Enabling network connection nails system

  • Thread starter Thread starter Olly Thorp
  • Start date Start date
O

Olly Thorp

I have a small network of two Win2K machines connected
together on a LAN with internet access through a third box
performing NAT. They are both the only members of a
workgroup, and run filesharing over IP synchronising files
both ways.

The machines work perfectly when their network connection
is disabled, but as soon as you enable the networking again
their performance when doing any kind of I/O is extremely
sluggish. There is no load on any of the processor, hard
disk, or network. Opening Microsoft Word on a local file
or opening a network folder can take minutes, and similarly
downloads from the internet operate at a tiny fraction of
their normal speed (getting no where near the bandwidth
available).

The network had been previously working flawlessly. I
cannot find any viruses. Please could someone suggest some
ways I can pin down this problem more closely, because I am
stumped as to why enabling networking causes this.
 
check to makesure that the NIC drivers on all the machines are configured
exactly the same way. If you have a hub/switch which doesnt like to
autonegotiate, this kind of thing is very common.

NuTs
 
Open windows explorer and goto %root%\system32\wins. If there is a file
named DLLHOST.EXE your system is infected.
 
This file is not present. Are you implying I could have
NetBIOS naming issues?

Olly
 
The way your network is acting per your description could indicate an
infection by the Blaster Worm or the Nachi Worm. Both of these affect
performance of a computer over a network. Anti Virus Software is not always
successful in detecting these. DLLHOST.EXE and SVCHOST.EXE are two
"MICROSOFT FILES" and are always located in the System32 folder. A copy of
thses files in the System32\Wins folder indicates the Nachi Worm and the
DLLHOST.EXE in the Wins folder is actually the Virus itself.
Most of the large Company Enterprise Networks have been cleaned up and
patched, but most home computers and SOHO networks are infested with this
virus and generate so much network traffic that at times it pulls the whole
high speed internet backbone down to a crawl. Top tier Internet Service
Providers have gone to Microsoft and asked for help in this.
http://www.msnbc.msn.com/id/3899190/

And on 1/05/04 Microsoft released a speacial tool that will detect and
remove these two worms.

http://support.microsoft.com/default.aspx?scid=kb;[LN];833330
 
Back
Top