[kingvandal]

I had a virus on the IIS server on a Windows XP Pro box at my buddies house and after I removed it I got "Access Denied" when trying to access it from explorer ( \\iisserver ) By no means can I access it other then using TightVNC. Now I was able to get it to work 1 time when I changed the name of the computer name. A few hours later I get "access denied" again with no reason just the typical access denied error. And I can see it on the network also.

Error:

Quote

\\IISserver is not accessible. You might not have premission to use this network resource.  Contact administrator of this server to find out if you have access premissions.

Access Denied.

How can you restrict access to a system in a workgroup other then having no shares?
I thought maybe it was his router so I hooked up a different system and it gave me access denied again! :angry: I figured the router was assigning the system a ip address that was the same as the \\iisserver was. So I setup static ip's and same result. I put another different server on there with same result. Access Denied.

So now I am figuring that NOD32 has some how blocked access. ( Far fetched I know). So I removed it from all the systems. Access Denied. Then I figured Software Firewall is causing the problem. Removed them from all systems. Access Denied. I reset the router to factory with same access denied. I tryed accessing the system from others workstations with same result about access denied. All user accounts on \\iisserver look fine. I have tryed reinstalling IIS, All updates/SP2. I even went as far as to switch ports on the hub.

What the hell can be going on here?? it is a 2wire 1000HW home portal router if that helps..

kv-

[andydis]

which virus mate?


are you sure that in IIS you have set no IP restrictions?
have you checked for rootkits?

if you have changed the router, reinstalled iis then i would say your system is still compromised in a way, ethier by a piece of software controlling ip restirctions or ports or something.

[kingvandal]

I am sure it has no restrictions but i'll check anyway. I may have to reinstall anyhow as last night while searching it for some reason told me I have to activate again even though I activated in months and months ago. It is a legit copy. Something has gone astray seriously. It may just be atime to reinstall. A side note to this all the remote services where tunred off. ALL of them. I am not sure how that happend. There must be some rootkit on there or remenents of it at some level causing problems. Thanks for the idea though :-)


kv-