Hello Guys,
I have a very serious problem with my existing XP Pro Network. I tried all my best but failed.
Here is the scenario:
1) I have 4 PCs all running on XP Professional with Linksys router BFS40 (DSL/CABLE Modem Router), with verizon DSL. I never had problem with my network the past 12 months.
2) 3 days ago, the PCs can no longer connect to the internet. I noticed that one computer (which I will refer as COMPUTER "A") is sending packets 20 times its receiving packets which I thought is really abnormal.
3) All 4 PCs can ping each other but can not ping the router 192.168.1.1 which I later realized with the support of LinkSys that its a router problem.
4) Today, I replaced it with a new ROUTER... a linksys router. But it still did not resolve the problem. Everytime I connect the COMPUTER "A", it doesn't allow all the other 3 PCs to connect to the internet, can not ping the 192.168.1.1 hence, they can locally networked. They can ping each other, and they can ping the router. BUT, I can not open the router from the internet explorer by typing 192.168.1.1
5) By the way, in addition to my setup and the network scenario, (1) One PC is used for remote desktop using RadAdmin Software.
6) Yesterday, one PC is having an NT error with LSASS.EXE and terminates in 60 seconds. Which I doubt its a sasser virus. Can you also please help me how am I going to solve this?
Here are the things I did to figure out the problem:
1) I tried different cables by exchanging cables for computer "A" and connect again to the router, but its the same thing. And but when I remove the computer "A" from the router, all 3 PCs can go to the internet and can ping the router.
2) did a hard reset on the router... enabled and disabled the DMZ host but it still not solving the problem.
3) my questions is.... is it right that the packets being transmitted by COMPUTER "A" is 20 times than the packets received?.. for instance, its transmitting up to 5 million and receiving only 300,000? is this normal?
4) I can not ignore the computer "A" because it is a "server-like" in that office. Most of our files are being shared from that computer.
4) I have tried to remove the LSASS.EXE error using Microsoft tools to detect the sasser but it tells me no sasser worm is being detected.
PLEASE HELP.
