Please help remove Conduit - next steps after running Malwarebytes

[bfs24]

attaching dds and attach logs.

thank you in advance.

 

 

DDS.txt

Attach.txt

[RPMcMurphy]

Hello and welcome.  Please follow these guidelines while we work on your PC:

• Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.”  Absence of symptoms does not mean your machine is clean! 

Please do not run any scans or install/uninstall any applications without being directed to do so.

Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed.

  Please download Farbar Recovery Scan Tool and save it to your desktop.

 

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Double-click to run it. When the tool opens click Yes to disclaimer.

Press Scan button.

It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.

The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

[bfs24]

Thanks so much for help. Am using a public computer to reply. Cannot use infected computer to reply. Typing on keys does not type characters but rather opens new windows or folders or other functions. Am able to open mail however, should be able to read your responses. Again thanks. Because of file size, need to send Farber scan results as attachments. Received errors using cut & paste of txt files.

 

FRST.txt

Addition.txt

[RPMcMurphy]

Please check your keyboard and make sure the Windows key (usually located to the left of your spacebar between the ctrl and alt keys) isn't stuck, then do this:

 

   Please download AdwCleaner by Xplode and save to your Desktop.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator.
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
• The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
• Copy and paste the contents of that logfile in your next reply.
• A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

[bfs24]

Thanks. Windows key does not seem stuck, but it does not function - no list of programs comes up, or anything else happens, when Windows key is pressed.

 

AdwCleaner report came up empty (no programs to remove):

 

 

 # AdwCleaner v3.016 - Report created 29/12/2013 at 22:07:30
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Brad - BRADJOANNE
# Running from : C:\Users\Brad_2.BRADJOANNE\Downloads\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428

-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\Brad\AppData\Local\Google\Chrome\User Data\Default\preferences ]

[ File : C:\Users\Brad_2.BRADJOANNE\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [16548 octets] - [28/12/2013 11:23:57]
AdwCleaner[R1].txt - [995 octets] - [28/12/2013 13:44:19]
AdwCleaner[R2].txt - [1054 octets] - [28/12/2013 13:46:40]
AdwCleaner[R3].txt - [917 octets] - [29/12/2013 22:07:30]
AdwCleaner[s0].txt - [15746 octets] - [28/12/2013 11:26:03]

########## EOF - C:\AdwCleaner\AdwCleaner[R3].txt - [1037 octets] ##########

[RPMcMurphy]

Are you having any issues with the computer other than the keyboard problem?  Is this a laptop or desktop?  Please do this next:

  Go here to run an online scannner from ESET. Windows Vista/Windows 7 users will need to right click on their Internet Explorer shortcut, and select Run as Administrator

• Note: For browsers other than Internet Explorer, you will be prompted to download and install esetsmartinstaller_enu.exe. Click on the link and save the file to a convenient location. Double click on it to install and a new window will open. Follow the prompts.
• Turn off the real time scanner of any existing antivirus program while performing the online scan
• Tick the box next to YES, I accept the Terms of Use.
• Click Start
• When asked, allow the activex control to install
• Click Start
• Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.
• Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
• Click Scan
• Wait for the scan to finish
• When the scan is done, if it shows a screen that says "Threats found!", then click "List of found threats", and then click "Export to text file..."
• Save that text file on your desktop. Copy and paste the contents of that log as a reply to this topic.

[bfs24]

Here is Eset scan results. File is attached because copy & paste does not seem to work here. Thank you for your help and patience.

 

 

eset scan.txt

[RPMcMurphy]

Are you having any issues with the computer other than the keyboard problem?  Is this a laptop or desktop?

[bfs24]

Right now, no issues are apparent, including keyboard issues. This is a laptop.

[RPMcMurphy]

That's good news.  These last steps will take care of those ESET detections that are not already in quarantine.  Other than those, I see no sign of malware in any of your logs.  All I have left for you is some housekeeping:

  You have more than one antivirus (AV) program running.  Your logs show both Microsoft Security Essentials (MSE) and Norton Internet Security running.  Running more than one AV program does not offer any more protection and often causes conflicts and slow downs with your computer.  Please remove one of the AV application, (I'd recommend keeping Norton if your subscription is current).

  Your Adobe reader needs to be updated.  Please visit Adobe's site and grab the newest version.  Be sure to watch for and uncheck any boxes offering to install other software.

  Delete the following tools along with any other logs you saved from our work:

• DDS
• FRST (You may also delete the c:\FRST folder)

  Double click on AdwCleaner.exe to run the tool again.

• Click on the Uninstall button.
• Click Yes when asked are you sure you want to uninstall.
• Both AdwCleaner.exe, its folder and all logs will be removed.

  Download TFC to your desktop

• Close any open windows.
• Double click the TFC icon to run the program
• TFC will close all open programs itself in order to run,
• Click the Start button to begin the process.
• Allow TFC to run uninterrupted.
• The program should not take long to finish it's job
• Once its finished it should automatically reboot your machine,
• if it doesn't,  manually reboot to ensure a complete clean

  Finally, I'd like to make a couple of suggestions to help you stay clean in the future:

• Restart any anti-malware programs that we disabled while we were cleaning your machine.
• Keep your antivirus application and MBAM current and updated.  Scan with them at least weekly.
• Please read this post for some helpful information.

Please post once more so I know you are all set and I can mark this thread resolved. Good luck and stay safe!

[bfs24]

Cannot thank you enough. Have been using MSE with MBAM, somehow still got infected. Maybe we were enticed with a free download of something?

Anyway, thanks again. You and your crew are saints. Donation to follow.

[RPMcMurphy]

You're most welcome, bfs24.  Take care!

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!