ConduitEngineSetup.exe. Malware? Can't delete

#1 n01paranoid

Member

Group: Members
Posts: 78
Joined: 29-April 11
Gender:Male

Posted 10 October 2011 - 05:10 AM

I recently downloaded ashampoo Burning Studio 6 Free. I unchecked the option to install the conduit search engine but it went ahead and installed anyway. I've removed as much of it as I can but I'm still left with GLF4D5A.tmp.ConduitEngineSetup.exe. When I try to delete it it says I need permission to perform this action, but nothing I've tried has worked.

For instance, if I try properties-security-advanced-owner, it says 'Unable to display current owner', and clicking on edit makes no difference.

Any assistance would be much appreciated.

#2 buddy215

Forum Addict

Group: BC Advisor
Posts: 4,589
Joined: 14-April 06
Gender:Male
Location:West Tennessee

Posted 10 October 2011 - 07:48 AM

If you are using Firefox, uninstall it from the addons.

Users are reporting that Revo Uninstaller having success in uninstalling Conduit.
Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

#3 n01paranoid

Member

Group: Members
Posts: 78
Joined: 29-April 11
Gender:Male

Posted 10 October 2011 - 08:31 AM

Uninstalled in browser (Chrome), and I've used Revo but there's still this stubborn file that won't shift. There are some sites that flag GLF4D5A.tmp.ConduitEngineSetup.exe up as a trojan but I think these are scareware merchants trying to extort money.

This post has been edited by n01paranoid: 10 October 2011 - 08:39 AM

#4 buddy215

Forum Addict

Group: BC Advisor
Posts: 4,589
Joined: 14-April 06
Gender:Male
Location:West Tennessee

Posted 10 October 2011 - 09:01 AM

Have you tried deleting it while in safe mode?

#5 n01paranoid

Member

Group: Members
Posts: 78
Joined: 29-April 11
Gender:Male

Posted 11 October 2011 - 09:23 AM

Thanks buddy. Deleting in safe mode worked :thumbsup:

#6 buddy215

Forum Addict

Group: BC Advisor
Posts: 4,589
Joined: 14-April 06
Gender:Male
Location:West Tennessee

Posted 11 October 2011 - 12:05 PM

Good.

I did find some more info on removing the Conduit crap. It is definitely malware. Anything that
installs without the users permission and provides no means to uninstall is malware. Plus it is spying
and downloading ads and who knows what else.
The site below has some removal info and comments from other users.
The Unsuitablog » Blog Archive » How to Remove Conduit Engine Search from Firefox 3.x

As stated in that link, along with registry edits, check your program files. (usually C:\program files\Conduit and C:\program files\Conduit Engine)

#7 n01paranoid

Member

Group: Members
Posts: 78
Joined: 29-April 11
Gender:Male

Posted 12 October 2011 - 04:27 AM

Thanks for the link, very useful. I certainly won't be using ashampoo products again. It seems to be an increasing trend for companies, some with previously very good reputations like Avira, to bundle their products with spyware and the like.

#8 quietman7

Bleepin' Janitor

Group: Global Moderator
Posts: 25,517
Joined: 09-July 05
Gender:Male
Location:Virginia, USA

Posted 12 October 2011 - 06:58 AM

Many toolbars, Add-ons, screensavers, and weather monitoring programs come bundled with other software and can be the source of various issues and problems. They usually can be removed via Add/Remove Programs from the Control Panel or Programs and Features in Vista/Windows 7, so always check there first.

Quote

Internet Explorer users can uninstall Conduit Engine using the Add or Remove Programs function, and Firefox users can uninstall using the Tools > Add-ons menu in the browser. In all cases, they can choose to uninstall specific apps or the entire Conduit Engine.

How do users uninstall Conduit Engine?

Manual Removal Guide for Conduit.Engine

Microsoft MVP - Consumer Security 2007-2012

Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#9 n01paranoid

Member

Group: Members
Posts: 78
Joined: 29-April 11
Gender:Male

Posted 12 October 2011 - 08:01 AM

Thanks for the links quietman. Now I'm wondering what other leftover nasties I've got because I only found the conduit one by accident. Paretologic Health Advisor and Uniblue Registry Booster have certainly been on my computer in the past before I knew any better, and they're just the ones I remember. There's no obvious malware that appears in Add/Remove programs.

This post has been edited by n01paranoid: 12 October 2011 - 08:03 AM

#10 quietman7

Bleepin' Janitor

Group: Global Moderator
Posts: 25,517
Joined: 09-July 05
Gender:Male
Location:Virginia, USA

Posted 12 October 2011 - 09:45 AM

Not all toolbars and add-ons are malicious or technically malware. It's just that many of them are installed stealthy without the user's knowledge or consent.

Microsoft MVP - Consumer Security 2007-2012

BleepingComputer.com: ConduitEngineSetup.exe. Malware? Can't delete