Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Search Protect by Conduit on my web browsers


  • Please log in to reply
8 replies to this topic

#1 monkeyd_ace

monkeyd_ace

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:01:59 PM

Posted 03 September 2013 - 03:58 PM

Hello I noticed this program has been installed without my permission. It's not uninstalling. What do I do?



BC AdBot (Login to Remove)

 


#2 TwinHeadedEagle

TwinHeadedEagle

  • Security Colleague
  • 352 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:06:59 AM

Posted 03 September 2013 - 04:21 PM

 
Open, press Scan, and wait until it finish.
Then press Clean and the Restart computer when it asks...


#3 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,338 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:01:59 AM

Posted 03 September 2013 - 07:44 PM

Post your scan log too,
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#4 monkeyd_ace

monkeyd_ace
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:01:59 PM

Posted 04 September 2013 - 11:18 AM

# AdwCleaner v3.002 - Report created 05/09/2013 at 00:12:14
# Updated 01/09/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : anton - ADY-PC
# Running from : C:\Users\anton\Desktop\AdwCleaner.exe
# Option : Clean


***** [ Services ] *****

Service Deleted : CltMngSvc

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\SearchProtect
Folder Deleted : C:\Program Files\YTD Toolbar
Folder Deleted : C:\Users\anton\AppData\Local\SearchProtect
Folder Deleted : C:\Users\Ady\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofaekbahncacnjgelnfjcjoelcglkhkj
Folder Deleted : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofaekbahncacnjgelnfjcjoelcglkhkj

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3220468
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKLM\Software\SearchProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Product Deleted : Google Update Helper

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Google Chrome v29.0.1547.62

[ File : C:\Users\Ady\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\anton\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : homepage
Deleted : search_url
Deleted : suggest_url
Deleted : keyword
Deleted : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [20217 octets] - [27/08/2013 16:02:15]
AdwCleaner[R1].txt - [15113 octets] - [30/08/2013 06:08:54]
AdwCleaner[R2].txt - [2511 octets] - [05/09/2013 00:10:27]
AdwCleaner[S0].txt - [14751 octets] - [30/08/2013 06:09:48]
AdwCleaner[S1].txt - [2173 octets] - [05/09/2013 00:12:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2233 octets] ##########



#5 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,338 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:01:59 AM

Posted 04 September 2013 - 07:46 PM

I thought Twin would be back by now.
 
Is that the full log? I don't see any Conduit.
 
 
Run this also
 
thisisujrt.gif Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#6 monkeyd_ace

monkeyd_ace
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:01:59 PM

Posted 05 September 2013 - 03:18 PM

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.7 (09.01.2013:1)
OS: Windows 7 Home Premium x86
Ran by anton on Fri 09/06/2013 at 4:14:12.48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\free download manager
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{1C46A0DD-D53E-46C4-A435-CA11103E255E}
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\AboutURLs\\Tabs



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1572910001-2245323959-4067117958-1003\Software\SweetIM



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader"
Successfully deleted: [Folder] "C:\Users\anton\appdata\locallow\ytd"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Fri 09/06/2013 at 4:17:20.86
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



#7 TwinHeadedEagle

TwinHeadedEagle

  • Security Colleague
  • 352 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:06:59 AM

Posted 05 September 2013 - 04:28 PM

How are things now?

#8 monkeyd_ace

monkeyd_ace
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:01:59 PM

Posted 05 September 2013 - 11:51 PM

So far it's good, thanks. I'm still wondering how I got this in the first place.



#9 TwinHeadedEagle

TwinHeadedEagle

  • Security Colleague
  • 352 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:06:59 AM

Posted 06 September 2013 - 01:15 AM

Probably by installing some application. Be carefull next time :)






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users