conduit malware [Solved]

I have a new Acer Aspire that came with Windows 8.  I updated to 8.1 immediately. I configured it to go straight to desktop.  Then I downloaded Firefox, Avast, Malwarebytes, Wisecare 360, Slim Cleaner and a few add-ons and extensions  for Firefox. I got the programs from CNET.

I started having issues scrolling on Firefox, so I downloaded Opera.  It was loading slowly and started giving me error code 0xc0000022.  I opened Firefox again and saw that I had a Conduit search bar.  I used every program I had to uninstall Conduit.  I uninstalled and reinstalled Firefox and Opera…still having error code.  I reinstalled Avast.

When I restarted the computer, I got a Conduit/background DLL application error.  I followed a Windows forum fix to delete the Conduit/background DLL.  It worked and I didn't get that error code anymore.  But still had problems trying to use Opera, loading slowly and with the 0xc0000022 error code.  I uninstalled Opera again and tried Firefox.  Conduit was in the search box tool bar again for Firefox.  I uninstalled Firefox and used IE to download Chrome.  It also had Conduit in the searchbox tool bar.

I had also run Malwarebytes and CCCleaner until they said no problem.

Sorry for the long explanation; I don't know what is important and what is not.

I used OTL and tried to copy and paste to this post and it wouldn't work.  So I am attaching the files.

Sorry for the extra attachments….they weren't showing.

Hello and welcome to What the Tech,

Please run the following:

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.

• Press Scan button.

• It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.

• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

• Please open your MalwareBytes AntiMalware Program
• Click the Update Tab and search for updates
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
• The scan may take some time to finish, so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected. <– very important
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

• Turn off the real time scanner of any existing antivirus program while performing the online scan
• Tick the box next to YES, I accept the Terms of Use.
• Click Start
• When asked, allow the activeX control to install
• Click Start
• Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.
• Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
• Click Scan
• Wait for the scan to finish
• When the scan completes, if it shows a screen that says "Threats found!", then click "List of found threats" button
• Press EXPORT TO TEXT FILE , name the file ESETSCAN and save it to your desktop
• Include the contents of this report in your next reply.
• Press the BACK button.
• Press Finish

Those files have been deleted and the computer is much more responsive, the error message doesn't pop up, and all the toolbars are gone.  The only issue I have left is with Chrome pages becoming unresponsive at times.  An example, I had this forum page open, when I clicked on the page there was nothing but a whitte page that was reloading, I opened a new page and navigated to this forum again while the original page is still white and loading. I just tried to open a new page and it is not responding. In your opinion what is the best browser to use? and where should I download it from?

Thank you so much for all the help.

• Double click on adwcleaner.exe to run the tool.
• Click on Uninstall.
• Confirm with yes.

• Double-click OTL.exe to start the program.
• Close all other programs apart from OTL as this step will require a reboot
• On the OTL main screen, press the CLEANUP button
• Say Yes to the prompt and then allow the program to reboot your computer.

• It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection. Refer to this Microsoft article
  Strong passwords: How to create and use them Then consider a password keeper, to keep all your passwords safe. KeePass is a small utility that allows you to manage all your passwords.
• Keep Windows updated by regularly checking their website at :
  http://windowsupdate.microsoft.com/
  This will ensure your computer has always the latest security updates available installed on your computer.
• Make Internet Explorer more secure
  • Click Start > Run
  • Type Inetcpl.cpl & click OK
  • Click on the Security tab
  • Click Reset all zones to default level
  • Make sure the Internet Zone is selected & Click Custom level
  • In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
  • Next Click OK, then Apply button and then OK to exit the Internet Properties page.
• Download TFC to your desktop
  • Close any open windows.
  • Double click the TFC icon to run the program
  • TFC will close all open programs itself in order to run,
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish it's job
  • Once its finished it should automatically reboot your machine,
  • if it doesn't, manually reboot to ensure a complete clean
  It's normal after running TFC cleaner that the PC will be slower to boot the first time.
• WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
  • Green to go
  • Yellow for caution
  • Red to stop
  WOT has an addon available for both Firefox and IE
• AdblockPlus
  • AdblockPlus, Surf the web without annoying ads!
  • Blocks banners, pop-ups and video ads - even on Facebook and YouTube
  • Protects your online privacy
  • Two-click installation, It's free!
  • click the icon that corresponds to your browser and download.
• Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.
• In light of your recent issue, I'm sure you'd like to avoid any future infections. Please take a look at these well written articles:
  PC Safety and Security–What Do I Need?.
• Simple and easy ways to keep your computer safe and secure on the Internet

Thank you so much for your invaluable expertise.  I have learned a lot and will do my best not to get infected again.  You saved me from much more time and expense, and I probably would have repeated the same mistakes without your help.  THANK YOU!!!