Re: Strange search results in Google

Tech-Archive recommends: Fix windows errors by optimizing your registry


"Robert Aldwinckle" <robald@xxxxxxxxxxxxx> wrote in message
news:euFpp6DFHHA.2452@xxxxxxxxxxxxxxxxxxxxxxx
"antioch" <antioch@xxxxxxxx> wrote in message
news:eaSyPw1DHHA.4024@xxxxxxxxxxxxxxxxxxxx
...

when I selected a link, up came the MSN home page every time.

Tonight, the same thing is happening, but this time I am getting a site
called Romemaster.com.


Looks like you should be posting your own HijackThis! log somewhere?
; )
(not here because of bandwidth and storage reasons for real NNTP
users of this newsgroup.)

FWIW the links you found seem to be more like others reporting the
same symptom than actual solutions for it. E.g. formatting and
reinstalling
your OS seems slightly extreme, although I suppose with malware you might
assume that if you have one case of it there might be others lurking
undetected
which arrived through the same hole in your security. One thing that I
thought
was interesting in one of the HijackThis! logs was the proxy information
being exposed. I have never read about that being used as a vector
but it makes lots of sense, albeit trivially easy for a user to spot if
they
were looking for it.


Rgds
Antioch




Good luck

Robert Aldwinckle
---


Hello Robert
Thank you for your input -
It happened that last weekend was my three monthly FULL system cleanup
regime so I have not pursued any further with Romemaster.
The MSN has gone - don't get an immediate link to that.
After 3 AV scans and 8/9 other malware,antispy.hijack etc, most picked up 5
nasty bits - only one suggested Romemaster - and you have to pay to get it
removed - most disappointing - I do have a Hijack This Log ready to send.
I will go back to the forums/etc I went to last time and see if there is any
further help(and post that HJ Log in the required site) - though did notice
that two had no follow-up to their logs being posted - and another said they
could see nothing wrong a log.
No, I didn't think the idea of reinstall was very clever at the moment.
I am still getting Romemaster - but only have to exit it twice to get the
correct link selected in Google.
Your last para I am afraid went way above my head :-(
This Romemaster must be in breach of some regulation or whatever?
Is there any way of reporting it - perhaps to Goggle.
Thanks again for the input
Rgds
Antioch


.

Relevant Pages

  • Re: Strange search results in Google
    ... HI I got the same romemaster redirect when using IE6 & Google. ... Looks like you should be posting your own HijackThis! ... Robert Aldwinckle ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: iexplorer needs 5 minutes to load
    ... reinstalling or repairing the Windows or IE does not remove ... you need to run HiJackThis and other ... Download the newest version of HiJackThis here: ... Create a folder on the hard drive of the other computer called ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Computing for Outlook Express in VB.
    ... > Mike, I have the Google pop up blocker but stuff still gets ... What you do is run HiJackThis! ... > I'm about to go for broke and try to reinstall the Trojan unless ... Personally I'd be thinking about reinstalling Windows rather than ...
    (comp.lang.basic.visual.misc)
  • Re: Spyware help needed please...........
    ... While you were on vacation, someone using your computer may have infected it ... run HijackThis and save your log. ... > whole directory and tried reinstalling. ... > click the shortcut the program gives me an error message and won't ...
    (microsoft.public.windows.inetexplorer.ie6.browser)