HELP!!! I have spigot and need to remove

[Slayer 6628]

Right ok Eagle man heres them logs for you cheers

[Slayer 6628]

Sorry did it again here you go. My Bad 

[Slayer 6628]

And the addition log

[Slayer 6628]

well yeah thats crappy avg for you i aint been able to pay really for really any protection and picked avg and regret it what security measures would u guys suggest???

[Pondus]

antivirus + Malwarebytes PRO + MCShield

[Slayer 6628]

Well what do you think is there hope for my pc?

[Slayer 6628]

Well how much are all them gunna cost thats like £120 aint it £40 each bloody hell malwarebytes is good thanks for showin me that guys

[TwinHeadedEagle]

Hi,


1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Code: [Select]

HKCU\...\Run: [SearchProtection] - "C:\Users\Ryan\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart
C:\Users\Ryan\AppData\Roaming\Search Protection
MountPoints2: F - F:\AutoRun.exe
MountPoints2: {1fb1dcab-600c-11e2-9284-dc0ea14af5ae} - F:\AutoRun.exe
SearchScopes: HKCU - {3C0F4B55-37E7-46B8-BF46-99EC1966EAAB} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253
SearchScopes: HKCU - {E02F7ABB-2695-4283-A1D6-609C869DF39A} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=en_UK&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^GB&apn_uid=16E11F48-471A-4AB5-837F-147D2205E386&apn_sauid=67C458EE-3365-4E69-91FE-3D07CC107681
FF HKLM-x32\...\Firefox\Extensions: [{C7AE725D-FA5C-4027-BB4C-787EF9F8248A}] - C:\Program Files (x86)\RelevantKnowledge\firefox
C:\Program Files (x86)\RelevantKnowledge
cmd: ipconfig /flushdns
2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.


3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.



Then...



Please download zoek.zip or zoek.rar by smeenk () from here or here and save it to your Desktop.
Unpack the archive...

• Close any open browsers
• Temporarily disable your AntiVirus program. (If necessary)
  If you are unsure how to do this please read this or this Instruction.
  
  
• Double click on zoek.exe to run the tool .
  Please wait while the tool does not start...
  
  
• Copy the text present inside the code box below and paste it into the large window in the zoek tool:

Code: [Select]

emptyclsid;
shortcutfix;
emptyalltemp;
autoclean;

• Click on button.
  Please wait until a logreport will open (this can be after reboot)
  
  
• Save notepad to your Desktop and attach here zoek-results.log
  Note: It will also create a log in the C:\ directory named "zoek-results.log"

Then...



Tell me, how are the things now?

[Pondus]

Well how much are all them gunna cost thats like £120 aint it £40 each bloody hell malwarebytes is good thanks for showin me that guys

use your favorite free AV
MCShield is free  www.mcshield.net
Malwarebytes PRO is a one time fee for a liftime license .... you then get auto update and a protection module www.malwarebytes.org

[Slayer 6628]

Right ok Eagle man heres the fixlist log

[TwinHeadedEagle]

I still need other reports...

[Slayer 6628]

sorry eagle man i fell asleep lol but im at work i will ppst them when im home f
thanks for bearin wiv me

[Michael (alan1998)]

You really need to do all this?  I had the spigot  search protection on my machine and simply uninstalled it with Ccleaner and then ran the registry cleaner. It was then gone from the browser and a subsequent check with Malwarebytes found no remnants.

if you check his Malwarebytes and AdwCleaner logs you will see that his computer is/was a PUP/Adware city ...

True, and it looks like MBAM was having issues removing some of the PUP's. So Yes it's the way to make sure he is clean

[Dch48]

You really need to do all this?  I had the spigot  search protection on my machine and simply uninstalled it with Ccleaner and then ran the registry cleaner. It was then gone from the browser and a subsequent check with Malwarebytes found no remnants.

if you check his Malwarebytes and AdwCleaner logs you will see that his computer is/was a PUP/Adware city ...

Okay, I didn't know there were other problems. I thought Spigot was it.


True, and it looks like MBAM was having issues removing some of the PUP's. So Yes it's the way to make sure he is clean

[Slayer 6628]

hi folks just read the last two comments can someone give me an insight to my problem wats actually happening and r we making progress. ps these logs cant be used against me can thet? i trust u guys though youve been ace