Whenever I launch my IE6, another IE6 window will open automatically with the
address "http://540.scmg.net/randomsites/banner.aspx" and it will either
connect to "http://www.oldgames.se/" or "http://www.filost.com/stop.htm"

After sometime it will automatically open again while Im browsing the web.

Ive update my Nortan virus 2004 and Ad Adware and done full system scan but
still can't detect anything.

Hope anyone with the solutions to the above can help me. Thanks

First eliminate any spyware.
What You Should Know About Spyware
http://www.microsoft.com/athome/secu...ssoftware.mspx

CAUTION!!!!! Removing some spyware can damage the Winsock stact. Before
you try to remove spyware using any of these programs , download a copy of
LSP-Fix - a free program to repair damaged Winsock 2 stacks (all Windows
versions)
http://www.cexx.org/lspfix.htm
Winsockfix for W95, W98, ME, NT, 2000, XP
http://www.tacktech.com/pub/winsockfix/WinsockFix.zip
Directions here: http://www.tacktech.com/display.cfm?ttid=257
WinXP:
Get WinSockxpFix
http://www.spychecker.com/program/winsockxpfix.html
How to Reset Internet Protocol (TCP/IP) in Windows XP
http://support.microsoft.com/kb/299357
In WinXP SP2: You can fix Winsock by going to Start | Run and typing
CMD
In the command window type
netsh winsock reset

See
Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each needs to be updated with the program's update function
before every use, even when just downloaded. There's also a lot more to do
than just those two programs. CWShredder is also available here:
http://www.intermute.com/products/cwshredder
**Post your HijackThis log to
http://forums.spywareinfo.com/
http://forums.tomcoyote.org/
http://castlecops.com/forum67.html
http://www.wilderssecurity.com/ or the Spyware forum at
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.

See this link for information about malware:
http://arstechnica.com/articles/paedia/malware.ars

If nothing there helps, please post back to this thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/


"cue7578" <(E-Mail Removed)> wrote in message
news:217A743B-B83D-453A-A2D5-(E-Mail Removed)...
> Whenever I launch my IE6, another IE6 window will open automatically with
> the
> address "http://540.scmg.net/randomsites/banner.aspx" and it will either
> connect to "http://www.oldgames.se/" or "http://www.filost.com/stop.htm"
>
> After sometime it will automatically open again while Im browsing the web.
>
> Ive update my Nortan virus 2004 and Ad Adware and done full system scan
> but
> still can't detect anything.
>
> Hope anyone with the solutions to the above can help me. Thanks

Hi
I've exactly the same problem with same pages openning automatically.
It's already 2 weeks that I'm trying to fix the problem, with Norton AV, MS
AntiSpyware beta / SpyBot / Ad-Aware / CWShredder /
WinPatrol ......... but it's still alive !!!
Did you succeed to remove it ??

Please advise.

Jack


"cue7578" <(E-Mail Removed)> a écrit dans le message de
news: 217A743B-B83D-453A-A2D5-(E-Mail Removed)...
> Whenever I launch my IE6, another IE6 window will open automatically with
the
> address "http://540.scmg.net/randomsites/banner.aspx" and it will either
> connect to "http://www.oldgames.se/" or "http://www.filost.com/stop.htm"
>
> After sometime it will automatically open again while Im browsing the web.
>
> Ive update my Nortan virus 2004 and Ad Adware and done full system scan
but
> still can't detect anything.
>
> Hope anyone with the solutions to the above can help me. Thanks

If all else fails, then the problem could be something new that the
spyware cleaners above don't have in their databases yet. In that case....
HijackThis direct download:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
Tutorial on how to use HijackThis:
http://www.spywareinfo.com/~merijn/htlogtutorial.html
Then post it's output log to the forum here for analysis and feedback by the
parasite experts:
http://www.spywareinfo.com/forums/
Or the other HijackThis Logs forums listed here:
http://www.spywareinfo.com/~merijn/forums.html

An alternate resource for all of this and more:
http://www.aumha.org/secure.htm

--

Jon R. Kennedy
Charlotte, NC, USA
(E-Mail Removed)

"JyM" <(E-Mail Removed)> wrote in message news:cv4a5t$atm$(E-Mail Removed)...
> Hi
> I've exactly the same problem with same pages openning automatically.
> It's already 2 weeks that I'm trying to fix the problem, with Norton AV,
> MS
> AntiSpyware beta / SpyBot / Ad-Aware / CWShredder /
> WinPatrol ......... but it's still alive !!!
> Did you succeed to remove it ??
>
> Please advise.
>
> Jack
>

I had tried all recommeded procedures but still cant get rid of it. Just hope
that anyone out there who manage to solve the problem pls reply.

"Frank Saunders, MS-MVP, IE/OE" wrote:

> First eliminate any spyware.
> What You Should Know About Spyware
> http://www.microsoft.com/athome/secu...ssoftware.mspx
>
> CAUTION!!!!! Removing some spyware can damage the Winsock stact. Before
> you try to remove spyware using any of these programs , download a copy of
> LSP-Fix - a free program to repair damaged Winsock 2 stacks (all Windows
> versions)
> http://www.cexx.org/lspfix.htm
> Winsockfix for W95, W98, ME, NT, 2000, XP
> http://www.tacktech.com/pub/winsockfix/WinsockFix.zip
> Directions here: http://www.tacktech.com/display.cfm?ttid=257
> WinXP:
> Get WinSockxpFix
> http://www.spychecker.com/program/winsockxpfix.html
> How to Reset Internet Protocol (TCP/IP) in Windows XP
> http://support.microsoft.com/kb/299357
> In WinXP SP2: You can fix Winsock by going to Start | Run and typing
> CMD
> In the command window type
> netsh winsock reset
>
> See
> Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
> http://mvps.org/winhelp2002/unwanted.htm
>
> Note that AdAware and SpyBot S & D will each catch some things the other
> won't. Also, each needs to be updated with the program's update function
> before every use, even when just downloaded. There's also a lot more to do
> than just those two programs. CWShredder is also available here:
> http://www.intermute.com/products/cwshredder
> **Post your HijackThis log to
> http://forums.spywareinfo.com/
> http://forums.tomcoyote.org/
> http://castlecops.com/forum67.html
> http://www.wilderssecurity.com/ or the Spyware forum at
> http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**
> Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
> may be found on this page:
> http://aumha.org/a/parasite.htm.
>
> See this link for information about malware:
> http://arstechnica.com/articles/paedia/malware.ars
>
> If nothing there helps, please post back to this thread.
>
> --
> Frank Saunders, MS-MVP, IE/OE
> Please respond in Newsgroup. Do not send email
> http://www.fjsmjs.com
> Protect your PC
> http://www.microsoft.com/security/protect/
>
>
> "cue7578" <(E-Mail Removed)> wrote in message
> news:217A743B-B83D-453A-A2D5-(E-Mail Removed)...
> > Whenever I launch my IE6, another IE6 window will open automatically with
> > the
> > address "http://540.scmg.net/randomsites/banner.aspx" and it will either
> > connect to "http://www.oldgames.se/" or "http://www.filost.com/stop.htm"
> >
> > After sometime it will automatically open again while Im browsing the web.
> >
> > Ive update my Nortan virus 2004 and Ad Adware and done full system scan
> > but
> > still can't detect anything.
> >
> > Hope anyone with the solutions to the above can help me. Thanks
>
>
>

Where did you post your HijackThis log?

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/


"cue7578" <(E-Mail Removed)> wrote in message
news:847C1B32-FF3C-4516-BD4F-(E-Mail Removed)...
>I had tried all recommeded procedures but still cant get rid of it. Just
>hope
> that anyone out there who manage to solve the problem pls reply.
>
> "Frank Saunders, MS-MVP, IE/OE" wrote:
>
>> First eliminate any spyware.
>> What You Should Know About Spyware
>> http://www.microsoft.com/athome/secu...ssoftware.mspx
>>
>> CAUTION!!!!! Removing some spyware can damage the Winsock stact. Before
>> you try to remove spyware using any of these programs , download a copy
>> of
>> LSP-Fix - a free program to repair damaged Winsock 2 stacks (all Windows
>> versions)
>> http://www.cexx.org/lspfix.htm
>> Winsockfix for W95, W98, ME, NT, 2000, XP
>> http://www.tacktech.com/pub/winsockfix/WinsockFix.zip
>> Directions here: http://www.tacktech.com/display.cfm?ttid=257
>> WinXP:
>> Get WinSockxpFix
>> http://www.spychecker.com/program/winsockxpfix.html
>> How to Reset Internet Protocol (TCP/IP) in Windows XP
>> http://support.microsoft.com/kb/299357
>> In WinXP SP2: You can fix Winsock by going to Start | Run and typing
>> CMD
>> In the command window type
>> netsh winsock reset
>>
>> See
>> Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
>> http://mvps.org/winhelp2002/unwanted.htm
>>
>> Note that AdAware and SpyBot S & D will each catch some things the other
>> won't. Also, each needs to be updated with the program's update function
>> before every use, even when just downloaded. There's also a lot more to
>> do
>> than just those two programs. CWShredder is also available here:
>> http://www.intermute.com/products/cwshredder
>> **Post your HijackThis log to
>> http://forums.spywareinfo.com/
>> http://forums.tomcoyote.org/
>> http://castlecops.com/forum67.html
>> http://www.wilderssecurity.com/ or the Spyware forum at
>> http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
>> here.**
>> Alternative download pages for Ad-Aware, Spybot, HijackThis and
>> CWShredder
>> may be found on this page:
>> http://aumha.org/a/parasite.htm.
>>
>> See this link for information about malware:
>> http://arstechnica.com/articles/paedia/malware.ars
>>
>> If nothing there helps, please post back to this thread.
>>
>> --
>> Frank Saunders, MS-MVP, IE/OE
>> Please respond in Newsgroup. Do not send email
>> http://www.fjsmjs.com
>> Protect your PC
>> http://www.microsoft.com/security/protect/
>>
>>
>> "cue7578" <(E-Mail Removed)> wrote in message
>> news:217A743B-B83D-453A-A2D5-(E-Mail Removed)...
>> > Whenever I launch my IE6, another IE6 window will open automatically
>> > with
>> > the
>> > address "http://540.scmg.net/randomsites/banner.aspx" and it will
>> > either
>> > connect to "http://www.oldgames.se/" or
>> > "http://www.filost.com/stop.htm"
>> >
>> > After sometime it will automatically open again while Im browsing the
>> > web.
>> >
>> > Ive update my Nortan virus 2004 and Ad Adware and done full system scan
>> > but
>> > still can't detect anything.
>> >
>> > Hope anyone with the solutions to the above can help me. Thanks
>>
>>
>>

I post the log in "forums.spywareinfo.com"

"Frank Saunders, MS-MVP, IE/OE" wrote:

> Where did you post your HijackThis log?
>
> --
> Frank Saunders, MS-MVP, IE/OE
> Please respond in Newsgroup. Do not send email
> http://www.fjsmjs.com
> Protect your PC
> http://www.microsoft.com/security/protect/
>
>
> "cue7578" <(E-Mail Removed)> wrote in message
> news:847C1B32-FF3C-4516-BD4F-(E-Mail Removed)...
> >I had tried all recommeded procedures but still cant get rid of it. Just
> >hope
> > that anyone out there who manage to solve the problem pls reply.
> >
> > "Frank Saunders, MS-MVP, IE/OE" wrote:
> >
> >> First eliminate any spyware.
> >> What You Should Know About Spyware
> >> http://www.microsoft.com/athome/secu...ssoftware.mspx
> >>
> >> CAUTION!!!!! Removing some spyware can damage the Winsock stact. Before
> >> you try to remove spyware using any of these programs , download a copy
> >> of
> >> LSP-Fix - a free program to repair damaged Winsock 2 stacks (all Windows
> >> versions)
> >> http://www.cexx.org/lspfix.htm
> >> Winsockfix for W95, W98, ME, NT, 2000, XP
> >> http://www.tacktech.com/pub/winsockfix/WinsockFix.zip
> >> Directions here: http://www.tacktech.com/display.cfm?ttid=257
> >> WinXP:
> >> Get WinSockxpFix
> >> http://www.spychecker.com/program/winsockxpfix.html
> >> How to Reset Internet Protocol (TCP/IP) in Windows XP
> >> http://support.microsoft.com/kb/299357
> >> In WinXP SP2: You can fix Winsock by going to Start | Run and typing
> >> CMD
> >> In the command window type
> >> netsh winsock reset
> >>
> >> See
> >> Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
> >> http://mvps.org/winhelp2002/unwanted.htm
> >>
> >> Note that AdAware and SpyBot S & D will each catch some things the other
> >> won't. Also, each needs to be updated with the program's update function
> >> before every use, even when just downloaded. There's also a lot more to
> >> do
> >> than just those two programs. CWShredder is also available here:
> >> http://www.intermute.com/products/cwshredder
> >> **Post your HijackThis log to
> >> http://forums.spywareinfo.com/
> >> http://forums.tomcoyote.org/
> >> http://castlecops.com/forum67.html
> >> http://www.wilderssecurity.com/ or the Spyware forum at
> >> http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
> >> here.**
> >> Alternative download pages for Ad-Aware, Spybot, HijackThis and
> >> CWShredder
> >> may be found on this page:
> >> http://aumha.org/a/parasite.htm.
> >>
> >> See this link for information about malware:
> >> http://arstechnica.com/articles/paedia/malware.ars
> >>
> >> If nothing there helps, please post back to this thread.
> >>
> >> --
> >> Frank Saunders, MS-MVP, IE/OE
> >> Please respond in Newsgroup. Do not send email
> >> http://www.fjsmjs.com
> >> Protect your PC
> >> http://www.microsoft.com/security/protect/
> >>
> >>
> >> "cue7578" <(E-Mail Removed)> wrote in message
> >> news:217A743B-B83D-453A-A2D5-(E-Mail Removed)...
> >> > Whenever I launch my IE6, another IE6 window will open automatically
> >> > with
> >> > the
> >> > address "http://540.scmg.net/randomsites/banner.aspx" and it will
> >> > either
> >> > connect to "http://www.oldgames.se/" or
> >> > "http://www.filost.com/stop.htm"
> >> >
> >> > After sometime it will automatically open again while Im browsing the
> >> > web.
> >> >
> >> > Ive update my Nortan virus 2004 and Ad Adware and done full system scan
> >> > but
> >> > still can't detect anything.
> >> >
> >> > Hope anyone with the solutions to the above can help me. Thanks
> >>
> >>
> >>
>
>
>

Someone postedthis below link to get rid of it. Ive done it and it works.


http://www.xpounded.netfirms.com/xFree6.html



"JyM" wrote:

> Hi
> I've exactly the same problem with same pages openning automatically.
> It's already 2 weeks that I'm trying to fix the problem, with Norton AV, MS
> AntiSpyware beta / SpyBot / Ad-Aware / CWShredder /
> WinPatrol ......... but it's still alive !!!
> Did you succeed to remove it ??
>
> Please advise.
>
> Jack
>
>
> "cue7578" <(E-Mail Removed)> a écrit dans le message de
> news: 217A743B-B83D-453A-A2D5-(E-Mail Removed)...
> > Whenever I launch my IE6, another IE6 window will open automatically with
> the
> > address "http://540.scmg.net/randomsites/banner.aspx" and it will either
> > connect to "http://www.oldgames.se/" or "http://www.filost.com/stop.htm"
> >
> > After sometime it will automatically open again while Im browsing the web.
> >
> > Ive update my Nortan virus 2004 and Ad Adware and done full system scan
> but
> > still can't detect anything.
> >
> > Hope anyone with the solutions to the above can help me. Thanks
>
>
>

The forum seems to be down right now, so I can't check it.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/


"cue7578" <(E-Mail Removed)> wrote in message
news:F5E5807F-721E-4187-8BBE-(E-Mail Removed)...
>I post the log in "forums.spywareinfo.com"
>
> "Frank Saunders, MS-MVP, IE/OE" wrote:
>
>> Where did you post your HijackThis log?
>>
>> --
>> Frank Saunders, MS-MVP, IE/OE
>> Please respond in Newsgroup. Do not send email
>> http://www.fjsmjs.com
>> Protect your PC
>> http://www.microsoft.com/security/protect/
>>
>>
>> "cue7578" <(E-Mail Removed)> wrote in message
>> news:847C1B32-FF3C-4516-BD4F-(E-Mail Removed)...
>> >I had tried all recommeded procedures but still cant get rid of it. Just
>> >hope
>> > that anyone out there who manage to solve the problem pls reply.
>> >
>> > "Frank Saunders, MS-MVP, IE/OE" wrote:
>> >
>> >> First eliminate any spyware.
>> >> What You Should Know About Spyware
>> >> http://www.microsoft.com/athome/secu...ssoftware.mspx
>> >>
>> >> CAUTION!!!!! Removing some spyware can damage the Winsock stact.
>> >> Before
>> >> you try to remove spyware using any of these programs , download a
>> >> copy
>> >> of
>> >> LSP-Fix - a free program to repair damaged Winsock 2 stacks (all
>> >> Windows
>> >> versions)
>> >> http://www.cexx.org/lspfix.htm
>> >> Winsockfix for W95, W98, ME, NT, 2000, XP
>> >> http://www.tacktech.com/pub/winsockfix/WinsockFix.zip
>> >> Directions here: http://www.tacktech.com/display.cfm?ttid=257
>> >> WinXP:
>> >> Get WinSockxpFix
>> >> http://www.spychecker.com/program/winsockxpfix.html
>> >> How to Reset Internet Protocol (TCP/IP) in Windows XP
>> >> http://support.microsoft.com/kb/299357
>> >> In WinXP SP2: You can fix Winsock by going to Start | Run and typing
>> >> CMD
>> >> In the command window type
>> >> netsh winsock reset
>> >>
>> >> See
>> >> Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
>> >> http://mvps.org/winhelp2002/unwanted.htm
>> >>
>> >> Note that AdAware and SpyBot S & D will each catch some things the
>> >> other
>> >> won't. Also, each needs to be updated with the program's update
>> >> function
>> >> before every use, even when just downloaded. There's also a lot more
>> >> to
>> >> do
>> >> than just those two programs. CWShredder is also available here:
>> >> http://www.intermute.com/products/cwshredder
>> >> **Post your HijackThis log to
>> >> http://forums.spywareinfo.com/
>> >> http://forums.tomcoyote.org/
>> >> http://castlecops.com/forum67.html
>> >> http://www.wilderssecurity.com/ or the Spyware forum at
>> >> http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
>> >> here.**
>> >> Alternative download pages for Ad-Aware, Spybot, HijackThis and
>> >> CWShredder
>> >> may be found on this page:
>> >> http://aumha.org/a/parasite.htm.
>> >>
>> >> See this link for information about malware:
>> >> http://arstechnica.com/articles/paedia/malware.ars
>> >>
>> >> If nothing there helps, please post back to this thread.
>> >>
>> >> --
>> >> Frank Saunders, MS-MVP, IE/OE
>> >> Please respond in Newsgroup. Do not send email
>> >> http://www.fjsmjs.com
>> >> Protect your PC
>> >> http://www.microsoft.com/security/protect/
>> >>
>> >>
>> >> "cue7578" <(E-Mail Removed)> wrote in message
>> >> news:217A743B-B83D-453A-A2D5-(E-Mail Removed)...
>> >> > Whenever I launch my IE6, another IE6 window will open automatically
>> >> > with
>> >> > the
>> >> > address "http://540.scmg.net/randomsites/banner.aspx" and it will
>> >> > either
>> >> > connect to "http://www.oldgames.se/" or
>> >> > "http://www.filost.com/stop.htm"
>> >> >
>> >> > After sometime it will automatically open again while Im browsing
>> >> > the
>> >> > web.
>> >> >
>> >> > Ive update my Nortan virus 2004 and Ad Adware and done full system
>> >> > scan
>> >> > but
>> >> > still can't detect anything.
>> >> >
>> >> > Hope anyone with the solutions to the above can help me. Thanks
>> >>
>> >>
>> >>
>>
>>
>>