PUP.Optional.Conduit.DDS malicious file

The PUP.Optional.Conduit.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUP.Optional.Conduit.DDS virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid

How to determine PUP.Optional.Conduit.DDS?


File Info:
name: 9F426C3C2C858358EF69.mlw
path: /opt/CAPEv2/storage/binaries/29e656d9106ce3a2391ed7d76688875eb0d491d4fd13a14afe1a0667f26ff615
crc32: 2B9B08F4
md5: 9f426c3c2c858358ef691dafe41133b9
sha1: e188d04db1fc28ef461989b9617303431c0ce493
sha256: 29e656d9106ce3a2391ed7d76688875eb0d491d4fd13a14afe1a0667f26ff615
sha512: c50dac7a4f6202aaba40bb1a9df618bcc285172a0fd7ba7f4524b1288f1eedce633711dd640c1c79c34db21efa1943eb00954724bf7bd8391c939520fffd1c37
ssdeep: 196608:81KcA/xH0w1OHh7YZmF5VO+tuUzewALy9GDSAJkK6Fs:OMmwzO5VhewAL42SCuFs
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16F8633577484F61FE25E3533881C5F0C475021CC2367E6663E62C3A8AA026FBF95AAF5
sha3_384: b48f4463be868318e8f803edc6acea86256dc406f845dcbe5af8d8d5fff29d8539d214244a39b8f1fa8667ccea911144
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-06-06 21:41:54

Version Info:
0: [No Data]

PUP.Optional.Conduit.DDS also known as:

CrowdStrike	win/grayware_confidence_60% (D)
K7GW	Adware ( 004ba0f81 )
K7AntiVirus	Adware ( 004ba0f81 )
VirIT	PUP.Win32.Conduit.B
Symantec	PUA.Gen.2
ESET-NOD32	a variant of Win32/Toolbar.Conduit.B potentially unwanted
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Conduit.gen
NANO-Antivirus	Riskware.Win32.Conduit.dgiajh
Avast	Win32:Adware-gen [Adw]
F-Secure	PotentialRisk.PUA/SearchProtect.Gen
DrWeb	Program.Unwanted.1350
Emsisoft	Application.Toolbar (A)
GData	Win32.Adware.Conduit.B
Jiangmin	AdWare.Conduit.dz
Google	Detected
Varist	W32/Conduit.I.gen!Eldorado
Antiy-AVL	RiskWare[WebToolbar]/Win32.Conduit.b
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Conduit.gen
Microsoft	Program:Win32/Wacapew.C!ml
Cynet	Malicious (score: 100)
McAfee	Artemis!29E2EB462169
VBA32	SigAdware.ConduitLtd
Malwarebytes	PUP.Optional.Conduit.DDS
Rising	Adware.Conduit!1.E09B (CLASSIC)
Fortinet	Adware/Conduit
AVG	Win32:Adware-gen [Adw]
DeepInstinct	MALICIOUS

How to remove PUP.Optional.Conduit.DDS?

PUP.Optional.Conduit.DDS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X