Deaf_Raiders Posted November 27, 2014 Share Posted November 27, 2014 Hi all i have a my friend's PC Windows 7 and it is infected by malware Search Protect by Conduit, that sits in the taskbar notifications in the 'show more hidden icons'. I have used Spybot Search and Destroy and Anti Malware Malwarebytes, and they can't seem to remove it. This I have deleted the extension on Google Chrome and there is no sign of a Conduit or Search Protect in Program files and start menu. Can anyone assist please. I have also installed BitDefender Anti-virus free for future protection. Link to comment Share on other sites More sharing options...
neufuse Veteran Posted November 27, 2014 Veteran Share Posted November 27, 2014 very first google search result? http://www.lavasoft.com/mylavasoft/company/blog/how-to-remove-search-protect-by-conduit-ltd The Evil Overlord and T3X4S 2 Share Link to comment Share on other sites More sharing options...
Deaf_Raiders Posted November 27, 2014 Author Share Posted November 27, 2014 very first google search result? http://www.lavasoft.com/mylavasoft/company/blog/how-to-remove-search-protect-by-conduit-ltd Tried all that up to step 6 Link to comment Share on other sites More sharing options...
DoctorD Posted November 27, 2014 Share Posted November 27, 2014 Malwarebytes Free and download and put to a cd or flash drive Microsoft offline security scanner (32 or 64 bit depending on your friends OS) as well. Reboot the system and boot from the media you just made run the scan and reboot when done in safe mode and go through all those steps again. You also want to go to connections in internet options and make sure a proxy server was not setup. Link to comment Share on other sites More sharing options...
sc302 Veteran Posted November 27, 2014 Veteran Share Posted November 27, 2014 hitman pro would probably remove this, combined with malware bytes. T3X4S 1 Share Link to comment Share on other sites More sharing options...
s7rikeback Posted November 27, 2014 Share Posted November 27, 2014 http://www.malwareremovalguides.info/pup-optional-conduit-removal-intructions/ A very good guide Link to comment Share on other sites More sharing options...
Raonull Posted November 27, 2014 Share Posted November 27, 2014 Give AdwCleaner a try. http://www.bleepingcomputer.com/download/adwcleaner/ I always use this before Malwarbytes. +Warwagon and Sadelwo 2 Share Link to comment Share on other sites More sharing options...
+John Teacake MVC Posted November 27, 2014 MVC Share Posted November 27, 2014 After that I would recommend https://support.mozilla.org/en-US/kb/reset-preferences-fix-problems If you are using Firefox. Link to comment Share on other sites More sharing options...
+Zlip792 MVC Posted November 27, 2014 MVC Share Posted November 27, 2014 I'll drop you this handy junk removal tool. URL: http://thisisudax.org/ Review from reliable blog: http://www.ghacks.net/2013/04/22/junkware-removal-tool-uninstalls-popular-toolbars-and-unwanted-software-from-your-pc/ Link to comment Share on other sites More sharing options...
Arachno 1D Posted November 27, 2014 Share Posted November 27, 2014 Disable extensions, run malwarebytes and crap cleaner then enable one at a time till it comes back and you know whats caused it. Link to comment Share on other sites More sharing options...
+Jester124 Subscriber² Posted November 27, 2014 Subscriber² Share Posted November 27, 2014 if it is just loading the page even when the homepage is set to something else, check the actual short cuts properties. I have seen where it changes the default shortcut to open their website instead of just opening the browser. Link to comment Share on other sites More sharing options...
count0nz Posted November 28, 2014 Share Posted November 28, 2014 if it is just loading the page even when the homepage is set to something else, check the actual short cuts properties. I have seen where it changes the default shortcut to open their website instead of just opening the browser. google "adwcleaner beeping computer" download that run it no more web browser hyjack (its a registery hack) umneycreep 1 Share Link to comment Share on other sites More sharing options...
Rippleman Posted November 28, 2014 Share Posted November 28, 2014 Malwarebytes does remove it, but you will have extensions that will re install it AND even if you remove the extensions you will re install by being redirected to a drive-by script infection on the home page they direct you too. 3 step removal. 1) Open your web browser. Change home page and search defaults to google.com 2) delete unknown/suspicious extensions. 3) run malwarebytes, delete what it finds, and reboot. As a side note: I seen an infection the other day where the user "allowed" a script to actually create a new chrome browser account and was logged in permanently. Make sure to check that's not the case. Link to comment Share on other sites More sharing options...
hawksy Posted November 28, 2014 Share Posted November 28, 2014 Try Combofix, then scan with malwarebytes. Link to comment Share on other sites More sharing options...
farmeunit Posted November 28, 2014 Share Posted November 28, 2014 I use JRT (Junkware Removal Tool), ADWCleaner, and Malwarebytes. The first two typically remove a few things Malwarebytes doesn't. Then I manually check extensions and homepage. I had one the other day that added it's URL to the shortcut for Chrome, so after cleaning, it would still open the incorrect homepage. Link to comment Share on other sites More sharing options...
+Elі Subscriber² Posted November 28, 2014 Subscriber² Share Posted November 28, 2014 Have you also tried Norton? Power Eraser ? Link to comment Share on other sites More sharing options...
T3X4S Posted November 28, 2014 Share Posted November 28, 2014 Try Combofix, then scan with malwarebytes. DO NOT use Combofix ! No novice should mess with Combofix - you can totally hose your system if you dont know what you're doing. Have you also tried Norton? Power Eraser ? I wouldnt use anything that start with Norton - but thats just me. Link to comment Share on other sites More sharing options...
+Warwagon MVC Posted November 28, 2014 MVC Share Posted November 28, 2014 DO NOT use Combofix ! No novice should mess with Combofix - you can totally hose your system if you dont know what you're doing. People have been saying that for years, i've never had ANY problem with just running it on a system. and i've probably ran it on 100 systems. T3X4S 1 Share Link to comment Share on other sites More sharing options...
T3X4S Posted November 28, 2014 Share Posted November 28, 2014 People have been saying that for years, i've never had ANY problem with just running it on a system. Same here, but so many times I have heard it from people who I thought knew what they were talking about - and there are other options - so I just steered people clear of it. Link to comment Share on other sites More sharing options...
Max Veteran Posted November 28, 2014 Veteran Share Posted November 28, 2014 I've had absolutely no problem with Combofix either. I've used it on hundreds of computers over the years. There isn't much the average user needs to know - you just run it and Combofix sorts itself out. There is minimal user interaction needed apart from the initial antivirus warning. Link to comment Share on other sites More sharing options...
T3X4S Posted November 28, 2014 Share Posted November 28, 2014 I will say that I am completely out of the loop on the latest threats and their removals.For the last 3 years I have been installing webroot Secure Anywhere on every machine I deal with (about 30) outside of work. And havent had a single infection outside of a buddy of mine who lives on 4chan and deep web, and he gets an occasional infection, but its easily removed with a quick scan... I cant say enough about that software. Link to comment Share on other sites More sharing options...
+Warwagon MVC Posted November 28, 2014 MVC Share Posted November 28, 2014 First check the programs and features list. Most of the time there is an option to uninstall it. If not, Just Run Adwcleaner and Malwarebytes. You may want to run CCleaner first as it makes the scan go faster. also check your tasks ... start / run / tasks and see if there is a startup task. ...You could also try process explorer and then use the feature which allows you to click an object on the screen and it points you to which exe it is. Link to comment Share on other sites More sharing options...
Meko Mimi Posted November 28, 2014 Share Posted November 28, 2014 May I know what browser are you using first? Just got rid with a malware manually. I got it removed in my Firefox. Link to comment Share on other sites More sharing options...
goretsky Supervisor Posted December 5, 2014 Supervisor Share Posted December 5, 2014 Hello, Most, if not all, anti-malware companies treat Conduit's software as a Potentially Unwanted Application, not malware. One of the reasons for this somewhat-less designation is because their software can be uninstalled by the user and they provide assistance with removing it. Conduit's Browser Protect software can actually be removed through the Uninstall or Change a Program (filename: APPWIZ.CPL) applet in the Control Panel. If that doesn't work, you could try contacting Conduit directly and asking them to walk you through removing their software. Regards, Aryeh Goretsky Link to comment Share on other sites More sharing options...
Recommended Posts