Can't view drive contents for My Network Places

Executioner · Post by **Executioner** » Sat Jan 30, 2010 3:26 pm

Don't know what really happened, others on my network can't view my files on my pc. They show up in My Network Places, but when I double-click to open the share up, it says I don't have permission. On my pc though, I'm able to view their files.

What is really strange are the icons in My Network Places on my machine. They are located on the bottom of that pic. Normally they should all look the same as the other shares. I know I have it setup correctly:

Any ideas?

wvjohn · Post by **wvjohn** » Sat Jan 30, 2010 5:03 pm

I get something similar at work once in a while..If I drill down to the target file on the other machine using windows explorer, that frequently clears it up. Absolutely no idea why it happens.

Post by **FlyingPenguin** » Sat Jan 30, 2010 5:44 pm

Reboot everyone. Any new security software that might have a firewall?

I personally find Network Places totally unreliable and I don't know anyone that actually uses it. I either map a share to a drive letter, or else just browse directly to the computer I want using it's netbios name. For instance if I want to open the shared folders on my server I just type \\server into the address bar in Windows Explorer or in the Run box in the Start menu.

Executioner · Post by **Executioner** » Sat Jan 30, 2010 7:10 pm

Tried Explorer and get the same issue:

that is as far as I can get. If I click on a drive letter, I get the error message saying I don't have permission.

I only have NO32 running with Windows firewall enabled. It has the correct exceptions listed in the box including file and print sharing. I tried turning it off to see what would happen and I still get the same results. Turning that off - would that require a reboot?

EDIT:
I tried to run ipconfig.exe and it won't run for some reason. The file is there in the \system32 folder. I tried to run another copy from a thumb drive and it won't run either.

eGoCeNTRoNiX · Post by **eGoCeNTRoNiX** » Sat Jan 30, 2010 8:02 pm

Are you running it from a command prompt?

Executioner · Post by **Executioner** » Sat Jan 30, 2010 8:05 pm

Clicked on start then run, then typed in IPCONFIG. It flashes for 1 second and disappears. Also tried 5 different restore points and it comes back after the reboot saying the restore was incomplete.

eGoCeNTRoNiX · Post by **eGoCeNTRoNiX** » Sat Jan 30, 2010 8:42 pm

Yah, you can't run it that way.. You have to type cmd in the run box.. Then at the command prompt type ipconfig and hit enter

Executioner · Post by **Executioner** » Sat Jan 30, 2010 9:09 pm

eGoCeNTRoNiX wrote:Yah, you can't run it that way.. You have to type cmd in the run box.. Then at the command prompt type ipconfig and hit enter

Duh! Sorry but its been a while since I've used the run command.

I ran Malwarebytes and it found 4 nasties:

Malwarebytes' Anti-Malware 1.44
Database version: 3665
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

1/30/2010 5:41:47 PM
mbam-log-2010-01-30 (17-41-47).txt

Scan type: Full Scan (C:\|)
Objects scanned: 175251
Time elapsed: 17 minute(s), 25 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\Charles\Local Settings\Temp\mbamservice.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\iexplor520.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Iexplor701.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Iexplore987.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

But it still will not allow a user to browse my folders.

I guess I have to stop going to porn sites LOL. If I can't get it fixed, I'm just going to let it go until I need to format the machine again.
Also going to try one of my restore points again since this cleaning, and if it does not work, then I'm going to delete them all since they don't work.

Actually what I'll probably do after a fresh format, install VMWARE and use that to visit sites where porn is located so it won't affect my main machine.

Executioner · Post by **Executioner** » Fri Feb 05, 2010 12:42 am

UPDATE:
Got it to work. I placed this entry into the registry:
IRPStackSize 24
into the location:
HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ lanmanserver \ parameters
Mine did not have an entry, so it defaults to 18 for XP. Couple of sites suggested changing it to 21 and reboot, each time adding 3 more until it works. Ended up with 24.