NetBIOS over TCPIP problem

[Herring]

Season's Greetings to all my fellow Drs. For the first time in 15 years one of the computers (HP-Compaq with Windows XP SP3 and all updates) in my house was infected with a couple of nasties: WIN32 FAKEAV-CRB and Win32-Karagany-DM according to Avast. One of these two lovelies that snuck by Avast removed all Internet connectivity and printers...
Anyway after lots of work restoring afd.sys and netbt.sys and related missing registry entries I got this computer cleaned up and back online. However I have tried setting it up on my home network a number of times with no luck. I think I have located the problem but not the solution.
Here's what I've got to go on:
- IPconfig /all on the affected pc shows that "NetBIOS over Tcpip... Disabled"
- Device Manager (View|Show hidden devices) | Non plug and play drivers | NetBIOS over TCPIP "General" tab shows that it is enabled and "Driver" tab shows it as System and Started.
- I can see the computer IP when logging into my router, but the Device name doesn't show up (see attached screenshot)
- I can ping the other computers on my network by name or by IP, the affected computer can only be pinged by IP (see attached screenshot)
Note: 192.169.0.2 shows up as unknown is the affected computer highlighted in red.



Interestingly, my PC also was infected by a virus and both infections coincided with our migration from Eudora (that we've been using since 1995) to Thunderbird (which is also being a pain in the derriere).

[jdc2000]

Have you run the System File Checker?

[Herring]

Thanks for asking jdc200. Yes I have run sfc, I have also imported two registry items from a working Windows XP machine, these two items at least got the computer back on the Net:
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AFD

I also just tried reinstalling SP3 over top of itself as I'd seen in another post on that there Interweb, didn't work.

The bizarre thing is NetBIOS over Tcpip shows up as disabled in Ipconfig, yet if I look under Services or Device manager is show it being Started.

I've tried to set up a network connection to my network, but it's not taking it.

I'm leaving for the next couple of hours, so if I don't respond rapidly, it's not because I'm not grateful or ignoring anyone.

[jdc2000]

Unfortunately, this may be one of those times when you may need to backup all of your data, then format and reinstall windows to get everything working properly again. After doing that, an image backup would be a good idea, then reinstall your software and data and make another image backup.

You could try removing the network hardware in Device Manager and letting Windows reinstall the drivers, if you haven't already.

[Broni]

Please download Farbar Service Scanner and run it on the computer with the issue.

• Make sure the following options are checked:
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
• Press "Scan".
• It will create a log (FSS.txt) in the same directory the tool is run.
• Please copy and paste the log to your reply.

[Herring]

Broni - Here's my FSS report


Farbar Service Scanner
Ran by (administrator) on 27-12-2011 at 20:47:45
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Attempt to access Yahoo IP returend error: Yahoo IP is offline


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============

File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\srsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
aswTdi(8) Gpc(3) IPSec(5) NetBT(6) NwlnkIpx(9) NwlnkNb(10) PSched(7) Tcpip(4)
0x0A0000000500000001000000020000000300000004000000080000000600000007000000090000000A000000

**** End of log ****

[Broni]

All looks good there.

Please download MiniToolBox and run it.

Checkmark following boxes:

• Report IE Proxy Settings
• Report FF Proxy Settings
• List content of Hosts
• List IP configuration
• List Winsock Entries
• List last 10 Event Viewer log
• List Installed Programs
• List Users, Partitions and Memory size

Click Go and post the result.

[Herring]

Here you go Broni. Adobe CS4 sure adds a lot of stuff!

MiniToolBox by Farbar
Ran by (administrator) on 27-12-2011 at 21:14:13
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
***************************************************************************

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

========================= FF Proxy Settings: ==============================

"network.proxy.type", 2
========================= Hosts content: =================================


127.0.0.1 localhost

========================= IP Configuration: ================================

Broadcom NetXtreme Gigabit Ethernet = Local Area Connection (Connected)


# ----------------------------------
# Interface IP Configuration
# ----------------------------------
pushd interface ip


# Interface IP Configuration for "Local Area Connection"

set address name="Local Area Connection" source=dhcp
set dns name="Local Area Connection" source=dhcp register=PRIMARY
set wins name="Local Area Connection" source=dhcp


popd
# End of interface IP configuration


Windows IP Configuration Host Name . . . . . . . . . . . . : HP-Compaq Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Unknown IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : NoEthernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet Physical Address. . . . . . . . . : 00-12-79-A6-4A-B8 Dhcp Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes IP Address. . . . . . . . . . . . : 192.168.0.2 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.0.1 DHCP Server . . . . . . . . . . . : 192.168.0.1 DNS Servers . . . . . . . . . . . : 192.168.0.1 NetBIOS over Tcpip. . . . . . . . : Disabled Lease Obtained. . . . . . . . . . : December 27, 2011 3:58:42 PM Lease Expires . . . . . . . . . . : December 28, 2011 3:58:42 PMServer: UnKnown
Address: 192.168.0.1

Name: google.com
Addresses: 74.125.226.20, 74.125.226.16, 74.125.226.17, 74.125.226.18
74.125.226.19

Pinging google.com [74.125.226.20] with 32 bytes of data:Reply from 74.125.226.20: bytes=32 time=59ms TTL=58Reply from 74.125.226.20: bytes=32 time=58ms TTL=58Ping statistics for 74.125.226.20: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 58ms, Maximum = 59ms, Average = 58msServer: UnKnown
Address: 192.168.0.1

Name: yahoo.com
Addresses: 98.139.180.149, 209.191.122.70, 72.30.2.43, 98.137.149.56

Pinging yahoo.com [209.191.122.70] with 32 bytes of data:Reply from 209.191.122.70: bytes=32 time=133ms TTL=55Reply from 209.191.122.70: bytes=32 time=132ms TTL=55Ping statistics for 209.191.122.70: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 132ms, Maximum = 133ms, Average = 132msServer: UnKnown
Address: 192.168.0.1

Name: bleepingcomputer.com
Address: 208.43.87.2

Pinging bleepingcomputer.com [208.43.87.2] with 32 bytes of data:Reply from 208.43.87.2: Destination host unreachable.Reply from 208.43.87.2: Destination host unreachable.Ping statistics for 208.43.87.2: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0msPinging 127.0.0.1 with 32 bytes of data:Reply from 127.0.0.1: bytes=32 time<1ms TTL=128Reply from 127.0.0.1: bytes=32 time<1ms TTL=128Ping statistics for 127.0.0.1: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 12 79 a6 4a b8 ...... Broadcom NetXtreme Gigabit Ethernet - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.2 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.0.0 255.255.255.0 192.168.0.2 192.168.0.2 20
192.168.0.2 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.0.255 255.255.255.255 192.168.0.2 192.168.0.2 20
224.0.0.0 240.0.0.0 192.168.0.2 192.168.0.2 20
255.255.255.255 255.255.255.255 192.168.0.2 192.168.0.2 1
Default Gateway: 192.168.0.1
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 02 C:\Windows\System32\winrnr.dll [16896] (Microsoft Corporation)
Catalog5 03 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 04 C:\Windows\System32\nwprovau.dll [142336] (Microsoft Corporation)
Catalog9 01 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 19 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 20 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 21 C:\Windows\system32\rsvpsp.dll [92672] (Microsoft Corporation)
Catalog9 22 C:\Windows\system32\rsvpsp.dll [92672] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (12/27/2011 03:08:09 PM) (Source: Application Hang) (User: )
Description: Hanging application explorer.exe, version 6.0.2900.5512, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (12/20/2011 08:32:59 PM) (Source: Application Error) (User: )
Description: Faulting application regmech.exe, version 0.0.0.0, faulting module , version 0.0.0.0, fault address 0x00000000.
Processing media-specific event for [regmech.exe!ws!]

Error: (12/19/2011 07:34:02 AM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

Error: (12/19/2011 07:34:02 AM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

Error: (12/16/2011 03:42:05 PM) (Source: Application Hang) (User: )
Description: Hanging application WINWORD.EXE, version 10.0.2627.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (12/14/2011 11:01:33 AM) (Source: Service1) (User: )
Description: Service cannot be started. System.Net.Sockets.SocketException: A socket operation encountered a dead network
at System.Net.Sockets.Socket..ctor(AddressFamily addressFamily, SocketType socketType, ProtocolType protocolType)
at System.Net.Sockets.TcpListener..ctor(IPAddress localaddr, Int32 port)
at System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.SetupChannel()
at System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, IAuthorizeRemotingConnection authorizeCallback)
at System.Runtime.Remoting.Channels.Tcp.TcpChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
at NBDUpdateLib.Service.Start()
at AutoUpdateService.NBDUpdateService.OnStart(String[] args)
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (12/14/2011 11:01:32 AM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: socket() failed (Socket error 10050)

Error: (12/14/2011 10:45:36 AM) (Source: Service1) (User: )
Description: Service cannot be started. System.Net.Sockets.SocketException: A socket operation encountered a dead network
at System.Net.Sockets.Socket..ctor(AddressFamily addressFamily, SocketType socketType, ProtocolType protocolType)
at System.Net.Sockets.TcpListener..ctor(IPAddress localaddr, Int32 port)
at System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.SetupChannel()
at System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, IAuthorizeRemotingConnection authorizeCallback)
at System.Runtime.Remoting.Channels.Tcp.TcpChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
at NBDUpdateLib.Service.Start()
at AutoUpdateService.NBDUpdateService.OnStart(String[] args)
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (12/14/2011 10:45:35 AM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: socket() failed (Socket error 10050)

Error: (12/14/2011 10:36:37 AM) (Source: Service1) (User: )
Description: Service cannot be started. System.Net.Sockets.SocketException: A socket operation encountered a dead network
at System.Net.Sockets.Socket..ctor(AddressFamily addressFamily, SocketType socketType, ProtocolType protocolType)
at System.Net.Sockets.TcpListener..ctor(IPAddress localaddr, Int32 port)
at System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.SetupChannel()
at System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, IAuthorizeRemotingConnection authorizeCallback)
at System.Runtime.Remoting.Channels.Tcp.TcpChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
at NBDUpdateLib.Service.Start()
at AutoUpdateService.NBDUpdateService.OnStart(String[] args)
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)


System errors:
=============
Error: (12/27/2011 03:52:00 PM) (Source: Service Control Manager) (User: )
Description: The Windows Firewall/Internet Connection Sharing (ICS) service hung on starting.

Error: (12/25/2011 03:00:40 PM) (Source: Dhcp) (User: )
Description: The IP address lease 192.168.0.2 for the Network Card with network address 001279A64AB8 has been
denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).

Error: (12/20/2011 08:33:30 PM) (Source: SideBySide) (User: )
Description: Generate Activation Context failed for C:\Program Files\Registry Mechanic\RegMech.exe.
Reference error message: The operation completed successfully.
.

Error: (12/20/2011 08:33:30 PM) (Source: SideBySide) (User: )
Description: Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls.
Reference error message: The system cannot find the path specified.
.

Error: (12/20/2011 08:33:29 PM) (Source: SideBySide) (User: )
Description: Generate Activation Context failed for C:\Program Files\Registry Mechanic\RegMech.exe.
Reference error message: The operation completed successfully.
.

Error: (12/20/2011 08:33:29 PM) (Source: SideBySide) (User: )
Description: Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls.
Reference error message: The system cannot find the path specified.
.

Error: (12/20/2011 08:33:26 PM) (Source: SideBySide) (User: )
Description: Generate Activation Context failed for C:\Program Files\Registry Mechanic\RegMech.exe.
Reference error message: The operation completed successfully.
.

Error: (12/20/2011 08:33:26 PM) (Source: SideBySide) (User: )
Description: Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls.
Reference error message: The system cannot find the path specified.
.

Error: (12/20/2011 08:33:26 PM) (Source: SideBySide) (User: )
Description: Generate Activation Context failed for C:\Program Files\Registry Mechanic\RegMech.exe.
Reference error message: The operation completed successfully.
.

Error: (12/20/2011 08:33:26 PM) (Source: SideBySide) (User: )
Description: Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls.
Reference error message: The system cannot find the path specified.
.


Microsoft Office Sessions:
=========================
Error: (11/16/2009 04:36:15 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 9, Application Name: Microsoft Office Project, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.6021.5000. This session lasted 50 seconds with 0 seconds of active time. This session ended with a crash.

Error: (11/15/2009 01:46:51 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 9, Application Name: Microsoft Office Project, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.6021.5000. This session lasted 73065 seconds with 6180 seconds of active time. This session ended with a crash.


=========================== Installed Programs ============================

32 Bit HP CIO Components Installer (Version: 7.1.8)
3D Calendar 5.0 (Version: 5.0.0.1146)
8500A909_eDocs (Version: 1.00.0000)
8500A909_Help (Version: 1.00.0000)
8500A909g (Version: 50.0.165.000)
Acrobat.com (Version: 0.0.0)
Acrobat.com (Version: 1.1.377)
Adobe Acrobat 9 Pro - English, Français, Deutsch (Version: 9.4.7)
Adobe Acrobat 9.4.7 - CPSID_83708
Adobe AIR (Version: 1.1.0.5790)
Adobe Anchor Service CS4 (Version: 2.0)
Adobe Asset Services CS4 (Version: 4)
Adobe Bridge CS4 (Version: 3)
Adobe CMaps CS4 (Version: 2.0)
Adobe Color - Photoshop Specific CS4 (Version: 2.0)
Adobe Color EU Extra Settings CS4 (Version: 2.0)
Adobe Color JA Extra Settings CS4 (Version: 2.0)
Adobe Color NA Recommended Settings CS4 (Version: 2.0)
Adobe Color Video Profiles CS CS4 (Version: 2.0)
Adobe Creative Suite 4 Design Premium (Version: 4.0)
Adobe CSI CS4 (Version: 1)
Adobe Default Language CS4 (Version: 2.0)
Adobe Device Central CS4 (Version: 2)
Adobe Dreamweaver CS4 (Version: 10.0)
Adobe Drive CS4 (Version: 1)
Adobe Dynamiclink Support (Version: 1)
Adobe ExtendScript Toolkit CS4 (Version: 3.0.0)
Adobe Extension Manager CS4 (Version: 2.0)
Adobe Fireworks CS4 (Version: 10.0)
Adobe Flash CS4 (Version: 10.0)
Adobe Flash CS4 Extension - Flash Lite STI en (Version: 3.0)
Adobe Flash CS4 STI-en (Version: 10.0)
Adobe Flash Player 10 ActiveX (Version: 10.0.12.36)
Adobe Flash Player 10 ActiveX (Version: 10.0.2.54)
Adobe Flash Player 10 Plugin (Version: 10.3.183.7)
Adobe Fonts All (Version: 2.0)
Adobe Illustrator CS4 (Version: 14.0)
Adobe InDesign CS4 (Version: 6.0)
Adobe InDesign CS4 Application Feature Set Files (Roman) (Version: 6.0)
Adobe InDesign CS4 Common Base Files (Version: 6.0)
Adobe InDesign CS4 Icon Handler (Version: 6.0)
Adobe Linguistics CS4 (Version: 4.0.0)
Adobe Media Encoder CS4 (Version: 1.0)
Adobe Media Encoder CS4 Importer (Version: 1.0)
Adobe Media Player (Version: 0.0.0)
Adobe Media Player (Version: 1.1)
Adobe Output Module (Version: 2.0)
Adobe PDF Library Files CS4 (Version: 9.0)
Adobe Photoshop CS4 (Version: 11.0)
Adobe Photoshop CS4 Support (Version: 11.0)
Adobe Reader 9.4.7 (Version: 9.4.7)
Adobe Search for Help (Version: 1.0)
Adobe Service Manager Extension (Version: 1.0)
Adobe Setup (Version: 2.0)
Adobe SGM CS4 (Version: 3.0)
Adobe SING CS4 (Version: 2.0)
Adobe Type Support CS4 (Version: 9.0)
Adobe Update Manager CS4 (Version: 6.0.0)
Adobe Version Cue CS4 Server (Version: 4.0)
Adobe WinSoft Linguistics Plugin (Version: 1.1)
Adobe XMP Panels CS4 (Version: 2.0)
AdobeColorCommonSetCMYK (Version: 2.0)
AdobeColorCommonSetRGB (Version: 2.0)
Apple Application Support (Version: 1.4.1)
Apple Software Update (Version: 2.1.1.116)
authorPOINT Lite (Version: 3.1.7)
avast! Free Antivirus (Version: 6.0.1367.0)
BPD_DSWizards (Version: 1.00.0000)
bpd_scan (Version: 3.00.0000)
BPDSoftware (Version: 50.0.165.000)
BPDSoftware_Ini (Version: 1.00.0000)
Broadcom Management Programs (Version: 9.03.02)
Broadcom NetXtreme Ethernet Controller (Version: 9.02.07)
BufferChm (Version: 120.0.194.000)
CCleaner (Version: 3.13)
CDBurnerXP (Version: 4.2.3.1062)
Compatibility Pack for the 2007 Office system (Version: 12.0.6021.5000)
Connect (Version: 1.0.0.1)
Destination Component (Version: 110.0.0.0)
DeviceDiscovery (Version: 120.0.194.000)
DocMgr (Version: 120.0.000.000)
DocProc (Version: 12.0.0.0)
Fax (Version: 120.0.194.000)
FILEminimizer Suite
FileZilla Client 3.2.4.1 (Version: 3.2.4.1)
GPBaseService2 (Version: 120.0.194.000)
HP Customer Participation Program 12.0 (Version: 12.0)
HP Document Manager 2.0 (Version: 2.0)
HP Imaging Device Functions 12.0 (Version: 12.0)
HP Photo and Imaging 2.0 - All-in-One (Version: 1.10.0000)
HP Photo and Imaging 2.0 - All-in-One Drivers (Version: 1.10.0000)
HP Photo and Imaging 2.0 - hp psc 1200 series
HP Product Detection (Version: 4.0.0013)
hp psc 1200 series (Version: 1.10.0000)
HP Smart Web Printing (Version: 4.05)
HP Solution Center 12.0 (Version: 12.0)
HP Update (Version: 5.003.001.001)
HPDiagnosticAlert (Version: 1.00.0000)
HPProductAssistant (Version: 120.0.194.000)
I.R.I.S. OCR (Version: 12.3.4.0)
Intel(R) Graphics Media Accelerator Driver (Version: 6.14.10.4396)
IrfanView (remove only)
Java Auto Updater (Version: 2.0.2.1)
Java(TM) 6 Update 20 (Version: 6.0.200)
K-Lite Codec Pack 4.5.3 (Full) (Version: 4.5.3)
kuler (Version: 2.0)
Mach5 Mailer 4
Malwarebytes' Anti-Malware version 1.51.2.1300 (Version: 1.51.2.1300)
MarketResearch (Version: 120.0.226.000)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Project MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Project Standard 2007 (Version: 12.0.4518.1014)
Microsoft Office Project Standard 2007 Trial (Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office XP Professional with FrontPage (Version: 10.0.2627.0)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Mozilla Firefox (3.0.13) (Version: 3.0.13 (en-GB))
Mozilla Thunderbird (8.0) (Version: 8.0 (en-US))
MP3 Key Shifter
MPM (Version: 1.00.0000)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (Version: 4.20.9818.0)
Network (Version: 120.0.194.000)
OCR Software by I.R.I.S. 12.0 (Version: 12.0)
Officejet Pro 8500 A909 Series (Version: 12.0)
Opera 11.60 (Version: 11.60.1185)
PDF Settings CS4 (Version: 9.0)
Photoshop Camera Raw (Version: 5.0)
Pixel Bender Toolkit (Version: 1.0)
ProductContext (Version: 50.0.165.000)
QuickBooks (Version: 19.0.4002.1090)
QuickBooks Pro 2010 (Version: 19.0.4002.1090)
QuickTime (Version: 7.69.80.9)
Readiris Pro 11 Corporate Edition (Version: 11.00.4787)
Scan (Version: 12.0.0.0)
SmartWebPrinting (Version: 120.0.194.000)
SolutionCenter (Version: 120.0.194.000)
SoundMAX (Version: 5.12.01.4070)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
Status (Version: 120.0.194.000)
Suite Shared Configuration CS4 (Version: 1.0)
SupportSoft Assisted Service (Version: 15)
SyncBack
Toolbox (Version: 120.0.194.000)
Total Commander (Remove or Repair)
TrayApp (Version: 120.0.194.000)
UnloadSupport (Version: 11.0.0)
WebFldrs XP (Version: 9.50.5318)
WebReg (Version: 120.0.194.000)
Windows Genuine Advantage Notifications (KB905474) (Version: 1.9.0040.0)
Windows Internet Explorer 7 (Version: 20070813.185237)
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3 (Version: 20080414.031525)

========================= Memory info: ===================================

Percentage of memory in use: 78%
Total physical RAM: 1015.43 MB
Available physical RAM: 218.73 MB
Total Pagefile: 2444.91 MB
Available Pagefile: 1789.2 MB
Total Virtual: 2047.88 MB
Available Virtual: 1973.09 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:37.27 GB) (Free:9.37 GB) NTFS
3 Drive e: (KINGSTON) (Removable) (Total:3.73 GB) (Free:1.69 GB) FAT32

========================= Users: ========================================

User accounts for \\HP-COMPAQ

Administrator Guest Username
HelpAssistant SUPPORT_388945a0


**** End of log ****

[Broni]

Make sure, your settings are correct.
1. Go Start>Settings>Control Panel (Vista/7 users: Start>Control Panel)
2. Double click Network Connections (Vista/7 users: Network and Sharing Center)
3. Vista/7 users - From the list of tasks on the left, click Manage network connections.
4. For a wired network connection, right-click Local Area Connection, and then select Properties.
For a wireless network connection, right-click Wireless Network Connection, and then select Properties.
5. From the General tab (Vista/7 users: Networking tab), click Internet Protocol version 4 (TCP/IPv4), make sure it is checked, and then click Properties
6. Make sure Obtain an IP Address Automatically and Obtain DNS server address Automatically are checked.
7. Click on "Advanced" button and make sure "IP Settings" tab looks like this:

Make sure "DNS" tab looks like this:

Make sure "WINS" tab looks like this:

8. Still in Control Panel double click on "Internet options" then "Connections" tab then "LAN Settings" button. Make sure "Automatically detect settings" is checked.
If you made any changes OK your way out.

Let me know if you had to make any changes.
If any changes were made restart computer.

[Herring]

Interesting. All the settings were correct (in XP the displays are not all exactly as illustrated, but same thing), so I decided to remove tcp/ip and then reinstall, even though I had run LSPFix, WinsockXPFix and MicrosoftFixit50203 previously.

After rebooting, the machine can now be displayed correctly on the network, and connect to the other computers properly. I ran Fss.exe again to see if any differences showed. The only difference (besides the time and Yahoo being available) is in the Extra List:tcpip6 was added and the hex string was changed.

I'll have to compare the registry entries that I imported to the ones now, but that will be for another day. Time to go to bed and get a couple of hours sleep before having to get up and shovel snow before going to work...

Thanks Broni (and jdc2000)!
----------------------------------------------
Farbar Service Scanner
Ran by (administrator) on 27-12-2011 at 22:36:13
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Yahoo IP is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============

File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\srsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
aswTdi(8) Gpc(3) IPSec(5) NetBT(6) NwlnkIpx(9) NwlnkNb(10) PSched(7) Tcpip(4) Tcpip6(11)
0x0B0000000500000001000000020000000300000004000000080000000600000007000000090000000A0000000B000000

**** End of log ****

[Broni]

Good news

I decided to remove tcp/ip and then reinstall

This is usually good idea since it can't hurt.