Search.Conduit

[craig.martineau]

I have Spybot on three computers. On each one, when I open Google Chrome a second search bar automatically loads. The searchbar is for "search.conduit". I have looked for these files everywhere: Google extensions, registry etc but nothing every shows up. But these files and the main one that keeps the reboot going much exist somewhere. Has anybody had experience with the threat?

[ken545]

:snwelcome:

FYI We just work on one computer per thread , believe me it can get pretty confusing trying to clean 3 computers on one thread so lets just work on your main computer and we can go from there

If your having the same problem on all 3 computers then is possible that your router is infected or storing malicious sites

Lets do this first.

1. Turn off your computer
2. Turn off your router by unplugging the power cord on the back of the unit
3. Turn off your Cable / DSL modem by unplugging the power cord on the back of the unit

Leave everything off for about 5 minutes, this lets it all reset

Then

1. Plug in your Cable / DSL modem and wait until all the lights come back on
2. Now do the same thing with your router
3. Turn your computer back on and see if it made a difference



If that didn't help than you may want to reset your router back to company defaults by pressing the reset button on either the bottom or the back of the unit using a paper clip or a ball point pen, hold it in for at least 10 or 15 seconds and it will set your router back to default. Then you will have to set it up again, use a different name for your network connection and a different password.

See it that solves it but just in case run these programs so the main computer that we will be working on



http://i.imgur.com/1QYkxTZ.jpg Please download aswMBR (http://public.avast.com/~gmerek/aswMBR.exe) to your desktop.

Double click the aswMBR icon to run it.
Click the Scan button to start scan.
If you are asked to update the Avast Virus database please allow it to do so.
When it finishes, press the save log button, save the logfile to your desktop and post its contents in your next reply.

I just want to see the report....Please Do Not Fix Anything

============================================================================




Please download Farbar Recovery Scan Tool (http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/) and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

How to determine whether a computer is running a 32-bit version or 64-bit version of the Windows operating system
A simple way to check your system: Start --> Computer (right click) --> Properties

http://i24.photobucket.com/albums/c30/ken545/FRST_zps5d956a1a.jpg (http://s24.photobucket.com/user/ken545/media/FRST_zps5d956a1a.jpg.html)



Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
Please make sure All Users is checked
Just keep the defaults as in the picture checkmarked
Press Scan button.
It will produce a log called FRST.txt in the same directory the tool is run from.
Please copy and paste log back here.
The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[ken545]

Due to inactivity, this thread will now be closed.

If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a new FRST log with a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.