Conduit Toolbar - worse than people think

I've been trying to get rid of Conduit for weeks now. I've gotten rid of most of it, but it was laborious, and much of it came right back.

The suggestions I've found here for getting rid of it are inadequate. I don't blame anyone for this, because I only learned by accident, how deeply Conduit infects computers.

I have a question for the experts at MajorGeek's. On Windows 7, is it normal for the properties sheets of system files to include "TrustedInstaller" along with System, User and Owner categories? And if it IS natural to W7, why does IT have more access than I do? Virtually every system file on my PC has this "TrustedInstaller" thing on the properties sheet. And always with full access, while owner and user have very few.

Please let me know if "TrustedInstaller" is legitimate. If it is legitimate, it would show up on properties sheets of system files in a pristine Windows 7 OS. I doubt it does.

If it is not natural to W7, that means that every system file on my PC is infected by Conduit, and that it has full ownership as well as full privileges of my entire system.

Another question. I get a rundll popup every time I boot up. It mentions Conduit. It is trying to open "BackgroundContainer." It's no longer on my system, since I "uninstalled" Conduit. So it's no longer there for rundll to find and launch. It shouldn't BE on rundll any more, but it is.

Is there a way to access rundll and edit what it says?

I probably will have to use a restore point. But I'm not sure even THAT will rid me of this invader.

 

That's another reason to make a system image.
I got hit with FBIMONEYPACK and the computer locked.
Loaded boot cd and recovered full image in 10 minutes.

If you purchase a Seagate, WD or Maxtor, you can get the Acronis Trueimage software (free) and make an image of your OS and

put it on your external hdd or another internal hdd.

If you need to recover your OS ( including programs, updates, etc) you can do it with a few clicks.

You can also use Easeus for free and any hdd will work.


http://www.majorgeeks.com/files/details/acronis_true_image_western_digital_edition_software.html


http://www.majorgeeks.com/files/det...ge_seagate_edition_software_(discwizard).html


http://www.majorgeeks.com/files/details/easeus_todo_backup_free_edition.html

Have you tried Revo Uninstaller for your current problem? (run the advanced mode)

http://www.majorgeeks.com/files/details/revo_uninstaller.html

 

13 step procedure for removing Conduit

http://pcsmarties.wordpress.com/methods-to-remove-conduit/

If that doesn't work then go to the following page to start your journey through the malware forum:

http://forums.majorgeeks.com/showthread.php?t=35407

And, once you rid yourself of this infection, please take PSCO2007's advise about disk imaging. It's like having a Restore Point on steroids. Recover from anything (short of frank hardware failure). Here are a few suggested programs:

AOMEI Backupper (freeware) http://www.backup-utility.com
Macrium Reflect (freeware) http://www.majorgeeks.com/files/details/macrium_reflect_free_edition.html
Paragon Drive Backup (freeware) http://www.majorgeeks.com/files/details/paragon_drive_backup.html
O&O DiskImage Express (freeware) http://www.majorgeeks.com/files/details/oo_diskimage_express.html
EaseUS ToDo Backup (freeware) http://www.majorgeeks.com/files/details/easeus_todo_backup_free_edition.html
Acronis TrueImage (shareware) http://www.majorgeeks.com/files/details/acronis_true_image_home_2013.html
NovaStor NovaBACKUP (shareware) http://www.majorgeeks.com/files/details/novabackup.html

 

Did you use Kaspersky's TDSSKiller?

http://usa.kaspersky.com/downloads/tdsskiller


If you don't remove it (Conduit, FBI MoneyPak, and other root/bootkits) from the boot sector (MBR), it will come back.

 

I agree, this crap is on my wifes PC and continues to reinstall itself.