CONDUIT MALWARE

M

marcuspassey

New Member
Thread author
Verified
Mar 6, 2014
158
0
9
52
Hi guys I get the error below hope someone can help literally had microoft support on it for 2 days no luck
I cant do windows updates or update IE8

Really hope you can help

there was a problem starting c:\users
\marcuspassey\local\conduit
\backgroundcontainer
\backgroundcontainer.dll
c:\users\marcuspassey\alldata\local
\conduit\backgroundcontainer
\backgroundcontainer.dll is not valid
win32 application

I also get these errors

receive error code: 0x80070646, error code: 646, or error code: 1606 when you use Windows Update or Microsoft Update

Also guys ive seen similar threads on here and twinheadedeagle has solved it. I was going to follow those instructions but my malware may need a different approach. Looking forward to hearing from one of you guys.

Thanks

Marcus
 
Last edited by a moderator:
you have some adwares in your browsers, we're going to delete their rests :)

Download Shortcut_Module from this link :

http://www.telecharger.sosvirus.net/download/shortcut-module/

save it to your desktop

ShortcutModuleQNlE.png



Attention : It'll close all the programs opened like IE, Firefox, Word etc...

It'll give a report at the end of the scan , in C:\Shortcut_Module_date_hour.txt , after the reboot of the machine.

attach the report
 
  • Like
Reactions: marcuspassey
Hey its taking a while, I see you are from France I stayed at a place called Besancon very nice place
 
I turned off the firewall I have mcafee, Yes I mean the shortcut module its working a green line is moving along but its taking ages is it ment to take a while?
 
The scan seemed to be stuck so I had to restart my computer. I have mcafee I turned the firewall off but I cant seem to turn off the virus scanner
 
I have had to uninstall my mcafee, there seemed to be a problem with it. scan is almost complete I can attach the report soon.
 
ok let's do a diagnostic

Download From this link OTL : http://oldtimer.geekstogo.com/OTL.exe

Save it to your desktop

If you have XP => double-click , else , right-click "Run as administrator" to launch it

configure it like this : ("Analyse" = "RUN Scan" will be pressed after pasting the following blue bold text )

OTL.PNG


if a 64 bits checkbox appears let it checked.

copy/paste what is below in blue bold under "Personnalization" in OTL :

HKCU\Software
HKLM\Software
HKCU\Software\Microsoft\Command Processor /s
HKLM\Software\Microsoft\Command Processor /s
%Homedrive%\*
%Homedrive%\*.
%Userprofile%\*
%Userprofile%\*.
%Allusersprofile%\*
%Allusersprofile%\*.
%LocalAppData%\*
%LocalAppData%\*.
%Userprofile%\Local Settings\Application Data\*
%Userprofile%\Local Settings\Application Data\*.
%programFiles%\*
%programfiles%\Google\Desktop\Install /s
%programFiles%\*.
%Systemroot%\Installer\*.
%Systemroot%\Temp\*.exe /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\*.exe /lockedfiles
%systemroot%\system32\*.in*
%systemroot%\Tasks\*
%systemroot%\Tasks\*.
%systemroot%\system32\Tasks\*
%systemroot%\system32\Tasks\*.
%systemroot%\system32\drivers\*.sy* /lockedfiles
%systemroot%\system32\config\*.exe /s
%Systemroot%\ServiceProfiles\*.exe /s
%systemroot%\system32\*.sys
dir %Homedrive%\* /S /A:L /C
msconfig
activex
/md5start
explorer.exe
winlogon.exe
wininit.exe
volsnap.sys
atapi.sys
ndis.sys
cdrom.sys
i8042prt.sys
iastor.sys
tdx.sys
netbt.sys
afd.sys
/md5stop
netsvcs
safebootminimal
safebootnetwork
CREATERESTOREPOINT

click on "Run scan" and let the tool work
At the end "notepad" will open (OTL.txt & Extras.txt)
you can find them near the OTL executable.

Dont post them in the forum !!!! ( they're too big )

Attach them here or on http://cjoint.com or other site and give the links you obtained.
 
Last edited:

You may also like...