Re: Strange search results in Google

HI I got the same romemaster redirect when using IE6 & Google. I eventually
(hopefully) got rid of it by using Spyware Doctor from PC Tools (cost me
29.95US) Well worth it I thought, you don't know what else its up to!!

"antioch" wrote:


"Robert Aldwinckle" <robald@xxxxxxxxxxxxx> wrote in message
news:euFpp6DFHHA.2452@xxxxxxxxxxxxxxxxxxxxxxx
"antioch" <antioch@xxxxxxxx> wrote in message
news:eaSyPw1DHHA.4024@xxxxxxxxxxxxxxxxxxxx
...

when I selected a link, up came the MSN home page every time.

Tonight, the same thing is happening, but this time I am getting a site
called Romemaster.com.


Looks like you should be posting your own HijackThis! log somewhere?
; )
(not here because of bandwidth and storage reasons for real NNTP
users of this newsgroup.)

FWIW the links you found seem to be more like others reporting the
same symptom than actual solutions for it. E.g. formatting and
reinstalling
your OS seems slightly extreme, although I suppose with malware you might
assume that if you have one case of it there might be others lurking
undetected
which arrived through the same hole in your security. One thing that I
thought
was interesting in one of the HijackThis! logs was the proxy information
being exposed. I have never read about that being used as a vector
but it makes lots of sense, albeit trivially easy for a user to spot if
they
were looking for it.


Rgds
Antioch




Good luck

Robert Aldwinckle
---


Hello Robert
Thank you for your input -
It happened that last weekend was my three monthly FULL system cleanup
regime so I have not pursued any further with Romemaster.
The MSN has gone - don't get an immediate link to that.
After 3 AV scans and 8/9 other malware,antispy.hijack etc, most picked up 5
nasty bits - only one suggested Romemaster - and you have to pay to get it
removed - most disappointing - I do have a Hijack This Log ready to send.
I will go back to the forums/etc I went to last time and see if there is any
further help(and post that HJ Log in the required site) - though did notice
that two had no follow-up to their logs being posted - and another said they
could see nothing wrong a log.
No, I didn't think the idea of reinstall was very clever at the moment.
I am still getting Romemaster - but only have to exit it twice to get the
correct link selected in Google.
Your last para I am afraid went way above my head :-(
This Romemaster must be in breach of some regulation or whatever?
Is there any way of reporting it - perhaps to Goggle.
Thanks again for the input
Rgds
Antioch



.