PPPoE and WiFi Router problem

[Guest]

Hi, my PC runs XP Home and has a PPPoE connection. In the past, it sometimes
has problem in connecting the PPPoE and I have to power up and down the PC.

Recently I installed a Linksys 802.11b router, I connect this XP PC and
other PCs (running Window 2000). The WiFi router is set up to dial the PPPoE
connection (with users name and password), so the Win2000 PC can connect to
the internet right after its power up without any further action.

However, on the PC with XP, it is very strange. Sometimes, I can get to the
internet without having to connect the PPPoE. Sometimes, it prompts me to
"connect" the PPPoE. Worse, lately, I could not connect the PPPoE and the
dialer keeps dialing. I have to power up and down several times, and if I am
lucky, I would get it on again.

My questions:
1) Since the WiFi router will dial the PPPoE, why do I need to dial PPPoE
from the PC with XP? How could I set it up to no need to dial?

2) Why I would have the syndrome of sometimes it needs dialing, and
sometimes it does not need dialing? What causes the "fail to establish
connection" problem? Spyware?

Thanks for your advise.

Kelvin

 

[Chuck]

Hi, my PC runs XP Home and has a PPPoE connection. In the past, it sometimes
has problem in connecting the PPPoE and I have to power up and down the PC.

Recently I installed a Linksys 802.11b router, I connect this XP PC and
other PCs (running Window 2000). The WiFi router is set up to dial the PPPoE
connection (with users name and password), so the Win2000 PC can connect to
the internet right after its power up without any further action.

However, on the PC with XP, it is very strange. Sometimes, I can get to the
internet without having to connect the PPPoE. Sometimes, it prompts me to
"connect" the PPPoE. Worse, lately, I could not connect the PPPoE and the
dialer keeps dialing. I have to power up and down several times, and if I am
lucky, I would get it on again.

My questions:
1) Since the WiFi router will dial the PPPoE, why do I need to dial PPPoE
from the PC with XP? How could I set it up to no need to dial?

2) Why I would have the syndrome of sometimes it needs dialing, and
sometimes it does not need dialing? What causes the "fail to establish
connection" problem? Spyware?

Thanks for your advise.

Kelvin

Kelvin,

Each individual program that accesses the internet for any reason has its own
behaviour for connecting, disconnecting, or thinking that its disconnected from
the internet. Each program may have a setting that lets it automatically
connect when you run it.

Internet Explorer, for instance, under Internet Options - Connections, may have
dial-up settings (from before the router was in?). If you have a router
managing your PPPoE, or other broadband OR dial-up connection, you should set IE
to Never dial a connection. Unless you have a backup modem connection in your
PC that should kick in if your DSL ever drops out. And there are other issues
with that possibility, so just take that as an example.

Just check all your programs, and find the "Never dial a connection" option.
And select any such option found. You may have to RTFM for some software -
there's no telling where any such setting is found.

OTOH, spyware COULD be involved. If that's a concern, let us know and we'll
start you on that.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Jack]

Hi.
Make sure that uninstalled the PPPOE software, and unchecked Windows PPPOE
(DSL) menu.
Jack (MVP-Networking).

 

[Guest]

Chuck, thanks. I think it is caused by spyware.

The problem came up randomly, with no logic. It drives me nuts as I need to
spend 30min to 1 hour before I can access internet. Luckily, I have other PC
so I can do work (but need to fight with my wife and daughter). Now, once I
got the PC working fine with internet, I dare not to turn it off and at
night, I just hibernate it.

Why I said Spyware? I found a funny icon associated with that "connect"
window at the tool bar sometimes. It has an alagator look so I think it is
associated with the "Gator Publishing" (is it a spyware to cause pop up
windows?)

OK, should I use the Lavasoft's Ad-ware to clean the spyware? However, after
I download the ad-ware, there are more pop-ups... I guess the Ad-ware brings
them in.

Advise please.....

Kelvin

 

[Chuck]

Chuck, thanks. I think it is caused by spyware.

The problem came up randomly, with no logic. It drives me nuts as I need to
spend 30min to 1 hour before I can access internet. Luckily, I have other PC
so I can do work (but need to fight with my wife and daughter). Now, once I
got the PC working fine with internet, I dare not to turn it off and at
night, I just hibernate it.

Why I said Spyware? I found a funny icon associated with that "connect"
window at the tool bar sometimes. It has an alagator look so I think it is
associated with the "Gator Publishing" (is it a spyware to cause pop up
windows?)

OK, should I use the Lavasoft's Ad-ware to clean the spyware? However, after
I download the ad-ware, there are more pop-ups... I guess the Ad-ware brings
them in.

Advise please.....

Kelvin,

Adaware is one tool to diagnose and remove spyware. But not the only tool.

How current is your virus protection? Try one or more of these free online
virus scans, which should complement your current protection:
<http://www.bitdefender.com/scan/license.php>
<http://www.pandasoftware.com/activescan>
<http://www.ravantivirus.com/scan/>
<http://security.symantec.com/ssc/home.asp>
<http://housecall.trendmicro.com/housecall/start_corp.asp>

Now, start by downloading each of the following additional free tools:
AdAware <http://www.lavasoftusa.com/>
CWShredder <http://www.majorgeeks.com/download4086.html>
CoolWWWSearch.SmartSearch (v1/v2) MiniRemoval
<http://www.majorgeeks.com/download4113.html>
HijackThis <http://www.majorgeeks.com/download.php?det=3155>
LSP-Fix and WinsockLSPFix <http://www.cexx.org/lspfix.htm>
Spybot S&D <http://www.safer-networking.org/index.php?page=download>
Stinger <http://us.mcafee.com/virusInfo/default.asp?id=stinger>

Create a separate folder for HijackThis, such as C:\HijackThis - copy the
downloaded file there. AdAware and Spybot S&D have install routines - run them.
The other downloaded programs can be copied into, and run from, any convenient
folder.

First, run Stinger. Have it remove any problems found.

Next, close all Internet Explorer and Outlook windows, and run
CoolWWWSearch.SmartSearchMiniRemoval, then CWShredder. Have the latter fix all
problems found.

Next, run AdAware. First update it ("Check for updates now"), then configure
for full scan (<http://www.lavahelp.com/howto/fullscan/>). When scanning
finishes, select everything found for removal.

Next, run Spybot S&D. First update it ("Search for updates"), then run a scan
("Check for problems"). Trust Spybot, and delete everything ("Fix Problems")
that is displayed in Red.

Then, run HijackThis ("Scan"). Do NOT make any changes immediately. Save the
HJT Log.
<http://forums.spywareinfo.com/index.php?showtopic=227>

Finally, have your HJT log interpreted by experts at one or more of the
following security forums (and post it, or a link to your forum posts, here):
Aumha: <http://forum.aumha.org/index.php>
Net-Integration: <http://forums.net-integration.net/>
Spyware Info: <http://forums.spywareinfo.com/>
Spyware Warrior: <http://spywarewarrior.com/index.php>
Tom Coyote: <http://forums.tomcoyote.org/>

If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix and / or WinsockXPFIx.

Finally, improve your chances for the future.

Harden your browser. There are various websites which will check for
vulnerabilities, here are three which I use.
http://www.jasons-toolbox.com/BrowserSecurity/
http://bcheck.scanit.be/bcheck/
https://testzone.secunia.com/browser_checker/

Block Internet Explorer ActiveX scripting from hostile websites (Restricted
Zone).
<https://netfiles.uiuc.edu/ehowes/www/main.htm> (IE-SpyAd)

Block known dangerous scripts from installing.
<http://www.javacoolsoftware.com/spywareblaster.html>

Block known spyware from installing.
<http://www.javacoolsoftware.com/spywareguard.html>

Make sure that the spyware detection / protection products that you use are
reliable:
http://www.spywarewarrior.com/rogue_anti-spyware.htm

Harden your operating system. Check at least monthly for security updates.
http://windowsupdate.microsoft.com/

Block possibly dangerous websites with a Hosts file. Three Hosts file sources I
use:
http://www.accs-net.com/hosts/get_hosts.html
http://www.mvps.org/winhelp2002/hosts.htm
(The third is included, and updated, with Spybot (see above)).

Maintain your Hosts file (merge / eliminate duplicate entries) with:
eDexter <http://www.accs-net.com/hosts/get_hosts.html>
Hostess <http://accs-net.com/hostess/>

Secure your operating system, and applications. Don't use, or leave activated,
any accounts with names or passwords with trivial (guess able) values. Don't
use an account with administrative authority, except when you're intentionally
doing administrative tasks.

Use common sense. Yours. Don't install software based upon advice from unknown
sources. Don't install free software, without researching it carefully. Don't
open email unless you know who it's from, and how and why it was sent.

Educate yourself. Know what the risks are. Stay informed. Read Usenet, and
various web pages that discuss security problems. Check the logs from the other
layers regularly, look for things that don't belong, and take action when
necessary.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Guest]

Chuck, thanks for the reply. I have read that some "spyware remover" in fact
is a "spyware". Are those "spyware remover" you listed safe?

Kelvin

 

[Chuck]

Chuck, thanks for the reply. I have read that some "spyware remover" in fact
is a "spyware". Are those "spyware remover" you listed safe?

Kelvin,

You asked a question that I asked myself when I first started reading these
forums. How do I know who to trust? If you can trust the advice in these
forums, you have to (hopefully) trust the majority of opinion there.

In alt.comp.security and alt.privacy.spyware, a lot of folks recommend Eric
Howes as an authority. If you examine Eric's website, you will see that he
knows what he's talking about.
<https://netfiles.uiuc.edu/ehowes/www/main.htm>

Eric recently added a page at SpywareWarrior.
<http://www.spywarewarrior.com/rogue_anti-spyware.htm>

The products I recommended are trusted, and used, at several security forums.
Aumha: <http://forum.aumha.org/index.php>
Net-Integration: <http://forums.net-integration.net/>
Spyware Info: <http://forums.spywareinfo.com/>
Spyware Warrior: <http://spywarewarrior.com/index.php>
Tom Coyote: <http://forums.tomcoyote.org/>

Then, after you use them for a while, you know to trust these products from
experience. I have and I do.

I've never met the authors of AA, CWS, HJT, or SSD in person. But I know their
works are righteous. They are the good guys.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Guest]

Chuck,

I ran the symantec online virus scan last night as the first step (while I
watched th e Olympics). In the middle of it, the internet connect lost and
the PC hung up. I reboot and then I cannot get back on the internet again,
although it showed everything was fine and connected. I tried here and there
and finally, it gave me blue screen with some error messages related to
tcpipv6 or something. Then I had it enough and went to bed... will struggle
again tonight.

One question. I just read the ezlan.net and it has an article to address the
PPPOE. It said, after installing a router between the PC and the DSL modem,
the connection will be always "on", so one can use the PC without dialing the
PPPOE again. It also said: "Make sure that the Internet Browser is set to use
LAN, otherwise it will keep trying to use PPPOE software."

My question is, how do I set the IE to use LAN instead of the PPPoE dial up?

Thanks for your advise.

Kelvin

 

[Chuck]

Chuck,

I ran the symantec online virus scan last night as the first step (while I
watched th e Olympics). In the middle of it, the internet connect lost and
the PC hung up. I reboot and then I cannot get back on the internet again,
although it showed everything was fine and connected. I tried here and there
and finally, it gave me blue screen with some error messages related to
tcpipv6 or something. Then I had it enough and went to bed... will struggle
again tonight.

One question. I just read the ezlan.net and it has an article to address the
PPPOE. It said, after installing a router between the PC and the DSL modem,
the connection will be always "on", so one can use the PC without dialing the
PPPOE again. It also said: "Make sure that the Internet Browser is set to use
LAN, otherwise it will keep trying to use PPPOE software."

My question is, how do I set the IE to use LAN instead of the PPPoE dial up?

Thanks for your advise.

Kelvin

Kelvin,

If you enable the DHCP server on the router, and set the computer for
autoconfiguration (TCP/IP Properties) (Obtain IP address and DNS server
addresses automatically), the router will provide all the settings necessary.

Then, in Internet Explorer - Internet Options - Connections, select Never dial a
connection. Remove any Dial-up settings, and un install the PPPoE drivers from
the system.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Chuck]

Chuck,

I ran the symantec online virus scan last night as the first step (while I
watched th e Olympics). In the middle of it, the internet connect lost and
the PC hung up. I reboot and then I cannot get back on the internet again,
although it showed everything was fine and connected. I tried here and there
and finally, it gave me blue screen with some error messages related to
tcpipv6 or something. Then I had it enough and went to bed... will struggle
again tonight.

Kelvin,

Are you running IPV6? Do you do that intentionally?

Please provide ipconfig information for this computer.
Start - Run - "cmd". Type "ipconfig /all >c:\ipconfig.txt" into the command
window - Open c:\ipconfig.txt in Notepad, copy and paste into your next post.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Guest]

Chuck,

Sorry for bothering you and thanks for your help.... I will run the ipconfig
and post it up tonight (I am in China so now is the mid-night of US).

Regarding the ipv6, I discovered a very strange setting last night.

In the Network Connection, I have following settings (plus some modem
dial-up settings):
-MAC Bridge ??............but in my office notebook PC (Win2000), there is
no MAC Bridge.
-Local Area Network
-Broadband (what I set for PPPoE)

When I click the "Advanced" in the Network Connections window and then
"Advanced Settings", and then in the "Adapters and Binding" tab, I found
Local Area Connections and MAC Bridge. When I click on Local Area Connection,
it shows in the Bindings that it is binded (and checked) to "Microsoft
Network TCP/IP v6", and the "Internet Protocl (TCP/IP)" is grey out and not
checked.

The above is from my memory and I will post the exact settings tonight....

BTW, I ran Adware and Spybot last night and clean up a lot of spyware. The
internet works OK (still not normal. I have to reboot the PC twice and
disconnect and reconnect the PPPoE broadband connection a few times here and
there for trial and error)....

Kelvin

When

 

[Guest]

Chuck,

Since the very beginning, I did check the "Never Dial a Connection", but the
syndrome (as I reported in other posts) always there.

Should I remove/delete all the PPPoE settings? I'm concerned if it does not
work, could I safely go back to the PPPoE settings. There is no PPPoE driver.
It seems that it comes with XP. When I create a New Connection, it comes out
as a PPPoE setting.

Should I try to remove/delete all the PPPoE settings? Any way back?

p.s the DHCP is enabled in the WiFi router; other PCs (Win2000) connected to
the router work perfectly fine.

Kelvin

 

[Chuck]

Chuck,

Since the very beginning, I did check the "Never Dial a Connection", but the
syndrome (as I reported in other posts) always there.

Should I remove/delete all the PPPoE settings? I'm concerned if it does not
work, could I safely go back to the PPPoE settings. There is no PPPoE driver.
It seems that it comes with XP. When I create a New Connection, it comes out
as a PPPoE setting.

Should I try to remove/delete all the PPPoE settings? Any way back?

p.s the DHCP is enabled in the WiFi router; other PCs (Win2000) connected to
the router work perfectly fine.

Kelvin,

If the other PCs connected to the router work perfectly fine (including
internet)? then you simply don't need PPPoE. And I wouldn't be surprised if the
PPPoE driver is at least contributing to your instability (blue screen). You're
better off removing all PPPoE drivers and settings.

When you remove spyware, you may end up with damaged LSP / Winsock. Download
LSP-Fix and WinsockLSPFix <http://www.cexx.org/lspfix.htm> first.
<http://support.microsoft.com/?kbid=811259>

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Chuck]

Chuck,

I just don't get it. The PC works fine since 24 hours ago. I hibernated it
over night and later turn it back on and it works fine. As a matter of fact,
I do NOT need to click the PPPoE connection and I still can get on the
internet via only the Local Area Connection.

I ran the ipconfig and here is the output:

Windows IP Configuration
Host Name . . . . . . . . . . . . : DellofHo
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Network Bridge:
Connection-specific DNS Suffix . : ci1093
Description . . . . . . . . . . . : MAC Bridge Miniport
Physical Address. . . . . . . . . : 02-07-E9-B3-46-61
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.123
Subnet Mask . . . . . . . . . . . : 255.255.255.0
IP Address. . . . . . . . . . . . : fe80::7:e9ff:feb3:4661%4
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 202.106.0.20

202.106.46.151
fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1

Lease Obtained. . . . . . . . . . : Tuesday, August 24, 2004
11:09:49 PM
Lease Expires . . . . . . . . . . : Wednesday, August 25, 2004
11:09:49 PM

Tunnel adapter Teredo Tunneling Pseudo-Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : FF-FF-FF-FF-FF-FF-FF-FF
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : fe80::5445:5245:444f%6
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . :
Physical Address. . . . . . . . . : 00-07-E9-B3-46-61
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : fe80::207:e9ff:feb3:4661%5
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%3
fec0:0:0:ffff::2%3
fec0:0:0:ffff::3%3
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Automatic Tunneling Pseudo-Interface:
Connection-specific DNS Suffix . : ci1093
Description . . . . . . . . . . . : Automatic Tunneling
Pseudo-Interface
Physical Address. . . . . . . . . : C0-A8-01-7B
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : fe80::5efe:192.168.1.123%2
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Disabled

It was much more complicated than the similar output of my other PC.

From the Control-> Network Connections, I have many connection icons:

- "Broadband" WAN Miniport (PPPOE) ---- I named it Broadband
- some dial-up icons
- 1394 Connection
- Network Bridge MAC Bridge Miniport
- Local Area Connection Intel(R) PRO/100 VE Network...

Also, from the "Advanced" -> "Advanced Settings" -> "Adapters and Bindings",
it shows the following Connections:
- Local Area Connection
- Network Bridge
- 1394 Connection

If I click on the Local Area Connection, the lower box shows that the
"Microsoft TCP/IP version 6" is checked and the "Internet Protocl (TCP/IP) is
not checked under both the File and Printer Sharing and Client for Microsoft
Networks, and everything is grey out and not clickable.

If I click on the Network Bridge, the lower box shows that both the
"Microsoft TCP/IP version 6" and the "Internet Protocl (TCP/IP) are checked
under both the File and Printer Sharing and Client for Microsoft Networks,
and nothing is grey out.

If I click on the 1394 Connection, the lower box shows only the "Internet
Protocl (TCP/IP) is not checked under both the File and Printer Sharing and
Client for Microsoft Networks.

Furthermore, from Control -> Add/Remove Software -> Add/Remove Windows
Components, I found that I did install the Networking Services (IPv6,
Peer-to-Peer, Simple TCP/IP Services, UPnP and others).

Chuck, really sorry for bothering you that much. Appreciate if you could
look at the above and give me some more (perhaps last) advise. The PC works
fine now and I will change nothing and hopes nothing else will change too.....

Kelvin,

First, you're not bothering me. I learn from you just as you learn from me.

Second, you have two immediate problems.
1) You ARE running IPV6. Are you doing anything intentional with it? I
haven't used it too much - I had it installed on one PC but removed it cause it
made my internet flaky - maybe just what you're seeing except I did not have
PPPoE to confuse me.
2) You have a Network Bridge setup by the wizard, cause you have both an
Ethernet and a 1394 adapter.

Neither IPV6 nor a network bridge is required for you to access the internet
thru a NAT router.

Try this:
1) Delete the bridge.
2) Un install IPV6. If you look at your Local Area Connection Properties, you
will see Client for Microsoft Networks, and File and Printer Sharing for
Microsoft Networks, both are required to share files. Internet Protocol
(TCP/IP) is required to connect to the network. Advanced Network Options
(something like that) contains IPV6, and just causes pain AFAIK.

Then post a new IPConfig.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Guest]

Chuck,

I did not install the IPv6 with any intention.
I use the 1394 for video capture and nothing else.

I will try removing the Bridge and un-installing the IPv6 tonight. But
before I do it, I would like to know:

- if I remove the Bridge and end up messing up, how could I get the MAC
Bridge back?

- As I said, in the Adapters and Bindings -> Local Area Connection, the
"Microsoft TCP/IP version 6" is checked and "Internet TCP/IP" is unchecked,
and both of them are grey out.... that is, not changeable. If I uninstall the
Pv6, how could I be sure the TCP/IP will be back? or how could I be sure I
could check/select it?

Should I set a System Restore point first? Would the System Restore keep all
these kinds of settings?

Kelvin

 

[Chuck]

Chuck,

I did not install the IPv6 with any intention.
I use the 1394 for video capture and nothing else.

I will try removing the Bridge and un-installing the IPv6 tonight. But
before I do it, I would like to know:

- if I remove the Bridge and end up messing up, how could I get the MAC
Bridge back?

- As I said, in the Adapters and Bindings -> Local Area Connection, the
"Microsoft TCP/IP version 6" is checked and "Internet TCP/IP" is unchecked,
and both of them are grey out.... that is, not changeable. If I uninstall the
Pv6, how could I be sure the TCP/IP will be back? or how could I be sure I
could check/select it?

Should I set a System Restore point first? Would the System Restore keep all
these kinds of settings?

Kelvin

Kelvin,

A System Restore point is always a good idea.

When you un install Advanced Network Components or whatever it is (I don't the
remember exact name), you leave Internet Protocol (TCP/IP) alone. They are two
different products. Do NOT un install Internet Protocol (TCP/IP) and you'll be
OK.

If removing the bridge causes problems, you can re-install it. You'll have to
reset addresses etc, but that's all removing / reinstalling will cause.

Do it this way:
1) Set System Restore point.
2) Un install Advanced Networking.
3) Wait until next week (or whenever you're comfortable). If your network
problem isn't back by then, and you have stable internet and system, you're
done.
4) If not stable, set another SRP.
5) Delete the bridge.
6) Un install PPPoE driver and settings (or have you done that?).

Whatever you do (or undo) can be undone (redone). As long as you remember what
you do, in what order.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.