Spigot "Avast Web shield has blocked a threat" mac OSX

Viruses and worms
1

Hi,
I really need some help with this please, it’s rather frustrating.
I read that Spigot is malware, Avast identifies it as [Adw], (Adware I guess)

I use google chrome Version 56.0.2924.87 (64-bit) on Mac OSX, the Avast browser extension is reporting (every few minutes):
“Avast Web shield has blocked a threat
Infection: Mac OS:Spigot-X [Adw]
URL: htxp://update2.mybrowserbar.com/update/wt/gc/errorassistant/ErrorAssistant_1.7_0.crx
File: background.js
Process: /Applications/Google Chroms.app/Contents/MacOS/Google Chrome”

Does anyone know what that actually means please? Does it mean that Spigot is trying to install itself, or maybe it’s a site I am on that’s trying to do that??
Can I stop it?

If it’s not possible to stop the Spigot activity that Avast is reporting, then is it perhaps possible to stop Avast reporting it whilst still blocking the malware?
I already ran “Malwarebytes Anti-Malware.app” - first time it found lots of stuff but nothing from Spigot (by name), today it did find something labellled Spigot and remove it, then I ran Malwarebytes Anti-Malware.app again and nothing was found, but I still have the above warning from Avast every minute or so.
In chrome I have removed all the search engines other than google.
In chrome browser extensions I removed any mention of Spigot, e-bay or Amazon
But still the warning persists.
I’ve not run any “install software” utilities from third party sites like Cnet or macupdate that I can remember. Could be that’s how it got on in the first place I guess, though.

2
Process: /Applications/Google Chroms.app/Contents/MacOS/[b]Google Chrome[/b]
any browser extensions you dont need? if so remove also try clear your browser cache

and edit the URL you posted above so it is not clickable, remove http://

https://virustotal.com/en/url/5d7f8fc6cb007d79214dacbbfa2412c8bb98ebc781a188dfe18c3283f9f2b06a/analysis/1488987169/

https://virustotal.com/nb/file/e2ce2b8c2ba58d2b5806a8dc16aafd6202620f9f36425e2b21b22e1b6b388d99/analysis/1480255568/

3

Give this a try:
https://www.google.com/chrome/cleanup-tool/

4

Bob,

unfortunately that’s a Windows only tool, it seems there isn’t a mac version.
thanks all the same

I followed a link to the chrome forum and it suggested Malwarebytes - I did that already

deleted caches (all)

still got the problem.

neil

5

you may try the Mac malware removal section over at Malwarebytes

Malware Removal for Mac >> https://forums.malwarebytes.com/forum/165-malware-removal-for-mac/

6

Hi Pondus,

thanks, I will

one thing I was after was learning just what Avast is telling me?
Is Google Chrome trying to install Spigot? Is it a website that’s doing it?

7

Most likely a website or a chrome extension

8

http://www.thesafemac.com/arg-spigot/

9

Hi Bob,

thanks for that
I checked and none of those files were present in the ~/ “user” library, but thanks for mentioning.
~/Library/LaunchAgents/com.spigot.SearchProtection.plist
~/Library/LaunchAgents/com.spigot.ApplicationManager.plist
~/Library/Application Support/Spigot/
just for extra safety I also checked the main library on the HD, not there either.
ah well, back to the drawing board.

I wish I knew what Avast is actually telling me, is some application trying to install this malware?
have a good weekend
n

10

I’ve reported this to Avast and request a Mac expert to reply.
I’ve never used a Mac so my knowledge is very limited.
Enjoy your weekend as well. :slight_smile:

11

Hey Bob,

thanks lots

57 happy years eh? we’ve managed 37 so far ';~}, I thought we were doing well. congrat’s

12

Thanks,
Remember, she’s virtually always right and you’ll have no trouble catching up. :slight_smile: