Knowledgebase
Remove/Uninstall Conduit
Posted by Ricci, Aaron on 23 November 2014 01:10 PM

Full article can be found here: http://pcsmarties.wordpress.com/methods-to-remove-conduit/

 

Step 1 – Uninstall the Conduit Toolbar:

  • Open add/remove programs control panel or program / features control panel
  • Uninstall Conduit Toolbar or anything listed as Conduit
  • Note: You may also have other programs, like freeware, that don’t state Conduit in its nomenclature, but the program may be embedded with some kind code for Conduit.  If so, these programs may be rendered useless after executing the additional steps provided below.

Step 2 – Delete Conduit Folders, Files and Gifs from hard drive:

  • Search your C drive for: conduit
  • If results are produced, then simply send everything listed to the recycle bin and then empty that bin afterwards.
  • Note1 :  The search results will produce individual listings of folders and files.  So if you delete the parent folder, don’t be surprised if the rest of the files that are listed on your results wont delete.  This is because these files were inside the parent folder you just deleted.de it wont delete.    Simply execute a refresh to see a revised list of the search.
  • Note 2: The search results may also include items from IE’s history and IE’s cookies.  These items that are tagged with conduit should be deleted as well.

Step 3 – Delete Conduit Registry Keys:

  • Click on Start Button > Run > Regedit
  • Next, click on Menu Bar > Find > Conduit > (select, keys, value and data) > click the Find Button
  • If keys are found, then from inside the right hand panel right click on the sub-key,  select modify and erase the value/data, then click OK
  • Next click F3 button to continue the search for Conduit. If there are more results, then repeat step above and erase their value/data.
  • Upon completion of the search, simply Exit the registry editor and reboot.
  • Note 1:  Depending on how conduit is installed on your system, there may not be any registry keys for it.  On the other hands there may be dozens but some will simply be as “terms” that were used to search for it.
  • Note 2: IE also stores its configuration data and typed urls in the registry.  So if any keys mention conduit, go ahead and erase their value / data.

Step 4 – Delete Conduit from Browsing History:

For the FireFox and PaleMoon

  • Open FireFox browser
  • Click on History > Show all History >
  • Next enter in the search field and execute the search for: conduit
  • Delete all of the results on the list.
  • Close window

For the Internet Explorer

  • Open Internet Options Control Panel
  • Click on Settings Button under Browsing history section
  • Click View Files button
  • Enter in search window:  conduit
  • Delete the resulting entries
  • Note 1:  Because IE stores some cookies with the browsing history on the disk drive, the procedure above will was already accomplished via Step 2 above.  But executing this step is a double check for the conduit

Step 5 – Remove Conduit Cookie:

For the FireFox and PaleMoon

  • Open FireFox browser
  • Click on Tools > Options > Security
  • Go to Remove Individual Cookies
  • Enter in search field: conduit
  • Delete / remove all results
  • Note:  Some of the results won’t have the word “conduit” embedded in them.  But they are coded and you should proceed to delete all the results listed.

For the Internet Explorer

  • Open Windows Explorer
  • Click on Menu Bar Tools > Options > View > Show Hidden Folders and Files
  • Next search your c drive for the hidden cookie folder by entering in the search field:Cookie
  • Next, if you do have a cookie folder, then execute a sub search for conduit and delete items listed in the search results, if any.
  • Note : Depending on the version of windows, you may or may not have an a specialty cookie folder

Step 6 – Block Conduit Cookie’s:

  • Open FireFox browser
  • Click on Menu Bar Tools > Options > Security > Exceptions
  • Enter the name of cookie: conduit.com
  • Then click the Block Button
  • Enter the name of cookie: search.conduit.com
  • Then click the Block Button
  • Enter the name of cookie: alert.services.conduit.com
  • Then click the Block Button
  • Enter the name of cookie: storage.conduit.com
  • Then click the Block Button
  • Next exit
  • Note 1: For FireFox versions 10 and above, exceptions for blocking cookies is foundvia the  drop down listing “Custom Settings for History
  • Note 2: For IE, exceptions for blocking cookies is found via Internet Options Control Panel > Privacy Tab > Sites Button.  Use the steps above to block individual cookies.

For the Internet Explorer – Please check with Microsoft.com on how to block its cookies.

Step 7 – Remove browser add-ons and extensions:

  • Open FireFox browser
  • Click on Menu Bar > Tools > Add-ons
  • Disable / Remove any Conduit Toolbar Extensions or Add-ons, if any.
  • Note 1: For IE, Open browser and inspect the Add-ons via Tools > Manage Add-ons
  • Note 2:  Also, disable anything mentioning JAVA’s.  And only re-enable Java when the webpage  requests it and you know its safe to do so.  Afterwards, disable JAVA add-on’s and inspect system, using Step 5 and Step 8.

Step 8 – Remove Conduit Settings in Browser:

  • Open FireFox browser
  • Enter into the url field: about:config
  • Enter in search field: conduit
  • Modify and null out the values for each entry by:
    • Highlight / Select individual item
    • Press enter key
    • Press delete key
    • Press enter key
  • Select next line item and repeat the nullification steps above
  • When done, Close tab, Restart browser
  • Note: For IE, the configuration settings are stored in the registry, which was cleaned out via Step 3 above.

Step 9 – Run Spybot:

  • It is unclear if Spybot Search and Destroy program targets Conduit. But I have sent them an email on adding conduit to their arsenal.  In the interim, running Spybot semi regularly will be helpful to eliminate spyware on your system.

Step 10 – HiJackThis:

  • Execute a scan for browser hijacks and see if any line items (particularly R0′s and R1′s) infer conduit.  If so, check them off and click the Fix Button.
  • Note 1: If the R0′s and R1′s have been infiltrated by conduit, then it is probably best to re-install the browser after removing the hijacks, but not always necessary.
  • Note 2: Not all line items listed by HiJackThis are evil.  In most cases the are designed to make programs run with a pre-determined settings for ease of user convenience.  So don’t be alarmed with results that go beyond the R0 and R1 levels.  However, double check to see if any of them infer to conduit.  If so, jot down their file locations, before “fixing” them.  Then hunt down those files via explore and remove.  (However, none should appear since you should have previously scanned / searched your disk)

Step 11 – Disable Add-ons:

  • If the browser still seems to be performing under par, consider disabling all the add-ons in the browser.  It might be that add-ons and or extensions maybe corrupted or contaminated.
  • In FireFox, click on “HELP”, then restart with Add-ons Disable.
  • Note: Alternatively, you can try booting up windows in safemode w/networking and run the browser and connect to the internet.  If your system is performing well while in safemode, then you should execute a clean boot to possibly eliminate a rogue start up hindering your internet

Internet Explorer

  • Close broswer
  • Click on Start Button > Run
  • Type iexplore -extoff
  • Press Enter
  • Note: Alternatively, you can try booting up windows in safemode w/networking and run the browser and connect to the internet.  If your system is performing well while in safemode, then you should execute a clean boot to possibly eliminate a rogue start up hindering your internet.

Step 12 – Re-Install a Clean Browser:

If the browser still shows signs of the conduit searches, then Mozilla recommends to simply uninstall the browser and re-install a clean version directly from their site.  Afterwards, be sure to block the conduit cookies as noted in Step 6 above.

Step 13 – Remove your old System Restore Points:

Lastly keep in mind that your system restore feature may have captured and stored the Conduit files, that is if you created restore points while your system was actively infected  Therefore, i recommend to delete all of your restore points sometime in the near future.

However, i would certainly create a brand new one at this time since you system is clean and functional.

Update 04/2014:

Step 14:  Run a couple of Third Party Programs

There are a couple of programs that i have tested and proved to be helpful in finding additional entries for Conduit that we humans have no access to.

1) Go to CNET.com and download IOBit Uninstaller.  (I use this program for uninstalling programs instead of the basic windows “remove programs” control panel.  This uninstaller is much more aggressive at removing more things pertaining the unwanted software you choose to uninstall.  As such, the IOBit uninstaller provides us humans with additional data about the installed programs on the system, including revealing to us covert entries pertaining to Conduit.

2) Download SpyBot Search and Destroy.  It has recently been updated to remove the Conduit SearchProtect entries from our computers.  However, it is my firm suggestion that you avoid features that SpyBot provides.

A) Do not load or install Tea Timer and

B) after exiting Spybot open the Task Manager, ie ctrl+alt+del, and kill Spybot from memory “and” ensure it has not installed itself in your Startups via, Start>run>MSConfig>startup tab.

 

Conclusion:

It is unclear what conduit actually is.  It maybe a hybrid of a tracking ware, spyware and or search engine hijacker or information gatherer.  Whatever it is, it does collect information and the makers earn some kind of revenue as a result..

Also, I have noticed that YouTube tools and FaceBook tools seem to infer conduit.  But it is unclear if they have anything to do with Conduit.com or they are simply using the term conduit to describe their proprietary codes for the program and services they offer.  But one never knows, right?

In any case, if you notice that certain programs no longer work, like games, after removing “conduit”, then evaluate the importance of that program and determine whether installing is actually worthwhile and necessary.

Finally PLEASE REMEMBER that after your system is cleaned of Conduit, please install all software via custom and AVOID the “express”, “quick”, “recommended”, etc.. methods.

While “custom” may be slower by a minute or two, you will have the opportunity to decline unwanted software that is piggy backed with the downloads.

So please be patient and read c-a-r-e-f-u-l-l-y all the screens with the tiny print because sometimes they contain tiny check boxes that have to be unchecked, and read the titles on the buttons because sometimes the decline and accept buttons are switched around or re-worded in a manner that you may actually “okay” the installation of unwanted-ware.  But if you do catch yourself, then stop the setup of the program in its tracks and start over.

(0 vote(s))
Helpful
Not helpful

Comments (0)