Widgi reported but not removed

[SStor]

Just fixed widgi.toolbar problem in my Vista system and would like to share the experience. First detected by Spybot and identified as AdwareC. It multiplied to 18, then 23, then 24 entities in 2 days. Greatly slowed down my system. Could not be fixed by Spybot because it needs admin mode. Not even detected by Spyhunter!
So I used the following reference and proceed:
http://en.kioskea.net/faq/300-access-a-hidden-administrator-account-in-windows-vista
1. START, ACCESSORIES, right click COMMAND COM and choose RUN AS ADMINISTRATOR
2. Enter: net user administrator /active:yes
3. Switch to admin account
4. Run Spybot, fix selected problems, reboot
5. Allow Spybot to rerun on reboot, fix selected problems again.
6. Switch to usual user account
7. Disable admin acct as in Steps 1, then enter command:
net user administrator /active:no
Now my system is back to normal.
Afterwards I realize that Spybot can be run in admin mode. Right click on Spybot icon and choose RUN AS ADMIN, and I expect the result to be the same, but much easier. So I would suggest trying this latter route first.
Good luck.

[DougH]

Thanks but I believe 'Run as Admin' is a feature specific to Vista. It isn't an option in XP. Nor is COMMAND COM. But I operate as admin anyway.

[Spyker]

Hi, I had a similar problem to SStor, and found that S&D fixed it when I selected `Admin Mode' from the S&D icon. This is available in Win7 - I wasn't aware of it before, so thanks SStor!

Just fixed widgi.toolbar problem in my Vista system and would like to share the experience. First detected by Spybot and identified as AdwareC. It multiplied to 18, then 23, then 24 entities in 2 days. Greatly slowed down my system. Could not be fixed by Spybot because it needs admin mode. Not even detected by Spyhunter!

Now my system is back to normal.
Afterwards I realize that Spybot can be run in admin mode. Right click on Spybot icon and choose RUN AS ADMIN, and I expect the result to be the same, but much easier. So I would suggest trying this latter route first.
Good luck.

[SStor]

It is not that long ago that I posted fixing widgi.toolbar in admin mode, and so I am quite surprised that my Vista system is inflicted with widgi.toolbar again. This time I started Spybot in Admin Mode, and the elimination process went smoothly. I would suggest Spybot publicizes more the availability of the admin mode and its special functionalities.

[tashi]

Hi there,

Pinned sticky in this forum: Run as Administrator

[DougH]

Sorry I haven't posted but have been in hospital. I'm sorted now but the problem with widgi still exists.

SpyBot reports it. Says it will remove it after a restart but doesn't.

Any further suggestions would be welcome. Thanks

[DougH]

The error message SpyBot shows is


Widgi.Toolbar: [SBI $D4C0BB69] System Service (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Application

When I open the key with regedit nothing relevant shows.

[Zenobia]

Sorry to hear you were in the hospital.

You can ask for help in malware removal.
"BEFORE You POST"(Please read this Procedure Before Requesting Assistance)

Malware Removal:
http://forums.spybot.info/forumdisplay.php?f=22

Including a link back to this topic would probably be helpful.
http://forums.spybot.info/showthread.php?t=66092

[SStor]

Sorry I haven't posted but have been in hospital. I'm sorted now but the problem with widgi still exists.

SpyBot reports it. Says it will remove it after a restart but doesn't.

Any further suggestions would be welcome. Thanks

I presume you have WinXP and you used command com. When you switch users, it is still your usual account-admin. There is no separate admin account as in Vista. It is possible that what I described works only with Vista and Win7. Did the scan restart upon reboot? The rescan is slow and can take a long time. Have you tried right clicking Spybot icon to Run As Adminstrator? I don't have further experience beyond this.

[DougH]

The 'run as administrator' is it seems not relevant to XP (which I am running).

I have updated to the test version of SpyBot and still get the message. It still does not change on a reboot. I have just gone through the full cycle three times without running anything else (including my browser) with exactly the same outcome.