Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: daveyden on April 17, 2014, 04:30:16 PM

Title: Search.Conduit annoying add on.
Post by: daveyden on April 17, 2014, 04:30:16 PM
Please can someone help?!! I use Chrome or I/E as my main search providers, but they seem to have been taken over by an annoying tool bar called search conduit which bombards me with annoying ad's. I have read the forums on the subject and have used "browser clean up", which says that all is well when it patently isn't! Am a bit ignorant in I.T. so don't want to meddle too much without advice. What is a PUP please? Loads of thanks for any forthcoming suggestions...
Title: Re: Search.Conduit annoying add on.
Post by: AdrianH on April 17, 2014, 05:02:05 PM
A PuP is a " Potentially unwanted Program".

Conduit is a very nasty toolbar that gets bundled with "free" software. You need to be very careful when installing any program.

Try this  http://www.bleepingcomputer.com/download/adwcleaner/  ADW Cleaner should remove the problem.

If you still have issues, start a thread in the Viruses/Worms forum.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 17, 2014, 05:46:08 PM
Thanks Adrian, have signed up to blinking computer, will try their clean-up process this evening when I have a little more spare time, I'm sure I will learn a lot in their forums too. So cheers again for taking time out to help a pc novice, much appreciated amigo!
Title: Re: Search.Conduit annoying add on.
Post by: Eddy on April 18, 2014, 07:19:29 PM
Follow the instructions and attach the logs to your next post
http://forum.avast.com/index.php?topic=53253.0 (http://forum.avast.com/index.php?topic=53253.0)
Title: Re: Search.Conduit annoying add on.
Post by: Para-Noid on April 18, 2014, 07:39:28 PM
MalwareBytes took care of it on my machine.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 18, 2014, 08:17:16 PM
I have the log files that I got via adw cleaner, are these sufficient or would it be better to use the link you gave? Thx for advice so far...
Title: Re: Search.Conduit annoying add on.
Post by: Pondus on April 18, 2014, 08:33:15 PM
You now have one topic here....and one in the viruses and worms forum section ( the correct place for virus and false positives issues)   

Please stay in one topic so that the malware expert know where to reply  http://forum.avast.com/index.php?topic=149167




Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 18, 2014, 11:05:49 PM
Sorry, thought I was in right section...will be more careful next time!
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 19, 2014, 03:43:20 AM
Thanks guys, Malware bytes worked for me, I didn't post the logs because after mwb re-booted my pc I didn't see the option, but it definitely quarantined 2 search conduit entries and 1 other, and Chrome/I.E. work fine now. I am using this forum because that's where the links were, so apologies. Hats off to all of you!!
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 20, 2014, 10:36:34 PM
Hi again, I hope this topic is still open for you to be able to help, I tried the link given for "viruses/worms", but it came up that the topic there was "Off limits" to me. As I posted yesterday Malaware Bytes found and quarantined the "search.conduit " problem,or so I thought...today I used my home laptop and found that, again the thing had hi-jacked my Google Chrome browser. I didn't download anything onto this machine and so I can only deduce that the PuP got in through my Chrome account. I downloaded MWB onto this PC and got the txt logs as suggested. I will leave it a day or so to see if you guys still see this message and the logs, if not I will open a new post in the virus/worms section. Thanks for your patience...just realised I can't locate log, will add later.
Title: Re: Search.Conduit annoying add on.
Post by: Pondus on April 20, 2014, 10:42:51 PM
Quote
Hi again, I hope this topic is still open for you to be able to help, I tried the link given for "viruses/worms", but it came up that the topic there was "Off limits" to me.
Malware expert posted instructions for you there, but since you never replyed there it was deleted
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 20, 2014, 11:12:28 PM
Right, sorry about that, I don't want to waste anybody's valuable time. I don't know why, but the logs I was sure I sent to my desktop don't seem to be there, and the history logs in my MWB account don't give an option to resend the files. There is, however, confirmation that the PuP is indeed residing in my Chrome account,(I think!), as the location was...C:\Users\Dave\AppData\Local\Google\Chrome\UserData...Do I need to delete my Chrome account and re-register with them or is there an easier way? If you need the logs I will try to locate them and forward them ASAP. Many thanks once again Pondus and team...
Title: Re: Search.Conduit annoying add on.
Post by: Pondus on April 20, 2014, 11:15:22 PM
A removal expert is notified about your topic here....it may take some time before he is online

Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 21, 2014, 05:20:38 AM
Better not to use DDS as they will force me to use ComboFix which is unnecessary here. :)
Code: [Select]
netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
dir "%systemdrive%\*" /S /A:L /C
/md5start
services.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
CREATERESTOREPOINT

Regards,
Valinorum
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 21, 2014, 02:26:49 PM
I don't know how to copy/paste, I did as you asked and found these logs in my downloads file, I hope this is correct? TY.
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 21, 2014, 07:55:56 PM
Quote
I don't know how to copy/paste,
If you look at my instruction, there is a select button beside the word code. If you mouse-click on it, the instructions inside the box will be highlighted that is to say that they will be turned blue ( or any custom color if you have changed it). Put your cursor on them while they are selected and right-click and choose Copy. This is called copying.
See attached image below

Run OTL.exe and put your cursor inside the Custom Scans/Fixes box and right-click and choose Paste. You will notice that the highlighted text that you copied has appeared inside the box. This is called pasting.
See attached image below



Un-install SpyBot Search & Destroy for now and you can re-install it if you wish after I clean your system.



Reset Google Chrome by perusing this (https://support.google.com/chrome/answer/3296214?hl=en) article.

Regards,
Valinorum
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 21, 2014, 08:02:28 PM
Hi daveyden, :)

Code: [Select]
:Commands
[createrestorepoint]

:OTL
[2013/04/26 00:15:21 | 000,024,576 | ---- | C] () -- C:\ProgramData\SetStretch.exe
[2013/04/26 00:15:21 | 000,000,256 | ---- | C] () -- C:\ProgramData\SetStretch.cmd
[2013/04/26 00:15:21 | 000,000,103 | ---- | C] () -- C:\ProgramData\SetStretch.VBS
[2014/02/16 15:53:34 | 000,656,048 | ---- | C] (WildTangent, Inc.) -- C:\ProgramData\uninstall3214993.exe
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O4 - HKLM..\Run: [SDTray] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.)
CHR - homepage: http://search.conduit.com/?gd=&ctid=CT3321139&octid=EB_ORIGINAL_CTID&ISID=M84853D57-5421-4AA4-997F-4CB676FCDF92&SearchSource=55&CUI=&UM=5&UP=SP89898F7C-5041-47E6-8360-60FAA5F112BC&SSPV=
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: C:\Program Files\mcafee\msc\npMcSnFFPl64.dll File not found

:Files
C:\Program Files\mcafee

:Commands
[emptytemp]
[resethosts]







Regards,
Valinorum
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 21, 2014, 08:40:27 PM
Thanks Valinorum, I've re-set browser settings and all seems to be good for now, if the problem re-occurs I will follow your other steps. Thank you and others very much for your help here.
                                                       Kind Regards,  Daveyden
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 21, 2014, 08:46:50 PM
It is recommended that you follow the steps should any remnants are left behind.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 22, 2014, 07:39:03 PM
I think the thing was added when I downloaded Frostwire, as when I updated that site today I was given the choice, (in a quite confusing way of course!)...whether or not to allow search conduit to be my main browser setting, and if I want it to be able to stop attempts from any other browser hosts to change this. So they were upfront (if stealthy) about the product, which of course I refused this time around. Cheers, Dave
Title: Re: Search.Conduit annoying add on.
Post by: Michael (alan1998) on April 22, 2014, 08:03:52 PM
Don't use BitTorrent apps (Torrenting).  They can lead to re-infection :(.
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 22, 2014, 09:09:45 PM
I think the thing was added when I downloaded Frostwire, as when I updated that site today I was given the choice, (in a quite confusing way of course!)...whether or not to allow search conduit to be my main browser setting, and if I want it to be able to stop attempts from any other browser hosts to change this. So they were upfront (if stealthy) about the product, which of course I refused this time around. Cheers, Dave

Do the earlier steps I mentioned. And un-install Frostwire. I shall provide you with a few reference links, please read them up to know the risks of having a P2P program.
Note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P file-sharing as a major conduit to spread their wares.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 23, 2014, 01:25:08 AM
Thanks for lesson in copy/pasting...here's step 1's logs from otl, will have to complete step 2&3 later...
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 23, 2014, 06:55:06 AM
I await the logs.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 23, 2014, 09:39:46 AM
All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== OTL ==========
File C:\ProgramData\SetStretch.exe not found.
File C:\ProgramData\SetStretch.cmd not found.
File C:\ProgramData\SetStretch.VBS not found.
File C:\ProgramData\uninstall3214993.exe not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SDTray not found.
File C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe not found.
Use Chrome's Settings page to change the HomePage.
Registry key HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions not found.
File C:\Program Files\McAfee\MSK not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@mcafee.com/MSC,version=10\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@mcafee.com/MSC,version=10\ not found.
========== FILES ==========
File\Folder C:\Program Files\mcafee not found.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: dave
->Temp folder emptied: 155035376 bytes
->Temporary Internet Files folder emptied: 284680 bytes
->Java cache emptied: 320063 bytes
->Google Chrome cache emptied: 10738453 bytes
->Flash cache emptied: 506 bytes
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 532962 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 159.00 mb
 
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.69.0 log created on 04232014_082600

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 23, 2014, 09:56:48 AM
# AdwCleaner v3.201 - Report created 23/04/2014 at 08:48:38
# Updated 22/04/2014 by Xplode
# Operating System : Windows Vista (TM) Home Basic Service Pack 2 (32 bits)
# Username : dave - DAVE-PC
# Running from : C:\Users\dave\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16545


-\\ Google Chrome v34.0.1847.116

[ File : C:\Users\dave\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Startup_urls] :
Deleted [Startup_urls] :
Deleted [Homepage] : hxxp://search.conduit.com/?gd=&ctid=CT3321139&octid=EB_ORIGINAL_CTID&ISID=M84853D57-5421-4AA4-997F-4CB676FCDF92&SearchSource=55&CUI=&UM=5&UP=SP89898F7C-5041-47E6-8360-60FAA5F112BC&SSPV=
Deleted [Homepage] : hxxp://search.conduit.com/?gd=&ctid=CT3321139&octid=EB_ORIGINAL_CTID&ISID=M84853D57-5421-4AA4-997F-4CB676FCDF92&SearchSource=55&CUI=&UM=5&UP=SP89898F7C-5041-47E6-8360-60FAA5F112BC&SSPV=
Deleted [Homepage] : hxxp://search.conduit.com/?gd=&ctid=CT3321139&octid=EB_ORIGINAL_CTID&ISID=M84853D57-5421-4AA4-997F-4CB676FCDF92&SearchSource=55&CUI=&UM=5&UP=SP89898F7C-5041-47E6-8360-60FAA5F112BC&SSPV=
Deleted [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Deleted [Extension] : flpcjncodpafbgdpnkljologafpionhb

*************************

AdwCleaner[R0].txt - [2675 octets] - [17/04/2014 16:11:48]
AdwCleaner[R1].txt - [939 octets] - [17/04/2014 17:56:14]
AdwCleaner[R2].txt - [2991 octets] - [22/04/2014 22:08:51]
AdwCleaner[R3].txt - [3051 octets] - [23/04/2014 08:45:10]
AdwCleaner[S0].txt - [2756 octets] - [17/04/2014 16:17:26]
AdwCleaner[S1].txt - [965 octets] - [17/04/2014 17:58:37]
AdwCleaner[S2].txt - [1776 octets] - [23/04/2014 08:48:38]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1836 octets] ##########
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 23, 2014, 10:13:55 AM
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows Vista (TM) Home Basic x86
Ran by dave on 23/04/2014 at  9:00:25.35
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 23/04/2014 at  9:08:08.39
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 23, 2014, 10:18:53 AM
I hope I got it all right, I will check later for any instructions, Kind Regards
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 23, 2014, 01:14:14 PM
Are you having any issues which includes but not limited to Conduit, Virtumonde et cetera?
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 23, 2014, 01:36:43 PM
Not really, My pc crashes now and then, but I put that down to age, on re-boot I can go back to the page I was on.
(The DELL VOSTRO I mean). Also start up is quite slow and light gaming (even point and click games which my daughter enjoys) can be really tedious because of the slow response times.
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 23, 2014, 04:42:04 PM
Hi daveyden, :)





Regards,
Valinorum
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 23, 2014, 07:15:47 PM
Hi jeff, took so long as I mis-placed 1st attempt!
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 23, 2014, 07:19:27 PM
Make sure that all your windows including your browsers are closed and re-do step 5. :)
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 24, 2014, 02:27:43 AM
Now I'm a bit lost! I turned off Avast and am here through I/E, which I need to get through to this forum, as the "help" option has disappeared in the Avast site options. Shall I re-do step 5 with I/E or is there a way I can get to you without a browser? (Sorry to sound so dumb, but this really is all new to me) I'm not used to working with I/E as Chrome has made me a bit lazy! Thanks for your patience..Dave
Title: Re: Search.Conduit annoying add on.
Post by: Pondus on April 24, 2014, 02:37:06 AM
When you do step 5 ..... you close all windows/browsers before you run malwarebytes ...... if that is what you wonder about

Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 24, 2014, 02:38:39 AM
Also, I ran the eset scan, and, of course, just before it was due to finish ny screen saver started...meaning the program stalled when I touched the cursor...as you predicted! you have just replied, so I will look at your msg after posting this...
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 24, 2014, 03:23:09 AM
Shall I go to step 6 now? I will wait for your go ahead.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 24, 2014, 03:29:16 AM
sorry, forgot to get detailed log, will do it again!
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 24, 2014, 06:13:34 AM
Skip Step 6 for now and await my next reply.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 24, 2014, 12:14:04 PM
Will do, I'll put the virus protection back on in the mean time.
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 24, 2014, 04:52:48 PM
Hi daveyden, :)

Is your Chrome synchronization turned on?

Code: [Select]
chromelook;
CHRdefaults;
autoclean;



Regards,
Valinorum
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 24, 2014, 09:22:46 PM

Zoek.exe v5.0.0.0 Updated 14-April-2014
Tool run by dave on 24/04/2014 at 19:53:09.92.
Microsoft® Windows Vista™ Home Basic  6.0.6002 Service Pack 2 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\dave\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

24/04/2014 19:56:32 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Program Files\Hosts_Anti_Adwares_PUPs deleted
C:\found.000 deleted
C:\found.001 deleted
C:\Windows\wininit.ini deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{20a82645-c095-46ed-80e3-08825760534b}"="c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension" [26/02/2014 21:40]

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
glbgajbkjkcejdmjdepmchnlbnddogej - C:\Program Files\Fluxbee\fluxbee.crx[]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[05/04/2014 08:49]

Google Docs - dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
AdBlock - dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
avast Online Security - dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Guitar Chords - dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\megglpjmadjmghjegnallnhiknjnnjhh
Google Wallet - dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Picasa - dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\onlgmecjpnejhfeofkgbfgnmdlipdejb
Gmail - dave\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.msn.com/?pc=AV01"
"Search Page"="http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://search.fluxbee.com/?id=fluxbee1c"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.msn.com/?pc=AV01"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} Microsoft (Bing) Url="http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Reset Google Chrome ======================

C:\Users\dave\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\dave\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\glbgajbkjkcejdmjdepmchnlbnddogej deleted successfully

==== Empty IE Cache ======================

C:\Users\dave\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\dave\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\dave\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=40 folders=5 24845782 bytes)

==== Empty Temp Folders ======================

C:\Users\dave\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\dave\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\dave\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

==== EOF on 24/04/2014 at 20:13:38.78 ======================
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 24, 2014, 09:25:58 PM
Sorry, didn't mean to send whole file in this area, meant to send in attachment but mis-clicked, will await further instructions, and sorry for calling you "jeff" earlier, am dealing with him at bleeping computers!
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 24, 2014, 09:43:48 PM
May I ask why you have sought counsel on two different sites? Not only it may conflict with the fixes but also wastes a helper's time. I implore you to continue with either jeffce or myself.
jeffce has been notified as well.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 24, 2014, 10:03:01 PM
One reason is that I got pointed to that side via this one, and, having posted the same query on both sites, not only did I not want to let you or jeff down after you were both good enough to engage with me in my plight, but I have the same problem on both of my laptops, ( Vista and  Windows8.1), and I didn't want to confuse matters. (I cannot use them at the same time as they are n different places.) I apologise if this is not protocol, but I assure you both that there was no underhand reason for doing this, it's just a novices mistake and I hope that you will be willing to work with me. If you think it best, and are prepared to do it, I am happy for either of you to help me with both laptop's. Thank you for your understanding, I will say the same to jeff...Regards, Dave
Title: Re: Search.Conduit annoying add on.
Post by: bob3160 on April 24, 2014, 10:35:30 PM
I don't know how to copy/paste, I did as you asked and found these logs in my downloads file, I hope this is correct? TY.
copy:
Highlight the text> right click and select copy


Paste:
Select the part where the information is to be used > right click and select paste



Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 24, 2014, 11:56:02 PM
Thanks Bob, had learned that since, but nice to know helping hands are there, Dave
Title: Re: Search.Conduit annoying add on.
Post by: jeffce on April 25, 2014, 12:03:49 AM
Hi,

It was brought to my attention that you had been getting help here as well.  I think being at the juncture you are now in the repair process here, that the best course of action would be to continue receiving help here with Valinorum.  I know that you are in great hands.  :) 

I will go ahead and close the log over at Bleeping Computer ok?  :)
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 03:17:32 AM
ok jeff, did you get my msg earlier? I had the same problem with both pc's, thats why I saught help with 2 agents, It was me that told him that I was working with you...just put it down to ignorance! ty for your help, and a bientot! dave
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 03:39:39 AM
Hi Valinorium, are you still able to help me? I have 2 pc's infected, 1 is a W Vista basic 32 bits and the new one is 64 bits on W8.1, (which I am having more trouble navigating around). They both seem to have the same problem, (search conduit), and both are showing virtumonde and smitfraud in scans, yet they've never been synced, maybe Chrome passed the infection? Tomorrow I will get both laptops together here, so it won't be so confusing, and, if you are still willing, they can be treated at the same time with the same process.
Again, sorry about the faux-pas with jeff, but it was done in innocence, (Which is why I had no qualms about mentioning him to you.) I will check in the morning and if we could go ahead,maybe from fresh; as I now have a little more confidence in doing certain actions, (copy and paste for example.) I hope you'll keep me on board, and I look forward to hearing from you. Kind Regards, dave
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 25, 2014, 06:12:35 AM
If it is two different PCs you can work with jeffce at Bleeping and myself simultaneously or can work with me/jeffce after I fix the other one. But be vigilant while applying the fixes and double check the information. My concern was the following --
I had a talk with jeffce and he said that he will be busy with real life issues but will certainly help you if you wish to continue with him.



After the zoek scan how is Chrome acting? Are you still getting virtumonde alert?
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 10:46:42 AM
Yes, I think you are right, as the 2 machines seem to have the same problem it might be best that I stick to one instructor, (you, if that's all right). jeffce was using  slightly different programs, so if we could deal with this pc first I will save all instructions and apply them to the  new laptop. They both show Virtumonde and smitfraud DURING a scan, but they don't show up in the scan results. I still have the info and downloads you have already given me, and I haven't downloaded anything that could affect the pc's since we began, so if you want to continue where we left off we can. (I will, of course, need to start afresh with the other pc).
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 11:33:34 AM
Just to clarify Valinorium, when I scan with spybot, Windows defender or Avast, the DETAILS of the running analysis show the aforesaid products as being present, but there is no alert. I have removed spybot following your advise, (or jeffce's, perhaps), can I re-install it yet or shall I wait till we're through?
Title: Re: Search.Conduit annoying add on.
Post by: Pondus on April 25, 2014, 11:39:47 AM
SpyBot is waste of HD space ....you dont need it when you have Malwarebytes

http://www.pcmag.com/article2/0,2817,2412372,00.asp
Quote
In testing, it proved almost 100 percent ineffective.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 11:43:36 AM
O.K., Thanks for that Pondus, wish I'd known that before I made a donation to them! (You live and learn!)
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 11:50:27 AM
Saying that, I just tried to activate Malwarebytes but I need a licence no. and key, does that mean I need to register with them?
Title: Re: Search.Conduit annoying add on.
Post by: Pondus on April 25, 2014, 12:01:03 PM
License is only for PRO version
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 25, 2014, 12:08:50 PM
Which scan? Can you take a screenshot of the alert as I am seeing no virtumonde infection ?
Rescan please and show me a screenshot if you get the alert.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 12:20:06 PM
There are NO alerts, all I see is the products name come up on a whole lot of files when whichever scan tool I'm using is doing a scrolling analysis...I have seen the "Virtumonde" name during scans for a couple of years now, and thought it quite normal until I read of potential threats caused by the product. Having said that, it doesn't get mentioned in the final report, so it could be nothing.
May I say, I've read a few other posts and some people are downright rude, (jvidal for instance), I think you guys deserve medals for putting up with selfish rants like that!
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 12:27:26 PM
I can't remember where we're up to, Valinorium, did you get the zoek report, or do I need to re-scan?
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 25, 2014, 12:42:08 PM
Show me a screenshot where you see the name. And how is Google Chrome?
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 12:55:47 PM
Chrome SEEMS to be working O.K., but the last Malware scan we did showed Search.Conduit was still lurking somewhere in the Chrome system. Did you mention deleting and then re-installing Google Chrome?
Could you let me know how to do a screenshot please, and I will try to show you what I mean by doing a scan with Avast. I'm not sure it will work though as there is a scrolling analysis bar on the page, but will try. Do you want me to send a S/Shot of smit fraud too?
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 01:11:07 PM
I've just looked up how to do a screenshot, will go ahead now...
Title: Re: Search.Conduit annoying add on.
Post by: Pondus on April 25, 2014, 01:49:27 PM
Quote
Could you let me know how to do a screenshot please,
google or search youtube for how to do screenshot 
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 25, 2014, 01:49:41 PM
Zoek should have purged Chrome of all the conduit garbage. Are you facing any pop-up? And, no, I do not wish you to run any extra tools especially tools which are out dated as virtumonde has been out of scenario for quite a while now. Give me the screenshot first and let's see what we are dealing with.



Watch this video for screenshot tutorial.
http://www.youtube.com/watch?v=wmR7k65gtM4
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 02:23:36 PM
It didn't show up with the Avast full scan, I can't be 100% sure if it was there that I noticed it though, it definitely showed up when I did a scan 2 days ago with Spybot, which I have now un-installed, although I haven't as yet removed it from my other computer in favour of Malwarebytes, so if you agree, I could run a Spybot scan there before and after running zoek, (I would disable Spybot during zoek scan of course), to see if I can get you a screenshot.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 02:26:28 PM
No,I'm not getting pop-up's with chrome, and thanks both of you, but as I posted earlier I did look up how to screenshot on google.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 05:24:33 PM
Hi Valinorum, I posted the results of a scan I did with Spybot on my 2nd laptop about an hour ago, have been waiting for your possible reply, now I realise the post didn't make it here! SB detected the Virtumonde I spoke about, in fact it took half the scan to read! I will try and forward the screenshots once more, hopefully they will arrive this time! Along with Virtumonde I noticed Smitfraud and another item that took a long time to analyse was win 32-on line games. I fear that they may all still be on the 1st (32 bit) pc. I have both laptops here and will wait for you to tell me which one we should deal with first, Regards...
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 05:28:25 PM
P.S., I sent 4 Screen shots the first time and the fourth one probably exceeded the permitted limit, dave
Title: Re: Search.Conduit annoying add on.
Post by: Pondus on April 25, 2014, 05:51:51 PM
what you need to attach is SpyBot scan log.....

Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 06:08:24 PM
O.K., Will go back there Pondus. Valinorum, jeffce just contacted me and said he would help with the new pc, (the one he was dealing with), is that O.K. with you? If it would be easier for you to help me with both then that's fine, I will let jeffce know. ty, dave
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 07:14:00 PM
Here's the Spybot log, but this is on the "nd pc(not the one you have been helping with), although I think we might find Virtumonde there as well
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 25, 2014, 07:26:05 PM
Work with jeffc with your other PC. Now let me get few things right for me, are you facing any alerts or issues with the PC I helped cleansing? If so list them.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 08:01:16 PM
No alerts, the pc runs very slowly, and I know it is old, but it has been well looked after and was a lot quicker just a few weeks ago, which is what made me think there was something there causing the poor performance.
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 25, 2014, 08:13:04 PM
Re-run OTL and click on Quick Scan and attach the log when done.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 08:36:12 PM
Hope this is the one.
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 25, 2014, 09:50:31 PM
Hi daveyden, :)
Code: [Select]
:Commands
[createrestorepoint]

:OTL
[2014/04/16 20:10:01 | 000,000,000 | ---D | C] -- C:\Users\dave\AppData\Roaming\Gnutella Turbo
[2014/04/16 20:10:01 | 000,000,000 | ---D | C] -- C:\Users\dave\AppData\Local\Gnutella Turbo
[2014/04/16 20:09:04 | 000,000,000 | ---D | C] -- C:\Users\dave\AppData\Roaming\PlayerPlug
[2014/04/16 20:09:02 | 000,000,000 | ---D | C] -- C:\Users\dave\AppData\Roaming\PropMgrAsync
[2014/04/17 00:42:45 | 000,007,680 | ---- | M] () -- C:\Users\dave\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014/03/02 20:56:08 | 000,000,000 | ---D | M] -- C:\Users\dave\AppData\Roaming\PacificPoker
@Alternate Data Stream - 16 bytes -> C:\Users\dave\Downloads:GnutellaTurbo.GUID

:Commands
[emptytemp]



Regards,
Valinorum
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 11:40:43 PM
Got A poblem my friend, I know I've done it before, but the log we just made I pasted onto my notepad, unfortunately I can't locate it using the "choose file" option where I was going to attach it....I know, but I am v tired!
Title: Re: Search.Conduit annoying add on.
Post by: Pondus on April 25, 2014, 11:52:49 PM
are you saying you cant find the otl fix log?

if so, follow valinorums instructions in reply #74
he can then see from a new log if the fix worked....

Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 25, 2014, 11:58:13 PM
I've got the log on notepad here in the taskbar, trouble is I forgot how to transfer it to my desktop so I can attach it
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 26, 2014, 12:11:52 AM
I tried to fit it into this area but it's too big, really sorry guys...any ideas how I can get this log to a place your "choose file" option opens? (desktop for example)
Title: Re: Search.Conduit annoying add on.
Post by: Pondus on April 26, 2014, 12:19:00 AM
I've got the log on notepad here in the taskbar, trouble is I forgot how to transfer it to my desktop so I can attach it
you click in top left corner of notepad.  file > save as. ....and where you want to save it
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 26, 2014, 12:31:40 AM
Thanks...
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 26, 2014, 12:58:24 AM
It seems to have cleared mainly Pacific Poker, which is actually safe, I play on-line poker there, I will download it again when we're done, I noticed that it was unable to delete Gnutella, which I think is the main culprit...I will wait for your expert advise, and thank you for helping me all this time.
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 26, 2014, 06:30:25 AM
What are your current issue(s)? Also, since you play online poker, this is a good read (http://www.malwareremoval.com/forum/viewtopic.php?f=4&t=53924#.U1s2H1egurM).
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 26, 2014, 10:23:24 AM
I will read it as soon as I finish this,...there are no issues that are obvious, I haven't had chance to use the pc much, but it seems to be so ear so good. I was a bit concerned that the tool failed to remove Gnutella Turbo, as that site was probably the cause, either that or frostwire. (Both have been removed from my laptops now). I don't know if jeffce is going to use a similar tool, I hope so as like I said, the old laptop has become painstakingly slow. Well, thanks very much for your time, and for your patience!(Unless we hadn't finished yet). I will have a look at that link you posted, and if there was anything else I will keep an eye on my email and be back here.
                                           Cheers for now, dave
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 26, 2014, 04:52:07 PM
Quote
C:\Users\dave\AppData\Roaming\Gnutella Turbo\Torrents folder moved successfully.
C:\Users\dave\AppData\Roaming\Gnutella Turbo\Data folder moved successfully.
C:\Users\dave\AppData\Roaming\Gnutella Turbo\Collections folder moved successfully.
C:\Users\dave\AppData\Roaming\Gnutella Turbo folder moved successfully.
C:\Users\dave\AppData\Local\Gnutella Turbo\Incomplete folder moved successfully.
C:\Users\dave\AppData\Local\Gnutella Turbo folder moved successfully.
You can see that the folder was removed. The Alternate Data Stream(ADS) file wasn't probably valid after the parent folder was removed. Just because OTL showed an error does not mean that there is something wrong. jeffce may or may not use the same tool(s) I have used but rest be assured that the end result will be the same if not better because he is an example of excellence in this arena. :)



Perusing your logs, I see no infection currently present in your system. Unless you are having any issue(s), the machine appears to be Malware-free as we speak.



♣ Removal of Tools and Quarantined Files ♣



Despite the tools we have used are clean, they are powerful removal tools and made in a way so that they carry out any commands given to them without (most cases) asking for a confirmation. In the hands of an inept person, they can make the machine un-bootable -- a scenario we do not wish to see. Also, we need to remove the quarantined files/folders from your system as a dormant malware can be as bad as an active one if given the proper environment. I shall now give you the guidelines to remove the tools and the quarantined files from your system.



♣ Prevention and Future Guidelines ♣



Prevention is better than cure -- goes the old saying. As much as we love to see you visit our site, we do not want to see you having your PC infected by malwares again.

Regards,
Valinorum
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 26, 2014, 05:31:50 PM
That's all taken on board Valinarium, I will download the cleaner once I am with the pc you helped me with. That is all good advice, and I will certainly be on my guard when surfing in future. I actually use Hippofile at present, but am glad that it is endorsed by your good self. I will certainly return here, now I have a better understanding of the dangers out there, just to inform myself of other issues in the I.T. world. I'd just like to thank you once again for all the time you gave me, and which you give on a daily basis to others.
                                            Bye for now, dave
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 26, 2014, 05:42:11 PM
Safe browsing. Adieu. :)

Edit: Name's Valinorum. :P ;)
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 26, 2014, 06:08:31 PM
Sincerest apologies, Valinorum, that was lazy of me...my gratitude to you is greater than my memory these days!
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 26, 2014, 06:48:58 PM
No worries. :)
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 27, 2014, 02:21:34 PM
Here's the log Valinorum, let me know if there is more to do, I noticed that Avast is mentioned, do I need to re-install it?  Cheers, dave.
P.S. Having trouble with copy/paste, will try to send the report in my next post.
Title: Re: Search.Conduit annoying add on.
Post by: daveyden on April 27, 2014, 02:22:30 PM
# DelFix v10.6 - Logfile created 27/04/2014 at 13:05:33
# Updated 11/11/2013 by Xplode
# Username : dave - DAVE-PC
# Operating System : Windows Vista (TM) Home Basic Service Pack 2 (32 bits)

~ Activating UAC ... OK

~ Removing disinfection tools ...

Deleted : C:\_OTL
Deleted : C:\AdwCleaner
Deleted : C:\zoek-results.log
Deleted : C:\Users\dave\Downloads\AdwCleaner.exe
Deleted : C:\Users\dave\Downloads\JRT.exe
Deleted : C:\Users\dave\Downloads\OTL.exe
Deleted : C:\Users\dave\Downloads\zoek.exe
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\AdwCleaner

~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #104 [Installed Samsung Kies3 | 03/15/2014 00:38:51]
Deleted : RP #105 [Installed Samsung Kies3 | 03/15/2014 00:43:28]
Deleted : RP #106 [Removed Samsung Kies3 | 03/15/2014 00:54:03]
Deleted : RP #107 [Installed Samsung Kies | 03/15/2014 01:01:18]
Deleted : RP #108 [Windows Update | 03/21/2014 08:59:30]
Deleted : RP #109 [Installed Java 8 | 03/21/2014 09:23:33]
Deleted : RP #111 [Windows Update | 03/26/2014 00:26:48]
Deleted : RP #112 [Windows Update | 04/01/2014 23:42:43]
Deleted : RP #114 [avast! antivirus system restore point | 04/05/2014 07:46:52]
Deleted : RP #115 [Windows Update | 04/08/2014 08:11:14]
Deleted : RP #116 [Windows Update | 04/10/2014 19:04:02]
Deleted : RP #117 [Windows Update | 04/16/2014 18:55:14]
Deleted : RP #118 [Installed Microsoft Visual C++ 2005 Redistributable | 04/16/2014 19:02:57]
Deleted : RP #120 [Installed Ralink Wireless LAN | 04/21/2014 00:10:08]
Deleted : RP #121 [Device Driver Package Install: Ralink Technology, Corp. Network adapters | 04/21/2014 00:11:10]
Deleted : RP #122 [Installed Java 8 Update 5 | 04/21/2014 23:19:06]
Deleted : RP #123 [Installed Google Drive | 04/21/2014 23:52:40]
Deleted : RP #124 [Windows Update | 04/22/2014 20:58:30]
Deleted : RP #125 [OTL Restore Point - 22/04/2014 23:56:56 | 04/22/2014 22:56:56]
Deleted : RP #126 [OTL Restore Point - 23/04/2014 08:26:19 | 04/23/2014 07:26:20]
Deleted : RP #127 [zoek.exe restore point | 04/24/2014 18:55:54]
Deleted : RP #128 [Scheduled Checkpoint | 04/25/2014 17:41:47]
Deleted : RP #129 [OTL Restore Point - 25/04/2014 22:05:11 | 04/25/2014 21:05:11]

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########
Title: Re: Search.Conduit annoying add on.
Post by: Valinorum on April 27, 2014, 04:36:51 PM
No need to re-install. You are good to go. :)