Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Typing in searchbar and in programs shows a lag


  • Please log in to reply
8 replies to this topic

#1 Martin John

Martin John

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:11:20 PM

Posted 23 May 2014 - 08:23 AM

Dear Bleepingcomputer gurus,

 

About 1/2 the time I type in Mozilla or even right now in this forum, there seems to be a delay. Also, have noticed there is a searchconduit that shows up whenever I try to use Google Chrome. Typically, I use Mozilla FF and never have searchconduit, but whenever I use Google Chrome, searchconduit seems to hijack the browser.

 

My computer is a Samsung running Windows 8. Have Whitehat Aviator and may start using that full time to avoid these problems.

 

Please let me know what to do and I will do it.

 

Thanks in advance for your help.

 

Martin



BC AdBot (Login to Remove)

 


#2 AndroidOS

AndroidOS

    Malware Search++ developer


  • Security Developer
  • 146 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:07:20 AM

Posted 23 May 2014 - 09:49 AM

Hi Martin, and welcome to Bleeping Computer!

 

Have these issues just started happening, or have they been happening for a while? If they have just started happening, have you made any recent changes to the machine (both software or hardware)?

 

I'd also like you to run these scans, and see what they find.

 

PMYCj.gif Please download Malwarebytes Anti-Malware from Malwarebytes.org.
Alternate link: Download Mirror
 
(Note: if you already have the program installed, just follow the directions. No need to re-download or re-install!)
 
Double Click mbam-setup.exe to install the application.
 
(Note: if you already have the program installed, open Malwarebytes from the Start Menu or Desktop shortcut, click the Update tab, and click Check for Updates, before doing the scan as instructed below!)
 
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Full Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. If you are prompted to restart, please allow it to restart your computer. Failure to do this, will cause the infection to still be active on the computer.
  • Please save the log to a location you will remember.
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • The log can also be found at C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt
  • Copy and paste the entire report in your next reply.
  • If Malwarebytes fails to download please use the following link:
     
     
    ==========
     

    Please download JRT from here & double click to start the program.
  • Hit any key when prompted and allow it to run through it's process.
  •  
    H2HaYv4.png
     
     
  • Post the log when it's finished.
  •  
    ==========
     

    Please download AdwCleaner by Xplode onto your desktop.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Search.
  • A logfile will automatically open after the scan has finished.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[R0].txt as well.


  • #3 Martin John

    Martin John
    • Topic Starter

    • Members
    • 7 posts
    • OFFLINE
    •  
    • Local time:11:20 PM

    Posted 23 May 2014 - 10:31 AM

    Yes, I did make some changes recently and will run what you recommended and post the results within an hour. It is only after these changes that I noticed the lag in typing and also the searchconduit via Google Chrome.

     

    As for the changes, I became paranoid when another machine became infected with searchdial and started running Windows Defender, MBAM and Secunia PSI on this machine. After that, I added Ccleaner and also added Whitehat Aviator as a browser but haven't used the new browser much.

     

    Thanks for the reply and will do as directed.

     

    Martin



    #4 Martin John

    Martin John
    • Topic Starter

    • Members
    • 7 posts
    • OFFLINE
    •  
    • Local time:11:20 PM

    Posted 23 May 2014 - 11:17 AM

    Here is the report from MBAM:

     

    Malwarebytes Anti-Malware
    www.malwarebytes.org
     
    Scan Date: 5/23/2014
    Scan Time: 9:13:28 AM
    Logfile: MBAM review.txt
    Administrator: Yes
     
    Version: 2.00.1.1004
    Malware Database: v2014.05.23.09
    Rootkit Database: v2014.05.21.01
    License: Free
    Malware Protection: Disabled
    Malicious Website Protection: Disabled
    Chameleon: Disabled
     
    OS: Windows 8.1
    CPU: x64
    File System: NTFS
    User: Martin
     
    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 299284
    Time Elapsed: 8 min, 20 sec
     
    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Shuriken: Enabled
    PUP: Warn
    PUM: Enabled
     
    Processes: 0
    (No malicious items detected)
     
    Modules: 0
    (No malicious items detected)
     
    Registry Keys: 0
    (No malicious items detected)
     
    Registry Values: 0
    (No malicious items detected)
     
    Registry Data: 0
    (No malicious items detected)
     
    Folders: 0
    (No malicious items detected)
     
    Files: 1
    PUP.Optional.Conduit.A, C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (      "search_url": "http://search.conduit.com/Results.aspx?gd=&ctid=CT3324790&octid=EB_ORIGINAL_CTID&ISID=M14A12707-16EF-4CDC-ADBB-897A2947A9FA&SearchSource=58&CUI=&UM=5&UP=SP30E8B7FE-D6C1-4D21-9C6B-5A765F34D7CA&q={searchTerms}&SSPV=",), ,[a82d91c3f685082edb6d2d5606fe1fe1]
     
    Physical Sectors: 0
    (No malicious items detected)
     
     
    (end)
     
     
    I quarantined the one item and will restart my computer momentarily. After that, I will follow the rest of your instructions.
     
    Martin


    #5 Martin John

    Martin John
    • Topic Starter

    • Members
    • 7 posts
    • OFFLINE
    •  
    • Local time:11:20 PM

    Posted 23 May 2014 - 11:33 AM

    Here is the log from JRT:

     

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Thisisu
    Version: 6.1.4 (04.06.2014:1)
    OS: Windows 8.1 x64
    Ran by Martin on Fri 05/23/2014 at  9:29:42.11
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     
     
     
     
    ~~~ Services
     
     
     
    ~~~ Registry Values
     
     
     
    ~~~ Registry Keys
     
     
     
    ~~~ Files
     
     
     
    ~~~ Folders
     
     
     
    ~~~ FireFox
     
    Emptied folder: C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\tmikljvr.default\minidumps [8 files]
     
     
     
    ~~~ Event Viewer Logs were cleared
     
     
     
     
     
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on Fri 05/23/2014 at  9:32:14.73
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     
     
    Martin
     
    Will continue following your recommendations.


    #6 Martin John

    Martin John
    • Topic Starter

    • Members
    • 7 posts
    • OFFLINE
    •  
    • Local time:11:20 PM

    Posted 23 May 2014 - 11:38 AM

    Log from Adwcleaner:

     

    # AdwCleaner v3.210 - Report created 23/05/2014 at 09:35:12
    # Updated 19/05/2014 by Xplode
    # Operating System : Windows 8.1  (64 bits)
    # Username : Martin - HOME
    # Running from : C:\Users\Martin\Downloads\adwcleaner_3.210.exe
    # Option : Scan
     
    ***** [ Services ] *****
     
     
    ***** [ Files / Folders ] *****
     
    Folder Found : C:\Users\Martin\AppData\Local\SearchProtect
     
    ***** [ Shortcuts ] *****
     
     
    ***** [ Registry ] *****
     
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Jing]
     
    ***** [ Browsers ] *****
     
    -\\ Internet Explorer v11.0.9600.17037
     
     
    -\\ Mozilla Firefox v29.0.1 (en-US)
     
    [ File : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\tmikljvr.default\prefs.js ]
     
     
    -\\ Google Chrome v34.0.1847.137
     
    [ File : C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\preferences ]
     
     
    *************************
     
    AdwCleaner[R0].txt - [1313 octets] - [15/04/2014 20:10:18]
    AdwCleaner[R1].txt - [936 octets] - [23/05/2014 09:35:12]
    AdwCleaner[S0].txt - [2025 octets] - [15/04/2014 20:10:49]
     
    ########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [1055 octets] ##########


    #7 Martin John

    Martin John
    • Topic Starter

    • Members
    • 7 posts
    • OFFLINE
    •  
    • Local time:11:20 PM

    Posted 23 May 2014 - 11:49 AM

    Here is the Adwcleaner file after I rebooted:

     

     
     
    ***** [ Registry ] *****
     
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Jing]
     
    ***** [ Browsers ] *****
     
    -\\ Internet Explorer v11.0.9600.17037
     
     
    -\\ Mozilla Firefox v29.0.1 (en-US)
     
    [ File : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\tmikljvr.default\prefs.js ]
     
     
    -\\ Google Chrome v34.0.1847.137
     
    [ File : C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\preferences ]
     
     
    *************************
     
    AdwCleaner[R0].txt - [1313 octets] - [15/04/2014 20:10:18]
    AdwCleaner[R1].txt - [1135 octets] - [23/05/2014 09:35:12]
    AdwCleaner[S0].txt - [2025 octets] - [15/04/2014 20:10:49]
    AdwCleaner[S1].txt - [1061 octets] - [23/05/2014 09:38:59]
     
    ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1121 octets] ##########
     
     
    Please let me know how I ought to proceed.
     
    Martin


    #8 AndroidOS

    AndroidOS

      Malware Search++ developer


    • Security Developer
    • 146 posts
    • OFFLINE
    •  
    • Gender:Male
    • Location:UK
    • Local time:07:20 AM

    Posted 23 May 2014 - 12:31 PM

    Well, there doesn't seem to be any obvious malware present on your computer, and the scans have gotten rid of what was there. Do the problems still occur?



    #9 Martin John

    Martin John
    • Topic Starter

    • Members
    • 7 posts
    • OFFLINE
    •  
    • Local time:11:20 PM

    Posted 23 May 2014 - 12:54 PM

    No, the typing speed is fine and searchconduit is nowhere to be found. Your recommendations took care of the problem.

     

    Thanks quite a bit for the help and may you have a great day in the UK.

     

    Martin






    0 user(s) are reading this topic

    0 members, 0 guests, 0 anonymous users