Conduit infection - unable to restart Windows

[ajjjr]

Root Admin,

 

I had the same issue after running Malewarbytes Pro a couple of weeks ago.  MBAM Pro had also detected a similar PUP.  It was listed twice as PUP.Optional.Conduit with a Registry entry and a Program entry. Neither included the .A, but I was given the option to remove it and I chose to remove.  I could not get my Windows 7 PC to reboot after the completed scan requested that I reboot.   On the reboot there was simply a black screen where I could see my cursor and nothing else.  After several retries I finally booted in to safe mode and chose a previous restore point and I was able to get back to a functioning Desktop.

 

I came to the Forum today because after last nights full scan the same two PUP.Optional.Conduit entries appeared and instead of removing I chose to Ignore.  I have not rebooted my system after this scan so I have no idea whether the same scenario will occur.  Lost a half of day's work the last time this occurred, just trying to get my system to reboot.  Any advice would be greatly appreciated, e.g. Is this a dangerous maleware infection, should this infection be removed instead of ignored, if I reboot will the same situation occur as last time.

 

Thank you in advance for reviewing this issue.

 

ajjjr

[Firefox]

Hello and

Lets get a few logs to see if we can tell what's going on, also can you provide your latest scan log that shows the detected items?

STEP 1

Please run the DDS scanner and send back both logs as attachments to your next reply.

Download DDS from one of the locations below and save it to your Desktop:

dds.scr

dds.com

Temporarily disable any script blocker if your Anti-Virus/Anti-Malware has it.

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.

Then double click dds.scr or dds.com to run the tool.

Click the Run button if prompted with an Open File - Security Warning dialog box.

A black DOS console should open and run for a moment.

• When done, DDS will open two (2) logs:
  • DDS.txt
  • Attach.txt

• Save both reports to your desktop
• Please include both of the following logs in your next reply as an attachment: DDS.txt and Attach.txt
• You can ignore the note about zipping the Attach.txt file and just post it or attach it.

STEP 2

Please run mbam-check and send back the log as an attachment to your next reply.

• Download mbam-check.exe from HERE and save it to your desktop
• Double-click on mbam-check.exe to run it, it should then open a log file
• Please do not copy and paste the entire contents of the log into your next post; instead please attach to your next reply the CheckResults.txt log file which should now be located on your desktop.

STEP 3

Please run the FRST tool and send back both logs as attachments to your next reply.

Download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system, download both of them and try to run them. Only one of them will run on your system - that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your next reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your next reply.

[AdvancedSetup]

There is a known issue with Conduit itself causing this during uninstall.

I would need to get some logs and take a look at it with you. I'll go ahead and move your topic into the malware removal forum and if you can run the following scan and post back the logs that would be great.

Start MBAM and check for updates. Go to SETTINGS, Scanner Settings, and make sure that PUP is set to "Show in results list and check for removal"

Then do a Quick Scan (but do not remove anything found) and post back that log.

Then also run the following scan and post back the logs.

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.

You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). Please copy and paste it to your reply as well.

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!