XP Pro SP 3 firewall blocking UDP 137 and 138 even though exception "File and Print sharing" is selected

I am running XP Pro SP 3 on a working group. I'm trying to access the files from a Windows 7 machine on the same workgroup. But the XP firewall blocking UDP 137 and 138 even though exception "File and Print sharing" is selected. When I disable the XP firewall, all right.

Here are a few entries in the firewall exception log file:

2012-06-01 09:53:25 DROP UDP 192.168.2.190 192.168.2.255 137 137 78 - RECEIVE
2012-06-01 09:53:26 DROP UDP 192.168.2.190 192.168.2.255 137 137 78 - RECEIVE
2012-06-01 09:53:27 DROP UDP 192.168.2.2 192.168.2.255 138 138 202 - RECEIVE
2012-06-01 09:53:28 DROP UDP 192.168.2.190 192.168.2.255 137 137 78 - RECEIVE
2012-06-01 09:53:28 DROP UDP 192.168.2.190 192.168.2.255 137 137 78 - RECEIVE
2012-06-01 09:53:29 DROP UDP 192.168.2.11 192.168.2.255 138 138 202 - RECEIVE

I did some research on another site, and I came up with the FIX for this issue. It has to do with the node XP somehow getting ready to type "Peer-to-peer". I applied the fix in this article:

http://support.Microsoft.com/kb/903267

and the problem is now solved.

Please come back and let everyone know how you fixed the end!

However, the fact that this has happened and you don't know how concerned me (if it was my machine).

Here's what I propose for extra cleaning:

Search for malware:

Download, install, execute, update and perform analyses complete system with the two following applications:

Remove anything they find. Reboot when necessary. (You can uninstall one or both when finished.)

Search online with eSet Online Scanner.

The less you have to run all the time, most things you want to run will perform:

Use Autoruns to understand this all starts when your computer's / when you log in. Look for whatever it is you do not know usingGoogle (or ask here.) You can hopefully figure out if there are things from when your computer does (or connect) you don't not need and then configure them (through their own built-in mechanisms is the preferred method) so they do not - start using your resources without reason.

You can download and use Process Explorer to see exactly what is taking your time processor/CPU and memory. This can help you to identify applications that you might want to consider alternatives for and get rid of all together.

Tags: Windows

Similar Questions

  • Win7 firewall blocks Microsoft updates and downloads, how can I stop it this?

    I have a new PC with Win7. I can't get updates by disabling the firewall. Also if I want to download whatever it is from microsoft, for example the Word, IE9 compatibility program is to expire and I get an error of diagnosis of the page type, but if the firewall is disabled, it goes through immediately.

    I can't find anywhere in the firewall settings to specify whether a web address secure. I don't know what port open or what IP addresses to.

    It seems strange to create a firewall that cannot be configured to be more user-friendly. The rest of the world treats www... types of address not IPs.

    It seems strange that it will stop the site that created the program

    I modified the security settings for IE without success, disabling the firewall is the only way.

    In all cases any suggestions?

    Hey Baycoast,.

    In respect to the thread I linked you, to make a long story short, I suggest to check your Windows to make sure firewall settings that Windows updates are to pass:
    If you are running third-party firewall software such as Norton, McAfee, etc.. I suggest to disable temporarily and try to re-download the updates.
  • HP Color LaserJet M476 MFP Pro: How to receive faxes on pc and print later?

    How to receive and record the incoming faxes on pc and brought it back later.

    Hello

    the series M476 supports nto, receive faxes to a computer.

    Below you can find the data sheet:

    Fax features: Interface PC support: No.

    http://store.HP.com/wcsstore/hpusstore/PDF/cf387a.PDF

    Kind regards

    Shlomi

  • T61 file Microsoft XP - pro and printer sharing uncheck on Intel(r) 82566 NIC M after reboot

    I check the file Microsoft and sharing printers, but after reboot it is not checked for Intel (r) 82566 NIC connection profile M.

    Anyone else seen elsewhere or fixed?

    Problem setting in the section security for the profile in Thinkvantage Access Connections; He was set to cancel Microsoft File and printer sharing.

  • LaserJet pro 1415: cannot open the cartridge door and prints have red lines on them

    First problem was the red lines on the printed pages, now I can't open the cartridge door

    Just to close the loop, we decided to force the drawer open, because the printer was unusable anyway even if we have something broken. With a lot of pressure, the drawer open. We then tried to print something and a message there is a paper jam.  We opened the back door to clear paper jam and off broke a spring and a broken then only plastic parts. We cleared the jam and thought that the broken part just came to the door but was clearing of the works.  Then we printed out a page and everything worked fine.  If the door does not close completely because it is missing a piece, so what? The printer works fine. Thanks for trying to help.

  • XP PRO XP Home keeps blocking printing

    I have a small network of 5 computers at school.  All computers have XP Home Edition (SP2) installed except 1 which has XP Pro.  Our printer is connected to the XP Pro (parallel port) station and I have enabled file and printer sharing.  I disabled the Windows Firewall, because the network has no external access because the network isn't only the Installer files and printers do share - no internet access.  When I install the network printer on the other 4 workstations, it requires a username and password for the XP Pro workstation.  I have all good enter, tell him to remember the password and everything seems to work properly.  The problem is that if I stop/restart XP Home positions, I can no longer connect to the printer attached to the XP Pro machine.  A way to remove the password of security on the printer and sharing just like XP Home installation?  Thank you.

    Hello

    You are missing some verification from somewhere.

    This link should remind you of the points which had to be verified.

    ---------------

    For the best newspaper of the results of each computer screen system and together all computers on a network of the same name, while each computer has its own unique name.

    http://www.ezlan.NET/Win7/net_name.jpg

    Make sure that the software firewall on each computer allows free local traffic. If you use 3rd party Firewall on, Vista/XP Firewall Native should be disabled, and the active firewall has adjusted to your network numbers IP on what is sometimes called the Zone of confidence (see part 3 firewall instructions

    General example, http://www.ezlan.net/faq.html#trusted
    Please note that some 3rd party software firewall continue to block the same aspects it traffic Local, they are turned Off (disabled). If possible, configure the firewall correctly or completely uninstall to allow a clean flow of local network traffic. If the 3rd party software is uninstalled, or disables, make sure Windows native firewall is active .

    Windows XP file sharing - http://support.microsoft.com/default.aspx?scid=kb;en-us;304040
    Sharing printer XP - http://www.microsoft.com/windowsxp/using/networking/expert/honeycutt_july2.mspx

    Setting Windows native firewall for sharing XP - http://support.microsoft.com/kb/875357

    Jack-MVP Windows Networking. WWW.EZLAN.NET

  • The Windows Firewall blocks network share on Windows 7

    I'm currently on Windows 7 Pro x 64.  I use the firewall of Windows of Microsoft Security Essentials and Microsoft.  No firewall AV or additional software is currently installed.  I regularly use the many Xbox 360 to stream media content of this machine on the home network.  In addition, I set up a homegroup to share resources such as printer and fileshares with other machines in the House.  It's all working perfectly until a few weeks ago.  No direct changes to installation other than updates of Microsoft, Adobe (Flash) and Oracle (Java).  Now, unless I turn off the Windows Firewall, my xboxs can not see the sharing machine, and no other network computers can print/share via homegroup.

    Currently, discovery network, file sharing of printers and streaming media are disabled and cannot be reactivated.  Check the radio buttons on the first two, then clicking to save does nothing.  I get sent to the network and sharing Center screen, but when I check again options for change advanced sharing settings, the options are returned to the people with reduced mobility.  Media streaming from this screen says it is on (even if this is not the case), but when I select the option to change this, it says it is disabled (which is correct).  By selecting the option to turn on media streaming continuously, does nothing.  I can click constantly with no change.

    I ran the Virus Scan free from Symantec online as long as complete system scan MSSE where each is an element, and in each case, the two elements have been removed (for the threat found by Symantec) NPE and (for the number found by MSSE) the MSSE tool.  I also run SFC/scannow and repaired the problem identified.  With two comprehensive analyses of each tool, I am sure that my machine is the threat and corruption free.

    In addition, I went through the list of services recommended to 'start' and 'automatic' which was published MANY times by MANY people.  For clarity, I have all these started and set to automatic:

    o computer browser
    o Client DHCP
    o customer DNS
    o network connections
    o knowledge of network locations
    o remote procedure call (RPC)
    o server
    o support TCP/IP Netbios
    o workstation

    With all these started, I can not follow the discovery of the network, the file and printer sharing, and streaming media options running.  I also made sure upnp started as well.

    I noticed, however, when I disabled the Windows Firewall, all options could be changed and stayed changed.  I added WMP to the firewall allow list and activated the firewall.  All options have yet.  In the firwall outgoing options are all set to allow, if incoming is currently refused saying "block all connections to programs that are not on the list of allowed programs."  It is the default state of Windows Firewall.

    Run without AV and a FW is NOT an option.  Specifically, these are tools MS and should not conflict with these simple network features.

    Help

    I was able to solve the problem after a kick in the right direction of another user of the forum.  The 'general' advice give cannot solve the problem, but they are a good starting point if nothing else.  Please see this thread for the difficulty that I used:

    http://social.technet.Microsoft.com/forums/en-us/w7itprosecurity/thread/2edd56f0-c00b-48f8-8812-6bd5b8ed33fa

  • HP Officejet Pro L7780: HP Officejet Pro L7780 Solution Center does not work even though I can print

    Last week, Solution Center of my printer HP Officejet Pro L7780 stopped working, even though I can still print directly from applications. But I can't use the scan feature. I uninstalled and reinstalled the driver full several times (after uninstalling using uninstall_L4, cold restarted the printer, remove the DigitalImaging registry key and delete all the files in %Temp%). The re - install seems to be okay except that when I try to open the solution Center, it happens nothing except sound.

    Any ideas how to solve this problem?

    Thank you.

    Hello

    Thank you for using the forum.

    You can find the solution here:

    http://h30434.www3.HP.com/T5/printer-software-and-drivers/HP-Solution-Center-fails-to-launch-cannot-...

    Find the relevant video below that shows you how to "uninstall Windows 10 updates" and also "Hide updated" to prevent Windows to install the update in the future!

    Windows 10 - How to uninstall & hide updates

    https://goo.GL/3tWxyA

    Hope that helps.

    Please click the "accept as solution" if it helped to solve your problem and "Bravo Thumbs up" as an encouragement

  • Server 2003 Firewall blocks my windows 7 pro file sharing

    I have a small home network with a Server 2003 machine, 2 wired xp machines, 2 machines xp wireless and a machine of windows 7, which can be wired or wireless. (Currently hard-wired). My problem is the windows 7 machine cannot connect to 2003 server machine as long as the windows 2003 firewall is enabled. I tried all the fixes for the windows Networking 7 and he gave windows 7 access to the other xp machines to share files, but has no result on Server 2003. I can't understand what in the firewall blocks access to windows 7. All xp machines access the server very well and they can also access the machine of windows 7 to share files. Windows server can not see the machine windows 7 with the active firewall, but has no problem with the firewall not off. Since I run a few web sites from the server I am reluctant to leave the firewall off. Anyone has any ideas what to turn on or to leave windows 7 and server 2003 talk if the firewall?  I'm perplexed--Brewmaster

    This issue is beyond the scope of this site and must be placed on Technet or MSDN

    http://social.msdn.Microsoft.com/forums/en-us/home

  • Why is the port udp 137 used during a remote desktop session?

    I am currently seeing a lot of messages on my firewall indicating port 137 udp is blocked.  I think that when I use remote desktop to a remote system, which attempts to connect to me via the udp port 137 remote systems.  If this is true, why?  This is necessary or if I can change this behavior?

    Hello

    UDP 137 is used by NetBIOS in Windows 7 file sharing.

    According to what you are doing when you use Remote Desktop on your network, it can call the UDP137.

    If it does not interfere with something functional you need to do, leave him alone. The Job firewall is to block aspects of network traffic. You don't have to feel 'sorry' to him do his job.

    Jack-MVP Windows Networking. WWW.EZLAN.NET

  • NetBIOS (UDP 137) causing the 'noise' in Syslog PIX

    Our PIX logs are loaded to deny reports about udp port 137 vehicles coming from our servers to Win, it makes it difficult sometimes to see the other messages to refuse, we must investigate.

    Disabling NetBIOS over TCP/IP on servers is unfortunately not an option for us in this VLAN individual. The infrastructure underlying is a Catalyst 6500 switch and we wonder if there is a way, using its feature set, to filter traffic entering the port of the PIX. We want to block the port UDP/137 so drop packets unwanted before the PIX are same.

    We have looked into VACL but aren't aware of their ability, ACL, MAC address, traffic at a lower level. In this interface PIX and servers are in the same VLAN Layer2, we do not have a Layer 3 interface we can use to apply an ACL.

    Everybody deals with this issue, any suggestions?

    Hello

    to make the operation forest op NetBIOS disappear, you have the option to create a list entry access that matches the netbios traffic and disables logging for this entry. At the end of the access list entry simply add "disable the log."

    This feature requires OS PIX v6.3.

    Kind regards

    Tom

  • Is there a way in which I can see if Apple firewall blocks the traffic to a certain IP address?

    Connection to my e-mail domain seems to be blocked by a body between my home network (via Apple AirPort) and my mail server to an external service provider. I can connect to this fine through my mobile operator, but not from my home network. This leads me to believe it may have something to do with the Apple firewall, blocking traffic to. Where can I see if this is the case? Other possibilities or what to check?

    I agree that it seems that the Apple router blocking communication (Support Apple says that is not possible, is said by the way)... but please read this thread for another angle that you would not have thought:

    Unable to connect to a single site with Airport Extreme

  • I updated to XP from SP1 to SP2 and rec'd an investigation re firewall to block xrxfptlt. I can't locate any file containing this sequence

    Original title: what is xrxfptlt?

    I updated to XP from SP1 to SP2 and rec'd an investigation re firewall to block xrxfptlt. I can't locate any file containing this sequence, including any system or hidden files. A search in the registry also has given no result for this combination of letters. Does anyone have an idea?

    Hello

    You are probably referring to xrxftplt.exe. xrxftplt.exe is located in a subfolder of "C:\Program Files".

    XrxFTPLt.exe file is a Windows core system file. The program is not visible. Start the application at Windows startup (see registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). Program has no file description. The file is a reliable file from Microsoft. The program uses ports to connect to LAN or Internet. XrxFTPLt.exe is able to connect to the Internet.

    However, some malware camouflage themselves as XrxFTPLt.exe, particularly if they are located in the folder c:\windows or c:\windows\system32. Check the XrxFTPLt.exe process on your computer either on the pest.

    I recommend that you use the Microsoft Safety Scanner to run a full scan on your computer to verify if this is a malicious file.

    Note: You may lose any infected files by eliminating malware.

  • "Error of SJphone: ' NAT/firewall: blocked".

    "SJphone has stopped working a few months ago on 3 computers of x. error display: ' NAT/firewall: blocked".

    Using Wireshark ISP said: "This shows that traffic is having issues is internal to your network." Please try to disable the firewall. "They have all been disabled.

    Tried X-Lite and receive: registration error: 503 - no route to the host.

    Could MS security updates caused the problem?

    Any suggestion is appreciated.

    Ultimately VoIPtalk could not solve the problem except by suggesting the X-Lite. That works fine!

  • Firewall blocking maybe the printer?

    original title: Firewall blocking the printer?

    After unplugging, reboot, a message error that the printer does not communicate and you have a firewall preventing maybe printing...  This comes out of the blue as it was before printing.  How can I know if the firewallis to blame?

    Hi KarenBrice,

    ·         Were you able to access the printer earlier?

    ·         What is the brand and model of the printer?

    ·         What security software do you use?

    I suggest you try the procedure described in article provided below and check if it helps.

    http://Windows.Microsoft.com/en-us/Windows-Vista/troubleshoot-printer-problems

    Temporarily disable the security software.

    Note: Antivirus software can help protect your computer against viruses and other security threats. In most cases, you should not disable your antivirus software. If you do not disable temporarily to install other software, you must reactivate as soon as you are finished. If you are connected to the Internet or a network during the time that your antivirus software is disabled, your computer is vulnerable to attacks.

    http://Windows.Microsoft.com/en-us/Windows-Vista/disable-antivirus-software

    Reference: http://windows.microsoft.com/en-us/windows/help/printer-problems-in-windows

Maybe you are looking for