Forum Discussion

mikestock's avatar
mikestock
Explorer
May 24, 2014

Conduit search. Am I paranoid?

I have a laptop computer that has not been used for at least two weeks. I could only get on line using Foxfi browser. Internet Explorer and Google Chrome both gave me the "OOPS" message. Tried rebooting but it didn't work. Outlook email worked fine.

I then ran my spyware scan software and the first thing it found was Conduit Search which it tagged with a "moderately high" threat. Other spyware and tracking bugs appeared but these were all tagged as "low" threat level.

After removing threats the computer was back to normal.

Is it possible that this Conduit Search can disable certain browsers to forcing use of one that it has targeted? I have picked up this Conduit and seen how it hijacks your searches before, but never seen one or more browsers fail to work.
  • DiskDoctr wrote:
    If using Firefox, browse to about:config and search for 'new tab'

    Even after removal, it likely has set itself to the url used when opening a new tab in a browser window.

    Also, after removing Conduit and BEFORE REBOOTING, browse your registry to 'Run' and 'Run Once' and remove the entry related to the uninstall.

    In FF, you may want to check your search engines and make sure you remove Conduit items.

    Not bad, but needs extra attention to completely remove.


    Not easy for nontechy to follow these instructions.
  • A CNET download also affected my computer, resulting in me wrestling with Sality for months. The only bug I've had but it was a bad one that didn't want to go away.
  • mikestock wrote:
    DiskDoctr wrote:
    If using Firefox, browse to about:config and search for 'new tab'

    Even after removal, it likely has set itself to the url used when opening a new tab in a browser window.

    Also, after removing Conduit and BEFORE REBOOTING, browse your registry to 'Run' and 'Run Once' and remove the entry related to the uninstall.

    In FF, you may want to check your search engines and make sure you remove Conduit items.

    Not bad, but needs extra attention to completely remove.


    Not easy for nontechy to follow these instructions.


    Not unintentional ;) If you're not comfortable editing the registry and other settings, you likely don't want to tackle Conduit. A mistake and it can (according to reports) delete your boot loader. Supposedly for XP, but who knows.

    Techs will say, "That's where the problem is!" Give this info to him and it's a 10 minute fix, not worth the risk for non techy types, IMHO.
  • If you do not want to edit Firefox's config settings in about:config, it's very easy to get rid of browser hijacks. Just create a new Firefox profile, which resets all config settings. You can use a utility such as MozBackup to copy just your existing bookmarks and passwords, but I would manually re-install any extensions. So not necessary to re-install Firefox itself.

    To create a new profile, hold down Windows Key+R and in RUN type firefox -p and ENTER.
  • As of now, I can see no sign of Conduit, but it will probably show up again one day as it has in the past. I have the paid version of Malwarebytes, Spybot S&D and Spyhunter. One of them always seems to find Conduit, Sweet Packs and a good many other spyware worms that seem to appear from nowhere.

    I would not hesitate to uninstall and reinstall Firefox or Google Chrome if that is what it takes.
  • Conduit has a number of programs out there to add on to your computer without your knowledge or permission. I got their "searchprotect" downloaded on mine, don't have a clue where, but it was adware that started sending out emails to everyone on my contact list using my email address under my name. When I would check on the "sent" file, nothing would show up. I installed the Malwarebytes program and it found the conduit programs and deleted them for me. I had tried to use the uninstall windows program but it kept giving me the "busy", try again later message. Conduit also changed my search engine from google over to their search engine but it looked just like the google one. If a person googles conduit or search protect, they have a nice 20 step process of how to remove all the junk that was added when you got infected. The search protect program didn't seem to try and steal anything, it just sent out several hundred emails a day promoting different products from women's magazines to cleaning products, claiming that I recommended they take a look. I suspect if they opened the attached link, it also downloaded the adware to their computer as well.

    Since I got rid of the adware several weeks back, my Malwarebytes paid program, history report, shows it has blocked Conduit at least a dozen times from trying to reload the adware to my computer. Real persistent about it.
  • mikestock wrote:

    I would not hesitate to uninstall and reinstall Firefox or Google Chrome if that is what it takes.

    Won't fix anything if you keep your own settings.
  • You can get these PUP several ways. Either one used an express or recommended setup at install? Always select custom install. Or didn't typically un-check an option that installs a PUP.

    It can also be included by an app as part of the terms of use which no ones tends to read and just automatically accepts.
  • mikestock wrote:
    I problem was that I didn't know what the problem was until Spyhunter eliminated it.

    I would not recommend Spyhunter as it has a questionable reputation on the Net? Complaints from users with problems after install, not being able to uninstall the program, including warnings from well known malware help sites such as BleepingComputers.com member noknojon:

      Posted 24 August 2013 - 07:53 PM

      The current Enigma (Spy Hunter) site comes up with a Red Warning on my ratings, so no direct links to that site will be provided by me -

      Spy Hunter was actually a complete fraud ! ! They took money and provided no real services.
      This was revealed back between 2006 and 2008 by several private people, and Antivirus programs.
      Enigma (parent company) was forced to repay many "fake subscriptions" since that time.


      Posted 03 March 2014 - 06:36 PM

      SpyHunter from Enigma Software is today regarded as a rogue Antivirus program .



    Note that a forum member who repeatedly posted solutions to removing Conduit and provided links to a website, which recommended downloading a removal app, was actually for Spyhunter 4 installer. All posts been removed due to what was deemed as advertising.

About RV Must Haves

Have a product you cannot live without? Share it with the community!8,793 PostsLatest Activity: Aug 22, 2023