DatabaseBen

Methods to Remove Conduit


The purpose of this article is to give the computer user a number of steps to remove Conduit from the hard drive, registry and the browser (s), in particular the FireFox and Pale Moon browsers.  However, most of the steps below can also be applied to the IE browser. (I stopped using IE long ago.  So you would have to figure out how to apply some of the steps applicable to the browser)

How did your computer become infected?  It is likely that the conduit program and toolbar was installed when it was piggy backing another program you had installed and instead of using the “custom” setup method, you used the “express”, “quick”, “recommended”, etc.. methods and didn’t read the fine print.

When setting up software via custom, you will have the opportunity to decline adware, toolbars, search engines/hijackers like conduit and who knows what all else that is yet to be discovered by us.  So after you clean your system from conduit, you will have to be patient in the future and use the “custom” setup mode and then c-a-r-e-f-u-l-l-y read the fine print.

Symptoms of Conduit:

1.  Conduit appears in the url window of your browser after you execute a search.

Example:   http://www.bing.com/search?q=google&pc=conduit&ptag=ACE4F04C31DEE4BA4ABF&form=CONADR&conlogo=CT2786678&ShowAppsUI=

2. Connectivity with the internet is slow, erratic and unstable,  and your computer continues to troubleshoot and tries to resolve the intermittent connection with little or no success.

3. Webpages don’t load up and instead show error messages like, “unable to find or connect to server”.


Methods to seek and clean:

While i have seen several others provide links to programs that “supposedly” removes conduits or a couple of steps to “easily” remove conduit, I wouldn’t want to replace conduit with more spyware or get a false sense a security by removing a couple of things from the computer. (I will not provide links to other pages via my blog herein)

Further, if conduit happens to evolve again into a new animal, the steps below should be sufficient to seek and clean your system.  And if the makers replace the term “conduit”, we can apply the steps below for any new term they decide to use when we figured it out what it is.

Below are 13 steps for eliminating the conduit contaminate from the hard disk, registry and browser(s). Seems like a lot of work but you will find that the steps are easy and logical and accomplish the purpose.  So not only you will have some fun and learn something about your computer but then you will feel confident afterwards because you did the Job Right.

  • Step 1 – Uninstall the Conduit Toolbar
  • Step 2 – Delete Conduit Folders, Files and Gifs from hard drive
  • Step 3 – Delete Conduit Registry Keys
  • Step 4 – Delete Conduit from Browsing History
  • Step 5 – Remove Conduit Cookie
  • Step 6 – Block Conduit Cookie’s
  • Step 7 – Remove browser add-ons and extensions
  • Step 8 – Remove Conduit Configuration Settings
  • Step 9 – Run Spybot
  • Step 10 – HiJackThis
  • Step 11 – Disable Add-ons
  • Step 12 – Re-Install a clean browser
  • Step 13 – Remove your old System Restore Points

Update 04/2014:

  • Step 14 –  Run third party software updated for Conduit

Step 1 – Uninstall the Conduit Toolbar:

  • Open add/remove programs control panel or program / features control panel
  • Uninstall Conduit Toolbar or anything listed as Conduit
  • Note: You may also have other programs, like freeware, that don’t state Conduit in its nomenclature, but the program may be embedded with some kind code for Conduit.  If so, these programs may be rendered useless after executing the additional steps provided below.

Step 2 – Delete Conduit Folders, Files and Gifs from hard drive:

  • Search your C drive for: conduit
  • If results are produced, then simply send everything listed to the recycle bin and then empty that bin afterwards.
  • Note1 :  The search results will produce individual listings of folders and files.  So if you delete the parent folder, don’t be surprised if the rest of the files that are listed on your results wont delete.  This is because these files were inside the parent folder you just deleted.de it wont delete.    Simply execute a refresh to see a revised list of the search.
  • Note 2: The search results may also include items from IE’s history and IE’s cookies.  These items that are tagged with conduit should be deleted as well.

Step 3 – Delete Conduit Registry Keys:

  • Click on Start Button > Run > Regedit
  • Next, click on Menu Bar > Find > Conduit > (select, keys, value and data) > click the Find Button
  • If keys are found, then from inside the right hand panel right click on the sub-key,  select modify and erase the value/data, then click OK
  • Next click F3 button to continue the search for Conduit. If there are more results, then repeat step above and erase their value/data.
  • Upon completion of the search, simply Exit the registry editor and reboot.
  • Note 1:  Depending on how conduit is installed on your system, there may not be any registry keys for it.  On the other hands there may be dozens but some will simply be as “terms” that were used to search for it.
  • Note 2: IE also stores its configuration data and typed urls in the registry.  So if any keys mention conduit, go ahead and erase their value / data.

Step 4 – Delete Conduit from Browsing History:

For the FireFox and PaleMoon

  • Open FireFox browser
  • Click on History > Show all History >
  • Next enter in the search field and execute the search for: conduit
  • Delete all of the results on the list.
  • Close window

For the Internet Explorer

  • Open Internet Options Control Panel
  • Click on Settings Button under Browsing history section
  • Click View Files button
  • Enter in search window:  conduit
  • Delete the resulting entries
  • Note 1:  Because IE stores some cookies with the browsing history on the disk drive, the procedure above will was already accomplished via Step 2 above.  But executing this step is a double check for the conduit

Step 5 – Remove Conduit Cookie:

For the FireFox and PaleMoon

  • Open FireFox browser
  • Click on Tools > Options > Security
  • Go to Remove Individual Cookies
  • Enter in search field: conduit
  • Delete / remove all results
  • Note:  Some of the results won’t have the word “conduit” embedded in them.  But they are coded and you should proceed to delete all the results listed.

For the Internet Explorer

  • Open Windows Explorer
  • Click on Menu Bar Tools > Options > View > Show Hidden Folders and Files
  • Next search your c drive for the hidden cookie folder by entering in the search field: Cookie
  • Next, if you do have a cookie folder, then execute a sub search for conduit and delete items listed in the search results, if any.
  • Note : Depending on the version of windows, you may or may not have an a specialty cookie folder

Step 6 – Block Conduit Cookie’s:

  • Open FireFox browser
  • Click on Menu Bar Tools > Options > Security > Exceptions
  • Enter the name of cookie: conduit.com
  • Then click the Block Button
  • Enter the name of cookie: search.conduit.com
  • Then click the Block Button
  • Enter the name of cookie: alert.services.conduit.com
  • Then click the Block Button
  • Enter the name of cookie: storage.conduit.com
  • Then click the Block Button
  • Next exit
  • Note 1: For FireFox versions 10 and above, exceptions for blocking cookies is found via the  drop down listing “Custom Settings for History
  • Note 2: For IE, exceptions for blocking cookies is found via Internet Options Control Panel > Privacy Tab > Sites Button.  Use the steps above to block individual cookies.

For the Internet Explorer – Please check with Microsoft.com on how to block its cookies.

Step 7 – Remove browser add-ons and extensions:

  • Open FireFox browser
  • Click on Menu Bar > Tools > Add-ons
  • Disable / Remove any Conduit Toolbar Extensions or Add-ons, if any.
  • Note 1: For IE, Open browser and inspect the Add-ons via Tools > Manage Add-ons
  • Note 2:  Also, disable anything mentioning JAVA’s.  And only re-enable Java when the webpage  requests it and you know its safe to do so.  Afterwards, disable JAVA add-on’s and inspect system, using Step 5 and Step 8.

Step 8 – Remove Conduit Settings in Browser:

  • Open FireFox browser
  • Enter into the url field: about:config
  • Enter in search field: conduit
  • Modify and null out the values for each entry by:
    • Highlight / Select individual item
    • Press enter key
    • Press delete key
    • Press enter key
  • Select next line item and repeat the nullification steps above
  • When done, Close tab, Restart browser
  • Note: For IE, the configuration settings are stored in the registry, which was cleaned out via Step 3 above.

Step 9 – Run Spybot:

  • It is unclear if Spybot Search and Destroy program targets Conduit. But I have sent them an email on adding conduit to their arsenal.  In the interim, running Spybot semi regularly will be helpful to eliminate spyware on your system.

Step 10 – HiJackThis:

  • Execute a scan for browser hijacks and see if any line items (particularly R0’s and R1’s) infer conduit.  If so, check them off and click the Fix Button.
  • Note 1: If the R0’s and R1’s have been infiltrated by conduit, then it is probably best to re-install the browser after removing the hijacks, but not always necessary.
  • Note 2: Not all line items listed by HiJackThis are evil.  In most cases the are designed to make programs run with a pre-determined settings for ease of user convenience.  So don’t be alarmed with results that go beyond the R0 and R1 levels.  However, double check to see if any of them infer to conduit.  If so, jot down their file locations, before “fixing” them.  Then hunt down those files via explore and remove.  (However, none should appear since you should have previously scanned / searched your disk)

Step 11 – Disable Add-ons:

  • If the browser still seems to be performing under par, consider disabling all the add-ons in the browser.  It might be that add-ons and or extensions maybe corrupted or contaminated.
  • In FireFox, click on “HELP”, then restart with Add-ons Disable.
  • Note: Alternatively, you can try booting up windows in safemode w/networking and run the browser and connect to the internet.  If your system is performing well while in safemode, then you should execute a clean boot to possibly eliminate a rogue start up hindering your internet

Internet Explorer

  • Close broswer
  • Click on Start Button > Run
  • Type iexplore -extoff
  • Press Enter
  • Note: Alternatively, you can try booting up windows in safemode w/networking and run the browser and connect to the internet.  If your system is performing well while in safemode, then you should execute a clean boot to possibly eliminate a rogue start up hindering your internet.

Step 12 – Re-Install a Clean Browser:

If the browser still shows signs of the conduit searches, then Mozilla recommends to simply uninstall the browser and re-install a clean version directly from their site.  Afterwards, be sure to block the conduit cookies as noted in Step 6 above.

Step 13 – Remove your old System Restore Points:

Lastly keep in mind that your system restore feature may have captured and stored the Conduit files, that is if you created restore points while your system was actively infected  Therefore, i recommend to delete all of your restore points sometime in the near future.

However, i would certainly create a brand new one at this time since you system is clean and functional.

Update 04/2014:

Step 14:  Run a couple of Third Party Programs

There are a couple of programs that i have tested and proved to be helpful in finding additional entries for Conduit that we humans have no access to.

1) Go to CNET.com and download IOBit Uninstaller.  (I use this program for uninstalling programs instead of the basic windows “remove programs” control panel.  This uninstaller is much more aggressive at removing more things pertaining the unwanted software you choose to uninstall.  As such, the IOBit uninstaller provides us humans with additional data about the installed programs on the system, including revealing to us covert entries pertaining to Conduit.

2) Download SpyBot Search and Destroy.  It has recently been updated to remove the Conduit SearchProtect entries from our computers.  However, it is my firm suggestion that you avoid features that SpyBot provides.

A) Do not load or install Tea Timer and

B) after exiting Spybot open the Task Manager, ie ctrl+alt+del, and kill Spybot from memory “and” ensure it has not installed itself in your Startups via, Start>run>MSConfig>startup tab.

 

Conclusion:

It is unclear what conduit actually is.  It maybe a hybrid of a tracking ware, spyware and or search engine hijacker or information gatherer.  Whatever it is, it does collect information and the makers earn some kind of revenue as a result..

Also, I have noticed that YouTube tools and FaceBook tools seem to infer conduit.  But it is unclear if they have anything to do with Conduit.com or they are simply using the term conduit to describe their proprietary codes for the program and services they offer.  But one never knows, right?

In any case, if you notice that certain programs no longer work, like games, after removing “conduit”, then evaluate the importance of that program and determine whether installing is actually worthwhile and necessary.

Finally PLEASE REMEMBER that after your system is cleaned of Conduit, please install all software via custom and AVOID the “express”, “quick”, “recommended”, etc.. methods.

While “custom” may be slower by a minute or two, you will have the opportunity to decline unwanted software that is piggy backed with the downloads.

So please be patient and read c-a-r-e-f-u-l-l-y all the screens with the tiny print because sometimes they contain tiny check boxes that have to be unchecked, and read the titles on the buttons because sometimes the decline and accept buttons are switched around or re-worded in a manner that you may actually “okay” the installation of unwanted-ware.  But if you do catch yourself, then stop the setup of the program in its tracks and start over.

If you have any feedback, please let me know.

  1. to remove #conduit : rename default profile of browser (open it from %appdata% in explorer), uninstall with revouninstaller pro, run adwcleaner (computer will restart). clean!

    • thanks for the tip.

      however, you are only “cleaning” 1 aspect of the multi-faceted trojan.

      the engineers made it much more complex than thes, in order to ensure its success.

      therefore, do not be surprised if “conduit” appears again on your system.

      my suggestion is “take ALLL THE STEPS” i provided, instead of finding shortcuts.

      ~dbben

  2. Do you mind if I quote a couple of your articles as long as I
    provide credit and sources back to your webpage?

    My website is in the exact same area of interest as yours and my users would certainly benefit from some of the information you provide here.
    Please let me know if this okay with you. Cheers!

    • as long as you are doing so in “good faith” and not for spamming or selling the info i am providing for free, you have my ok to include snippets and links from/to these articles.
      thanks for asking.

      ~dbben

  3. I have a question, I installed webroot and webroot found 16 traces of conduit, then webroot started causing a memory leak. So I went to my subscription of norton 360 and Norton found 3 more traces of conduit and deleted them. Now norton can’t find anything else and my web browser hasn’t been acting up at all, hasn’t had any symtops or anything. Does this mean I have gotten rid of it all or should I try a different program and see if it can pick anything up?

    • probably a good idea to uninstall programs after using them. for example, since webroot helped flush out some conduit, then uninstall it afterwards. you can always install programs like these later and when you need, they will likely be improved versions of them.

      in regards to norton, i am not sure how thorough it is. but i have listed some little programs on the page that you can use to look in other areas for conduit.

      ultimately, you are more than welcome to use all the methods i have provided on the page. i think i have covered all the areas that conduit can hide. so my suggestion is to go ahead and execise the steps i provided so that you can be assured that “you” took care of the problem.

      the steps seem tedious. but after you are done with them, you will find they were actually pretty easy and logical.

      as a final word of advice, there are companies that seem to be using files that are called “conduit”. there was a time in the past that file names between companies had to be different. so i am not sure if FaceBooks use of a conduit file is from the conduit people or a facebook file that is called conduit but is not malicious.

      i also think itunes and palm pilot programs also use a file called conduit. but again i am not sure if their conduit file is being rented from the conduit people.

      lastly, i think conduit is running wild in foriegn countries like mexico and india. so be weary of freeware that has mispelled words in their descriptions and terms. and if you install freeware, be sure to use the custom process and not automatic setup because in custom conduit is usually cited that it will be installed unless you click on deny button.

      if however, you get reinfected, just re-do the steps i provided. it will be easier the second time around. “and” if you happen to come across any new information on conduit, please let me know so i can amend the webpage to help others.

      as conduit is continously evolving, i am not on top of any changes that occur with it since my system is free and clear of infections.

      (i might add that webroot program on the webpage. but i will have to test it out and look into the memory leak and see if it is worth the trouble to use it or if there is something else that can do the job)

      thanks for your feedback and keep us updated !!

      dbben.

  4. I have conduit on my computer that came in from downloading IE and it’s a pain. I had it once before and got rid of it using malwarebytes.This time malwarebytes is not working. There is nothing to uninstall and I’m getting frustrated please help. I have approximately 10 tabs showing up at one time

    • If you did not install IE directly from Microsoft.com, then the version you did was likely hacked and modified.

      But in any case, if you are unable to locate the conduit folders either via the name conduit or searchprotect, then it is possible conduit has evolved.

      As a possible solution try downloaded Spybot Search and Destroy b/c it now looks for conduit (to some degree that is)

      also, download “HiJackThis” and look for entries citing conduit and or searchprotect

      also download IOBit Unistaller because it reveals more information that the standard windows add/remove programs control panel. And it will reveal the words conduit and or search protect on your installed programs.

      Be sure to download the above directly from their homesite, else you could be downloading a hacked version from a phony site.

      Lastly, after downloading the above but before installing/setting them up, disable all your windows startups by doing a start>run>msconfig

      then go to the startup tab and disable everything including your antivirus. (but if you have a laptop, you will have to leave the entries citing your laptops maker enabled)

      then reboot.

      after the desktop loads initialize setups and run all the programs i mentioned above.

      keep me apprised.

  5. Thank you so much! I spent hours trying to get rid of hundreds of conduits..your site is thorough and user friendly and just wanted to say you’re the bomb! Thank you for siting this for free!

    • i’m glad it worked out!

      just be mindful that the some of the steps are not permanent and may have to be re-executed in the event of re-infection.

      even i got re-infected when i tried to update my kindle app. the app proved to be dysfunctional and should of been removed from the amazon site. but all i can believe is that apps like this are is their to lure us in order to install trojans and spywares, etc, and conduit in spite of denying permission to them during setup. amazon has yet to comment on this concern posted on their discussion threads.

      for now, it is safe to say that “we won the battle” “but not the war”.
      :-)

  6. Damn, it didn’t work for me! I had this conduit issue happen last year with internet explorer, I just started using google chrome instead, without any issues – until yesterday out of nowhere google chrome started acting up too. Each time I opened the google chrome browser, it went straight to conduit. I followed the steps the best I could today, but it didn’t work. Now, after turning on my laptop, I can open google chrome, it goes straight to conduit – but once I close the browser I’m not able to re-open it again unless I re-start my laptop altogether :-(

    • okay. well lets see if we can figure this out. but i am sure that i covered all the possibilities in the article that would alleviate the conduit, “unless it is your antivirus program that has the infection” however, this is just a thought.

      one step i did not mention in the article might be helpful in this case.

      the step is booting the operating system into safe mode with networking.

      in safe mode, no third party programs are allowed to run.

      so boot up in the safe mode and launch the internet explorer to see the state of the conduit activity.

      if conduit doesn’t show up while in safe mode, then this means you have a third party program that is covertly launching it while in regular mode.

      so the next step would be to set up normal mode to elimate the launching of third party programs.

  7. Fastidious answers in return of this issue with real arguments
    and explaining the whole thing on the topic of
    that.

  8. Creating a “fake” search conduit extension and ask toolbar
    Is it possible to just create these fake files with same name in their location of program
    create text file and rename to search conduit extensions in where the search conduit installs
    itself and then take ownership to trusted installer and write protect. will this work to prevent them from installing.???

    • i don’t think you can outsmart programs now-adays. but doesn’t hurt to try. as for me? i’d rather spend time doing more productive things. so just deleting the conduit bas*ard and keeping my eyes open for possible re-infections, is my focus.

      but if you find away to outsmart it, please let me know and i will most certainly post your discovery (and give you credit as well)

      thanks!

  9. Thanks a lot for the detailed instructions. The blasted conduit pollution is now gone. I worked through the steps and it was the Registry keys that did it. Phew, feels like I just escaped from a kidnapping. :-)

    • i know exactly how you feel. the other day i was trying to update my kindle app for pc and to my surprise it was giving a piggy back ride to conduit. i declined it and proceeded with the update. unfortunately, after the app set up it came back and said it was outdated and no longer available, per se. so i uninstalled it. later i was discovering oddities with my pc. soon i found that conduit had actually installed even though i declined it.

      so at this time, i know that iTunes and Kindle are distributing this conduit search protect/hijacker. hopefully i will encounter a list of all the software that is in league with the conduit bandits.

      in any case, i’m glad it worked out!

    • Me too! Kidnappers be gone!

  10. Wanted to say thank you! Every-time i started my computer that blasted box came up about condiut dll file. It’s gone now! Thanks!

  11. I have conytracted search conduit – but have removed everything so far – followed your steps here, but was unsure of just what to delete there and did not want to delete the wrong thing…I am a real genuine novice at this point forward but I really need help eliminating this annoying thing please!

    • the key is to simply remove any file or folder or registry key that has the word “conduit” in it.

      while there will be other files, folders and registry keys that are also used by the infection, they will be rendered un-functional when the specific files above are removed.

      inside the disk system/file system, files and folder with conduit should be deleted.

      inside the regsitry, keys that are displayed in the right hand panel of the registry editor and have the words conduit should be removed.

      inside the startup configurations panel, ie click start>run>msconfig, disable all programs “except” the a.v. and those entries with the name of your computers manufacturer. these are usually provided for laptops.

      afterwards, you reboot and ensure conduit has been removed

      • while deleting the registry keys i found that conduit had “piggy backed” itself into something called White smoke and Search Protect. Also, as you put it, I do not use IE myself as well. However, some government websites and some websites in general only work on IE. So it was here where I found conduit again just shortly after trying my best to delete it from Chrome. Hopefully the registry deletion deleted from my computer entirely and Chrome as well. This program almost has an NSA flavor to it. What do you think?

      • yeah, i have wondered if if conduit might be linked with the government.

        However, because corporations like CNET.com, Microsoft, Google and others would of felt the same way I think all of us would of heard if conduit was a federally sponsored spyware. But who knows, because a third party can provide the government “plausible denial-ability”, if it turned out to be true.

        So at this point what comes to mind is that maybe “maybe” conduit earns revenue like google does and passes on some of it to the people, programmers and companies that helps disseminate it to us. And if this is true, then it is all about “American Marketing”, whereas the conduit simply collects and aggregates data on us (and maybe scans our computers too).

        Lastly, it is my firm belief that while conduit is still running around on many of the computers in America, it is running big time in other countries like Mexico, India, etc…

        For now, since we little people cant get all of the facts on Conduit, we can only imagine what that company is actually doing based on our past experiences.

        Lastly, if you believe Conduit is running on governmental computers, then i think you have a duty to relay the facts to somebody in our government. But since Conduit piggy backs freeware, these freeware are likely to be illegally installed on governmental computers to begin with.

        At best, it is probably a good idea to avoid freeware regardless of how tempting they sound. Only download those programs that you absolutely positively need. Then afterwards, double check your system for a couple of days to ensure that Conduit didnt install covertly and delayed itself from initializing in the background.

        Thanks!

    • Make sure that you show hidden files (start/controlpanel/folder options/view/show hidden files).
      Then go to your C drive/ Open it/ open Users/select your name/select AppData/ you will see 3 or 4 folders (i.e. local/local low/ roaming)
      If you see any folders named Conduit <>
      Go though each of the local/local low/ roaming folders in appdata to make sure conduit is gone.
      Then you can go into the registry and find Conduit references and delete or blank them out to render them useless.
      If you are unsure about making registry changes you can back it up before hand (run/regedit/file/export) name it.
      Then msconfig (run/msconfig) and remove any conduit processes.
      Good Luck.

  12. Dear DatabaseBen, could you please help? In the phase 3 I probably erased too much when erasing in ALL lines not just conduit-saying lines. After finishing that shut the laptop, but when turned on now the Windows XP just starts loading but then shows black screen with box saying: lsass.exe-system error. The endpoint format is invalid. OK. Is their any hope to fix it plese? Kind regards, Katrin.

    • sure. you may or or may not have been the cause of the registry issues. for example, the file system and the master file table could of been unstable before or during the conduit infection.

      so in order to keep the article focused on conduit, i did not make any suggestions about tuning up the system before hand.

      in regards to that specific error message you got, lets put that on the back burner for now and try the side steps first to analyze the functionality of the os:

      1) therefore, test your operating system functionality by booting up into safe mode.

      if you can boot and log into safe mode, then you/we know that the core files for the operating system are intact and not corrupted.

      if on the other hand, safe mode is also unstable then one of the reasons could be that the o.s. is missing some core files or have become corrupted.

      when files are missing on the disk, a few of the common reasons are be that they were deleted or zapped by the antivirus or have become un-indexed by the master file table.

      so at this time it is unclear if that lsass is missing or corrupted or something you never needed to have running anyways. but at the same time, if that lsass file is missing, then you may have other system files that are missing or corrupted as well, which may need to be found and re-indexed via a check disk or simply replaced with genuine ones from the xp setup cd.

      step2: if you can boot up into safemode okay, then the next step you can do is to determine whether or not you want to re-instate your registry by restoring an old system restore point while in safe mode.

      a system restore point will re-instate the o.s. from a former time, in which case, the registry copied by that restore point will be reinstated and files you removed (ie removed from the master file table) will be restore.

      step 3: subsequently, you can retry the steps in the article again afterwards or maybe skip the phase 3 temporarily and proceed to the other steps.

      • Please accept my sincere thanks! There IS God! lol (There IS DatabaseBen!!!!!) Restoring an old system restore point while in safe mode was SUCCESSFUL and I’ve done already a new restore-point for future possible fails.

        Everyone in the list joins with me in thanking you, for taking time to email us your phenomenal suggestions regarding our mess-ups. Such quality comments encourage us to explore and experience, and are the basis of most of our growth in future and present. It takes a very special person to offer advices for free, and I will always remember your willingness to care about other people. Your example is a wonderful lesson to all websites, it’s a pleasure to read your suggestions.

        Thanks again for helping to find the best solution. Kind regards, Katrin.

      • thanks for your kind words!

  13. It does not allow me if I start the hp with out tje safe mode it only shows the message and starts to switch between that and the the main page showing only two icons ( desktop and store) it does not allow me to do anything at all. I try to do anything but just keeps going forward and back.

    • windows skydrive/onedrive is a picky program and wont install under xp/vista administrator type accounts. but will install on limited user accounts.

      so its not so easy for me to see (in my mind) what you are seeing with your eyes.

      if there is no longer an infection on the system, there are 2 possible scenarios that you might be experiencing – based on what i am interpreting from my end.

      1) your user profile is corrupted and or 2) your current user account has set it the permission for the user to very limiting, ie citing what you can or cannot do while logged into that user account/profile.

      the corruption of user profiles is not all that uncommon. in fact, microsoft develop some kind of specialty update to fix user profiles in the xp (and maybe vista) o.s..

      user account permissions and their custom settings limit kids and outside software from going crazy on the computer (so as not to corrupt the system or destabilize it).

      however, many of us simply use the administrator account to log in and to have complete control over the system.

      what you might have to do is to log into safe mode and create a new user account with administrative priviledges.

      afterwards, try re entering your windows in normal mode via the new user profile.

      keep in mind that when you log into a new user account, the old one is on the back burner and not usable. as such, programs installed for that user account will be unusable. therefore, the programs will have to be re-installed under the new account in order for the new user, per se, can access them.

      the same goes for personal documents and pics, etc…

      in other words, everything installed or created under a dedicated user account is not accessiable by another account/ user. but all the personal files are still on the disk and simply have to be copied or moved from the old account into the new one.

      the above is simply tweaking and reconciling your user accounts between the old and the new.

      at this time however, you want to focus on creating a new account and see if it will let windows become your friend again, per se.

      as a final note, if you have been a dedicated user of skydrive, the for the most part, there is a backup of all the files at microsoft.com that you saved/linked on your computers local skydrive folder

  14. Disk C completely clear of conduit but still having that SkyDrive message. How can I solve this new issue?

    • okay. that is good news.

      1) next execute a “disk check” to ensure that your master file table is indexed/error free. if the mft is corrupted, then it can not find files on the disk, which subsequently results in issues with starting them or finding them.

      2) afterwards, delete all your system restore points because if you happen to use a restore point in the future, it will likely also re-instate the conduit files. so delete them all. then create a new one called something like “conduit free”.

      3) after a check disk, you can then go to microsoft and simply re-download onedrive. skydrive’s new name is onedrive. the re-installation will reinstall the missing or corrupted files.

  15. I savour, cause I found exactly what I was having a look for.
    You have ended my four day long hunt! God Bless
    you man. Have a nice day. Bye

  16. Hi my name is Edgar.
    Today I tried to use my laptop and a message came up after entering my password, this message came up ” the search protected by conduit has stoped. It does not allow me to do anything else. I click on the close the program tab and i does like if it was going to go to my desktop but it does not. What should I do at this point? I have allot of important docs and pics in there. Thanks in advance.

    • it is unlikely that you will lose your personal files. most often the lost of personal files is due to an unstable master file table (mft) which is an index and location of all the files the disk. the mft can be re-indexed via a check disk. however, at this time, i would not execute a check disk.

      instead i think the system is hijacked.

      so aside from executing the steps provided in the article at this particular time, what you can do first is to disconnect the computer from the internet because the conduit is linked to its home base.

      secondly, look at the start up programs that are launching automatically in the background as windows loads up. it is likely that one of those startup programs is linked to conduit and should be disable to allow the computer to load the desktop.

      to look at the startups, click on start, then run, then type inside the field and enter the following command: msconfig

      [if you cant find the "run" option under the start button, then press the winkey+R]

      under the startup tab you will likely find a slew of programs that you were not aware were launching automatically in the background.

      for a laptop the only things that are essential to conveniently load for you is the antivirus program and the programs that are from the manufacturer for the laptop. unlike a regular desktop, laptops require a few extra programs to launch at startup, like the mouse and power management, etc.

      so if for example you have a ibm lenovo laptop, then you will see line items that cite somewhere in their descriptions ibm or lenovo.

      in any case, the above are the essential startups the rest on the list are not and can be disabled. disabling them releases more memory for your computer and those programs can be run manually at your command and convenience via the standard way.

      after disabling none essential startups then reboot. the message you get should go away.

      at this point in time, you could reconnect the computer to the internet in order to download or view the steps in the article to begin the systematic removal of conduit.

      • I disconnected the internet, but now after logging in it just brings me back to log in again. What should I do at this point?

      • Now it shows me only 3 apps, store, skydrive, and the desktop icon but it’s completly frozen. I can only move the mouse but can’t click on any of the icons. I press the start button and nothing still.

      • okay. it simply sounds that your registry is able to load up completely. which is likely due to low memory or low virtual memory.

        but you will be able to free up memory by disabling unnecessary startups that are hogging up memory while the desktop tries to load.

        unfortunately, i failed to mention in my previous response that you should try the steps i mentioned via windows safe mode. so i feel a little dumb for not citing to go into safe mode especially since you clearly cited you could not log into the desktop via normal mode. sorry about that.

        in any case, boot into safe mode, disable unnecessary startups then reboot and retry normal mode. keep in mind that in safemode, unnecessary startups are automatically disable by windows. but you will have to go in and manually disable so that they don’t restart in normal mode.

        btw: while in safemode, you could proceed to execute some of the steps in the article.

        then after you are able to boot normal mode, do a second sweep of the steps.

        i’ll be standing by for your response.

      • I really am not a computer guy. I really don’t know how to do the safe start. Can you let me know how I will greatly appreciate it. Thanks!

      • Was able to do the safe start and disabled all that was not needed. Rebooted the hp now shows a “SkyDrive engine host has stopped working” message. I’m frustrated now!! What else can do?

      • skydrive is a microsoft program that shares a folder from you hard drive to the microsoft storage system known as a cloud. skydrive requires an internet connection as well. skydrive can always be re-downloaded and re-installed for free via microsoft.com

        at this point in time, do not be frustrated about programs. the primary focus is to remove conduit from your system and all the programs that are linked to it.

        after the computer is infection free, then you can go back and re-install programs and avoid those programs that infected your system.

      • Just did all the steps an ran the chkdsk /f to fix the problem but still receive the same SkyDrive message. Ir keeps changing from the message to the main screen and thats it. It does not allow me to do anything at all. I keep on trying and trying. Nothing. Just frustrating!!

      • okay. just go to microsoft.com or google for the skydrive/onedrive download and just reinstall it.

  17. Grrr so close. I thought I followed the steps but must have missed something. Triple scanned C drive but after each restart I get:

    RunDLL
    There was a problem starting C:\Users\Owner\AppData\Local\Conduit\BackgroundContainer\BackgroundCondainer.dll Specified module could not be found.

    Can’t seem to get the search to not exclude the AppData?

    • What the error message is citing is that the malicious file / folder cant be found on your computer anymore. Which is a good thing because the program looking for the file is unable to run/execute.

      So the next question is, what program is looking for that old conduit file.

      Since you cite that the error is being produced upon windows start up, then the culprit looking for the file is probably in your “start up configuration panel”.

      There are two ways to launch the “start up configuration panel”

      Method 1: press the winkey+R, then enter and run: msconfig

      Method 2: click on the start button, click on run and enter the command: msconfig

      Then under the tab label “startup” look down the list for the program that no longer functions when windows starts up and “disable” it, then click “apply”, then reboot.

      You see, at this time, you may have numerous programs listed in the start up panel that are schedule to launch automatically with the desktop. But i do not know which particular item/program listed on your start ups might be the culprit requiring conduit.

      As for me, the only thing that should automatically launch at start up with windows should be the anti virus program. Everything else, can be run manually at your will and convenience, and after windows loads.

      So, if you can not figure out which startup is linked to conduit, then disable everything in your start ups except for your anti virus program.

      Note: If you are on a laptop, then you should leave your mouse and keyboard and those programs that cite the name of your laptops manufacturer. Laptops need extra programs at start up to run than desktops

      After disabling un-necessary start ups, then reboot and the error message should no longer appear on the desktop anymore.

      Later, you can always open up the startups again and re-enable any program listed on, being observant as to which ones do not and which one will produce that error message again.

    • RunDLL
      There was a problem starting C:\Users\Owner\AppData\Local\Conduit\BackgroundContainer\BackgroundCondainer.dll Specified module could not be found.

      The BackgroundCondainer.dll is being launched by an entry in your registry.
      The best way to clean it is
      1. Export (backup) to your desktop
      2. Find BackgroundCondainer and when you find it you can delete it.
      It may be called from multiple places so search the registry entirely.

      3. Reboot PC to see if it’s removed
      4. delete your registry backup on desktop

      That’s it.!!!
      Good Luck

  18. Step 3 has yielded literally hundreds of registration keys! Is it better to modify>clear each one or can I just highlight them all and delete?

    • i would take the time to delete each one individually and see/study what the parent registry key pertains to.

      in doing so, you may have the opportunity to know what programs are utilizing “conduit” which may help you to avoid reinstalling them in the future.

      there is also a scenario in which some programs, like iTunes and Facebook helpers, also use the name “conduit” for some of their files. And unfortunately, we do not know if their use of “conduit” is linked to the unwanted conduit.

      If it were me, i would delete them all and avoid all programs that i know are using the conduit file name.

  19. Problem Solved. Many, many thanks. You present your information very well.

  20. This was helpful. Thanks.

  21. On the SysInternals site, there is a process explorer tool which, if you know the conduit executable file or DLL, you can monitor your processes to see what programs are calling it. May aid in more complicated infections: http://www.sysinternals.com the tool is ProcExp.exe

    • thanks for the fyi. i do know of and have used a number of programs from sysinternals. but in this particular case with the conduit, the objective is to systematically locate and remove anything that references conduit without downloading more things and taking more time towards a tangent. but thanks again. i will leave your suggestion up for others to consider.

  22. I’m trying to remove a folder called Conduit that’s located in AppData/Local but it will not let me. It says it cannot delete it because it is open in another program. Has anyone else had this problem? Any help would be much appreciated. Also, when I went into that folder, I was able to go into the folders inside of it and delete those files. So now all of the folders are empty. So I don’t really understand why it won’t let me delete the Conduit folder.

    • what you can try is to either reboot the computer and retry to delete it as the last thing to do after you have executed all the otehr steps.

      another method is to boot the computer into safemode and remove it.

      lastly, there are third party programs, like unlocker, that can force the deletion of these kinds of files and folders. but the less programs you install on the computer, the better it is.

  23. For Step 3, my computer won’t let me erase the value/data or the file. It “cannot edit file: error in writing its contents.

    • hi,

      Try deleting the key altogether, instead of just nullifying the value as per step 3. To delete, you should find a “delete” option when you right click on the key.

      Let me know if the above helps. If so, i will modify step 3. i had originally chose just to nullify the key be removing the value in order to minimize the amount of alteration to the registry. But it makes no difference if the key that is linked to conduit is removed altogether by deleting it.

  24. Thank you for taking the time to write this.
    I had to use the regedit step to get conduit off my computer.
    David

  25. I’ve got that Conduit yesterdayI tried to uninstall it, then when I found that it’s still in my browser address I turned off the PC, thought when I restart it might be gone but it didn’tSo I’m in the position that I’m not able to logon the PC,I get that black screen asking me to do: Ctl + alt + del to restart but I keep getting to the same screenSo can I use your fix in the safe mode? Thanks

    • not sure why your system crashed on you. you may have other issues that are in addition to conduit.

      my suggestion is to boot into safe mode but execute a system restore point. this will likely restore conduit as well. but the priority at this time is not conduit but getting your system to a functional state again.

      after you execute a system restore point via safe mode, then execute a check disk and a disk defrag.

      after wards, retry the steps via normal mode for removing conduit.

      ps: in regards to which system restore point to use, select anyone. because after you successfully remove conduit, you will have to delete all the old system restore points anyways in order to ensure conduit won’t get re-installed by mistake. this step is included in the blog.

    • I had that same thing happen to me today.
      I rebooted and hit F12 and found a course of action
      that it fixed itself. It was system restore. Fixed the
      problem.

  26. Thank you so much for taking time to create “Methods to Remove
    Conduit | PC Smarties”. Thanks once more -Bettye

  27. Whats steps do I need to take to erase the restore points? Worked on the other steps yesterday, what a mess. I share my laptop with my fiance and son and always say “when in doubt X it out”. It def coincides with iTunes as the problem started after the fiance got a new iphone and had to do a back up and reload. Thanks for this article!

    • glad it worked out. to erase the system restore points it is just a matter of disabling the system restore feature. by turning it off, the restore points will no longer be indexed and locatable by windows. then do a reboot and turn on/enable the system restore feature to start fresh restore points.

      in regards to iTunes, i am still on the fence if whether Apples (and facebook) use of their own conduit is okay or not. we citizens just cannot know if all the conduits are linked back to the company that built the Conduit Search Engine which uses Conduits Files and Search Toolbars which seem act like HiJackers.

  28. I struggled with this for a while and found that following the steps above helped. But to get rid of it on Chrome all I had to do was to reset browser settings to default. I’m so glad that horrible malware / virus / whateveritwas is gone.

    • glad it worked out for you. i will add the “chrome reset” option to the article. thanks for the tip!!

  29. Re: Conduit removal in Registry. After clicking the Find button a whole list of things appear in the right hand column so, are all of those things listed subject to Modify, erase, or only the lines that have the word conduit in it.? Thanks, Bob

    • just the lines that specifically have the word “conduit” in them. if there are other lines that may be linked to conduit, they will be rendered useless after you delete everything that cites “conduit” it.

      to this end, you should have the “delete” option when you right click on the keys on the right side of the registry editor.

      then after you delete the specific keys, see if you can decipher the other keys and registry branches provided via the search and they will reveal who are their parent files and folders on your file system.

      this may be a clue as to the culprit that contaminated your system.

  30. Conduit is getting more and more harder to eliminate. Still persisted after malware removal etc.

    I had a neighbors PC that had a problem msg box stating

    C:|users\nnnnnn\appdata\local\conduit\backgroundcontainer\backgroundcontainer.dll
    Specified module could not be found.

    Had to go to Control Panel/Administrative Tools/Task Scheduler
    Search for it there to find where it gets launched and delete that task schedule.

    I hate conduit!

    • yes, i agree with you. the problem is also exasperated by such things as FaceBook and i think with iTunes because they also use files with the term “Conduit” in them. So it is unclear if their conduit is related to the malware. But it could very well be since the evil conduit has to be making money somehow and it might be sharing that revenue with others that are helping to perpetuate it.

      To this end, i avoid all occurrences of conduit even if it is used by the Pope, ie no more face book, no more iTunes, et al.

      Not worth it.

  31. Thanks so much. I really learned quite a bit today, thanks to you! Good fix.

  32. Hi there, I would like to subscribe for this website to get hottest updates, so where can i do it please
    assist.

    • I’m glad that this site provided you with some valuable information. As such, i don’t maintain it as an up-to-date place – especially since the world wide web is literally filled with such sites that provide the latest info on the latest issues, per se.

      Instead this blog is more as a place of last resort where obscure fixes can be found for issues that personally inflicted me and the www was of little or no help.

      Glad you like you like it, though.

      You can also check the Microsoft Answers Help Forum and Microsoft.com for many issues involving windows. However, my blog was basically started because there was / is a lack of information provided via these sites.

      In any case, if you have any suggestions or something odd that is virtually impossible to figure out in spite of the vastness of the www, let me know. :)

      ~dbben

  33. Actually when someone doesn’t be aware of after that its
    up to other people that they will help, so here it happens.

  34. Right now I don’t see any instances of “conduit” except for one in my “about:config”

    plugin.state.npconduitfirefoxplugin;0

    That is the line and if I reset it or erase it, then it shows back up in my add-ons. Right now it isn’t showing. I don’t know how to permanently get rid of that line though. I have done everything in registry and followed this guide. It bugs me and I wish it wasn’t there.

    Hopefully I got rid of it all. I wasn’t brave enough to use Regcleanr, it just had too much wrong with it. I used ccCleaner and it works very well without any junk attached to it. Also HijackThis is an excellent program. But I would find anything else besides the RegAlyzer and Regcleanr. Unfortunately, those are now scary programs to use.

    • well, I double checked and did some testing on RegAlyzr and it did not have any hitch hikers, like conduit or passshow. But to this end, i did a little more analysis and found that searching the registry the old fashion way for conduit does the same job as RegAlyzr. So i will amend the blog to remove RegAlyzr. However, i did send a message to Safer Networking people regarding the possibility their RegAlyzr being infected or hijacked by others. Lets see what they say.

  35. I just went to download RegAlyzer and there were options on that actual program to set your search to Conduit!!!! Also the PassShow is on that as well. Which is what Tim was talking about when he said he was getting redirected and found PassShow. Well he got it from RegAlyzer.

    • My older version of RegAlyzr did not have the contaminate.

      As a thought, perhaps i will try to upload my safe versions of registry tools for downloading by others.

      Thanks for the information and i will certainly look into it and provide an update to the blog. if you have any additional feedback or suggestions, please let me know.

  36. I did everything in the procedures you have listed but on Fire Fox my pages still kept being redirect. So I finally che checked my FirdeFox “Add-Ons” and found an extension called PassShow 1.i50. Disabled and the redirects stopped. :-)

    Thanks for all your help — Tim

    • hello tim, thanks for the feedback. i’ll notate your discovery in the blog for others to read. thanks again! dbben.

  37. Thank you so much for this.

    I inadvertently downloaded Conduit with some free software I wanted. I never downloaded it as my home page or it’s toolbar, but it became my search engine. I use IE.

    I did as others advised and changed my home page, made Google my main search engine (it’s my only one), removed add ons, cleared cookies, browser history etc. When I clicked my IE shortcut, Google appeared as normal, did when I opened another tab Conduit came up, when normally it would be another Google page.

    I was nervous about going into the registry but you instructions were so clear (and because AVG wanted to charge £100. I gave it a go. It worked, conduit doesn’t appear as a search engine in IE.

    One small issue, now once I’m in IE, my home page – Google is fine, but when I click on another IE tab it comes up as “about:blank” rather than Google. Do you know how I can put this back as it was before?

    • hi janet,

      firstly, be very careful of aaa vvvv gggg, ie avg, because they also have a malicious toolbar search add-in touted to be protection for us. And removing it is like removing an octupus from your neck. The only way to remove it (as far as i know) is with a avg toolbar remover that was especially designed. But i don’t recall if the avg makers provided it or some unknown genius off the web somewhere.

      In regards to ie’s homepage setting, i am not sure what the process is to fix this because i stopped using it long ago.

      However, since you have removed conduit, then there are some idea’s that i have not tested out for myself:

      idea 1: You might try uninstalling the ie browser and then installing a fresh copy of it. If i recall, uninstalling the ie will simply restore an older version of ie. But this would give you the opportunity to install a clean one.

      idea 2: Go to msn.com and set it as your home page. then you would likely be given the opportunity to make it the default. If msn doesn’t disappear on you after a week, then you might try setting a new home page, ie google.

      idea 3: try the microsoft fix it programs. these are tiny programs that correct a lot of common problems automatically. there are a few for the ie:

      http://support.microsoft.com/mats/ie_performance_and_safety

      idea 4) Ask the microsoft community via:

      http://answers.microsoft.com/en-us

      I hope the above provides some additional options for you. If any of them pan out, please let me know what worked for you so that i can update the main blog herein.

      dbben.

      • Hi dbben

        In the end it was a simple fix, went to Tools>Internet Options>Tabs and changed the settings. Have restarted my pc and all seems good. I didn’t do anything to them before so it must have been part of the Conduit fiasco!

        Thank you again for helping me get rid of Conduit, and for any other readers in the Registry it was in loads of different areas and it took 6/7 searched before it went completely.

        Also, thanks for warning about AVG TB, I usually don’t download any new toolbars as I never find them helpful.

      • i’m glad you got that pesky thing off your computer. incidentally, you might want to run that “fix-it” program from microsoft to ensure your ie browser has no issues under the hood, that we people would be unable to detect.

  38. Hey there would you mind sharing which blog platform you’re using?
    I’m planning to start my own blog soon but I’m having a tough time
    deciding between BlogEngine/Wordpress/B2evolution and Drupal.
    The reason I ask is because your layout seems different then most blogs and I’m looking for something completely unique.
    P.S Apologies for getting off-topic but I had to ask!

    • In think the template name i use is displayed somewhere at the bottom of the pages of mine. Something like de po masthead.

      I deliberately chose this template and kept it fundamentally simple because the issues I discuss are already complex enough for people.

      Regretfully, my pages are not fancy like many other nice webpages. But in the end, the value of the information I am conveying is based on the task it is meant to accomplish and not how fancy it looks or manipulated by fancy codes.

      I am not sure how i could share the codes on this page via this comment section because it would overwhelm this.

      But i can offer a couple of suggestions to help you with page building:

      1) When you pull up one of my pages via your browser, like with firefox or palemoon, use the browser menu tool option to view page source.

      This will give you a printout of the html code of the page you are looking at.

      Then while inside your wordpress page editing section, copy and paste that html code into it. (there is a tab to select code option/view of the page you are building/editing/creating)

      2) Microsoft provides a free program called Sharepoint Designer. It is for building webpages and managing websites that are Microsoft friendly. b

      But if they are not, the sharepoint is helpful with fine tuning webpages locally on your computer.

      However, be advised that sharepoint is not easy for beginners. But there is logic behind the madness/complexity of the sharepoint.

      Not only is there is a learning curve for understanding html codes but one for the program too.

      The sharepoint free version is somewhere at Microsoft.com.

      hth.

  39. I spent an entire day trying to rid my computer of this virus, even trying the above, when help rode in like a hero on a white horse and saved the day! Check this link:

    http://musesmachine.wordpress.com/2013/12/21/dont-fear-the-kiddie-conduit/#comment-41

    • hello dax, thanks for the link. it infers conduit as a malware/bug and that there are just 2 steps needed to remove it. however, the newer versions of conduit are not simply removed via add/remove programs or removing its search toolbar. further i would not considered conduit as a malware/bug. if it were, then the internet world would not allow it to perpetuate. instead conduit has a specific purpose and markets itself as a protected search engine/helper/whatever. but without doubt it is an information gatherer and not a very good one. else people would not notice its existence and computers would not suffer any performance. ???who knows, maybe the conduit is sponsored by the nsa or maybe the retail federation.

      if i were you, i would double check your system by running through the steps i provided and see how much more was needed to do to get your system cleaned away. if conduit is a trojan, then you should know how trojans work.

      • Thanks Database Ben, the steps I took worked. I call it Malware because it appears and changes your settings for homepage and new tab, without you doing so. Doesn’t matter what you call it, it’s annoying , insidious, and difficult to remove. But the method I posted worked really, really well. Poof! After 12hrs of headache, it’s gone!

  40. Thank you very much for this guide; it was very helpful for eliminating this wretched plague from my browser completely.

    As a side note, just so you know, SuperAntiSpyware picks this up as a Trojan, and Malwarebytes anti-malware picks up most of the key processes on a full scan, and both seem successful at quarantining and deleting the elements that they registered. I still needed to use your guide to completely get it off my browser, but just so you know, those programs do help quite a bit; they seem to do a few of the steps for me, as, for example, when I searched for “conduit” in the registry, the only things I got were files associated with some steam games held (I think the word “conduit” was used in those files purely by coincidence).

    Oh, that reminds me, I deleted all those registry files anyway, just to be safe. If any of my video games don’t run properly now, is it just as simple as uninstalling/reinstalling them to fix issues?

    • you’re welcome joel and thanks for the additional tips!

      As always, when ever a desirable program no longer functions, then it can always be re-installed.

      So after the system is cleaned away with the undesired program then reinstall your desirable programs and make a system restore point afterwards and call it something like, Conduit Free.

      That way if your system is inadvertently enslaved by Conduit, you may be able to free the system again plus restore your game at the same time by executing the special restore point you made.

      Also, if you made any restore points in the past while your system was infected, i would delete those restore points.

      Otherwise the malware may be restored in the future accidentally after you have forgotten about it.

    • Thank you so much.

  41. Am I the only one who doesn’t understand step 3? I’m using windows 7 and when I click on the start button I don’t see anything for run. Am I supposed to paste “> Run > Regedit” into the programs and files search? If so when I do that I don’t see a menu bar, so obviously I’m missing something here. Please help because I’ve been trying to remove this thing forever but can’t because I’m too dumb to understand the instructions. Can you dumb down the instructions a bit more?

    • thanks for the question.

      if you right click on the start button, then select properties, then select customize, you will find lots of little additions to enable or disable. there is one for the “run” field and if you enable it, it will become visible on the menu.

      there are also lots of built in shortcuts in win7 as well. personally, i don’t bother remembering any of them. however, there is a keyboard shortcut for the run command as well.

      if you have a modern keyboard, there should be a key with the windows emblem/symbol on it.

      so if you hold that key down and press the “r” key at the same time, the run window will pop up.

      the short cuts are something to look at later, if you desire. but in my situation, life is slow enough to execute window functions the ol’fashion way.

  42. Not sure how this horrible little cling-on sneaked its way into my PC, but thank you for the guide on uninstalling it. Hopefully I followed all the steps correctly, and I will definitely be more careful when downloading any new programs to read what they install carefully. Great guide, and again, thank you.

  43. Thank you! I just did 1; “start” 2; search Conduit then wait, and 3; delete all the Conduit files one by one… and do the search again for safety…

    • you are welcome. however, the conduit people didn’t make it that simple to remove their “information gatherer” – unless your version of conduit is an older one.

      rest assured that newer conduit version has evolved to be more complex and more hidden.

  44. OMG! A million thanks won’t be enough!! This cursed, wretched thing was bugging me! Phew! Good riddance! :D
    Also, a tip: Try including procedures for elimination from google chrome as well :) Although, I picked steps from both IE and Firefox and managed to work it just fine… :)

    • you are most welcome. in regards to chrome, i stopped using it long ago. i discovered long ago it was specially designed to be a highly proficient marketing tool. but don’t get me wrong, i am a fan of google (but not with their browser). and maybe once a year i might try out chrome to see if i am persuaded to use it. but eventually i just uninstall it and search my computer with a fine tooth comb looking for hidden files, keys and services pertaining to google this and that.

      if by chance you have some time, please feel free to post the steps you took to repair your google and i will gladly add them to the article.

      thanks again for your feedback.

      • Well, it is your personal preference and I am not so tech-savvy to be able to compare different browsers! All I can say is Chrome works for me so I use it, haha!

        Well as for the steps-
        1) Follow Steps one and two as listed.
        2) Clearing History: Ctrl+H > Run a search for ‘conduit’ > Click on ‘Remove Selected Items’ > Close Window > Delete the existing shortcut and recreate another before using chrome again.
        3) Clearing Extensions: Settings > Extensions > Delete everything that states ‘conduit’ and Disable Java

        That’s about it, I hope I didn’t miss something out!
        Keep up the good work – we need people like you helping us with all that technical stuff!

        Cheers!

  45. I used this page along with one other to successfully remove conduit from my system. At first I was confused at the toolbar and why I could not simply delete the program it to have it go away. I put off focusing on fixing it until it was so bad I couldn’t take it anymore. Your advice and attention to detail, and asking nothing in return is VERY appreciated. The fix worked, my system is so much quicker now, especially for browsing. I use chrome and firefox mostly. I have IE as well, it worked for all. Thank you so very much for your generosity in sharing your vast knowledge for the purpose of helping others. Very honorable.

    • you are welcome. remember to make a restore point to save the newly clean configuration and analyze whether or not you should delete your old restore points and or system back ups if they were created while your system was actively infected during those times.

  46. I posted a link to ****** forum – why did it get deleted?

    • I appreciate your feedback but not your suggestion for the following reasons

      a} because if the solution you found worked, then you would of not needed to visit my article,
      b) in spite of what you claim, ie nothing on this article herein worked “however” a freeware i know of “does”, is nothing more than pushing of a third party program which is spamming,
      c) the program / freeware you are promoting does not provide me with a listing of what all it looks for,
      d) the last thing people need is more darn freeware that may remove leech ware but replace it with their own information gathering leeches, and
      e) the people seeking honest assistance on my site will not be pushed from here to other sites. in other words, freeware and the miracles they can do should be google-able by people.

      thanks anyways for your time.

  47. Indeed, last time I trust CNET with anything. Spent several hours scouring my computer for kernels, files, folders and the like containing conduit and/or Quickshare and/or Linkury. What douchebags. Thank you for your help. The last threshold is getting the Quickshare to not appear in my Programs list. I seemed to have been too thorough and deleted the file pathway before actually doing the uninstall from the Ctrl. Panel.
    Thank you for your help!

    • you’re welcome. But i would not blame cnet. The programs they are hosting were designed by other people and companies. At this time conduit must be some kind of a hybrid because it is not being considered as an infection by the industry and i am not sure why. Even when i reported it to the people that make spybot, they did not consider it dangerous. Maybe conduit is affiliated with the government in some manner and something that the internet industry knows of but aint sayin nothin to us. If however we could blame cnet for this, it would be for permitting their downloads to have the “express” installation option instead of only 1 method, ie custom, in order to ensure people exercise their freedom of choice.

  48. Thanks a lot for this detailed help!

  49. thanks for the steps to get this off for good. i will share the info

  50. Just saying, I find it kinf of funny how we’re all trying to remove conduit, connect, etc. yet the RegAlyzr from cnet actually INSTALLS conduit/ connect etc if you use the express install…..

    • hmm? The last time i installed regalyzr there was no conduit add-on. However, conduit is evolving like an infection. Fortunately, i am confident that if it does get installed via regalyzr, regalyzr will subsequently reveal it during the execution of the protocol i have provided.

      I recall the time that conduit would install secretly. At least now, people have the opportunity to exercise some judgement when installing free wares AND USE CUSTOM INSTALL/SETUP.

      Perhaps this is why cnet is not bothered by conduit because the user ultimately has the freedom to 1) not install freeware and 2) not to install conduit and other information gathering leeches.

  51. Thanks, I just spent 3 hours (when I should have been doing paid work) removing conduit from my computer and browsers. It infuriates me that these people have the gall to hijack my computer without my permission, and that they prey on peoples’ ignorance (ie. someone in my family probably unwittingly downloaded it). Thanks for the thorough help! It’s nice to know there are ethical people out there willing to help others.

    • I’m glad that the methods proved useful for you. I agree that these companies are becoming highly aggressive. However, it is due to lack of regulations.

      Conduit has evolved since I initially documented the steps of removing the darn thing way back when. And back then I was not sure what i was dealing with. Back then I took me many days over the course of many months to figure out what this thing was dong, where it was and how it got onto the computer. So I definitely know it takes a while to fix computers.

      But in the long run, the 3 hours you spent by yanking conduit out each thread at a time, preserved your system and your personal files.

      Most often, a professional repair shop will just wipe the disk clean and reinstall all the original software, with a couple of clicks of a button and charge 75.00 / hour or more.

      Lastly, please remember that whenever you install “free” software; use the custom method and not the quick/express method. Then during the custom setup read carefully each window and uncheck / decline all the extra software that piggyback the main software want to install/use – no matter what kind of ominous threats or how vital their little add-on programs claim to be. Iin the end they are vital only to their bottom line and at your/our expense.

      PS: Dont forget to make a system restore point at this time and call it something like, Conduit free.

    • if you followed all the steps in the article and didn’t experience any difficulties, then there are a couple of additional things you can try. below are extra steps that you can try. If the registry was properly cleaned out from conduit, then steps 1 and 2 may not show anything of conduit. but double check anyways.

      step 3 is something i recall doing last spring on a friends computer. but i may have fogotten to amend the webpage with this new step.

      1) run “hijackthis” and remove (fix option) any line items that refer to conduit.
      2) run “autoruns” and search through all the tabs for any inference to conduit. then flag those lines for deletion or disabling
      3) next, try uninstalling firefox then reinstalling a fresh copy. if however, you would like to try avoiding this easy step, you could search under the hood, per se. in the browsers address field launch about:config

      let me know what you find with any of the steps above so that i can begin making plans to modify the webpage on removing conduit.

  52. I echo Sandy’s relief. That darn thing was a beast and an big annoyance. Thanks for the tutorial. I had put this on an off line desk top after downloading a file on my laptop

    • you’re welcome.

      unfortunately, it seems that conduit has evolved since i last created the ‘remove conduit” methodology.

      so i will look forward in amending the page to take into account the conduit toolbar and conduit start up entry that can be disabled via msconfig.

      i have also recently seen that conduit can also be uninstalled via add-remove programs / programs & features control panels. but i’m pretty sure that de-installation of conduit will be futile and will trick the computer user that it was removed.

      thanks for your feedback. more is most welcome !

  53. It went!!! Thank you so much for your help !!!! :)

  54. I deleted the file “TBVerifier” using safe mode. However when I start my PC right after, a popup started appering that says there was a problem starting C:\program files(x86)\Conduit\CT3304783\plugins\TBVerifier.dll. How can I continue the process?? Please let me know.

    • well, at least the error message gave you the location of the conduit folder. what is happening is that as you remove conduit, the child programs are having difficulty launching – thus this particular error you are seeing.

      if your system is locking up because of conduit, try doing all of the steps via safe mode.

      also, the error message provides us with an additional clue, which is that the dependent/child program needing conduit might be identified in the system start up.

      so here is an extra method for you:

      while in safe mode, click on the start button and click on the “run” command. then run msconfig

      there is a tab in msconfig referencing startup programs. so go down the list and uncheck anything that is unnecessary for the computer to start with, then click apply.

      most often you don’t need anything in the start up anyways, except the anti virus program..

      however, if you have a laptop, leave any lines the refer to the mouse and keyboard.

      if by chance you don’t have a “run” command after clicking the start button, then in the search box you can enter msconfig, and search.

      then the msconfig shows up in the results, clicking it will open up to the method above.

  55. Hi, I could delete all the files inside the conduit folder except for a file “TBVerifier.dll”. It says this file is open in “rundll 32″. It would be great if you could direct me to delete this file..I have remove the registry key as well.

    • try via safe mode because it seems that an actively loaded program is somehow tied to that file. so in safe mode, that program will not be activated. PS: I just revised the “how to remove conduit” page. Please scan it and see if any of the additional information is something you can execute in addition to what you have already done.

  56. Thank you greatly for sharing this!

  57. Thank you so much for the post. Very helpful.

    I do have a question, however silly it may be. When searching the registry for conduit and removing the values for each, can you explain why removing the values and then exiting vs deleting the key/registry item? Or is the removal left to the scan to take care of?

    • i left the key without values on the chance that if “if” conduit wanted to re-install then its attempt to add itself in the registry might be hampered if it saw its key already present. while i cant justify this rationale, it would be safe to say that if there was no conduit key in the registry, then the infection would consider the registry open for business, per se.

      but i am a believer of keeping the registry nice and tidy. so removing the key’s all together wouldn’t hurt, especially since you are now famaliar with this infection. what i would recommend is to make a system restore point after removing the conduit values and or keys, and call it something like “after conduit removal”.

      that way if you do get infected by it again, you can restore the master file table and the registry you cleaned up and then recorded by the “restore point”

  58. Thank you!

  59. Thank you so much for posting this! I don’t know the first thing about computers and I was terrified of breaking my computer even more but I followed the steps and its finally gone! =] You’re the best!

  60. A BIG THANK YOU FOR YOU, THIS KIND OF PEOPLE WE NEED IN THE INTERNET. THE HELPER ONES!!!! UN GRACIAS MUY GRANDE, UM OBRIGADO MUITO MAYOR!!!!!

  61. I leave a response whenever I appreciate a article
    on a site or if I have something to contribute to the conversation.

    Usually it’s triggered by the passion communicated in the article I looked at. And after this article Methods to Remove Conduit | PC Smarties. I was excited enough to drop a comment ;-) I actually do have a few questions for you if you don’t mind.
    Could it be simply me or does it look like like some of these comments look like
    they are coming from brain dead folks? :-P And, if you are writing at other online
    sites, I would like to keep up with you. Would you make a list every one of all your community pages like
    your twitter feed, Facebook page or linkedin profile?

  62. I have been unable to get past step two. My computer tells me that the conduit folder must be closed before it can be sent to the recycling bin. Your instructions state something about “executing a refresh,” but I don’t know how to do this in Windows. Any suggestions?

    • the conduit issue may not be the only one you are experiencing on your system. but ridding conduit will be helpful to see if any other different issues exist on your system.

      a) first check to ensure you have only one instance of “my computer” running. sometimes if there are 2 or more instances running, one of the “my computer” windows can prevent changes occurring in the other “my computer”.

      b) what you can do is to open the task manager, ie ctrl alt del keys, and try to end / kill all process and program that you are not using at this time. for example, there is no need to have programs like ms word open at this time. so look for all programs that are opened / running and end them via the task manager. hopefully, one of the process’s you close will be the one that is protecting that conduit folder.

      c) another method you can use is executing the procedures via safe mode. safe mode will only load the minimal files in order to run pure and basic windows. so in safe mode, all second and third party process’s and programs will not be loaded, which would also prevent anything related to conduit from running. to this end, that conduit folder should be deletable in safe mode.

      let me if any of the above proved to help overcome this issue and i will amend the procedures regarding the particular scenario you brought forth. thanks !!

  63. Thanks a lot! I thought I killed off Conduit on my computer weeks ago, but I was still getting WebCake ads and crap, so I used this and found a fresh wave of Conduit I overlooked before hiding in the C drive and cookies. Thank you!

  64. Conduit is tracked down and flagged in red by Spybot-Search&Distroy 2.1. Thank you for the elaborated instructions.

  65. when I search the registry for conduit and try to delete everything that comes up in the search on the right hand side, it says it may cause system instability. I am not computer saavy at all. I deleted them and hope all okay.

    The other thing is when using IE and trying to block cookies under “sites” it wont let me block the conduit sites that are recommended here when I type them in, they are not added to the list of blocked sites.!?

    • its possible that your ie is not microsoft genuine. i mean some corporations like yahoo develop their own version of ie and may be preventing the modifications your are trying to do. another possibility is that your browser may be hijacked or infected.

      unfortunately, i dont use ie anymore and simply switched over to firefox and palemoon, which are more user friendly now.

      to this end, i don’t know whats new or changed inside ie, which is one of the reasons i stopped using it a long time ago as well.

      what i suggest that you can try is to go to microsoft’s website and look up on a “How to delete cookies” and “How to block cookies”.

      Then see if i had missed any steps in my procedures. If so, let me know what you find out!

  66. Amazing – a million thank yous! So thankful to find your blog. Lots of steps, but very thorough and it worked beautifully after trying several other suggestions that failted.

  67. Omg!!!!! I’ve tried everything and this was the answer to my conduit funmoods issues!!!! I haven’t two more things to add…… go under regedit and under edit tab is find tab, type in the virus (in this case conduit, but also look up funmoods, dealcabby, babylon ) delete the files on the right hand corner- but you have to continue to search it several times until you’ve deleted al the files….. and how do you delete the files from opera web browser??????????

  68. The most detailed information on erasing EVERY trace of this, thanks very much!

  69. oh my goodness this really helped! thank you so much I really appreciate it!

  70. When I initially commented I seem to have clicked the -Notify me when new comments are added- checkbox and now every time a
    comment is added I receive four emails with the same comment.
    There has to be an easy method you can remove me from that service?
    Many thanks!

    • terrance – sorry for the problem. wordpress keeps adding new features and i just keep ignoring them. in any case, i turned off the “track back and ping ” feature under comments. hope this helps.

  71. Worked a treat – many thanks for your solution.

  72. Taken your advice – thanks

  73. Thanks so much!!! You rule. :))

  74. Thank you so much!!! I never would have gotten rid of this cursed thing without your explicit step-by-step directions. You rule! :))

  75. Thanks for the help. This is an old post but it would be nice if you still received my thanks.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Follow

Get every new post delivered to your Inbox.

Join 26 other followers

%d bloggers like this: