This repository has been archived by the owner on May 22, 2022. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 10
/
Conduit.adf
43 lines (43 loc) · 2.34 KB
/
Conduit.adf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
<AdwareDefinition>
<Version>95</Version>
<SavingThrowVersion>1.1.0</SavingThrowVersion>
<DefinitionAuthor>Owen Pragel</DefinitionAuthor>
<DefinitionSource>http://www.adwaremedic.com/signatures.xml</DefinitionSource>
<Comment>This definition is based on the AdwareMedic list of files, not the Apple kbase article. It includes some different things.</Comment>
<Adware>
<AdwareName>Conduit</AdwareName>
<!-- No extension support yet
<item type="extContent">http://www\.trovi\.com</item>
<item type="extName">(conduit)|(searchext)|(mybrand)|( Community Toolbar)|(search ?protect)|(trovi)</item> -->
<File>/Users/*/Library/Application Support/Google/Chrome/Default/Extensions/cbmjmfcldbpelhknnfjbkobmabafpoed</File>
<File>/Library/InputManagers/CTLoader/</File>
<File>/Library/LaunchAgents/com.conduit.loader.agent.plist</File>
<File>/Library/LaunchDaemons/com.perion.searchprotectd.plist</File>
<File>/Library/Application Support/SIMBL/Plugins/CT2285220.bundle</File>
<File cruft="true">/Library/Application Support/Conduit/</File>
<File>/Applications/SearchProtect.app</File>
<Process>SearchProtect</Process>
<Process>searchprotect</Process>
<File>/Applications/SearchProtect/</File>
<File>/Users/*/Conduit</File>
<File>/Users/*/Trovi</File>
<TestedFile>
<File>/Users/*/Conduit</File>
<Regex>search\.conduit\.com</Regex>
</TestedFile>
<File cruft="true">/Users/*/Library/Application Support/Conduit</File>
<TestedFile>
<File cruft="true">/Users/*/Library/Application Support/Conduit</File>
<File>/Library/Application Support/Conduit</File>
<Regex>search\.conduit\.com</Regex>
</TestedFile>
<File>/Users/*/Library/Caches/com.Conduit.takeOverSearchAssetsMac</File>
<File>/Users/*/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin</File>
<File>/Users/*/Library/Internet Plug-Ins/TroviNPAPIPlugin.plugin</File>
<File>/Users/*/Library/Application Support/Firefox/Profiles/*/searchplugins/conduit.xml</File>
<File>/Users/*/Library/Application Support/Firefox/Profiles/*/searchplugins/MyBrand.xml</File>
<File>/Users/*/Library/Application Support/Firefox/Profiles/*/searchplugins/'Conduit Customized Web Search'.xml</File>
<File>/Users/*/Library/Application Support/Firefox/Profiles/*/takeOverNewTab.txt</File>
<File>/Users/*/Library/Application Support/Firefox/Profiles/*/abstraction.js</File>
</Adware>
</AdwareDefinition>