VersionsVersions 2.90% 1.45% 2.90% 1.45% 2.90% 2.90% 24.64% 2.90% 1.45% 20.29% 17.39% 1.45% 4.35% 11.59% 1.45%



Search Protect by Conduit Ltd. (Signed)

Remove cltmngsvc.exe
Warning 30 antivirus scanners has detected malware in various versions of cltmngsvc.exe.


cltmngsvc.exe has 15 known versions, the most recent one is It is started as a Windows Service called 'Search Protect by Conduit Service' with the name 'CltMngSvc' and described as “This service loads the Search Protector, which maintains your selected Search settings, and enables auto-updates.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 710.58 KB. It is an authenticode code-signed executable issued to Conduit Ltd. by the certification authority VeriSign. Numerous variations of cltmngsvc.exe have been installed with both Search Protect by conduit and Search Protect. During the process's lifecycle, the typical CPU resource utilization is about 0.0020% including both foreground and background operations, the average private memory consumption is about 4.55 MB with the maximum memory reaching around 5.26 MB. Addionally, typically read and write I/O disk operations is about 803 Bytes per minute for reads and 2.64 KB per minute for writes.


File name:cltmngsvc.exe
Product name:Search Protect
Description:Search Protect by Conduit
Typical file path:C:\Program Files\searchprotect\bin\cltmngsvc.exe
Original name:SearchProtect (R)
Issued to:Conduit Ltd.
Authority (CA):VeriSign
Expiration date:Sunday, April 3, 2016
Windows Service
Service name:CltMngSvc
Display name:Search Protect by Conduit Service
Description:“This service loads the Search Protector, which maintains your selected Search settings, and enables auto-updates.”

ResourcesPrograms installed in

(Note, the programs listed below are for all versions of Search Protect.)
Conduit Ltd.
  82% remove
The Conduit Search Protect software is designed to prevent other competing web browser plugins from changing the homepage and search settings that are created by the Conduit OurToolbar from being chan...
Conduit Ltd.
  84% remove
From the Terms of Service: "Search Protect is a separate piece of software installed on your hard-drive in connection with your installation of a Toolbar. It is designed to protect your Search sett...


(Note, the behaviors below are for all versions of cltmngsvc.exe, select a unique version for details.)
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'CltMngSvc' (Search Protect by Conduit Service)
  • CltMngSvc

MalwareMalware detections

Based on 40+ industry antivirus scanners, 30 of them detected the following malware.
Antivirus engineEngine versionDetectionFile version
avast! 8.0.1489.320 Win32:SearchProtect-B [PUP]
avast! 8.0.1489.320 Win32:SearchProtect-A [PUP]
avast! 8.0.1489.320 Win32:SearchProtect-A [PUP]
Bkav Security W32.Clod68e.Trojan.7e43
Dr.Web Adware.BGuard.15
Dr.Web Adware.BGuard.15
Dr.Web Adware.BGuard.15
Dr.Web Adware.BGuard.15
Dr.Web Adware.BGuard.15
eSafe Win32.Trojan
ESET NOD32 7.8472 Win32/Conduit.SearchProtect.A
ESET NOD32 7.9338 Win32/Conduit.SearchProtect.A
ESET NOD32 7.8855 Win32/Conduit.SearchProtect.E
ESET NOD32 8.9403 a variant of Win32/Conduit.SearchProtect.E
G Data 14.2.24 Win32.Trojan.Agent.DPJ5P0
Kingsoft 2013.4.9.267 Win32.Troj.Agent.xh.(kcloud)
Malwarebytes PUP.Optional.Conduit.A
Malwarebytes PUP.Optional.Conduit.A
Malwarebytes 1.75.0001 PUP.Optional.Conduit.A
McAfee 6.4.564 Artemis!0BBECFF40270
McAfee Gateway Anti-Malware v2013-dat Artemis!0BBECFF40270
NANO AntiVirus Trojan.Win32.BGuard.cracok
NANO AntiVirus Trojan.Win32.BGuard.cracok
Panda Antivirus Adware/Conduit
Panda Antivirus PUP/Conduit.A
Trend Micro HouseCall 9.700-1001 TROJ_GEN.F47V0811
VIPRE Antivirus 26336 Conduit (fs)
VIPRE Antivirus 21934 Conduit (fs)
VIPRE Antivirus 21090 Conduit (fs)
VIPRE Antivirus 25818 Conduit (fs)

VersionsAll file variations of cltmngsvc.exe

MD5SHA-1File size
161870926c5b59c313a5f79342904a7a 660f51e4bd7646c779d56a62d830cab1506062a9 2.25 MB
5875746aac710d1f3101a665300e793f a2b2d863063af7010734c31a3d5d7d6b98c1688a 2.15 MB
730c57652cdfb6e657992508a19e81eb 4b5d3f28d53d4b23d42d87a1db8b5400aed41984 1.66 MB
e4fd7ce73f45bf49f33d089570061a27 9645c6f27c8c7d224144bfd1aef55b53b6dbdaa7 1.67 MB
f146aa013264b2633e3024730776f25b 1b0a6152b3b55ba88383877124fe672caa3c49b6 1.67 MB
d76786ba05443c6fdd0184e0838e9968 285bc5bd7bba22f127723597c433b79fb9b084bb 215.78 KB
2b9a15dfdc14b4ecb1e8fc13ae43e60f 7d4a3ca3a3789d1ea7530fe4727d6ba8e8b47b83 94.78 KB
934f4153380edb6809eb9231c6b5f2a9 aa8666fecac95975a49eb6a9a7aafbb220b8fa45 91.78 KB
0bbecff40270b9967ab7e79a50a484c3 d701d6a2c32222f28f0c065908c3a84e04dd90b4 91.78 KB
09d38aec081f064fd67b8b9c49790020 77448bd92178191ef5a4d6a6a0a7fb1b8b45f3b8 91.78 KB
1cdfb108952a68cb8daac67177850560 b2dd911f7272f5de9d69a959b9e8187a4ac14b7e 91.78 KB
f6a925f18eebf2288a52e04f5ecdf20a 76a9f10699520bcee1c86b39bfec6f10cc143931 92.78 KB
7ae68efcb43d752dba12e6efb1b53103 3fc512d35db8dfa9dd4d9db694151c52d3dc043f 91.25 KB
58174b8e1673c90751f6b70aa71dfe70 d6c2cbb9f3b05a5cd0fce948a621f586181456df 85.5 KB
15ae8f975b3b8ee5effafa4d0c94c1d7 1c3326160d83b9450f14acc2025c311ab4820f28 85.5 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 40.58%
Windows 7 Ultimate 23.19%
Microsoft Windows XP 8.70%
Windows 7 Professional 7.25%
Windows 8 Pro 5.80%
Windows 8 4.35%
Windows Vista Home Premium 4.35%
Windows 7 Starter 2.90%
Windows Vista Ultimate 2.90%

Distribution by countryDistribution by country

United States installs about 53.62% of Search Protect.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 25.64%
Hewlett-Packard 21.79%
Dell 20.51%
Acer 17.95%
ASUS 5.13%
Compaq 2.56%
Samsung 2.56%
Lenovo 2.56%
Sahara 1.28%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE