . : 192.168.0.1
Subnetmasker. . . . . . . . . . . : 255.255.255.0
Standaardgateway. . . . . . . . . :

Ethernet-adapter ZONNETADSL:

Status van medium . . . . . . . . : medium ontkoppeld
Beschrijving . . . . . . . . . . .:
ADSL USB MODEM LAN Adapter
Fysiek adres. . . . . . . . . . . : 00-D0-41-12-C1-A7

2) kids full mode

Windows IP-configuratie

Host-naam . . . . . . . . . . . .: KIDS
Primair DNS-achtervoegsel. . . . .:
Knooppunttype . . . . . . . . . . : gemengd
IP-routering ingeschakeld. . . . .: nee
WINS-proxy ingeschakeld . . . . . : nee

Ethernet-adapter LAN-verbinding 4:

Verbindingsspec. DNS-achtervoegsel:
Beschrijving . . . . . . . . . . .:
Realtek RTL8139 Family PCI Fast Ethernet NIC
Fysiek adres. . . . . . . . . . . : 00-40-F4-6E-FA-18
DHCP ingeschakeld:. . . . . . . . : nee
IP-adres. . . . . . . . . . . . . : 192.168.0.3
Subnetmasker. . . . . . . . . . . : 255.255.255.0
Standaardgateway. . . . . . . . . :
DNS-servers . . . . . . . . . . . : 192.168.0.254

3) kids safe mode

Windows IP-configuratie

Host-naam . . . . . . . . . . . .: KIDS
Primair DNS-achtervoegsel. . . . .:
Knooppunttype . . . . . . . . . . : gemengd
IP-routering ingeschakeld. . . . .: nee
WINS-proxy ingeschakeld . . . . . : nee

Ethernet-adapter LAN-verbinding 4:

Verbindingsspec. DNS-achtervoegsel:
Beschrijving . . . . . . . . . . .:
Realtek RTL8139 Family PCI Fast Ethernet NIC
Fysiek adres. . . . . . . . . . . : 00-40-F4-6E-FA-18
DHCP ingeschakeld:. . . . . . . . : nee
IP-adres. . . . . . . . . . . . . : 192.168.0.3
Subnetmasker. . . . . . . . . . . : 255.255.255.0
Standaardgateway. . . . . . . . . :
DNS-servers . . . . . . . . . . . : 192.168.0.254

Than the hijackdata:

Logfile of HijackThis v1.98.2
Scan saved at 17:01:24, on 13-11-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S00 MT2.EXE
C:\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL =
http://www.turtlefind.com/search/%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL
= nov
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.turtlefind.com/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.turtlefind.com/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant
= http://www.turtlefind.com/search/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant
= http://www.turtlefind.com/search/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
C:\WINDOWS\SYSTEM\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet
Settings,ProxyServer = http=192.168.0.254:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName
= Koppelingen
O2 - BHO: ZIBho Class - {029CA12C-89C1-46a7-A3C7-82F2F98635CB} -
C:\Program Files\Kontiki\bin\bh309190.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} -
C:\PROGRA~1\FLASHGET\jccatch.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} -
C:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft
ActiveSync\WCESCOMM.EXE"
O4 - Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Get It With Kontiki - res://C:\Program
Files\Kontiki\bin\bh309190.dll/201
O8 - Extra context menu item: Ontvang alles met FlashGet - C:\Program
Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Ontvang met FlashGet - C:\Program
Files\FlashGet\jc_link.htm
O9 - Extra button: Create Mobile Favorite -
{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft
ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F}
- C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... -
{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft
ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
- (no file)
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} -
C:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet -
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} -
C:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683}
- C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O16 - DPF: {4E15D681-1D20-11D4-8B72-000021DA1956} -
http://www.4daagsefoto.nl/plugin/4daagse.exe
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield
International Setup Player) -
http://www.installengine.com/engine/isetup.cab
O16 - DPF: {FE8287E9-5F43-11D3-ABCA-00105A5C1F46} (HouseCall Control)
- http://www.housecall.nl/housecall/xscan4.cab
O17 -
HKLM\System\CCS\Services\Tcpip\..\{12C97ECA-95FD-4B99-828F-5C7125427CDC}:
NameServer = 192.168.0.254
O17 -
HKLM\System\CS1\Services\Tcpip\..\{12C97ECA-95FD-4B99-828F-5C7125427CDC}:
NameServer = 192.168.0.254

Hope this helps you and me!

thanks Paul

Paul,

What is 192.168.0.254?

Have we examined these diagnostics yet?
http://support.microsoft.com/?id=318584
http://support.microsoft.com/?id=811259

Give LSP-Fix http://www.cexx.org/lspfix.htm, WinsockFix
http://www.tacktech.com/display.cfm?ttid=257, or WinsockXPFix
http://www.spychecker.com/program/winsockxpfix.html a shot.

If no help yet, reset TCP/IP.
http://support.microsoft.com/?id=299357

Start - Run - "cmd". Type "netsh int ip reset c:\netsh.txt" into the
command
window.

I'm researching NBT diagnostics too. More questions tomorrow (your time)
(I
think - where are you anyway?).

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Hard Networking Problem, Need a MVP's help. ICS over Wireless netw	darklink	Networking and the Internet with Windows XP	8	September 30th 04 04:25 PM
Peer to Peer Networking need help...	t.cruise	General XP issues or comments	2	September 13th 04 07:17 AM
HELP - Set up Home Networking doesn't exist?	Spencer Holmes	Networking and the Internet with Windows XP	0	July 29th 04 02:41 PM
HELP - Set up Home Networking doesn't exist?	Spencer Holmes	Networking and the Internet with Windows XP	0	July 29th 04 05:57 AM
HELP - Set up Home Networking doesn't exist?	Spencer Holmes	Networking and the Internet with Windows XP	0	July 29th 04 05:57 AM