Previous 1 2 3 Next 39 Replies Latest reply: May 7, 2014 10:04 AM by andyBall_uk Go to original post
  • MadMacs0 Level 5 (4,722 points)

    Apple955 wrote:

     

    No! It said that some of the removals needed the computer to be restarted. I could run it again though and see!

    OK, there are three different restart messages and two of them require a re-run. If you are sure it didn't say that then there is no need to re-run it.

     

    Also, you didn't really install it, so if you ever have the problem again you will need to run it again as it does not protect you from re-infection.

     

    I need to check on your Chrome issue and I'll get back to you.

  • Apple955 Level 1 (0 points)

    Thank you very much, I really appreciate the help. 
    But is my computer safe to use right now?

  • Apple955 Level 1 (0 points)

    The page where I downloaded it was like that, but I dont know if it was the latest version.

  • MadMacs0 Level 5 (4,722 points)

    Apple955 wrote:

     

    chrome still opens on Bing although i've took it off the searching engines!

    Are you saying that Chrome opens to the Bing home page? If so:

     

    1. Click the Chrome menu (or wrench icon) at the top of the browser window.

    2. Select Settings.

    3. In the "Appearance" section, select the Show Home button checkbox.

    4. Click Change.

    5. Select Open this page and change the web address.

    6. Click OK.

  • Carolyn Samit Level 10 (103,365 points)

    Better to only download apps from the App Store, but do not do so if you see please download from another source.

     

    OS X: About Gatekeeper

  • Apple955 Level 1 (0 points)

    Right now if I open a new tab, it opens with Bing. But otherwise, a new window or a research is done with google..

  • MadMacs0 Level 5 (4,722 points)

    Apple955 wrote:

     

    is my computer safe to use right now?

    Should be. Actually, it was all along. Adware is annoying, but harmless.

  • Apple955 Level 1 (0 points)

    Yes I did that. Bing is no where now in Chrome settings.. only if I open a new tab, there is this link : http://search.conduit.com/?ctid=CT3326011&searchsource=69&CUI=MC0802235054551007 2&UM=2&lay=1

  • Apple955 Level 1 (0 points)

    Well, at least!

  • Carolyn Samit Level 10 (103,365 points)

    Conduit ... that's malware too.

     

    Locate the files in bold print and move them to the Trash. The first five are in your root   /Library

     

     

    /Library/Application Support/Conduit

     

    /Library/InputManagers/CTLoader

     

    /Library/ScriptingAddtions (anything CTLoader realted)

     

    /Library/Receipts/<Toolbar name>.pkg

     

    /Library/Application Support/SIMBL/Plugins/CT2285220.bundle

     

     

     

    The next one is in your Home folder.

     

    ~/Library/Application Support/Conduit

     

    Then try a browser.


  • MadMacs0 Level 5 (4,722 points)

    That's conduit adware which the ART should have cleared, but go back to Chrome Settings and select "Extensions" at the top left. If there are extensions that you did not install, click the trash can. Restart Chrome and see what a new Tab gives you. If you still end up at that site list the extensions you have.

  • Apple955 Level 1 (0 points)

    My mac is in french.. so I dont know where to find things like input managers! I found the first "Conduit" though.

  • Apple955 Level 1 (0 points)

    I'M not good at this but i'm not even sure I know how to access my root, cause it's written in french..

  • MadMacs0 Level 5 (4,722 points)

    Carolyn Samit wrote:

     

    Conduit ... that's malware too.

     

    Locate the files in bold print and move them to the Trash.

    The ART should have taken care of all those except the ScriptingAdditions and Receipts, which should not work without those other elements.

     

    There may be one more in

    ~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin

    but it should not affect Chrome.

     

    There are also conduit extensions for Safari and Firefox, so it stands to reason there would be something similar for Chrome, I just don't know what it's called.

  • MadMacs0 Level 5 (4,722 points)

    Apple955 wrote:

     

    My mac is in french.. so I dont know where to find things like input managers! I found the first "Conduit" though.

    I am going to guess that the file names will be the same, so using a tool such as EasyFind or Find Any File (from the AppStore) would be able to find anything named "conduit" no matter where it is.

     

    I would think that AppleScript language support will be able to translate path names appropriately and find all that, but it obviously missed the "/Library/Application Support/Conduit" which it is supposed to find.