Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

ConduitEngineSetup.exe. Malware? Can't delete


  • Please log in to reply
9 replies to this topic

#1 n01paranoid

n01paranoid

  • Members
  • 176 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:53 PM

Posted 10 October 2011 - 05:10 AM

I recently downloaded ashampoo Burning Studio 6 Free. I unchecked the option to install the conduit search engine but it went ahead and installed anyway. I've removed as much of it as I can but I'm still left with GLF4D5A.tmp.ConduitEngineSetup.exe. When I try to delete it it says I need permission to perform this action, but nothing I've tried has worked.

For instance, if I try properties-security-advanced-owner, it says 'Unable to display current owner', and clicking on edit makes no difference.

Any assistance would be much appreciated.

BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,134 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:53 PM

Posted 10 October 2011 - 07:48 AM

If you are using Firefox, uninstall it from the addons.

Users are reporting that Revo Uninstaller having success in uninstalling Conduit.
Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 n01paranoid

n01paranoid
  • Topic Starter

  • Members
  • 176 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:53 PM

Posted 10 October 2011 - 08:31 AM

Uninstalled in browser (Chrome), and I've used Revo but there's still this stubborn file that won't shift. There are some sites that flag GLF4D5A.tmp.ConduitEngineSetup.exe up as a trojan but I think these are scareware merchants trying to extort money.

Edited by n01paranoid, 10 October 2011 - 08:39 AM.


#4 buddy215

buddy215

  • Moderator
  • 13,134 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:53 PM

Posted 10 October 2011 - 09:01 AM

Have you tried deleting it while in safe mode?
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 n01paranoid

n01paranoid
  • Topic Starter

  • Members
  • 176 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:53 PM

Posted 11 October 2011 - 09:23 AM

Thanks buddy. Deleting in safe mode worked :thumbsup:

#6 buddy215

buddy215

  • Moderator
  • 13,134 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:53 PM

Posted 11 October 2011 - 12:05 PM

Good.

I did find some more info on removing the Conduit crap. It is definitely malware. Anything that
installs without the users permission and provides no means to uninstall is malware. Plus it is spying
and downloading ads and who knows what else.
The site below has some removal info and comments from other users.
The Unsuitablog Blog Archive How to Remove Conduit Engine Search from Firefox 3.x

As stated in that link, along with registry edits, check your program files. (usually C:\program files\Conduit and C:\program files\Conduit Engine)
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#7 n01paranoid

n01paranoid
  • Topic Starter

  • Members
  • 176 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:53 PM

Posted 12 October 2011 - 04:27 AM

Thanks for the link, very useful. I certainly won't be using ashampoo products again. It seems to be an increasing trend for companies, some with previously very good reputations like Avira, to bundle their products with spyware and the like.

#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,399 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:53 PM

Posted 12 October 2011 - 06:58 AM

Many toolbars, Add-ons, screensavers, and weather monitoring programs come bundled with other software and can be the source of various issues and problems. They usually can be removed via Add/Remove Programs from the Control Panel or Programs and Features in Vista/Windows 7, so always check there first.

Internet Explorer users can uninstall Conduit Engine using the Add or Remove Programs function, and Firefox users can uninstall using the Tools > Add-ons menu in the browser. In all cases, they can choose to uninstall specific apps or the entire Conduit Engine.

How do users uninstall Conduit Engine?

Manual Removal Guide for Conduit.Engine
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 n01paranoid

n01paranoid
  • Topic Starter

  • Members
  • 176 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:53 PM

Posted 12 October 2011 - 08:01 AM

Thanks for the links quietman. Now I'm wondering what other leftover nasties I've got because I only found the conduit one by accident. Paretologic Health Advisor and Uniblue Registry Booster have certainly been on my computer in the past before I knew any better, and they're just the ones I remember. There's no obvious malware that appears in Add/Remove programs.

Edited by n01paranoid, 12 October 2011 - 08:03 AM.


#10 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,399 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:53 PM

Posted 12 October 2011 - 09:45 AM

Not all toolbars and add-ons are malicious or technically malware. It's just that many of them are installed stealthy without the user's knowledge or consent.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users