[Gammo]

Do this instead then:



Restore Internet Explorer default settings.

• Click on Start and then on Control Panel
• In Control Panel window click on Network and Internet and then on Internet Options
• In Internet Properties window change your home page manually.
• Click Apply > OK.

Does that fix it?

[Advertisements]

Have tried this a few times - each time it reverts to search conduit .com.
thanks Jacksy

[jacksy]

Have tried this a few times - each time it reverts to search conduit .com.
thanks Jacksy

[Gammo]

Strange..


Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

• Double-click SystemLook.exe to run it.
• Copy the content of the following codebox into the main textfield:
  

  :filefind
  *conduit*
  
  :folderfind
  *conduit*
  
  :regfind
  conduit

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

[jacksy]

Copy of scan as requested, thank you Jacksy

[jacksy]

Copy of scan as requested. Thanks. Jacksy

SystemLook 30.07.11 by jpshortstuff
Log created at 20:30 on 17/01/2012 by User1
Administrator - Elevation successful

========== filefind ==========

Searching for "*conduit*"
C:\Documents and Settings\User1\Favorites\search.conduit hijacker problem - Malwarebytes Forum.url --a---- 288 bytes [00:04 04/01/2012] [17:28 08/01/2012] 692878EE4E4C90616C76D1C5662603ED
C:\Documents and Settings\User1\Local Settings\Temporary Internet Files\Content.IE5\0FV9O5LW\search.conduit[1].htm --a---- 8321 bytes [18:09 17/01/2012] [18:09 17/01/2012] BF2BA61D6496B480627A1F3115728047
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Application Data\Mozilla\Firefox\Profiles\olqzqspx.default\extensions\{256db8bc-7da7-4248-97cd-44e07216b7f1}\components\ConduitAutoCompleteSearch.js --a---- 8641 bytes [16:52 15/01/2012] [10:57 05/12/2011] 467C3FEB6421FFDE5CD545B21DCD4696
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Application Data\Mozilla\Firefox\Profiles\olqzqspx.default\extensions\{256db8bc-7da7-4248-97cd-44e07216b7f1}\components\ConduitAutoCompleteSearch.xpt --a---- 166 bytes [16:52 15/01/2012] [10:57 05/12/2011] 806EA6CC4DCBF88A20AA3331BCDC9918
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Application Data\Mozilla\Firefox\Profiles\olqzqspx.default\extensions\{256db8bc-7da7-4248-97cd-44e07216b7f1}\searchplugin\conduit.xml --a---- 925 bytes [16:52 15/01/2012] [10:57 05/12/2011] 19E74212BF4039C8497FC99D4A2F3013
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_1500512_1495993_UK.xml --a---- 198 bytes [17:32 19/12/2011] [17:32 19/12/2011] 1B9BD67B4B5E4291138AF9547F712F9A
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971085913980000_gif.gif --a---- 1024 bytes [17:32 19/12/2011] [17:32 19/12/2011] FD7B80B70EDB98954F9F11B94C32C7E2
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971087054136250_gif.gif --a---- 806 bytes [17:32 19/12/2011] [17:32 19/12/2011] F7CFDAC8501BA64C9EFDE94E4C2A5DC4
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971088460386250_gif.gif --a---- 998 bytes [17:32 19/12/2011] [17:32 19/12/2011] E52FC3A80EA5471A9E2A851A2DF1362F
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971089234993750_gif.gif --a---- 1022 bytes [17:32 19/12/2011] [17:32 19/12/2011] BE7DB18620AA6DB7973AB1654FC09FC4
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971089477650000_gif.gif --a---- 1081 bytes [17:32 19/12/2011] [17:32 19/12/2011] FD9121C1922BCE5FCCBE713259828B66
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971089670306250_gif.gif --a---- 649 bytes [17:32 19/12/2011] [17:32 19/12/2011] EAB4BEDBC6DA14A3953133BF7B19E0CC
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971092504525000_gif.gif --a---- 658 bytes [17:32 19/12/2011] [17:32 19/12/2011] 471B3E142F52914396200581AEC029D5
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_161_CT1616974_Images_633971094131400000_gif.gif --a---- 624 bytes [17:32 19/12/2011] [17:32 19/12/2011] 23BDD502317F5CEA518AEE25AEDADD75
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_310_CT3106574_images_634543795394407842_24PX_png.png --a---- 1097 bytes [17:32 19/12/2011] [17:32 19/12/2011] 0EE33094E16162FFE5A0C10E6AD0D27B
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_310_CT3106574_images_634543795977925182_24PX_png.png --a---- 1373 bytes [17:32 19/12/2011] [17:32 19/12/2011] C138A99518178C6DA19F3163E4985D72
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_310_CT3106574_images_634543796355664677_24PX_png.png --a---- 1158 bytes [17:32 19/12/2011] [17:32 19/12/2011] F57CFF255171222DC9735A83C24F7081
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_310_CT3106574_Images_634543796781106196_png.png --a---- 1552 bytes [17:32 19/12/2011] [17:32 19/12/2011] 054B98827AFA4451CC7EE30BF01FE18D
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_310_CT3106574_images_634543797064340022_20PX_png.png --a---- 1031 bytes [17:32 19/12/2011] [17:32 19/12/2011] F75F62C00FAD0CF1A6DE17C25DAD36C7
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_310_CT3106574_Images_634543797879131621_png.png --a---- 200 bytes [17:32 19/12/2011] [17:32 19/12/2011] CFEB7AAAF6056AA96E84D35313FC4FA2
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_310_CT3106574_Images_634543799180370000_png.png --a---- 1658 bytes [17:32 19/12/2011] [17:32 19/12/2011] F7A35EB67B9DEEAF00E8D262724BE65A
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_310_CT3106574_Images_634543799347401250_png.png --a---- 1339 bytes [17:32 19/12/2011] [17:32 19/12/2011] 9CBF919BF984505851B6464D8538F1A6
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_74_310_CT3106574_Images_634544512618963750_png.png --a---- 1533 bytes [17:32 19/12/2011] [17:32 19/12/2011] D98CC5DA408E821C1616A23966CCA13D
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_About_png.png --a---- 821 bytes [17:32 19/12/2011] [17:32 19/12/2011] 99D5F75C338F2A877CBF891E0F18746E
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Browse_png.png --a---- 729 bytes [17:32 19/12/2011] [17:32 19/12/2011] F2291FAB46ED9291A1A2FFE9F88E9D84
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Contact_png.png --a---- 531 bytes [17:32 19/12/2011] [17:32 19/12/2011] A847C5F6CE2C700048749892DD2E0619
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Hide_png.png --a---- 669 bytes [17:32 19/12/2011] [17:32 19/12/2011] FED9E00C76F647EE6A0B7CC684C89F0C
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_bankImages_ConduitEngine_ContextMenu_LikeIcon_png.png --a---- 263 bytes [17:32 19/12/2011] [17:32 19/12/2011] 36BD416D16391EFAAAFB2C3C54EAE986
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_MoreFromPublisher_png.png --a---- 734 bytes [17:32 19/12/2011] [17:32 19/12/2011] 943ADFD9E0DF1507F7BC419802BF4303
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_More_png.png --a---- 562 bytes [17:32 19/12/2011] [17:32 19/12/2011] 36C6FB9C84D4AF5C5D7C5B277A0E4A01
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Options_png.png --a---- 493 bytes [17:32 19/12/2011] [17:32 19/12/2011] 275C9DA2D536F18F528C80E050C3D705
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Privacy_png.png --a---- 706 bytes [17:32 19/12/2011] [17:32 19/12/2011] 3AD88BD8E832DA39FAAEDF07AD595F94
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Refresh_png.png --a---- 674 bytes [17:32 19/12/2011] [17:32 19/12/2011] 650731EEF807C292E699779B12CBE552
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Upgrade_png.png --a---- 607 bytes [17:32 19/12/2011] [17:32 19/12/2011] 9B4D914888BCFFCBAE6757A0E450551C
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_ClientImages_radio_gif.gif --a---- 419 bytes [17:32 19/12/2011] [17:32 19/12/2011] 01B83C91554738F6AFFB7895BBBA73FB
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_bullet_gif.gif --a---- 218 bytes [17:32 19/12/2011] [17:32 19/12/2011] 94286B23FBE8E35F31EBC0B7A9CDDA44
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_flags_uk_flag_gif.gif --a---- 173 bytes [17:32 19/12/2011] [17:32 19/12/2011] 02AA4894D6BFC50DAC190EB93AEE4E03
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_flags_usa_flag_gif.gif --a---- 167 bytes [17:32 19/12/2011] [17:32 19/12/2011] 218A7C5E05C6F0FB85388A9DA06B55A3
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_ArcticQuest_gif.gif --a---- 1077 bytes [17:32 19/12/2011] [17:32 19/12/2011] FE6E5A8B0A9444786AE508147C93B8A4
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_AtlantisQuest_gif.gif --a---- 619 bytes [17:32 19/12/2011] [17:32 19/12/2011] CED90C973D01D3D581A1F658B263E41E
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Backgammon_gif.gif --a---- 1031 bytes [17:32 19/12/2011] [17:32 19/12/2011] 3784449EBC06BA246D3EEF9019D401EC
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_BistroStars_gif.gif --a---- 610 bytes [17:32 19/12/2011] [17:32 19/12/2011] 816E1F5B333A1B2064999214296D2BD5
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Checkers_gif.gif --a---- 969 bytes [17:32 19/12/2011] [17:32 19/12/2011] 47F42E2411A7E9D76B8F66BB40604FA2
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Chess_gif.gif --a---- 985 bytes [17:32 19/12/2011] [17:32 19/12/2011] 63125AFB782F81FAECCA4B28F86B72AB
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Clash_N_Slash_gif.gif --a---- 586 bytes [17:32 19/12/2011] [17:32 19/12/2011] 5CEA9F1083981E0F3D35223F0D5610E8
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Connect4_gif.gif --a---- 1022 bytes [17:32 19/12/2011] [17:32 19/12/2011] BE7DB18620AA6DB7973AB1654FC09FC4
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_FinalFortress_gif.gif --a---- 589 bytes [17:32 19/12/2011] [17:32 19/12/2011] C0098518021F9B797FE38A50C94D4587
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_FlowerQuest_gif.gif --a---- 1081 bytes [17:32 19/12/2011] [17:32 19/12/2011] 2AAE23CCCAEFA8D1A1830DA6E24E841C
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Go_gif.gif --a---- 997 bytes [17:32 19/12/2011] [17:32 19/12/2011] 48455300FF81F80324231AD962C9241A
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_HiddenExpedition_gif.gif --a---- 1046 bytes [17:32 19/12/2011] [17:32 19/12/2011] 414F9D82D26CE56585D367CE3B75E786
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_MahjonggArtifacts2_gif.gif --a---- 1088 bytes [17:32 19/12/2011] [17:32 19/12/2011] 46F10BACB1357BD0D3474A33854D838C
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Marbles_gif.gif --a---- 1000 bytes [17:32 19/12/2011] [17:32 19/12/2011] 7854D45C7EAA4977D51A1BC5CE2C4CFC
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Match4_gif.gif --a---- 1026 bytes [17:32 19/12/2011] [17:32 19/12/2011] DDFA780E11491440D96FB557CD43BBAB
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_PyramidRunner_gif.gif --a---- 431 bytes [17:32 19/12/2011] [17:32 19/12/2011] D1457BB4130E42B6A8734F0D6C36BDBE
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Reversi_gif.gif --a---- 1009 bytes [17:32 19/12/2011] [17:32 19/12/2011] 3282C3698B729DD4D6111B1411E6BBF8
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_RiseofAtlantis_gif.gif --a---- 1090 bytes [17:32 19/12/2011] [17:32 19/12/2011] 92E82CFE67DD8266F90681ACB82F1576
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_SheepMe_gif.gif --a---- 1008 bytes [17:32 19/12/2011] [17:32 19/12/2011] 11E9841A2C2470AE234FB85F7F3385ED
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_SnowyBearsAdventures_gif.gif --a---- 1064 bytes [17:32 19/12/2011] [17:32 19/12/2011] 1CAB9AED1E3A6D0AEF3A419DD0EEE137
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_SnowyTreasureHunter_gif.gif --a---- 678 bytes [17:32 19/12/2011] [17:32 19/12/2011] 3A1CB22D90146FF71C3D2ED9DAC3682F
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_Sudoku_gif.gif --a---- 1000 bytes [17:32 19/12/2011] [17:32 19/12/2011] 0291D57D31C445545661E08C7D1D6AA5
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_icons_gamesicons_TicTacToe_gif.gif --a---- 988 bytes [17:32 19/12/2011] [17:32 19/12/2011] E86BDAB48EFA93D6273D18E3D0DA79E7
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_main_menu_about_gif.gif --a---- 403 bytes [17:32 19/12/2011] [17:32 19/12/2011] EC3C2B4E0DEC4D880BAFF88ABBF94188
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_main_menu_clear_history_gif.gif --a---- 414 bytes [17:32 19/12/2011] [17:32 19/12/2011] A9E001CBC00B06B121DFBC80707F5298
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_main_menu_contact_gif.gif --a---- 278 bytes [17:32 19/12/2011] [17:32 19/12/2011] 15DEF39E438E807E2F0E22D44FDC7FB7
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_main_menu_help_gif.gif --a---- 405 bytes [17:32 19/12/2011] [17:32 19/12/2011] 995595D4C685D659E8F03CD0A287EDDF
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_main_menu_home_page_gif.gif --a---- 405 bytes [17:32 19/12/2011] [17:32 19/12/2011] AA39D8A6B65E208901EBA9F3D4728D3E
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_main_menu_options_gif.gif --a---- 361 bytes [17:32 19/12/2011] [17:32 19/12/2011] 464E244E7E2F27FB85E0C3AB69D72104
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_main_menu_privacy_gif.gif --a---- 425 bytes [17:32 19/12/2011] [17:32 19/12/2011] 6427565C7105DC497287866100F260BB
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_main_menu_refresh_gif.gif --a---- 381 bytes [17:32 19/12/2011] [17:32 19/12/2011] AE7C9F67594A84B096D225601ACB0B2A
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_main_menu_shrink_gif.gif --a---- 351 bytes [17:32 19/12/2011] [17:32 19/12/2011] C3EBA0237D68F665AF6D663906221092
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_main_menu_upgrade_gif.gif --a---- 399 bytes [17:32 19/12/2011] [17:32 19/12/2011] 8BE02D510B4B2E05AD2611B1E9A0BD56
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_SearchEngines_images_search_gif.gif --a---- 405 bytes [17:32 19/12/2011] [17:32 19/12/2011] 66018EAE0906C9831A821CAE5D1089BB
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_SearchEngines_news_icon_gif.gif --a---- 371 bytes [17:32 19/12/2011] [17:32 19/12/2011] 84896837EDB1A78C14DB6A2F3A0AEE3A
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_searchengines_search_icon_gif.gif --a---- 322 bytes [17:32 19/12/2011] [17:32 19/12/2011] 948781E4B6478290050ECA4423B89B1E
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_searchengines_softonic_gif.gif --a---- 606 bytes [17:32 19/12/2011] [17:32 19/12/2011] 2A1D4FB45F62D3D260F2134228FAB05E
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_SearchEngines_tfd_gif.gif --a---- 240 bytes [17:32 19/12/2011] [17:32 19/12/2011] AE5A39669C623937C0839E079E1088D5
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_images_SearchEngines_video_gif.gif --a---- 335 bytes [17:32 19/12/2011] [17:32 19/12/2011] 766433EF38BDA83C4FD4932027A4B9D5
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_MarketPlace_48_D42_48769F5D-DA17-4715-AA45-5979406BCD42_Thumbnail_45X45_png.png --a---- 4203 bytes [17:32 19/12/2011] [17:32 19/12/2011] EFA23399C1538756228998D73220C777
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_MarketPlace_64_856_647901d5-747f-4355-8946-6a729012a856_Thumbnail_45x45_png.png --a---- 1778 bytes [17:32 19/12/2011] [17:32 19/12/2011] AF4E0E8D8089B2660A32B57EB242EE99
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___storage_conduit_com_MarketPlace_a0_18b_a09e6985-3574-4fcd-b796-975649aae18b_Thumbnail_45x45_png.png --a---- 1629 bytes [17:32 19/12/2011] [17:32 19/12/2011] 3619F5A8A79744C577D96D01616E7685
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\CacheIcons\http___weather_conduit_com_images_weather_Default_rain_gif.gif --a---- 386 bytes [17:32 19/12/2011] [17:32 19/12/2011] 8006B1A5A88AB3451A5E58AA361815DD
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=GottenApps&locale=en.xml --a---- 7042 bytes [17:32 19/12/2011] [17:32 19/12/2011] C159A6BEAA8E32AAEFE7172DD5C2481E
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=OtherApps&locale=en.xml --a---- 5520 bytes [17:32 19/12/2011] [17:32 19/12/2011] D2E48F631F8A9768E9BBCB0964C7878F
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=SharedApps&locale=en.xml --a---- 6586 bytes [17:32 19/12/2011] [17:32 19/12/2011] 0DC95CF28A384D3BFBFA60244A55125A
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=Toolbar&locale=en.xml --a---- 5519 bytes [17:32 19/12/2011] [17:32 19/12/2011] 2B856ABBDD6E033594465C4945D5C93A

========== folderfind ==========

Searching for "*conduit*"
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\Conduit d------ [22:41 16/01/2012]
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\Repository\conduit_CT3106574_CT3106574 d------ [22:41 16/01/2012]
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft\Repository\conduit_CT3106574_en d------ [22:41 16/01/2012]

========== regfind ==========

Searching for "conduit"
[HKEY_CURRENT_USER\Software\Conduit]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://search.condui...ctid=CT3106574"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
"URL"="http://search.condui...ctid=CT2642697"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\conduit.com]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Conduit.Engine]
[HKEY_LOCAL_MACHINE\SOFTWARE\Conduit]
[HKEY_USERS\S-1-5-21-984244069-2844614521-1043325133-1003\Software\Conduit]
[HKEY_USERS\S-1-5-21-984244069-2844614521-1043325133-1003\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://search.condui...ctid=CT3106574"
[HKEY_USERS\S-1-5-21-984244069-2844614521-1043325133-1003\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
"URL"="http://search.condui...ctid=CT2642697"
[HKEY_USERS\S-1-5-21-984244069-2844614521-1043325133-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\conduit.com]

-= EOF =-

[Gammo]

Please download OTM

• Save it to your desktop.
• Please double-click OTM to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
• Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
  
  

  :Reg
  [-HKEY_CURRENT_USER\Software\Conduit]
  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
  "Start Page"="http://www.google.nl/"
  [-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
  [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\conduit.com]
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Conduit.Engine]
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Conduit]
  [-HKEY_USERS\S-1-5-21-984244069-2844614521-1043325133-1003\Software\Conduit]
  [HKEY_USERS\S-1-5-21-984244069-2844614521-1043325133-1003\Software\Microsoft\Internet Explorer\Main]
  "Start Page"="http://www.google.nl/"
  [-HKEY_USERS\S-1-5-21-984244069-2844614521-1043325133-1003\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
  [-HKEY_USERS\S-1-5-21-984244069-2844614521-1043325133-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\conduit.com]
  
  :Files
  C:\Documents and Settings\User1\Local Settings\Temporary Internet Files\Content.IE5\0FV9O5LW\search.conduit[1].htm
  

• Return to OTM, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
  
• Click the red Moveit! button.
• Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
• Close OTM and reboot your PC.

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.

Does that fixes it?

[jacksy]

Carried out your instructions but when I opem IE I still get search conduit .com as home page.
Copy of log as requested
thanks Jacksy

========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\Conduit\ deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"http://www.google.nl/" /E : value set successfully!
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\conduit.com\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Conduit.Engine\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Conduit\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-984244069-2844614521-1043325133-1003\Software\Conduit\ not found.
HKEY_USERS\S-1-5-21-984244069-2844614521-1043325133-1003\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"http://www.google.nl/" /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-984244069-2844614521-1043325133-1003\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_USERS\S-1-5-21-984244069-2844614521-1043325133-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\conduit.com\ not found.
========== FILES ==========
C:\Documents and Settings\User1\Local Settings\Temporary Internet Files\Content.IE5\0FV9O5LW\search.conduit[1].htm moved successfully.

OTM by OldTimer - Version 3.1.19.0 log created on 01182012_161534

[Gammo]

I can dig a little bit deeper, but is it really such a big problem to you? Is Internet Explorer your main browser?

It's not malware anyway, something is just putting it back. The problem is I don't know what.

Run Systemlook

• Double-click SystemLook.exe to run it.
• Copy the content of the following codebox into the main textfield:
  

  :filefind
  *Helpsoft*
  
  :folderfind
  *Helpsoft*
  
  :regfind
  Helpsoft

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

[jacksy]

Scan result below. I am now using Firefox because of this problem with IE. Obviously I am concerned that search conduit could be a nuisance in the long run.
Very gratefull for your help, apart from this problem PC is running ok.

SystemLook 30.07.11 by jpshortstuff
Log created at 18:46 on 18/01/2012 by User1
Administrator - Elevation successful

========== filefind ==========

Searching for "*Helpsoft*"
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Application Data\Mozilla\Firefox\Profiles\olqzqspx.default\extensions\{256db8bc-7da7-4248-97cd-44e07216b7f1}\chrome\pc-helpsoft.jar --a---- 735033 bytes [16:52 15/01/2012] [10:57 05/12/2011] 54BB3D51A40F92ACE8B1A676F9700AC7

========== folderfind ==========

Searching for "*Helpsoft*"
C:\_OTL\MovedFiles\01162012_224119\C_Documents and Settings\User1\Local Settings\Application Data\PC-Helpsoft d------ [22:41 16/01/2012]
C:\_OTL\MovedFiles\01162012_224119\C_Program Files\PC-Helpsoft d------ [17:14 19/12/2011]

========== regfind ==========

Searching for "Helpsoft"
No data found.

-= EOF =-

[Gammo]

Please uninstall SUPERAntiSpyware.
Also temporarily disable AVG: http://www.avg.com/ww-en/faq.num-3857

After doing that, please try changing your home page in Internet Explorer manually. Did that work?





If that didn't work:

Reboot your computer into Safe Mode.

You can do this by restarting your computer and continually tapping the F8 key until a menu appears.

In safe mode please manually change your homepage in Internet Explorer.

Then restart your computer again (into 'normal' mode). Then please check whether the home page was successfully changed or not.

[jacksy]

Both share bear and search conduit seem to be gone now and IE is back! Thank you.
Now I need to know what to do with all the programs I have had to download- I assume they should be cleared out?
Also I tried to reinstall Superantispyware, it downloaded but I cant find it, do you know where it might be.
thanks Jacksy

[Gammo]

Also I tried to reinstall Superantispyware, it downloaded but I cant find it, do you know where it might be.

Where you saved it? You can always re-download it of course.


Your logs appear to be clean now. There is only a bit of cleanup that we will deal with in this post, as well as prevention from future infections. ^_^

Remove Combofix now that we're done with it.

• Please press the Windows Key and R on your keyboard. This will bring up the Run... command.
• Now type in Combofix /Uninstall in the runbox and click OK. (Notice the space between the "x" and "/")
  
• Please follow the prompts to uninstall Combofix.
• You will then recieve a message saying Combofix was uninstalled successfully once it's done uninstalling itself.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

• Download OTC to your desktop and run it
• A list of tool components used in the Cleanup of malware will be downloaded.
• If your Firewall or Real Time protection attempts to block OTC to reach the Internet, please allow the application to do so.
• Click Yes to begin the Cleanup process and remove these components, including this application.
• You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Keep a backup of your important files
Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Make proper use of your anti-virus and firewall
You should keep your anti-virus and firewall guard enabled at all times, don't shut them off unless there's a specific reason to do so.

Also, regularly performing a full system scan with your anti-virus program is a good idea to make sure nothing has slipped through your protection. Once every two weeks works well for many people. You can set the scan to run during a time when you don't plan to use the computer and just leave it to complete on its own.

Keep in mind that anti-virus programs are far from perfect. They don't protect you against every piece of malware that's out there, so don't trust them blindly. If an anti-virus reports a file as 'clean' then it's doesn't necessarily has to mean it is.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Keep all your software updated
It is important to keep up on system updates from Microsoft by regularly checking their website at: http://windowsupdate.microsoft.com/, as these patch critical security vulnerabilities and help to keep you safe.

It's also important to keep programs up to date so that malware doesn't exploit any old security flaws. FileHippo Update Checker is an extremely helpful program that will tell you which of your programs need to be updated. Java and Adobe Reader are two of the main security vulnerabilities. You can find the latest version of Java here, you will want the Java SE Runtime Environment (JRE) one. You can find the latest version of Adobe Reader here.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Use a safer web browser
Internet Explorer is not the most secure tool for browsing the web. It has been known to be very susceptible to infection, and there are a couple good free alternatives: Firefox and Opera. Both are excellent faster, safer, more powerful and functional free alternatives to Internet Explorer. It's definitely worth the short period of adjustment to start using one of these. If you wish to continue using Internet Explorer, it would be a good idea to follow the tutorial here which will help you to make IE much safer.

If you decide to use the Firefox browser, the McAfee SiteAdvisor add-on will nicely help to enhance your security. This add-on tells you whether the sites you are about to visit are safe or not. A must if you do a lot of Googling.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Some other security programs

It is wise these days to have a few security programs installed and running on your machine except from just an anti-virus and a firewall. I will list some of them.

• A good anti-spyware program installed on your pc is very important to help remove any spyware that may have gotten on your computer. I highly recommend Malwarebytes' Anti-Malware.
• SpywareBlaster to help prevent spyware from installing in the first place.
• MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. This prevents your computer from connecting to those sites in the future.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Be careful
Having security programs installed is very helpful to you, but none of them have the gift of human thought. The best way to make sure you don't get infected is to exercise common sense. Be careful of what websites you visit - if a site looks suspicious, trust your instincts and get out of there. Be careful of what attachments you open in emails and files you download from websites - check them over carefully to make sure that you know what you're getting.

Using peer-to-peer programs (eg: LimeWire, BitTorrent, uTorrent, Kazaa) or downloading cracks and keygens is something else to avoid. These are the most common way to get infected. Malware writers use these programs to spread infections as it is the easiest way for them. The majority of infections we see in the Malware Removal forum are due to people using p2p programs to download cracks/keygens/warez. These are not only illegal, but will always contain some form of malware. You have no way of verifying that the things you download are legitimate or that they don't contain malware. Even with an up to date anti-virus and firewall, some of these things will still infect you. It is highly recommend that you uninstall all peer-to-peer programs. It just isn't worth it.

Other common ways of getting infected are dis-reputable sites forcing you to download and install a codec. Or viruses using Instant Messaging programs (Windows Live Messenger, MSN Messenger, AIM) to send a file claiming it to be "photos" from a friend, only for it to turn out to be a virus.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Slow computer?
If your computer begins to slow down in the future for no particular reason, your first step should not be to come to the malware forum. As your computer ages and is used, it's parts wear, files and programs accumulate, and its performance can decrease. To restore your computer's performance to its best possible level, follow the steps in this page written by malware expert Miekiemoes.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

I'll leave this thread open for a couple days in case you come across any lingering problems that need fixing, then I'll close it up. If you need it reopened for any reason just shoot me a PM. It's been a pleasure working with you, now best of luck!

Cheers,
Gammo

[jacksy]

excuse my ignorance but how do I do a PM?
thanks PW

[Gammo]

PM = private message. It's like a built-in email system.


I you want to send me a PM, you can use this link: http://www.geekstogo...MemberID=269052

[Gammo]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.