Solved search.conduit adware not detected by Windows Defender ?

Hewlett-packard / Hp compaq dc7100 sff(pk86...
February 11, 2014 at 14:24:59
Specs: w 8, 2.793 GHz / 503 MB
has anyone notice that Windows Defender can not detect the ad-ware called search.conduit ?


I have already removed this virus using different method



See More: search.conduit adware not detected by Windows Defender ?

Report •


✔ Best Answer
February 14, 2014 at 14:53:08
it appears that Johnw has not helped you any further !!


#1
February 11, 2014 at 15:41:45
Neither does Avast, AVG, Norton etc.

Often browser hijackers, adware and malware require specialist software to identify and dig them out. That's why we have the likes of Malwarebytes and a plethora of other tools to help deal with these.

Often the likes of Search Conduit comes packed with other unwanted guests, accompanying another downloaded file.
Frequently they are installed with the users permission as they didn't read the ULA, nor did they they tick/untick the necessary boxes during the installation process.

Out of interest, how did you get rid of Search Conduit?
Are you sure your PC is now clean.


Report •

#2
February 11, 2014 at 15:55:17
"I have already removed this virus using different method"

To be really sure.
Run both of these, in this order.

1: Run AdwCleaner
http://www.softpedia.com/get/Antivi...
http://www.softpedia.com/progScreen...
How to download from Softpedia
http://i.imgur.com/BWELEfV.gif
http://i.imgur.com/4luY3rU.gif
http://www.raymond.cc/blog/adwclean...
http://www.bleepingcomputer.com/dow...
Author's site
http://general-changelog-team.fr/en...
Tutorial
http://general-changelog-team.fr/en...
Please download AdwCleaner by Xplode onto your Desktop.
Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Clean.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please Copy & Paste the contents of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

2: Run Junkware Removal Tool
http://www.softpedia.com/get/Securi...
http://www.softpedia.com/progScreen...
How to download from Softpedia
http://i.imgur.com/qO92huz.gif
http://i.imgur.com/qzTUYkX.gif
http://www.bleepingcomputer.com/dow...
http://thisisudax.blogspot.com.au/2...
Download Junkware Removal Tool to your Desktop.
Warning! Once the scan is complete JRT will shut down your browser with NO warning.
Shut down your protection software now to avoid potential conflicts.
Temporarily disable your antivirus and any antispyware real time protection before performing a scan.
Click this link to see a list of security programs that should be disabled and how to disable them.
http://www.bleepingcomputer.com/for...
http://www.techsupportforum.com/for...
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7/8, right-click JRT and select Run as Administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
Copy and Paste the contents of the JRT.txt log please.


Report •

#3
February 13, 2014 at 14:23:40
here is the JRT file -

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 8 x64
Ran by budda on Fri 02/14/2014 at 9:20:05.03
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


~~~ Services

~~~ Registry Values

~~~ Registry Keys

Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220322552274}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322552274}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

\{0EEDB912-C5FA-486F-8334-57288578C627}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

\{25EB66FC-03A7-40AA-A073-EAAF723CDD90}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{25EB66FC-03A7-40AA-A073-EAAF723CDD90}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25EB66FC-03A7-40AA-A073

-EAAF723CDD90}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper

Objects\{0EEDB912-C5FA-486F-8334-57288578C627}

~~~ Files

~~~ Folders

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Fri 02/14/2014 at 9:22:18.36
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Report •

Related Solutions

#4
February 13, 2014 at 14:39:31
My post #2

"I have already removed this virus using different method"

To be really sure.
Run both of these, in this order."

Did you?


Report •

#5
February 14, 2014 at 14:53:08
✔ Best Answer
it appears that Johnw has not helped you any further !!

Report •


Ask Question