Newsroom Update

New features come to Apple services this fall. Learn more >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Removing Spigot malware

Is there a way to completely remove this? Or is reinstalling Mavericks the only solution? Do files get infected? Also, even after removal, will it still spy on user's web-browsing activities like banking, emails, etc?

Posted on Feb 26, 2014 2:42 AM

Reply
Question marked as Best reply

Posted on Feb 26, 2014 4:26 AM

Remove "Spigot" adware.


http://www.thesafemac.com/arg-spigot/

19 replies

Dec 10, 2015 12:19 PM in response to Eric Root

No nn extensions. I stopped using Safari - use FF instead now - no addon or extenisons active on FF either.


I did a clean install in a blank partition and migrated data over. This was after I had rid the spigot gunk on the old install.


Watching Consol there seem to be files named storeagent which calls various stuff for instance:

storeagent[8580] Invalid port: com.apple.storeClient-52912 in process: 8577

com.apple.launchd.peruser.501[127] (com.spigot.ApplicationManager) Throttling respawn: Will start in 10 seconds

com.apple.launchd.peruser.501[127] (com.spigot.ApplicationManager[8855]) posix_spawn("/Users/chrisg/Library/Application Support/Spigot/ApplicationManager", ...): No such file or directory



Locations

Users/name/Library/Preferences/com.apple.storeagent.plist (a file)

System/Library/LanuchAgents/com.apple.storeagent.plist (a file)


Users/name/Library/Caches/com.apple.storeagent (a folder)

Users/name/Library/Caches/com.apple.storeagent.cache.default (a folder)

Users/name/Library/Caches/storgeagent (a folder)

System/Library/PrivateFrameworks/CommercialKit.framework/Versions/A/Resources/st orgeagent (a file)


I'm all for eliminating all of these, but do not know if would do more harm than good.


Thanks

Dec 16, 2015 7:23 AM in response to Linc Davis

Linc, why can't they just delete the folder Spigot? I didn't see this genio.app anywhere but I did see a Spigot folder after running a grep. Perhaps it's getting in another way? A chrome extension or something? I was noticing high revs on CPU when using Google Analytics only in Chrome. The only thing I've added lately was a rip off of Ad Block Plus. It wasn't the original. Ever since I started seeing issues in CPU. Once I ran my grep I saw the maleware.


Thoughts?

Removing Spigot malware

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.