Weird IE 6.0 Behaviour: Unrequested Pages popping up

First of all, don't think I'm any kind of rookie. No, I am an internet professional, however, I have never experienced the following before:

After having visited some obviously malicious sites, my Internet Explorer 6.0 (recently patched with q828750.exe) opens popup windows with advertisements, even if I just start IE and do nothing! I just have to wait a few seconds and voilà, various popups begin to open.

Can anyone tell me how to stop it?!

All my windows boxes connect to the internet via a linux box running squid and a well configured iptables firewall, but nevertheless somebody managed to do this harm to my IE.

(^^;?(Professional? Never Experienced?)

I think such a thing is not rare. If javascript is enabled, it can be easily forced, isn't it?

In any way, Go to spywareforum.

If there is windows problem, come back here again.

Thread moved.

Create a directory on your hardrive to save HijackThis.exe. A directory like c:\hijackthis. If you do not do this, you will not be able to use the backup/restore features.

Download HijackThis from:

http://www.spywareinfo.com/~merijn/files/hijackthis.zip

or here:

http://computercops.biz/downloads-cat-14.html

Save this file into the directory you made previously and then run the program named hijackthis.exe. When the program opens click on the Config button, then click on the Misc Tools button, and click on the Check for update online button. When it completes checking/applying updates press the back button.

Now click on the Scan button and when it is finished click on the Save Log button. A Notepad window will open with the contents of this log. Click on Edit then click on Select all. Then click on Edit and then Click on Copy.

Create a reply to this post here and right click in message area and select paste to paste the log into the post.

Someone will reply to you after reading this post. DO NOT fix any entries unless you understand what you are doing.

To see a tutorial with screenshots on using HijackThis you can click on the link below:

How to use HijackThis to remove Browser Hijackers & Spyware

Thank you very much for your assistance, I managed to locate and fix my problem in the meantime. There was a trojan having been installed on my computer (despite firewall and up-to-date patched IE) called automove.exe.

After having installed HijackThis as you stated, one can find instructions on removing automove.exe here:

http://www.webuser.co.uk/cgi-bin/fo...sb=5&o=93&part=

thanks again!