Need help on home network with recovery from rbot.gen virus

Skipping the stupid part of having the virus in the first place, I need help
in fixing my home network. Virus (rbot.gen) was removed and the file that
was containing the virus was deleted. I've run a couple of anti-virus
programs (and spyware programs) and it is definitely gone.

One of the things this did was kept my two computers (one XP and one Vista -
the one with the virus) from seeing each other on the home network. A
couple of the clues were that Windows Update kept being turned off and I
could no longer print from the XP computer to the printer attached to the
Vista computer. So I know that the bot would turn off the Windows Update
service, but I don't know what it did to the home networking.

Can anyone give me some directions to help?

Both computers (wired) and 2 TIVOs (1 wired, 1 wireless) can access the
internet just fine through my Linksys WRT54G router and could do this even
with the bot running. XP computer has also been scanned for any viruses
(and spyware) and is clean. I've deleted and re-established home networking
on both computers with the same workgroup name on both computers. Windows
firewall is not running on either computer. I've changed all the network
settings on the Vista computer to one way, then back. Hey, it's worked
before just fine but stopped working when the Vista computer was infected.
I've looked through the Services to reset back to automatic those services
that looked network related that were set to disabled.

I'm guessing that the bot turned off a service that I need or changed a
registry value that isn't resetting by removing and re-establishing a home
network (I've tried changing workgroup names also). Does anyone know
exactly what this bot did to me? Or can you point me to specific directions
I need to walk through? (I've looked through and followed what I could from
http://nitecruzr.blogspot.com/2005/0...#AskingForHelp
but maybe someone could point me directly to what I need to follow here.
Cabling, pinging the internet, etc. works, but no seeing the other computers
on the network.).

Thanks for taking the time to help.

http://technet.microsoft.com/en-us/l.../bb727037.aspx

Have a read of the above link re Vista File and Printer Sharing.
How to give Permissions are there, too.
If you are running Norton, etc’s Firewall, check its settings.

1st thing to do is make sure that the Workgroup Name of ALL the computers is
the SAME.

In Vista Network and Sharing:

Network Discovery: ON (So it can see the other computers)

Network set to Private (Public is for hotspots, airports, etc)

File Sharing: ON

Public Folder Sharing: ON (Vista’s Public Folder is the same as XP’s Shared
Docs)

Password Protected: OFF (unless you want to set up identical usernames and
passwords on ALL computers in your Network) If you have it ON, you will be
asked for a username and password when you try to access a Vista computer
from an XP computer.

Also, run the XP’s Home Network File and Printer sharing Wizard.


"denzel" wrote:

> Skipping the stupid part of having the virus in the first place, I need help
> in fixing my home network. Virus (rbot.gen) was removed and the file that
> was containing the virus was deleted. I've run a couple of anti-virus
> programs (and spyware programs) and it is definitely gone.
>
> One of the things this did was kept my two computers (one XP and one Vista -
> the one with the virus) from seeing each other on the home network. A
> couple of the clues were that Windows Update kept being turned off and I
> could no longer print from the XP computer to the printer attached to the
> Vista computer. So I know that the bot would turn off the Windows Update
> service, but I don't know what it did to the home networking.
>
> Can anyone give me some directions to help?
>
> Both computers (wired) and 2 TIVOs (1 wired, 1 wireless) can access the
> internet just fine through my Linksys WRT54G router and could do this even
> with the bot running. XP computer has also been scanned for any viruses
> (and spyware) and is clean. I've deleted and re-established home networking
> on both computers with the same workgroup name on both computers. Windows
> firewall is not running on either computer. I've changed all the network
> settings on the Vista computer to one way, then back. Hey, it's worked
> before just fine but stopped working when the Vista computer was infected.
> I've looked through the Services to reset back to automatic those services
> that looked network related that were set to disabled.
>
> I'm guessing that the bot turned off a service that I need or changed a
> registry value that isn't resetting by removing and re-establishing a home
> network (I've tried changing workgroup names also). Does anyone know
> exactly what this bot did to me? Or can you point me to specific directions
> I need to walk through? (I've looked through and followed what I could from
> http://nitecruzr.blogspot.com/2005/0...#AskingForHelp
> but maybe someone could point me directly to what I need to follow here.
> Cabling, pinging the internet, etc. works, but no seeing the other computers
> on the network.).
>
> Thanks for taking the time to help.
>
>
>

Thanks. I've done all this. No anti-virus software or firewalls running.
Same workgroup name. All the settings as you listed.

I've done this before and had it working just fine, but the virus shut it
down. Now that the virus is gone, I can't get it working again. I was
hoping someone was familiar with this and could point me in the right
direction. I think I'll post this message over in the
microsoft.public.security.virus newsgroup and see if anyone there can give
me some help.

Thanks.


"Mick Murphy" <MickMurphy@discussions.microsoft.com> wrote in message
news:01B34598-271E-4589-ADED-17F229162D2F@microsoft.com...
> http://technet.microsoft.com/en-us/l.../bb727037.aspx
>
> Have a read of the above link re Vista File and Printer Sharing.
> How to give Permissions are there, too.
> If you are running Norton, etc's Firewall, check its settings.
>
> 1st thing to do is make sure that the Workgroup Name of ALL the computers
> is
> the SAME.
>
> In Vista Network and Sharing:
>
> Network Discovery: ON (So it can see the other computers)
>
> Network set to Private (Public is for hotspots, airports, etc)
>
> File Sharing: ON
>
> Public Folder Sharing: ON (Vista's Public Folder is the same as XP's
> Shared
> Docs)
>
> Password Protected: OFF (unless you want to set up identical usernames and
> passwords on ALL computers in your Network) If you have it ON, you will be
> asked for a username and password when you try to access a Vista computer
> from an XP computer.
>
> Also, run the XP's Home Network File and Printer sharing Wizard.
>
>
> "denzel" wrote:
>
>> Skipping the stupid part of having the virus in the first place, I need
>> help
>> in fixing my home network. Virus (rbot.gen) was removed and the file
>> that
>> was containing the virus was deleted. I've run a couple of anti-virus
>> programs (and spyware programs) and it is definitely gone.
>>
>> One of the things this did was kept my two computers (one XP and one
>> Vista -
>> the one with the virus) from seeing each other on the home network. A
>> couple of the clues were that Windows Update kept being turned off and I
>> could no longer print from the XP computer to the printer attached to the
>> Vista computer. So I know that the bot would turn off the Windows Update
>> service, but I don't know what it did to the home networking.
>>
>> Can anyone give me some directions to help?
>>
>> Both computers (wired) and 2 TIVOs (1 wired, 1 wireless) can access the
>> internet just fine through my Linksys WRT54G router and could do this
>> even
>> with the bot running. XP computer has also been scanned for any viruses
>> (and spyware) and is clean. I've deleted and re-established home
>> networking
>> on both computers with the same workgroup name on both computers.
>> Windows
>> firewall is not running on either computer. I've changed all the network
>> settings on the Vista computer to one way, then back. Hey, it's worked
>> before just fine but stopped working when the Vista computer was
>> infected.
>> I've looked through the Services to reset back to automatic those
>> services
>> that looked network related that were set to disabled.
>>
>> I'm guessing that the bot turned off a service that I need or changed a
>> registry value that isn't resetting by removing and re-establishing a
>> home
>> network (I've tried changing workgroup names also). Does anyone know
>> exactly what this bot did to me? Or can you point me to specific
>> directions
>> I need to walk through? (I've looked through and followed what I could
>> from
>> http://nitecruzr.blogspot.com/2005/0...#AskingForHelp
>> but maybe someone could point me directly to what I need to follow here.
>> Cabling, pinging the internet, etc. works, but no seeing the other
>> computers
>> on the network.).
>>
>> Thanks for taking the time to help.
>>
>>
>>