Spigot infection

[mach7]

I've got that awful Spigot infection that redirects me to http://search.yahoo.com/?type=293224&fr=spigot-yhp-ch when I open Chrome. Attached my MBAM, FRST, HijackThis, and RogueKiller logs.

 

I appreciate any help,

-J

FRST.txt

hijackthis.log

mbam-log-2014-06-16 (11-29-21).xml

RKreport_SCN_06162014_113927.log

[MrCharlie]

Welcome to the forum.

Please create a new system restore point before you continue!

---------------------------------------

Download the attached fixlist.txt to the same folder as FRST.exe.
Run FRST.exe and click Fix only once and wait
The tool will create a log (Fixlog.txt) in the folder, please post it to your reply.

-------------------------------------------

Please download AdwCleaner from HERE or HERE to your desktop.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• When it's done you'll see: Pending: Please uncheck elements you don't want removed.
• Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
• Look over the log especially under Files/Folders for any program you want to save.
• If there's a program you may want to save, just uncheck it from AdwCleaner.
• If you're not sure, post the log for review. (all items found are adware/spyware/foistware)
• If you're ready to clean it all up.....click the Clean button.
• After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
• Copy and paste the contents of that logfile in your next reply.
• A copy of that logfile will also be saved in the C:\AdwCleaner folder.
• Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
• To restore an item that has been deleted:
• Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.

Next..................

Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

Next.........


If you're using Malwarebytes 2.0, please run a Threat Scan
Click on settings > Detection and Protection > Non-Malware Protection > PUP (Potentially Unwanted Program) detections > Make sure it's set to Treat detections as malware
Same for PUM (Potentially Unwanted Modifications)
Quarantine All that's found

--------------------------------------------

You have to set Chromes HomePage manually:

https://support.google.com/chrome/answer/95314?hl=en


CHR HomePage: hxxp://search.yahoo.com/?type=293224&fr=spigot-yhp-ch

----------------------------------------

Now reboot and re-scan with FRST, make sure the Addition Box is checked.

Post or atatch the logs.

MrC

[mach7]

Thanks for the reply. I'm pretty sure this is fixed now. I think the step I was missing was to manually change the Chrome homepage. I think I uninstalled the offending program. I don't know how to close this topic, but I consider it resolved. Thanks again for your time.

[MrCharlie]

OK...MrC

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!