Hi,
My dialer is being replaced by another one after a certain amount of time is spent on the net. After a while (about 20 mins) the default dial-up service (BTOpenworld - which I have set as the only one my computer can dial) gets cut off and redials to 'SIXA'. Its deeply frustrating - I don't know how much its costing, and I can't seem to stop it, I have deleted it many times and it keeps coming back. Is there anything i can do to permanently stop these rogue dialers getting on my PC?
Can't get broadband till the 18th of December where i live so I'm using 56k for now.
Thanks.

do you have anti virus anti spyware apps?

if you are running xp have you tried

start/connect to/show all conections/ and make sure only your default is in there ???(delete all others.)
hope this helps.

I'm not sure how to remove this particular rogue dialler, but there are a few things you can try to start off with which may help.

Rogue diallers are a form of malware, and can potentially be identified and removed by programs designed to detect and remove spyware.

Try this for starters, it's a free spyware scanner which can apparantly pick out rogue diallers on your computer aswell

Spy Audit

You might also like to try some of the most common anti-spyware programs which may also be able to pick it up.

Ad-Aware

Also, if you have a firewall installed, set it to only allow internet access through your correct dial-up account. If you don't have a firewall, try Kerio :

Kero Personal Firewall

Hope this helps

thanks guys.
I'm running windows 2000 on this computer just till I get broadband then I'm moving onto XP. Ad-Aware can't seem to pick it up, I'm trying out a few programs now such as ModemWall and the Firewall you mentioned, although I only use Firefox to browse the web, so I shouldnt need a firewall but Its worth a shot. I've managed to stop it dialling SIXA so far by just keeping the Internet Options window open at all times on 'Connections'. This way it cant seem to add itself to the list, but its not ideal.
Thanks again I'll see how I get on.

To me, it sounds like you downloaded something on your computer that came bundled with a dialer. Therefore, even if you delete the dialer, the program you use that was bundled with it will keep on d/ling it or restoring it. Not sure, but it's a possibility. Also trojan horse droppers (Do believe they are called this) download different codes from different sites, w/e it's programed to do. It finds and executes code therefore installing stuff you are unaware about on your computer. The best way to find it and other things that could be associated with it is by running hijackthis. You have to be able to find it all and kill all componets otherwise it will come back. (plus delete it from the registry) I had this problem with a winsock newnet installed on my computer :/ If you could run hijackthis and post your log here, I could try to help you out.

Here's another possibility of what it could be:

I did a quick search on the sixa dialer and the search results gave me this:
Trojan.Win32.Dialer
Look for these files on your computer;
lara-jpg.com
od-stnd493.exe
programfilesdir+\bullguard\infected\sms[1].exe
systemroot+\cat.exe
systemroot+\system32\cat.exe
systemroot+\system32\services\seasx.exe
systemroot+\system32\services\sesx.exe
trojan.win32.dialer.ac_(68).exe
trojan.win32.dialer.bh.exe
trojan.win32.dialer.r.exe
yvonnejpg.com

If you have any of these then you have the trojan.win32.Dialer.

welsh something to consider. If you plan on changing os to xp, and you are having problems with some trojan or virus, just reformat and change your os now.
If you can't switch at this time because of you isp, then Just reinstall 2000.
Also contact your local telephone company. If this dialer is calling a long distance #, you could end up with a very hefty bill.

You definitely got this dialer from something you got "for free" from the internet.

Hi,
my pc is W2K SP4, ite results clean to the scans of SpyBot, AdAware, Microsoft Anti Spyware and Hjhaack.

But when I connect to my ISP (via an ISDN modem) the connection hangs, and another connection starts. It's called SIXA, I try to delete it but it recreate.
(after the connection i'm reirected to a porn 6x.xx.xx.xx ..don't remeber sorry!)

In the property of SIXA connection the dialed number is 5 (?????).

I'm unable to use the internet, also unable to update virus defs of my av.
Some one can suggest me how to solve this problem?

Regards.
Carlo

some reason I'm thinking SIXA is a blaster worm... if that helps any...

Edit: well... can't find it on usual places... I've run into it before but dunno. Usually do things manually meself working with registry and dos and stuff to get things clean...

maybe try https://www.pctools.com/spyware-doctor/download/

oh yeah... you can't get on net...

kill the process and try to get on before it restores?

DO NOT, I REPEAT DO NOT DO THIS

formating your computer is the very LAST thing you want to do, try the methods allready prescribed first, but do it in safe mode, and make sure if you have a system restore option, you turn it OFF

he's on Win2k, the restore thing is only in XP forward no? WinXP does make alot of things easier than Win2k...

formatting usually does do the trick... usually I say. And for a dialer I'd say it'd work.

A re-install without reformat might work too.

He'd only be able to take your advice after he upgraded to winXP.