Anyone heard of a 'SearchProtect' virus?

[IrishAyes]

I ordered several programs on sale from IOBIT about a week ago, then got too busy to install them and today noticed that of all the info received from their vendor Avangate, there was no actual installation link to follow or license codes. So I called tech support, who told me I had a virus called 'SearchProtect' - which of course they'd remove once for $149 or for a whole year for $300.

When I said no thanks, I'll do it myself, the guy went ahead and downloaded the installation programs on my desktop and sent the licensing codes to my email. I WONDER IF THEY DIDN'T JUST FAIL TO DO THOSE THINGS ORIGINALLY SO I'D HAVE TO CALL TECH SUPPORT WHICH COULD THEN TRY TO SELL ME A SERVICE I DON'T NEED.

Among other protections (which I keep up to date) on this computer, I also have Threat Fire, a behavior recognizer that runs in the background. Seems that would've caught anything like this alleged 'SearchProtect' virus. I also have things set up to warn me if I'm being misdirected, which is how tech support claims the virus got in. I don't even click on live links - I copy and paste them to the navigation window.

What say you? Is this alleged virus real, and if so how would I go about removing it w/o paying $ I don't have?

If it makes any difference the computer's got Windows 7, 32-bit at that, and besides the IOBIT suite, which I might abandon when the new pro licenses run out, I've also got Glary Utilities which I like better.

[TexasTowelie]

1. Here is a link that might help:

http://www.expertsupportnow.com/4253/how-to-remove-search-protect-by-conduit-virus-malware/

It is malware and you need to get rid of it as soon as possible. There were some other links on the Internet if you do a search. Good luck.

[IrishAyes]

4. Thanks so much. I was afraid to take just anything I could scrounge on the net

w/o reliable referral, knowing I could make things even worse. With your help, I'm sure I can get rid of this. I tried once before and got rid of most of Conduit but never could get the last bits. For some reason it didn't show up on my Revo Uninstaller. I've decided not to ever deal with Iobit again, but I will keep these instructions. Thanks again.

[hobbit709]

2. IOBIT's old Advanced Windows Care worked fairly well

Their newer version Advanced System Care sucks. And now they want to include all these "helper" applications and toolbars.
I've had good luck in removing a lot of the crap with Revouninstaller, including SearchProtect and other Conduit garbage. the free version works fine. I put it on every install and repair I do.

http://www.revouninstaller.com/revo_uninstaller_free_download.html

There's very little in the way of paid for utility programs that you can't find a free one that works as good or better.

[IrishAyes]

5. Thanks.

I'm going to save this entire page!

[Earth Bound Misfit]

3. Removal instrux @ Malwarebytes (MBAM) Forum...

See this thread @ MBAM forum for removal instrux. YMMV!! (Usual Caveat's apply... BACKUP, BACKUP, BACKUP!!!!!!!!!!!)

What is "Search Protect by Conduit"?

Search Protect by Conduit is a free program issued by Conduit LTD that claims to keep your browser protected from malware, bad extensions and home page hijacks, but as a matter as fact, "SearchProtect by Conduit" is Adware at best, borderline malicious and a potentially unwanted program (PUP). It usually comes bundled with program downloads (it almost got me here)and contains browser hijacker search.conduit.com...it will hijack your homepage, startup page, new tab page and search engines. Sometimes, it also adds unwanted toolbar(s) such as conduit toolbar, and many other toolbars issued by conduit on your web browser.


Is "Search Protect by Conduit" dangerous?

Search Protect by Conduit is borderline malicious IMHO. Like many other PUP's, it is often distributed via free downloads or cracked software. When you install a free program, "Search Protect by Conduit" may install automatically on your computer without any obvious notification. Once it gets installed on your computer, Search Protect by Conduit will run in the background to "protect" you from all threats and blocks all attempts to manipulate your browser by other browser hijackers except the one it came bundled with.

[IrishAyes]

6. I'm saving this entire page against future need as well.

Thanks btw. I'm not sure but I've been wondering if maybe this nasty thing sneaked in on IOBIT in the first place. But I know I hate it with a purple passion usually reserved for the GOP.

[IrishAyes]

7. One more thing, everyone:

When I get a new computer before long, I WON'T simply transfer programs over to the new one. I'll carefully start from scratch and avoid IOBIT like the plague.

What's more, I intend to try to contact Conduit, pretend to love Search Protect, and ask them what programs I might find it on. Specifically IOBIT???? If that works, you can bet I'll come back and rat 'em out here.

[Green-T]

8. SearchProtect

Free removal instructions: http://cookieverwijderen.nl/hijackers/searchprotect

[IrishAyes]

9. Thanks. Bookmarked for archives.

I've ripped out Advanced System Care entirely. During an update I also caught them sneaking on 'PureLeads'! It's bad enough when they nag you with offers, but I hate sneakers unless they're footwear.