Solved Cannot remove Conduit malware

[BSeanD]

Hi guys,

Hopefully someone out there can give me a hand. I've checked many websites but I'm not really able to find a good answer to my problem.
I have a PC, running windows 7 ultimate 64bit, that has the conduit malware on it. Our work antivirus/malware, Webroot, detects it but is unable to remove it. The two files it picks up is TBUPDATERLOGIC_1.0.0.2.DLL and CONDUITENGINEUNINSTALL.EXE.
I have tried to uninstall conduit from Program and Features but it won't budge. I've run malwarebytes and ccleaner to try and shift is but to no avail.

Does anyone have any ideas of what I can do?

Thanks,

Sean

 

[ShamrockRig]

Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

 

[BSeanD]

Thanks for the info Devlin1888.
The machine in question is over 800km away and is used by a senior manager so I'm going to have to be patient in trying to get my "remote hands" on it.
Once I do I'll post the results.

Sean

 

[Britton30]

You could use http://www.sevenforums.com/software/101318-teamviewer-10.html#post875248 to remotely access the other PC.

 

[ShamrockRig]

Yeah i highly recommend teamviewer mate

 

[BSeanD]

You could use http://www.sevenforums.com/software/101318-teamviewer-10.html#post875248 to remotely access the other PC.

That's what I've been using. The main issue is trying to get a time when the user is not using the machine.

 

[ShamrockRig]

Well if you need any other advice feel free to ask buddy, good luck

 

[Britton30]

Sean depending on your mutual trust and company rules, he could leave the machine on and set Teamviewer up so you can log in any time.

 

[Solarstarshines]

That is a addon Tool bar

You need to first get rid of the addon then go to add and remove programs and find it there as well delete it but reset your IE to default same thing with FF it's a toolbar when ever you installed something it came with it

I use WEBROOT as well but somethings have to be done Manually these are nasty little buggers

 

[ShamrockRig]

i ended up with conduit on my computer a few months back, the method you suggested works but it seemed to keep coming back every few days or so, just ran JRT and it got rid of it

 

[Solarstarshines]

i ended up with conduit on my computer a few months back, the method you suggested works but it seemed to keep coming back every few days or so, just ran JRT and it got rid of it

Good job sometimes there is a rootfile in user folder too they know where to hide

 

[ShamrockRig]

Yeah to be on the safe side i ran all my anti virus , anti malware etc after i ran JRT just to be sure. Didnt come back and have had no problems since, all thanks to the Guru's on this site

 

[Britton30]

JRT?

 

[RickeyRose]

I also don't know JRT before, but i removed conduit via Yet Another Cleaner, it works and conduit did not come back

 

[ShamrockRig]

JRT= Junkware Removal Tool

 

[circumvent]

Hi, read through this thread because I practically had a crippled machine with malware, ran JRT (among a lot of other steps) and esetonline scanner in safe mode and that seemed to find all the buggers (and more that I was not even aware of using other scanners)...you are in good hands here chief...good luck, and I'd just humbly offer eset online scanner (free) to do a thorough check and clean up.

 

[ShamrockRig]

What Programs did you run buddy?

 

[circumvent]

What Programs did you run buddy?

Hi Devlin, assuming you were directing that question to me...

Well, had to run a number of programs, because the malware affected my entire system.

All of this was with guidance from Jacee and Andrew129260

Used AdwCleaner first, then TFC, uninstalled all Iobit programs and unnecessary programs, had to use combofix (which to my knowledge is to be used sparingly), then the esetonline free scanner...found ALL of the malware and locations that mbam and mseessentials missed.

basically cleaned up entire system and running from a state where I was almost ready to do reformat to back to optimal efficiency.

 

[circumvent]

Of course, with each scan, the log files generated were the key to the overall fixing.

 

[ShamrockRig]

Yeah Jacee provides very good info Yeah combofix is something to be used with alot of care, never used it myself but have heard of people having "mishaps" with it, good stuff bud