Search.Conduit annoying add on.

[bob3160]

I don't know how to copy/paste, I did as you asked and found these logs in my downloads file, I hope this is correct? TY.

copy:
Highlight the text> right click and select copy


Paste:
Select the part where the information is to be used > right click and select paste

[daveyden]

Thanks Bob, had learned that since, but nice to know helping hands are there, Dave

[jeffce]

Hi,

It was brought to my attention that you had been getting help here as well.  I think being at the juncture you are now in the repair process here, that the best course of action would be to continue receiving help here with Valinorum.  I know that you are in great hands.   

I will go ahead and close the log over at Bleeping Computer ok? 

[daveyden]

ok jeff, did you get my msg earlier? I had the same problem with both pc's, thats why I saught help with 2 agents, It was me that told him that I was working with you...just put it down to ignorance! ty for your help, and a bientot! dave

[daveyden]

Hi Valinorium, are you still able to help me? I have 2 pc's infected, 1 is a W Vista basic 32 bits and the new one is 64 bits on W8.1, (which I am having more trouble navigating around). They both seem to have the same problem, (search conduit), and both are showing virtumonde and smitfraud in scans, yet they've never been synced, maybe Chrome passed the infection? Tomorrow I will get both laptops together here, so it won't be so confusing, and, if you are still willing, they can be treated at the same time with the same process.
Again, sorry about the faux-pas with jeff, but it was done in innocence, (Which is why I had no qualms about mentioning him to you.) I will check in the morning and if we could go ahead,maybe from fresh; as I now have a little more confidence in doing certain actions, (copy and paste for example.) I hope you'll keep me on board, and I look forward to hearing from you. Kind Regards, dave

[Valinorum]

If it is two different PCs you can work with jeffce at Bleeping and myself simultaneously or can work with me/jeffce after I fix the other one. But be vigilant while applying the fixes and double check the information. My concern was the following --

• There have been numerous occasion where a client followed two different instruction and ended up in a bad situation with the machine hence one problem, one helper protocol was issued in all the Malware Removal Sites.
• It makes the helper confuse if he checks your next log and finds something which is abnormal to him but normal to the other helper who is helping you.
• Due to the large number of request we get daily on each Malware Removal sites, you are taking another victim's slot by opening multiple topic.

I had a talk with jeffce and he said that he will be busy with real life issues but will certainly help you if you wish to continue with him.


After the zoek scan how is Chrome acting? Are you still getting virtumonde alert?

[daveyden]

Yes, I think you are right, as the 2 machines seem to have the same problem it might be best that I stick to one instructor, (you, if that's all right). jeffce was using  slightly different programs, so if we could deal with this pc first I will save all instructions and apply them to the  new laptop. They both show Virtumonde and smitfraud DURING a scan, but they don't show up in the scan results. I still have the info and downloads you have already given me, and I haven't downloaded anything that could affect the pc's since we began, so if you want to continue where we left off we can. (I will, of course, need to start afresh with the other pc).

[daveyden]

Just to clarify Valinorium, when I scan with spybot, Windows defender or Avast, the DETAILS of the running analysis show the aforesaid products as being present, but there is no alert. I have removed spybot following your advise, (or jeffce's, perhaps), can I re-install it yet or shall I wait till we're through?

[Pondus]

SpyBot is waste of HD space ....you dont need it when you have Malwarebytes

http://www.pcmag.com/article2/0,2817,2412372,00.asp

In testing, it proved almost 100 percent ineffective.

[daveyden]

O.K., Thanks for that Pondus, wish I'd known that before I made a donation to them! (You live and learn!)

[daveyden]

Saying that, I just tried to activate Malwarebytes but I need a licence no. and key, does that mean I need to register with them?

[Pondus]

License is only for PRO version

[Valinorum]

Which scan? Can you take a screenshot of the alert as I am seeing no virtumonde infection ?
Rescan please and show me a screenshot if you get the alert.

[daveyden]

There are NO alerts, all I see is the products name come up on a whole lot of files when whichever scan tool I'm using is doing a scrolling analysis...I have seen the "Virtumonde" name during scans for a couple of years now, and thought it quite normal until I read of potential threats caused by the product. Having said that, it doesn't get mentioned in the final report, so it could be nothing.
May I say, I've read a few other posts and some people are downright rude, (jvidal for instance), I think you guys deserve medals for putting up with selfish rants like that!

[daveyden]

I can't remember where we're up to, Valinorium, did you get the zoek report, or do I need to re-scan?