What is “PUP.Optional.Conduit.Generic”?

The PUP.Optional.Conduit.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PUP.Optional.Conduit.Generic virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature

How to determine PUP.Optional.Conduit.Generic?


File Info:
name: 4C163BD2A5905D18893E.mlw
path: /opt/CAPEv2/storage/binaries/4553d99f1f146e2359ceb60987d904bafd24843b71d3e95c358776f3a1d5c6f1
crc32: 9A305B67
md5: 4c163bd2a5905d18893ee311608e8c54
sha1: a2d929a9864513c0e8ed84aad622ef6adcc9b950
sha256: 4553d99f1f146e2359ceb60987d904bafd24843b71d3e95c358776f3a1d5c6f1
sha512: e1c7b44dc683f58c7c7b66b2448ed19c4e846b35f4018592c2d87191f3d8a2e4649ec3c92aa2f444b249f8ac27e5f2e7fe1cefbedd5d12721d21335a1c55afb1
ssdeep: 3072:X8vaM/kyJ9HZjJjVe+PK7h05hHW600Zi52LIaL5MmR6vLOEOmi:X8t3hNKEhHWVAAJDOBmi
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1DB047C117A90C17ACA9F27391430CB3A567BB5618BB44AC7B7191F6E1F223C06F3539A
sha3_384: 274c54a53878902feee046a82d82b3b016d6e3e30b5adcac0d50f245d7b2947eaeb3293ff7c1cb5cd8debf27cc1b2a0a
ep_bytes: 8bff558bec837d0c017505e8376b0000
timestamp: 2011-05-09 09:49:36

Version Info:
Comments: Conduit Toolbar ver 1.0
CompanyName: Conduit Ltd.
FileDescription: Conduit Toolbar
FileVersion: 6.4.0.0
InternalName: Conduit Toolbar
LegalCopyright: Copyright © Conduit Ltd. 2010.
LegalTrademarks: Copyright © Conduit Ltd. 2010.
OriginalFilename: Conduit Toolbar
PrivateBuild: 4
ProductName: Conduit Toolbar
ProductVersion: 6.4.0.0
SpecialBuild: 4
Translation: 0x0409 0x04b0

PUP.Optional.Conduit.Generic also known as:

Lionic	Adware.Win32.Conduit.2!c
DrWeb	Adware.Conduit.299
Malwarebytes	PUP.Optional.Conduit.Generic
Alibaba	AdWare:Win32/Conduit.fc2a8b01
CrowdStrike	win/grayware_confidence_100% (W)
Arcabit	PUP.Adware.WebToolbar.Conduit
VirIT	Adware.Win32.WhiteSmoke.C
ESET-NOD32	Win32/Toolbar.Conduit.O potentially unwanted
Kaspersky	not-a-virus:AdWare.Win32.Conduit.dat
NANO-Antivirus	Riskware.Win32.Toolbar.deinyv
SUPERAntiSpyware	Adware.Conduit/Variant
Emsisoft	Application.Toolbar (A)
Jiangmin	AdWare.Conduit.ff
Webroot	Pua.Conduit
Antiy-AVL	GrayWare[AdWare]/Win32.Conduit
Microsoft	PUAAdvertising:Win32/Conduit
ViRobot	Adware.Conduit.176936.A
ZoneAlarm	not-a-virus:AdWare.Win32.Conduit.dat
GData	Win32.Adware.Conduit.B
VBA32	Adware.Conduit
Cylance	unsafe
Panda	PUP/Conduit.A
Rising	Adware.Conduit!1.E09C (CLASSIC)
Fortinet	Riskware/Conduit
DeepInstinct	MALICIOUS

How to remove PUP.Optional.Conduit.Generic?

PUP.Optional.Conduit.Generic removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X