I have since read some cautionary discussion on using the cnet installer, suggesting people have had problems even when rejecting any bundled downloads, seeming some junk can be bundled anyway? see here http://forums.cnet.com/7723-6132_102-591945-0/search-conduit-malware/
I also note that a few days before I started having problems with the shockwave flash plugin crashing - this may indicate separate issue, or maybe just be instability of the current version of firefox / flash perhaps
Anyway, I ran Malwarebytes in full scan, found a lot of files associated with pup.optional.conduit.a I cleared those (log attached), and then ran malywarebytes again in quick, which came up clean. Always suspicious things are not always that simple, I searched for what I was up against, whether any other action required. I found this page: https://forums.malwarebytes.org/index.php?showtopic=131221 and followed the instructions, ie I downloaded and ran DDS (dds.txt and attact.txt attached) I downloaded and ran Junkware Removal Tool (JRT.txt attached) I downloaded and ran AdwCleaner by Xplode (log attached) I then updated and ran Malwarebytes again in quick mode which came up clean (log attached) although, as this came up clean before running the last three tools which found more issues, I am not sure what this latter step proves.
Do you think I am clear now, or is there anything else I should do? Thanks ! :-)
Update: Also, even after doing all this, I still found conduit listed as the default search engine in Google Chrome (default search engine now changed and I deleted the Conduit entry), so I ran AdwCleaner again, and have attached the log file from the second run.
I then searched windows explorer for conduit, and found some entries in a folder in which I backed up my firefox profile a few days before - when I had problems with flash plugin crashes. I deleted this folder.
I subsequently ran combofix (I know I should wait for support, but have been talked through this before a few years ago on a separate issue), and here is the log. I would be grateful to know whether all is now clear, or if there is more work to do. I will not uninstall combofix until I get the all clear (log attached)
I have had to add the latest log files using google chrome, as the shockwave flash plugin is still crashing when using firefox.
Edited by gringo_pr, 03 December 2013 - 09:37 PM.