Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Conduit Run DLL Error on start up


  • Please log in to reply
53 replies to this topic

#1 JoseH3

JoseH3

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:11:49 PM

Posted 22 October 2013 - 09:11 AM

Hello, I am new around these parts and I am on Windows 7 and a couple nights ago I somehow got the Conduit Malware Toolbar installed on my laptop.  I went through the control panel an uninstalled Conduit and now on start up I get an error. "There was a problem starting C:\Users\Joe\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll  The specified module could not be found."

 

I did a search and found this thread, but it is closed. (http://www.bleepingcomputer.com/forums/t/503142/conduit-dll-error/)  Is this the same process I need to go through and after I upload the .txt file, can I upload it to the thread for further instruction? 

 

Thank you to anyone that can assist!



BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 62,333 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:49 AM

Posted 22 October 2013 - 11:53 AM

Yes follow that procedure and let us know.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook Have you seen..Select Real Security

#3 JoseH3

JoseH3
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:11:49 PM

Posted 22 October 2013 - 12:22 PM

http://www.sendspace.com/file/63sg96

 

If anything else looks suspect feel free to mention... I had gotten other tool bars such as swiftlink (pretty sure entirely removed though)...



#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 62,333 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:49 AM

Posted 22 October 2013 - 12:58 PM

Click on FIRST Copy Link button and paste the link in your next reply.


ADW Cleaner

Please download AdwCleaner by Xplode and save to your Desktop.
[list]
  • Double click on AdwCleaner.exe to run the tool
  • Click on the Scan button.
  • AdwCleaner will begin to scan your computer like it did before.
  • After the scan has finished...
    <-insert any special instructions here for what to uncheck OR remove this line if there are none->
  • This time click on the Clean button.
  • Press OK when asked to close all programs and follow the onscreen prompts.
  • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
  • After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of that logfile will also be saved in the C:\AdwCleaner folder.
  • .
    .

Edited by boopme, 22 October 2013 - 01:00 PM.

How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook Have you seen..Select Real Security

#5 JoseH3

JoseH3
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:11:49 PM

Posted 22 October 2013 - 01:13 PM

Went through the steps and on the re-start I got the same error message for the conduit run dll file.... here is the log that appears upon restart;

 

# AdwCleaner v3.010 - Report created 22/10/2013 at 14:07:40
# Updated 20/10/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Joe - COMPY
# Running from : C:\Users\Joe\Downloads\AdwCleaner.exe
# Option : Clean
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\Conduit
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Users\Joe\AppData\Local\Conduit
Folder Deleted : C:\Users\Joe\AppData\Local\DefineExt
Folder Deleted : C:\Users\Joe\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Joe\AppData\LocalLow\PriceGong
File Deleted : C:\END
File Deleted : C:\Users\Joe\AppData\Local\Temp\Uninstall.exe
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3317127
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_hgeaklkciolgbejekedbdphhbjbiaamp]
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B78F92C8-DEB3-11E2-9A0A-FB64281D6ADE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B78F92C8-DEB3-11E2-9A0A-FB64281D6ADE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{323420B6-65E5-4657-8106-A27392D4D4AA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7736C7FA-512D-11E2-B871-DEC36088709B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B78F92C8-DEB3-11E2-9A0A-FB64281D6ADE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{323420B6-65E5-4657-8106-A27392D4D4AA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7736C7FA-512D-11E2-B871-DEC36088709B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B78F92C8-DEB3-11E2-9A0A-FB64281D6ADE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKCU\Software\SocialBit
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\smartbar
Key Deleted : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\LinkSwift
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v10.0.9200.16720
 
 
-\\ Google Chrome v
 
[ File : C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 
*************************
 
AdwCleaner[R0].txt - [3870 octets] - [22/10/2013 14:04:45]
AdwCleaner[S0].txt - [3838 octets] - [22/10/2013 14:07:40]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3898 octets] ##########


#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 62,333 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:49 AM

Posted 22 October 2013 - 01:19 PM

Run JRT and see if it is all gone now.
thisisujrt.gif Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook Have you seen..Select Real Security

#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 32,757 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:49 AM

Posted 22 October 2013 - 02:13 PM

Conduit has also be found to install the follow file which causes the same startup/scheduled task error:

C:\Users\username\AppData\Local\Conduit\backgroundco container\background container.dll

Rerun Autoruns the same as before but this time look for background container.dll.


Microsoft MVP - Consumer Security 2007-2014 MVP.gif

Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#8 JoseH3

JoseH3
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:11:49 PM

Posted 22 October 2013 - 03:41 PM

quietman7 - I did not see the background container.dll when I ran the Autoruns.

 

Here is the log from the Junkware Removal Tool (I did not see the conduit error on my desk top after JRT restarted the computer, but I was away from my laptop so I will restart to verify):

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.7 (10.15.2013:3)
OS: Windows 7 Home Premium x64
Ran by Joe on Tue 10/22/2013 at 15:25:04.15
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
 
 
~~~ Registry Values
 
 
 
~~~ Registry Keys
 
 
 
~~~ Files
 
 
 
~~~ Folders
 
Successfully deleted: [Folder] "C:\Users\Joe\appdata\local\cre"
Successfully deleted: [Folder] "C:\Program Files (x86)\coupons"
 
 
 
~~~ Chrome
 
Successfully deleted: [Folder] C:\Users\Joe\appdata\local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
 
 
 
~~~ Event Viewer Logs were cleared
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 10/22/2013 at 15:39:53.68
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


#9 JoseH3

JoseH3
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:11:49 PM

Posted 22 October 2013 - 03:44 PM

Whomp whomp... restarted and still get the same error...



#10 JoseH3

JoseH3
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:11:49 PM

Posted 22 October 2013 - 03:48 PM

Ran Autoruns again... here is the upload. let me know if you see something I don't:

 

http://www.sendspace.com/file/i15yqt



#11 bpmee31

bpmee31

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:12:49 AM

Posted 23 October 2013 - 02:06 PM

Edit: Before trying this solution, use all the anti-malware programs listed above. I used them first and the only thing leftover was this error message. All of the other garbage was cleaned for me.

 

Hi,

 

I too mistakenly installed Conduit crap. I ran into the same problem with the failed BackgroundContainer.dll on start up. I'm on Windows 8 64 Bit.

 

The solution is to open regedit.exe and remove the key from your system.

 

1. Backup your registry. System Mechanic can do this for you.

 

2. Open regedit.exe in administrator mode.

 

3. Ctrl+f to search (make sure you've clicked on the computer icon at the top of the file tree, else the search will only look in the folder currently open)

 

4. Type in BackgroundContainer.dll, or Background, or Container until you get some result. I had to search a couple times.

 

5. Look at the results and the key values. They will contain something like "Conduit startup" or "Search bar startup".

 

6. Delete the entire key, listed in the file tree.

 

7. Run a registry check program to make sure your system is sane.

 

8. Reboot and it should be gone.


Edited by bpmee31, 23 October 2013 - 06:39 PM.


#12 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 32,757 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:49 AM

Posted 23 October 2013 - 03:21 PM


System Mechanic is a comprehensive optimization suite by iolo that purports to improve performance, make repairs and enhance the speed of a computer. It includes a registry cleaner, a registry revitalizer (to fix "so called problems"), system optimizer and several other features. These types of tools and the claims they make are borderline scams.

Bleeping Computer DOES NOT recommend the use of registry cleaners/optimizers for several reasons.
Why you should not use Registry Cleaners and Optimization Tools
Microsoft MVP - Consumer Security 2007-2014 MVP.gif

Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#13 JoseH3

JoseH3
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:11:49 PM

Posted 23 October 2013 - 06:10 PM

Thanks quietman7... I was a bit leery on that... plus, no offense if bpmee3 is truly trying to help, but he does only have one post to his name... I think I will leave it to the admins and moderators to help out with my error message, which I still have...

 

Thanks everyone! 



#14 bpmee31

bpmee31

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:12:49 AM

Posted 23 October 2013 - 06:19 PM

Hi folks,

 

Just trying to help. I honestly didn't know registry cleaners were a scam. The steps I outlined worked for me and the Conduit DLL error is gone.

 

The programs listed up-thread actually play with the registry, too. I guess it comes down to which ones are trustworthy and which aren't.

 

The advice I posted came from a site similar to serverfault and wasn't tagged as dubious by anyone there.



#15 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 32,757 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:49 AM

Posted 23 October 2013 - 06:47 PM

Ran Autoruns again... here is the upload. let me know if you see something I don't:
 
http://www.sendspace.com/file/i15yqt

I am not registered at that site, so boopme will have to take a look and advise you.
Microsoft MVP - Consumer Security 2007-2014 MVP.gif

Member of UNITE, Unified Network of Instructors and Trusted Eliminators




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users