Malware conduit toolbar found on AMO

  • Problem
  • Updated 11 months ago
I discovered that an addon that used the conduit toolbar engine on the AMO site. Conduit toolbars are known malware, url to add on is here: https://addons.mozilla.org/en-US/fire....
Photo of souta95

souta95

  • 2 Posts
  • 0 Reply Likes
  • concerned

Posted 6 years ago

  • 5
Photo of Shiri GamonSG

Shiri Gamon

  • 3 Posts
  • 1 Reply Like
Dear souta95,
Conduit does not provide any toolbars of its own, it is a platform that enables more than 200,000 publishers to build their own branded add-ons on IE, FF and Safari. The free, powerful Conduit platform has earned the prestigious TRUSTe Trusted Download certification. The technology is 100% safe and trusted by millions worldwide and used by leading global brands like Fox News, Habbo, iWin, Major League Baseball, NHL teams, Softonic, TechCrunch, and Travelocity, as well as thousands of small and medium organizations in 120 countries around the globe.

Feel free to try it for yourself and contact me at connect[at]conduit.com directly if you have any questions. If you think that this specific publisher is exploiting our free offering please let me know and I will ask our compliance team to investigate and shut him down.

Regards,
Shiri Gamon
Social Media Marketing Manager,
Conduit.
Photo of palebunnyinfidelP

palebunnyinfidel

  • 2 Posts
  • 0 Reply Likes
WHAT-EVER man, I got that conduit toolbar with a VideoSoft Free Studio Manger PDF reader I wanted to try. I thought WELL it does sound interesting, AND it did have some VERY cool buttons, you can click on the FB button & just be in a little box on your FB page, you could browse Youtube & play a video OR your playlist & the minimize that block keeping your tabs open, okay, okay BUT THEN "BING" FORCED ITSELF ON AS MY SEARCH ENGINE, I DELETED THAT CONDUIT TOOLBAR & UNINSTALLED IT, BUT, GUESS WHAT - THAT SHIT WAS STILL HIDDEN IN MY 'ABOUT:CONFIG" ON FIREFOX, and when I typed in a search and hit enter, I watched those little "waiting for" boxes clicking by at the bottom and saw clear as day "switch to conduit" blah blah "toolbar" blah blah BING.
IT'S A FUCKING VIRUS - I HATE YOU BITCH !! I HATE BING
I have spent HOURS searching help and blogs to get rid of BING and have employed every technique the worked for other people -none of which worked, and I uninstalled ALL my toolbars, and HAND SEARCHED every file in my computer for the words BING, SEARCH ENGINE, ASK, BIT TORRENT and all toolbars, but, yours was melded RIGHT INTO THE FIREFOX.
Photo of daniel perusseDP

daniel perusse

  • 1 Post
  • 0 Reply Likes
search conduit is STUPID. its just REPLACES the new tab with with search conduit.I DIDNT EVEN WANT IT THERE. Its just like a STUPID FLU that EATS my chrome.
Photo of RockyR

Rocky

  • 1 Post
  • 0 Reply Likes
Conduit is a disgusting pos, The people who work for this company should rot in hell.
Photo of Angel Gonzalez

Angel Gonzalez

  • 1 Post
  • 0 Reply Likes
Someone should set fire to your business with your employees and families trapped inside F CONDUIT VIRUS SPAMWARE MALWARE POS COMPANY
Photo of Fred Vermeer

Fred Vermeer

  • 2 Posts
  • 0 Reply Likes
That's a bit extreme. Conduit is not a virus. Everything else is correct. I think a more suitable punishment would be a fine so big it would bankrupt every employee and their families.
Photo of souta95

souta95

  • 2 Posts
  • 0 Reply Likes
I'm still a little uneasy as all conduit-based toolbars were removed from AMO at one time, and after uninstalling it it left two folders and several files behind (one of the reasons they were removed from the AMO site before).
Photo of Shiri GamonSG

Shiri Gamon

  • 3 Posts
  • 1 Reply Like
thanks for the update souta95. You're reporting unusual behavior and we'd like to look into that ASAP. Could you please send me an email (connect[at]conduit.com) with screenshots of the folders and files, the name of the toolbar you installed, and the process you went through to remove them?

Alternatively, you can send the email directly to our compliance team at legal[at]conduit.com. As mentioned, we show zero tolerance towards Publishers who violate the privacy rights of their toolbar users, and would like to follow up on this issue ASAP.
Photo of margM

marg

  • 1 Post
  • 0 Reply Likes
cant get rid of this toolbar. conduit, im sure its slowing my computer, an its appeared on a 2nd computer.
Photo of TannerT

Tanner

  • 9 Posts
  • 0 Reply Likes
Conduit toolbars are banned on AMO, along with torrent/warez... I've reported them
Photo of Shiri GamonSG

Shiri Gamon

  • 3 Posts
  • 1 Reply Like
Tanner,

Conduit doesn’t offer toolbars, we offer a platform by which publishers of all sizes can build their own browser add-on for FF, IE and Safari, and offer it to their community members.

Publishers that have used our technology to offer their add-ons for FF have submitted their community toolbars to AMO in the past and some of them are still being offered on AMO.

In parallel Conduit is working directly with Mozilla to enable more publishers to offer their add-ons on AMO. Feel free to use our free platform to build your own add-on and contact me if you have any questions.
Photo of palebunnyinfidelP

palebunnyinfidel

  • 2 Posts
  • 0 Reply Likes
IT'S STILL YOUR TOOLBAR, I know this is 3 years ago, but, when I got the TOOLBAR - I had to connect WITH CONDUIT to my facebook, and it left a CONDUIT APPS message on my FB page, and the CONDUIT blah blah is still embedded in my firefox, and that all says CONDUIT CONDUIT CONDUIT (not anybody else)
servicemap-conduit services
settings-toolbar-search-CONDUIT
appsmetadata-CONDUIT.com

Don't be pushing that crap onto anybody else, that's all you.
Photo of Easta WabbitEW

Easta Wabbit

  • 1 Post
  • 0 Reply Likes
i've beena pc programmer for a large company for over 15 years--only an idiot makes a blanket statement that all toolbars are malware or bad//.and btw, conduit is a legitimate company which allows creators to create their own toolbars.if someone creates a toolbar using conduit,that causes you a problem,it's not conduit's fault..would it be this site's fault if you placed a virus here?no it would be yours moron..get your head on straight.if a burglar robs your bank and empties your account is it that banks fault?no it' s the burglar's fault.conduit supplies the means whereby creators can build their own toolbar...period!!they're a service.i've been using toolbars that have been created via conduit for years and never had a problem./during installation one has the option of ticking and unticking boxes and clicking accept or decline regarding bundled software.they don't make it a secret//once the toolbars are loaded one HAS to go to the options area of the toolbar and untick the box that allows for the redirecting of the browser's home page./and there's many other behaviors that you'll probably want to prevent from occurring by simply accepting or declining by ticking and unticking boxes .I takes about one minute is all.//a lot of people feel that having to be so aware of all this equals an inappropriate move on the part of conduit and then formulate the notion that because a person has to be so conscious of all this that it's got to be intentional deceipt ,which of course then equates to many , as being malicious malware.you people are noobs ...right?
Photo of TannerT

Tanner

  • 9 Posts
  • 0 Reply Likes
And they took it down... Thanks for the tip souta95
Photo of TMZT

TMZ

  • 1 Post
  • 0 Reply Likes
For future reference. You can report this on irc.mozilla.org/addons
Photo of fksvermeerF

fksvermeer

  • 1 Post
  • 0 Reply Likes
I have had many many people come in to my shop with exactly the same issue of Safari being unable to launch, or crashing immediately after launch. In each and every case they were all found to have installed a conduit toolbar. In each and every case, removing the Conduit toolbar fixed the Safari crashes. I do not trust conduit toolbars, and I'd say stay away from installing toolbars of ANY kind into Safari.
Photo of Steve HoldermanSH

Steve Holderman

  • 1 Post
  • 0 Reply Likes
Firefox running on my Mac was constantly hesitating, pausing, driving me mad. I looked into my extensions and plugins and found Conduit toolbar installed. I don't remember why I even had it. Anyway, the problem was resolved once this was removed.
Photo of 0s1r1s0

0s1r1s

  • 1 Post
  • 1 Reply Like
In my opinion - all toolbars are bad. I fix computers for a living and more often than not it is the toolbars that cause someone's machine to get infected.

The toolbar will always, at some point, direct a ping or handshake back to it's point of origin and this can be pounced upon by nefarious watchdogs. They can then launch whatever they like back down the line and see whether it makes it through someone's antivirus software. And since so many people are still gullible enough to have Norton products on their machines, most of the time they succeed.

I don't recommend ANY toolbars. If you want to find something, use a search function.
Photo of Mark0656M

Mark0656

  • 2 Posts
  • 0 Reply Likes
**This Software company name, "CoolMedia", operates software of "CoolRecordEdit.com", which contains the software engine made from Conduit.com. Do research via Google. I did and found this website >> http://softwaretopic.informer.com/con...

At the bottom of the page it has a title that says "Additional titles, containing conduit engine cool edit" In that list is CoolMediaLLC, which is the company name at the bottom of CoolMedia website. **

What I had was the Free Sound Recorder toolbar that is from Conduit.com. It was a packaged toolbar with a freeware program. I always choose "no" to toolbar install requests, but this *&^% program installed it anyway.

A Standard uninstall of the toolbar program does not remove its trojan software, it just does not show the toolbar. It hijacked my personal browser settings and would revert back to its settings each time I change the settings or even reset it to default.

I had it in FireFox. Using the "about:config" in the URL address box to access the configuration files and resetting each one that was affected did not work, conduit trojan files just replaced the files settings.

I had to go into my system registry to remove conduit entries one by one. Then I had to find the conduit files in the FireFox profile folder and deleted them, including the folders. This caused a minor corruption of FireFox, but could not be avoided. Conduit replaced crucial FireFox operating files with their own and once removed, corrupted FireFox operation.

I had to completely remove FireFox and all personal settings etc to clean it out. Then I had to do a complete (includes all settings) uninstall & reinstall FireFox twice to get the browser to be completely fixed.

Then lastly I had to scan with an AntiVirus software, I used Comodo. This included a scan from Malwarebytes Anti-malware software to ensure this lichenous software from Conduit was removed. What I found by Malwarebytes was a name changer program called "Pop.BundleInstaller.Somoto". This is Malicious software.

Do not believe what any Conduit.com rep says. They are as bogus as the software.
Photo of Wallace Joe Robertson

Wallace Joe Robertson

  • 1 Post
  • 0 Reply Likes
I was lucky in one way, not in another with Conduit. I had downloaded some seemingly harmless small programs, careful to click "NO" when asked to also include anything else (as above user said). Still ended up with Conduit "Community" Toolbar installed. Found it as an add-on under Mozilla, and de-activated AND deleted it. What it was doing was showing a "Error 404 - Page Not Found" screen about every 3rd time I tried to click to any page. Unlucky part: still having small bug on email program (Juno). Apparently the "From" line on my email has been renamed something goofy, and it won't reset when I go to reset it. Happened about same time as the Conduit fiasco above. Bad business! If I knew of any company advertising on Conduit Toolbar, I would immediately start boycotting them.
Photo of Fred Vermeer

Fred Vermeer

  • 2 Posts
  • 0 Reply Likes
If your Safari browser crashes a lot, look for the following and delete:

/Users/yourname/Library/Application Support/Conduit
/Library/Application Support/Conduit
/Library/InputManagers/CTloader
/Library/LaunchDaemons/(anything with conduit in the name)
/Library/LaunchAgents/(anything with conduit in the name)
/Applications/Toolbars

more than 9 times out of 10, deleting these will stop Safari from crashing.
Photo of dominique berryDB

dominique berry

  • 1 Post
  • 0 Reply Likes
hii buddy ,even i have encountered with the same problem two weeks before..but when i come to know about these steps to follow i found this really helpful to me..so am telling you the same steps what i've followed earlier

Step 1 – Uninstall the Conduit Toolbar
Step 2 – Delete Conduit Folders, Files and Gifs from hard drive
Step 3 – Delete Conduit Registry Keys
Step 4 – Delete Conduit from Browsing History
Step 5 – Remove Conduit Cookie
Step 6 – Block Conduit Cookie’s
Step 7 – Remove browser add-ons and extensions
Step 8 – Remove Conduit Configuration Settings
Step 9 – Run Spybot
Step 10 – HiJackThis
Step 11 – Disable Add-ons
Step 12 – Re-Install a clean browser
Step 13 – Remove your old System Restore Points