Exterminate It! Antimalware

malpedia

Known threats:687,615 Last Update:December 02, 10:02

Testimonials

Thank you for the note. I have been a TrendMicro client for the last few years and was impressed with the speed of Exterminate It’s scan. I appreciate the efforts to help rid my system of Vundo, the commitment to stand behind your guarantee (unfortunately that is a rarity these days) and the customer service you have offered. I wish you and the company the best.

Barry B.

File: conduit-search.xml

Location of conduit-search.xml and Associated Malware

Check whether conduit-search.xml is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific conduit-search.xml file locations:

  • C:\Documents And Settings\USER_NAME\Application Data\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\conduit-search.xml
  • C:\Documents And Settings\USER_NAME\Application Data\Mozilla\Firefox\Profiles\z4tdwg8m.default-1397766743675\searchPlugins\conduit-search.xml

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific conduit-search.xml file locations:

  • C:\Users\USER_NAME\AppData\Roaming\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\conduit-search.xml
  • C:\Users\USER_NAME\AppData\Roaming\Mozilla\Firefox\Profiles\z4tdwg8m.default-1397766743675\searchPlugins\conduit-search.xml

If you find conduit-search.xml file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The conduit-search.xml file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of conduit-search.xml File^

File SizeFile Md5Last Seen
9754587C7BEC6C33442B6605A5B93F6F085Jul 3, 2014
9166935A172475EDF7DADE40F1D0197388AJul 5, 2014
1030085843CB365DBD5A02C178DA48084385Jul 6, 2014
9164051D1DD2F5706471E024407868EC90EJul 6, 2014
861684FA43AAF35AA96D93E3C4FC36E3964Jul 7, 2014
861F633E944DCEF89878534FB6372829321Jul 7, 2014
855F83625782039B47EA5B14FC7DBD16B4FJul 8, 2014
8610DE4BA02A0FC971B1B71204C099CAF97Jul 8, 2014
975AF2A9BF75ADBA05C510BAACFDCBDFC62Jul 8, 2014
855B17F91BE67606167CC647539FC32F09CJul 8, 2014
9754B3C160D39A2921EA7F476D97135A682Jul 9, 2014
916A678085531CC98077282A68100703BE8Jul 9, 2014
975C0B28CD2ECDA589151AEA088AFD50BF8Jul 10, 2014
916AEB39C35781F0BCDB3B25F4B98F08D7DJul 10, 2014
916F2FBD0451F3CA2F75FC9587AB8F5AE9AJul 11, 2014
916C048CFCF8CE4CEE98288D5458067849CJul 11, 2014
103082BC3620D97FE5024ADB090BDEAA70BBJul 11, 2014
9753E18BA784E4686AF08E9E0F3CF556D54Jul 12, 2014
861831C4A303AC9E0660E47DF60A04BBCE4Jul 12, 2014
86193DAE90068A9FB4972CDE77BFA6B0DD0Jul 13, 2014
855C5B17C44DBB2EF7AB4902040F800C51FJul 13, 2014
9162B1B7AAAE289DAEA4A0C69A037A53651Jul 14, 2014
9167A3E3419900531B8E07B8946EFA67DEAJul 17, 2014
96929511F78368D650E040B2418FA6FD401Jul 23, 2014
975EAD3866A9105936FCA20093340413CC3Jul 27, 2014
85561DA00E164AE2822800B2829A63DD201Jul 28, 2014
91637C34906A1A1D181A2D3DD3BD82F81D3Jul 28, 2014
92818407707A241717B36E7442C52474D27Jul 28, 2014
91614C572A1C45EBFBD9768D9337866104BJul 29, 2014
969165AEC6A4A6477C7F892EDF97EF60019Aug 3, 2014
9164A5ABA8285EFF2153F52C7A2D8840C7DAug 3, 2014
916F7A46908565C7CF855F7AD68BA80F170Aug 4, 2014
10305DF085C523B00ED2D61FE254233DB701Aug 4, 2014
9758E6AFF7A47276703CE9E020CD52ECAC0Aug 5, 2014
8713FCF503D283C56BC40680DCEE6DFE34BAug 5, 2014
1030EBF4FF4F07CC20D40F82AE855C3490F5Aug 5, 2014
86130693A6F985E5B2A5067E2A3A26A58BBAug 5, 2014
8552DFF3A913EFC5608685B29E17E9473A0Aug 6, 2014
8615722EE084FC4D0FC9AA9A415C302026DAug 7, 2014
861E091A00FD49163B1B3CD85D803EAE6FBAug 7, 2014
8615B910BA0938CEF2DE46195972BF2A306Aug 8, 2014
861BBA6B13F111798B4C3BA44B666B94F60Aug 10, 2014
1030145D2B5B9E7F961F71B905A831E50149Aug 12, 2014
98732D67E5CFD10E52245F9FAD42CB1D3E2Aug 13, 2014
97521E2A21B421ECD11073B3741C9FFFCA3Aug 13, 2014
861A5F11A708B3128F5AC8A596C79BDF8E5Aug 16, 2014
861EDB02CFB4771440E470E69E3649A0F32Aug 17, 2014
8554FFAAFDC1A9D1393601B269610741985Aug 19, 2014
85557FAC74CCBC3F518BF1D59BF957694CEAug 20, 2014
861B6D1BECF684D770FC2F63B5B9A4071A4Aug 25, 2014
861C032FB4C36C7756715DD7C4E482F61AFAug 26, 2014
84688097C3B01085F737950384276A652C1Aug 29, 2014
8615C328362380758701E3FACE07F134DCAAug 31, 2014
9283AE22B94AC6AC5E56D14C200F87ED993Aug 31, 2014
855F50D386E1A3F72C94D78EA56D179E15AAug 31, 2014
965D9F270F39398906B879EA14CBEB4490DAug 31, 2014
975A1C3172B7501FFEFA42BBA5E2752C1F4Sep 2, 2014
91646B6F809A545E9196432FDCB1B5FCCBESep 2, 2014
9897D8FD8576B66B88E52F121E078617FD5Sep 2, 2014
846C90E056A1A4F54214A9C3DF575133E53Sep 4, 2014
975436ACAC94D8E422B0CDE0E0F2E7C112CSep 9, 2014
9165F2399EEF749170A80C0E6B9B3A51143Sep 9, 2014
975BF8AC0AA617AA44D2E08699EE305082ESep 15, 2014
861ECF5E41AC94D0EDF91DEE23CE36057B4Sep 15, 2014
861B54FA482EFBBECB0BC815087FDED8641Sep 15, 2014
861FE4FA3708F3288199A7F081DFB4B3E6FSep 18, 2014
1030E45DFBB265430018C2E5423C7D0F7388Sep 18, 2014
975484FE1B42CEFFB7AFD8D996DAF116E32Sep 21, 2014
86185D6CF6761A0A031CBD3426AA1CC11A4Sep 21, 2014
965FBF3D70B24A9FCBDDF472BFE5BA9A1D7Sep 21, 2014
91665B302C315BD61736B615E5EAD960D2FSep 21, 2014
861C435986EE75E00179B21770CA13E9FF0Oct 13, 2014
861229665A9E99A4ACAD06B6D906768F0B0Oct 19, 2014
86194A42513B36BB364A1DF6DAB12F34110Oct 19, 2014
855D39ED118E3608F9F4DDE475306B42A60Oct 26, 2014
1030DC8D8EF401E38A2645FBF898DC754723Oct 29, 2014
851A39C5843CA9DCF39E802329D5DC80B32Oct 30, 2014
861D21CB0162A7715F25DE941BFE60AA383Oct 31, 2014
975BAEE251862226E9A11388C89D61F2D18Nov 1, 2014
8617E7B5A13625047FC6AF877D78E2ABD95Nov 1, 2014
85114F0FAC801210451E21DC452DB010BD3Nov 3, 2014
1030B97DD62FF2E49C423D0461498750D78ANov 3, 2014
855124AB77B25502F84A4857FC53B2AB9D9Nov 5, 2014
969BEEABAF64DA11F74B64FFEC0122CF9DFNov 6, 2014
965C01172C389954971FA0703DA9FAA35F6Nov 6, 2014
8757527A0D1A987B042E81A44C412A7ACBCNov 8, 2014
823048411207ED2B53CB81FC6C6BF50ED89Nov 12, 2014
861B3B998A246E22EB919122D2CCF9CB0FDNov 12, 2014
9753AEE033F2BB93352A2FF864A3D092FC5Nov 13, 2014
861A8C1A9C269081F3C58EE4A037FAB59C7Nov 19, 2014
8615C487ED1929D4FF7F22555B92DCE4FBANov 20, 2014
855A155EF38509CB021B920E6E36FF08AADFeb 2, 2015
10305D2A5D97B094670C5790AA04A7F9FDF0Feb 23, 2015
91680A3634328591034C7569D5DCC162C8EMar 14, 2015
85509210F6DE2AF409D3554DD025EE4CC17Mar 26, 2015
9808712613C1EDF5CF6B2089B5657051551Mar 31, 2015
9169F7C196498BD70FB36B8B7371A0995FCApr 13, 2015
86179B60924D3C5CAC53392D004FA443F91Apr 21, 2015
861B89E3E77723BFF294C40B2BBFF8096B8Apr 28, 2015
861FC4D3EE399CB0E31A5CE4E78FA40C7B5May 7, 2015
861E143903CFDE2F4847D8203EC7AC630B3Jun 11, 2015
86176571FA340A8A6E179AB0CADF9FCCA83Jun 19, 2015
861AD18F016FDE758BB1F835E707492665BJul 13, 2015
975D592572933C1532C9F77C93A4474211EAug 1, 2015
851BFD39A3D99740B46F6DFDF6121B7055AAug 19, 2015
8611D5ECBBC6A279DD0196039A8F38B99CDAug 25, 2015
861F114D12CEA666FEF3CDAA5866C33D438Sep 2, 2015
8619F61E4126DCC2382F4657A50765574DCSep 13, 2015
87267DC0D9914F89B1356BAA422D42F3B98Sep 29, 2015
994622DB08BA9DD36B7D6216B047F33287FOct 27, 2015
855B5ED10D304B38E51764A80CB298E0BD4Nov 15, 2015
8516F017EF56918CC64C83EAD36EF1DA455Nov 20, 2015
9167757188D33B64E550D74DAF2C9C859AEDec 11, 2015
916A34015AE71D0425319D99BF09D87B7E1Dec 18, 2015
992B9B11988D5D3E7F3E6E5FAC1819A31FCDec 20, 2015
85570FCDDB85A555BDEEBA58C9C792B6481Dec 29, 2015
8613E68BD77E96F04FB58C88C299AF69666Jan 6, 2016
1030F89D0C70605456C3AFDAFA5FB7528B26Jan 8, 2016
8613E40F2FA24A8EB81A6490CAD782163B8Jan 12, 2016
861639FEED495AC9C387861494D1138F14DJan 29, 2016
86130678CC6AF0353D4EADA6AEFFC35F7D1Feb 2, 2016
9169E59DD46F4E8E191AA68E889F3374506Feb 8, 2016
881ADCD3649BAB50E2E74C2307CC709B74EFeb 11, 2016
861094A3163541DFF4507AE3087DA582555Feb 11, 2016
86109CD443DA7DF5ADBBDCD6B8D8A8A1E0EFeb 16, 2016
861A6D8462D1EFE1886AE5C37A0E16291EEFeb 18, 2016
1030911162BC2BD30D1F2EC1A170DA7E3661Mar 2, 2016
1030CDC6A7D1D8290C7E87F4F4F30D9B3C4DMar 19, 2016
975E7B4B07DAA525679B4CF00396EFDE476Apr 10, 2016
861AE33B9B8FAFFC342BADA268B7B2CBD1EApr 11, 2016
975BDE4A10B609B21C0337656C36CDBCFC4Apr 14, 2016
9757BC2A4C3C47718453982B835106C42E3Apr 16, 2016
86111A9BBE911146BE7EE355B870693CDB5Apr 27, 2016
861175EFA0FC2F5B27D6F9C7B9246B1521DApr 27, 2016
851B61CFFDA5CF986C56EBAC9B1E2CE873CMay 11, 2016
8618328BF281A0B00A0A89BB27DD6B8F334May 18, 2016
1030BA8D2E22CBC4346C0320EF1FD1FFE7C2May 19, 2016
861A7384F0F5714A9FCC6B12F66E546C926May 30, 2016
916A30D1C836EFE9CACF9FED51FBBACA9D0Jun 13, 2016
975325456EA762F910295DECD3979E90653Jun 22, 2016
1030B559BD7F3E94B60C7C2FD5043D3F4A8FJul 3, 2016
861929FFBBA375E162530E2831CB2F194A5Jul 6, 2016
96905F4D2AC29B974E341318491756C2E69Jul 14, 2016
86192588B151B9E0AC3BC5546150827D75AAug 7, 2016
1030293D5A8DFB0CF6B6DF059447A5B94F14Sep 7, 2016
861CF49674C77E25AF6F6AFBE50EAD43DC1Sep 12, 2016
861861CFE016903A644A7FFE46D56CC5840Sep 15, 2016
916D1C148AB03EA76B4DC5CB9B4740AA831Sep 28, 2016
861906D28B58B3722F2683090243D5A3C2COct 26, 2016
9165056156868E2DE69F6678F45A2B939AEOct 26, 2016
8550923FFC0D8B70EE9139CCDCF96B8C387Nov 25, 2016
861CD1F2DC2E6BF78D1EF29830F4ECDA397Dec 19, 2016
861A0EF597559147B53C028EADD7ACAC4DFDec 29, 2016
8555995C2CB7943BC7790AA71BDD6381E94Jan 14, 2017
969895FF29062C1A20B32BACA92B93CBFACJan 15, 2017
1030248EBC21CE576E52856E6C6A1F4F8A00Jan 15, 2017
1030EF1946CE75438B0C6156F0B27B480A2CJan 23, 2017
86116719614F9BCF363F5BE075695D8F660Feb 25, 2017
916E1CE913960D01B5881D1C95956FDBECEFeb 25, 2017
9753BAB3C489CE24985549783127B69EA05Mar 13, 2017
8616259F35FBE51F20DEEF8A6F0758FAE18Apr 4, 2017
916D279B90D55AA59B96E68DF2EA51042C0Apr 7, 2017
8794336001B0B8C469AE5E4192FA1FA0B55Apr 10, 2017
8619C018105BD8D79190085A8B37ED9982DApr 17, 2017
1000E39A7483DE6D681F6F12825921215561Apr 28, 2017
9165DD13CE55CE32A0BB9AD2707DD0FF200May 1, 2017
8618972B98829F84C9C2FDE81CD3067C580May 17, 2017
916269734BBFA8D2CA3D153695A6022D8DCMay 25, 2017
1030742E34FF4701CD747172B1EDB411F624May 28, 2017
861346B8337540F2537B802837706B6FC36Jun 19, 2017
1030E9D2405157B6A5F65546637998DBFAF3Aug 15, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove conduit-search.xml^

  1. To enable deleting the conduit-search.xml file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select conduit-search.xml and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of conduit-search.xml and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of conduit-search.xml and Associated Malware.
  6. Notes:

    • The deletion of conduit-search.xml will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of conduit-search.xml will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a conduit-search.xml malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type conduit-search.xml. The name of the first found registry value referencing conduit-search.xml is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to conduit-search.xml, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of conduit-search.xml and Associated Malware.