Announcement: Upgrade to macOS Mojave

With features like Dark Mode, Stacks, and four new built-in apps, macOS Mojave helps you get more out of every click. 
Find out how to upgrade to macOS Mojave >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.


Question: Hijacked browsers. Is "spi" Spigot?

All of my browsers (Safari, Chrome, Firefox) have been hijacked. A Google search shows the Google results for less than a second, then it switches to a Yahoo page that does not show the actual search results, it shows only things that if clicked on, will presumably pay the owner of the the trojan horse. It renders search useless. Happens on Bing and Yahoo also.

I've had this before and it was called Spigot, which was easy to get rid of. This one appears to be "spi." I get messages from Little Snitch asking if I want to "allow spi to change configurations." and other messages. Is this spi legit or is it part of the scam?

Any ideas how to get rid of it?

MacBook Pro, macOS High Sierra (10.13.1), The round Mac Pro 2014

Posted on

Question marked as Apple Recommended

Try running Malwarebytes.

Posted on

Page content loaded

Mar 12, 2018 11:28 PM in response to triglyph In response to triglyph

If it's gotten in Malwarebytes or prevents it from completely installing, which I've seen happen just today & previously, I'd recommend Komros which can be found in the App store. It's the only other one I would not only recommend but can confirm its effectiveness consistently.

Try Malwarebytes first as two others recommended. If to no avail, Komros will definitely fix the issues.

Only two I'd recommend & when necessary....they are similar in design and ease of use too.

Good luck (:

Mar 12, 2018 11:28 PM

Reply Helpful
User profile for user: triglyph

Question: Hijacked browsers. Is "spi" Spigot?