cancel
Showing results for 
Search instead for 
Did you mean: 

How do I get rid of "search.conduit.com" on my new tab page

SOLVED
Highlighted
New Contributor

How do I get rid of "search.conduit.com" on my new tab page

Somehow I got the search.conduit.com problem it was on my home page and I get it when I open a new tab. I have tried about:config changing the URL and I followed the steps for deleting User.JS and I found a User file (did not specify if it was a .JS ) but when I tried opening it I got and error. I also ran the SearchReset Addon but no luck. Well the only other option I see is reinstalling FireFox but I'm affraid I will loose all my bookmarks. Can you pleas help me?

1 ACCEPTED SOLUTION

Accepted Solutions
New Contributor

Re: How do I get rid of "search.conduit.com" on my new tab page

I had the very same issue. Even when I tried deleting it from both my firefox and chrome extensions it still came up when I started either browsers. The only way I've found that this can be fixed is by removing the program using your control panel. Sometimes these crappy mal ware tool bars install actual programs and Search conduit is no different. When you display all your programs (after clicking add or remove programs) you should see a magnifying glass icon next to a program name " search protect". That is the search conduit program and it needs to be deleted. After uninstalling it , restart your browser and everything should be fine.

37 REPLIES
Senior Contributor

Re: How do I get rid of "search.conduit.com" on my new tab page

Hello please try this,


1. Type Ctrl+Shift+A.

2. On the Extensions and Plugin search for Conduit Community Toolbar and any suspicious add-ons and remove them if located. How to remove Search.Conduit.com from your home page (Stop start up)

  In Mozilla Firefox navigate to Tools > Options or click Firefox in the top left corner and click Options > Options. Under the General tab remove Search.conduit.com from the “Home Page:” field and replace it with your preferred home page URL.

How to remove the Search.Conduit.com search engine (Stop redirect)

  In Mozilla Firefox, click the small search magnify glass near the search box (not url/search field) and click “Manage Search Engines…”. Remove the http://search.conduit.com search engine from the list of search providers by highlighting the selections and clicking remove.
New Contributor

Re: How do I get rid of "search.conduit.com" on my new tab page

Hi ,

Thank you for the suggestions they were successful but it is not completely removed. I have fixed my hompage and the other search thing. But I still get the search.Conduit when I open a new Tab I have tried about:config >and then Keyword and reset that but it does not work. Thanks for your help!

Grand Master Contributor

Re: How do I get rid of "search.conduit.com" on my new tab page

You need to delete a user.js file then using the instructions in the link below.

SEE: https://support.mozilla.org/en-US/kb/how-to-fix-preferences-wont-save#w_user-js-file-overriding-pref...

Site Moderator

Re: How do I get rid of "search.conduit.com" on my new tab page

Note that you shouldn't double-click a user.js file to open it as that will give an error (it is not a JScript file), but use it via the right-click context menu (Open with) in a text editor.

New Contributor

Re: How do I get rid of "search.conduit.com" on my new tab page

I had the very same issue. Even when I tried deleting it from both my firefox and chrome extensions it still came up when I started either browsers. The only way I've found that this can be fixed is by removing the program using your control panel. Sometimes these crappy mal ware tool bars install actual programs and Search conduit is no different. When you display all your programs (after clicking add or remove programs) you should see a magnifying glass icon next to a program name " search protect". That is the search conduit program and it needs to be deleted. After uninstalling it , restart your browser and everything should be fine.

New Contributor

Re: How do I get rid of "search.conduit.com" on my new tab page

Type about:config


browser.newtab.url

smartbar.conduitHomepageList

smartbar.originalHomepage

Also search Conduit in the about:config, and see the below post I made about 3-4 replies down on how to clean registry. I tried to clean it up and I added pictures on how to fix it ect. There is a control on the newtab function inside the registry, changing the about:config won't 100% fix the problem, and probably will continue on reboot after conduit re-writes.

New Contributor

Re: How do I get rid of "search.conduit.com" on my new tab page

Thank you so, so much Parkur. I followed your instructions - which were so very simple - I like that sort - and I have got rid of it.

There are several other places on support where this same question has been asked.

New Contributor

Re: How do I get rid of "search.conduit.com" on my new tab page

Have you downloaded any software such as utorrent or bittorrent? Both of these are bundled with an OpenCandy EULA which you have to sign, and it automatically installs search conduit on your computer. I had the same problem a couple of months ago, and as a result I no longer use BitTorrent or Utorrent as my torrent program.

I now use Tixati, and haven't had any problems with it thus far.

Sadly, the only way I got rid of it was by formatting my computer, because it infected all four of my browsers. I was lucky that the malware only infected one computer on my network, and not the other two.

New Contributor

Re: How do I get rid of "search.conduit.com" on my new tab page

@swibbo1, I recently just received the malware from "orbitz downloader" from the official website, and yeah it did have install request as part of the bundle for orbitz, although I am currently using uTorrent and I had never recieved request or infection with the malware from uTorrent, where abouts did you see that open candy EULA with uTorrent? Just curious, I don't think that program gave me any problems, it all started right after the open candy bundle with orbitz downloader for me personally, but I'm sure they have plenty of programs they pay to be bundled with I suppose.

You don't have to format though, its pretty easy to get rid of; I could infect myself and show video of how to clean it, but basically it does require a little advanced knowledge in registry, besides that a simple anti malware bytes program could clean the files off your computer themselves, but the real problem is Search Conduit has run once registry keys that it enters, which are not cleaned by the average user of a computer as they are not use to using the regedit function.

I know I typed alot of mumbo in that above reply a few posts ago and you were probably replying to main original poster not me, but for the future maybe you can take 5-10 minutes and become accustom with the registry, it is your computers brain basically, without it windows and the hardware would not beable to communicate beyond some minor voltage controls @ bios setup.

In the registry there are specific entries called "Run", and "RunOnce", these are entries written for the computer to auto boot all programs on the list with entries, automatically at start up. This is where Search Conduit causes the most problems for people, as uninstalling the software does not undo the registry keys, and managing engines on the firefox dropdown does nothing to clean the infected computer from re-writing the conduit executables upon restart, if not before restart.

For those reading and wanted to get better idea of how to clean your computer from these re-writing/installing malware programs I tossed a couple screenshots together to show what I am talking about, its quite simple to learn and it helps 100x with malware and stuff like that.

Open "Run", type "Regedit" (Pic below) http://imageshack.us/a/img138/4559/5yyb.png

This will open the Computers Registry, here is a Pic of the window below http://imageshack.us/a/img27/1152/gj1z.png

Okay, now we can see two main entries that we will work with out of the 5 folders, we will use only the 2nd and 3rd one or more specifically, HKEY_CURRENT_USER and HKEY_LOCAL_MACHINE.

Now we visualize the two folders that contain all the malwares behind the scene instructions, these are where the programs are directed to open and install things over and over again when you try to remove or delete them ect, so we can solve this now pretty easy if you are following for anyone reading this, this is universal for all malware/virus ect.

So, we know these two folders, we will start with the 2nd one or "HKEY_CURRENT_USER" on your computer, so we click the folder and expand it so we can see all the folders it holds inside it, easy? Okay, now you've opened the folder and it shows this below: http://img541.imageshack.us/img541/8872/yx25.png

Okay, this looks like yours, so your really following me now, this is good. You see software folder I highlighted, this is the next folder we will expand, not many steps left so stay with me please!

Open software, if you are on a infected computer you will right away see "Conduit" in the folder list, its alphabetical by the way, so it would be in the C named folders near the top! See below: http://imageshack.us/a/img36/8520/1yt.bmp

Okay you see the folder, you will delete "conduit" from the softwares list of folders, this is something you can feel comfortrable about doing, just don't delete anything but the specific "conduit" named folder, leave everything else. Smiley Very Happy

So, we just deleted Conduits main software folder in the registry entry "HKEY_CURRENT_USER/Software" folder, so now we will go ahead and navigate further into the expanding folders, now that you are still in software, continue searching down to the Microsoft folder, near the M alphabetical order obviously.

Good you found Microsoft folder that is inside the software folder, now navigate to the folder called "Windows" inside the Microsoft folder which is inside the main software parent folder, you have expanded 3 folders, you see inside the "Windows" folder there is another folder called "CurrentVersion", and inside that folder is "Run" folder and "RunOnce" folder. You found the start up programs for the computers registry current user directory, congrats, this list inside the "Run" folder contains start up programs entries that tell the computer which application to start, and the location or target of the program its being told to start see pic below: http://imageshack.us/a/img22/9369/ja2b.png

You see on that list above in the picture, its 3 entries, 2 of them are for my legitimate programs, I created a Conduit one for you to visualize, this is where it will be on your computer, it will have Conduit as key name, and the data where it says EXAMPLE will just be a path to the conduit malware its starting!

You can safely delete that "Search Conduit" entry, or just "Conduit".

Okay we are 50% done, you did the main directory for "HKEY_CURRENT_USER" but we still need to do "HKEY_LOCAL MACHINE" folder, and expand that so we can do the SAME STEPS as above in current user directory, simple right? I made more pics just the same thing but this time in the 3rd folder, should be getting easy by now... There is the main folder here in LOCAL MACHINE: http://imageshack.us/a/img841/7205/3eew.png

Now you navigate to Software> and then Look for Conduit. http://imageshack.us/a/img593/4963/bc5c.png

under local machine and inside software folder, its called "conduit" on the list, delete Conduit as shown in the picture.

okay now we just gotta locate the same "Run" and "RunOnce" folders as we did before but this time we will stay under this new "LOCAL MACHINE" directory instead of being under CURRENT USER as before.

After deleting conduit on the list, move down to Microsoft folder again, expand, navigate to "Windows", expand it, and look for "Currentversion" folder. Inside the CurrentVersion folder locate "Run" folder, open it and inside it find "Conduit" or any related conduit seach protector entries as shown in the picture below: http://imageshack.us/a/img823/5093/uc9o.png

Delete only the conduit, now your registry is free of main conduit folders, and free of re-writing on restart of the malware!, now the only step left is to delete the physical files it was pointing to, how to do that easily you ask?

Use http://www.malwarebytes.org/mwb-download/

This antimalware program will clean all physical files, but you might want to check the registry yourself as it did not clean mine, but after I cleaned registry, then scanned with anti malware, it asked me to restart after quick scan finished, did so and it was 100% gone, I would recommend using the registry tips and guide I provided or else it will end up most likely re-writing on restart. I am on windows XP guys, but these steps are much the same on win8, the directories will be the same!

Good luck, I just removed this a few days ago, but for person who isn't used to using registry you don't have to formatt, you can follow the steps above to fix it. 100%.