Problem networking XP and Vista

Executed all those commands on both machines.
Restarted both machines.
Can once again ping XP from Vista, but not vice-versa.

Ok so the command line didn't help (but at least it kinda works on Vista!)

Start --> Run--> cmd /c ipconfig /all >Desktop\ipconfig.txt < ok>

And post the ipconfig.txt (on your Desktop) as an attachment here

ie IPCONFIG-XP.txt and IPCONFIG-Vista.txt

here are the files

Please uninstall IPv6 from Vista network properties
Restart, and test again (you might need to do all the ipconfig reset thing again too)

Some points for consideration

1. As i understand it, you can't uninstall ipv6 from Vista. You can only disable it.
2. just fyi... at one point i also considered whether ipv6 may be causing Vista problems but didn't find any evidence online to help indicate it. (But i have no issue disabling it. Here's a link to instructions)
3. While i was out (i'm just back) was thinking about this problem and several thoughts
   • Howardrg, i know you were reluctant to run a wired connection to Vista but it really shouldn't disturb anything. And is usually quite simple to configure (if it even needs configuration. PLUS, i would really like to see Vista ping itself! (between LAN and wireless adapters)
   • Don't know how far it is from your router to your Vista machine (for a cable) but for the ping test you could actually just move the router
   • Still can't help thinking something on Vista is blocking the ping and try the following
     • Install a network sniffer (like Wireshark) to trace the actual packets arriving at the network adapter. Then we know for certain it;s a Vista machine issue
     • Howardrg, did you EVER have any type of other internet security software on the Vista machine? I'd still want to take a close look again firewall blockage. Would also install Process Explorer and dump running processes to see what's running
     • May be worthwhile to rebuild the Vista network adapter connections (make sure nothing is corrupted

Gosh, a lot to think about...

The Vista is a laptop so I can move it anywhere. It's only a couple of weeks old. If you could tell me how to set up a wired connection I'd be willing to do it. The router is a D-Link DI-624. Thanks for all your help. I'm going to bed now but will check in again tomorrow after work.

process explorer info...

I'm not sure if this is what you were looking for , but this is for the vista machine

second try to attach process explorer info

it didn't make it earlier

Gods Sake!

You have malware :
SOHDms.exe
SOHDs.exe
Please stop the above two processes, then do the following:

New Preliminary Removal Instructions

Also do not reply to yourself
Instead use the "Edit" button, if yours still the last post
.

1. Dlink DI-624
This device had several different hardware versions. If you look at this link it should help you determine which version you have. Please report back.

2. Wireshark
Here's our 1st experiment with Wirehark
I'm going to have you install Wireshark, a network sniffer tool. It can trace the data sent or received through a network adapter. It can have several helpful uses:

• We'll use it to verify with certaintainty that those XP -> Vista ping requests are in fact being received by Vista (then we know to focus our energy on finding what's in Vista that's suppressing it.) If we find the ping requests aren't arriving then we'd spend our timing looking at network issues.
• It may help later to see the "actual-behind-the-scenes-message traffic" when trying to understand what the heck is going on in establishing file sharing

So, to download and use Wireshark

• Download Wireshark v1.02 at this link. Execute the download file to install it. Accept all defaults. You’ll see it also installs WinPcap. That’s expected. Continue through those install screens as well.
• Wireshark Defaults. We’ll change some defaults. Click Edit –> Preferences. Under User Interface select
  • Layout : set Pane1 to Packet List, Pane2 to Packet Details, Pane3 to None. Click Apply
  • Capture: Check the 4 options: Capture in Promiscous Mode, Update packets in real time, Automatic Scrolling, Hide capture info. Click Apply
  • Name Resolution. Check all 4 options for name resolution. Click OK to close preferences
• Capturing Data. Initially, to minimize the amount of traffic close any open browser windows or other network sessions which aren’t important.
• Start a capture. Click Capture -> Interfaces. You'll see an entry for each active adapter you can capture from. For the appropriate adapter, click Start. To stop later, click Capture ->. Stop.
• One line data summaries appear in the upper pane. When you select a summary line in the upper pane, the lower pane reveals the protocol envelopes and data contained within.
• If you have too many summary lines to go through we could apply filters to only display what we want. But will assume we don’t need filters for now

Finding the important data. We want to see ARP data (to see how IP adresses are getting resolved) and ICMP data (these are the ping requests).

• In the Filter: box type: (arp) || (icmp). Note once typed it should have a green background (meaning it's a valid filter). Click the Apply button and you now only see ARP and ICMP messages displayed.
• Click File -> Export, Pick a directory and filename. Use the pulldown to set FileType to CSV
• For Packet Range, check the radio buttons for: All selected and Displayed
• Packet Format, check Packet summary line and Packet details. Pull down should indicate As displayed

re malware and wireshark

1. The Vista laptop is brand new -- I am surprised that there is malware on it already -- and I have been running the Live OneCare that came preinstalled. I will remove this malware first this this evening when I get home.

2. On which machine am I to install the Wireshark software: Vista or XP?

1. When you have your firewalls off for File Sharing testing are you still connected to/accessing the internet? You shouldn't be. Disconnect from your ISP when you turn off the firewalls (may be how you picked it up. Also run your antivrus/antispy on other computers as well)

2. Vista is the one not responding to ping, correct? (just double checking). It's the one to install Wireshark on. Then we can actually trace all the packet data arriving on Vista's network adapters to see if the ping request never arrives or arrives but Vista doesn't respond

3. Do you have an extra ethernet cable also? will be used to connect your router to Vista.

4. First off, before anything else, will want to remove any malware from Vista

5. Have you EVER had ANY other internet security type software running on Vista (something you may have had installed and then removed?)

1- home systems do NOT need - MS TCP/IP ver. 6. Disable IPv6 altogether.

2- the Vista network wizard setup needs to create a Private Lan connection, not Public or else the system shields itself from everything -- including ping.

ENABLE your windows firewall and on the exception table, enable Print/File sharing;

joebeard...

we've been down the public vs. private network issue already. OP has verified it's set to private swears the native Windows firewall and the windows live firewall they normal run are both set to OFF which is gives way to determining if so.. why Vista doesn't echo the ping.... some events on the horizon

- Run a cable to connect it wired in addition to it's currently wireless
- Have Vista ping itself from LAN adapter to wireless and reverse
- Let XP try ping again to Vista over wired line instead of wireless
- Dumping Process Explorer to see what other things might be running on the computer to interfere
- Rebuilding the connection in the event something is corrupted
- Running a Network sniffer to at least prove the packet request is actually arriving at the network adapter

Open to any further ideas....

it is entirely possible to configure a NIC or wireless to default NO REPLY to ping.

disabling the firewall is not the 'remove all controls' that so many assume it to be.

Also, the LLTP is not a requisite to making Print/File sharing work, so if you're into
the concept of disabling unnecessary processes, then disable UPnP, SSDP and the LLTP.

I'll suggest disable the above, reboot, and then reusing the Network Wizard to specify the Private connection, and finally enabling the firewall and activate P&FS.

Will look at the possibility of the NIC config

I also know that packet filtering can be set in XP as a Network Connection option. Don't know if same is true of Vista but considering the possibility

Will turn off other extraneous processes as well

This is clearly a case where turning off the firewalls doesn't turn off all the controls
(and personally am anxious to see if the result is any different pinging the LAN vs wireless adapter as well as Vista pinging itself)

Thanks

ALSO -- I have investigated the SOHD processes -- there are three and all are associated with the "Vaio Media plus" software that comes preinstalled on the laptop. It searches all the computers on the network for media (pics, music etc.) and makes it available to all the uses on the network. There are three files running now as follows:

SOHDs -- VAIO Media plus device searcher
SOHDms -- VAIO Media plus digital media server
SOHCImp -- VAIO Media plus content importer

I am disinclined to view these as malware.

• I’m inclined to agree on the malware issue. I think Kimsland was being careful/cautious when finding the modules listed on Prevx as unknowns (they’re probably new)
• Disable ipv6 in Vista as mentioned earlier (a link to instructions how was in an earlier post of mine)
• Have you ever connected your Vista laptop via LAN cable? It will need a network definition in Network and Sharing Center. Make certain it is also of type: private. I've never personally run that step under Vista tho so if you need help with the connection/setup/wizards for the LAN cable i'll defer that piece to someone else
• Couple other curiousities, if you go to the wireless card properties you should be able to find the driver version you're running. What is it?
• Also when you see the Wireless Adapter Properties and hit Configure... you see anything listed that might look like it has to do with packet filtering? I couldn't find any useful documentation on the mfr website

/*** Edit ***/
And oh, yes, not to be lost among all the other questions.. .when you get home could identify which version DI-624 router you have? go to this link, enter di-624 and see the info about versions

Here's the response from Sony

It's a DI-624 Revision E.

I followed the initial malware removal instructions and downloaded and ran Malwarebytes Anti-Malware which found no malicious items, so I will leave the malware issue behind.

Wireless card on Vista is Atheros AR928x driver ver. 7.6.0.83 (3/19/2008) (from device mgr)

Couldn't see any "configure" button for the wireless card -- where would that be?

Will work on the other items tomorrow -- thanks for your patience.

STOP THE PRESSES. I believe I have figured out and solved the problem. My partner took the computer to work because they had a license to install MS Office on employees' computers (couldn't pass that up!). What I did not know was that they also installed a remote access application called "AT&T Global Network Client Managed VPN Edition" as well as Lotus Notes. I thought something might be amiss when I turned off the internet access and up popped the "AT&T dialer" asking if I wanted it to connect. I had never seen this before and investigated. I decided to uninstall both the AT&T Global Network Client and Lotus Notes. Now, even without rebooting, all computers are visible and accessible on all other computers. With the firewalls off, each computer can ping the other. However, with the firewalls on neither computer can ping the other, but file and printer sharing still work. I believe this is not a problem.

So I think the problem is resolved and I am very grateful to all on this forum who have taken the time to assist me, esp. kimsland and LookinAround. I have learned quite a bit about networking in the process. If you want any more details on what these programs were or any more data on my setup I will be happy to oblige.