Search Protect by conduit

Search Protect by conduit

Known Toolbar

by Conduit Ltd.

What is Search Protect by conduit?

Search Protect by conduit is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 65.18% of installations running this operating system. Search Protect by conduit's installer is typically 5.00 MB in size and installs around 17 files. The most common release is 1.5.0.71 with 52.54% of all installations currently using this version.

Search Protect by conduit is most popular in the United States with 75.20% of installations residing in this country.

About Search Protect by conduit?

The Conduit Search Protect software is a tool designed to protect the homepage and search settings set by the Conduit OurToolbar from being altered by competing web browser plugins. It is typically included with various Community toolbars during installation. When installing a Conduit Toolbar, the EULA is agreed to by default in order to install the required SearchProtect software. Once installed, the program will add three background startup options to Windows to ensure its operation on each reboot, including a StartUp run activation on user login for both the current user and all users, as well as the addition of a Windows Service (CtlMngSvc). During setup, the software will connect to the Internet and download a file called SPSetup.exe from integration.download.conduit-services.com, which is loaded from the user's web browser temporary folder.

Multiple virus scanners have detected malware in Search Protect by conduit.

cltmng.exe (MD5: 51de6288470b700c0cd663cdac49a4b0) has been flagged by 8 scanners:
Scanner Software Result
Antiy-AVL Trojan/Win32.Patched
avast! Win32:SearchProtect-B [PUP]
ESET-NOD32 a variant of Win32/Conduit.SearchProtect.B
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Conduit.A
VIPRE Antivirus Conduit (fs)
Bkav FE W32.Clodb48.Trojan.e68b
Dr.Web Adware.BGuard.15
SPHook32.dll (MD5: cef34741e205ebc85aeb01f04fc75ebf) has been flagged by 5 scanners:
Scanner Software Result
avast! Win32:SearchProtect-C [Adw]
Dr.Web Adware.BGuard.15
ESET-NOD32 Win32/Conduit.SearchProtect.A
Malwarebytes PUP.Optional.Conduit.A
VIPRE Antivirus Conduit (fs)
InternetExplorerModule.dll (MD5: 8cb6c541f8937bc4f794eb21a50b69bc) has been flagged by 5 scanners:
Scanner Software Result
avast! Win32:SearchProtect-C [Adw]
Dr.Web Adware.BGuard.15
ESET-NOD32 a variant of Win32/Conduit.SearchProtect.C
Malwarebytes PUP.Optional.Conduit.A
VIPRE Antivirus Conduit (fs)
FirefoxModule.dll (MD5: b73f5d0f7bd19f0c0dd623bf4e0c9462) has been flagged by 6 scanners:
Scanner Software Result
avast! Win32:SearchProtect-C [Adw]
Bkav FE W32.Clodb48.Trojan.e68b
Dr.Web Adware.BGuard.15
ESET-NOD32 a variant of Win32/Conduit.SearchProtect.C
Malwarebytes PUP.Optional.Conduit.A
VIPRE Antivirus Conduit (fs)
CltMngSvc.exe (MD5: 0bbecff40270b9967ab7e79a50a484c3) has been flagged by 9 scanners:
Scanner Software Result
avast! Win32:SearchProtect-B [PUP]
Dr.Web Adware.BGuard.15
ESET-NOD32 a variant of Win32/Conduit.SearchProtect.E
Malwarebytes PUP.Optional.Conduit.A
TrendMicro-HouseCall TROJ_GEN.F47V0811
VIPRE Antivirus Conduit (fs)
Antiy-AVL Trojan/Win32.Patched
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Bkav FE W32.Clodb48.Trojan.e68b

Software Behaviors

Services:
  • CltMngSvc.exe runs as a service named 'Search Protect by Conduit Updater' (CltMngSvc) "This service enables auto-updates of Search Protect by Conduit, which maintains your selected Search settings.".

Startup Entries

Registry entries:
  • cltmng.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'SearchProtect' and executes as C:\users\user\appdata\Roaming\SearchProtect\bin\cltmng.exe.

Software Details

URL:
https://www.conduit.com/privacy/search-protect-privacy-policy.aspx
Support:
Installation path:
C:\Program Files\searchprotect\bin
Uninstaller:
"C:\Program Files\SearchProtect\bin\uninstall.exe" /S
Size:
5.00 MB
Language:
English

Search Protect by conduit Executable Details

Primary executable:
cltmng.exe
Name:
Search Protect by conduit
Path:
C:\Program Files\searchprotect\bin\cltmng.exe
MD5:
51de6288470b700c0cd663cdac49a4b0
SHA-1:
SHA-256:
Files installed by Search Protect by conduit
File Type Filename MD5
EXE
ea8833537f79d2bd0fb19f4d10231c3e
DLL
2f64d438e7c554f24ad29189ac7141df
DLL
033fc54dd465e910a3645ff4c68a091f
DLL
62700b0b65f9c2511fcc2d4a5d7e2131
DLL
a0346def4951d15a12fe339aa77d1174
EXE
51de6288470b700c0cd663cdac49a4b0
EXE
539887fe850807a17260fafa1a5a37ba
EXE
196909a9dc2265c21aa49bd9cfa319aa
DLL
134bcf1e18fccf48054547bb5dd2775e
DLL
cef34741e205ebc85aeb01f04fc75ebf