Widgi Toolbar

Widgi Toolbar Description

There are many kinds of malware threats, ranging from full-fledged infections that can place your whole computer in jeopardy to Potentially Unwanted Programs that can have annoying effects and are not straightforward to remove. The Widgi Toolbar is a Potentially Unwanted Program (also known as a PUP) that can be quite difficult to remove. The Widgi Toolbar is created by Spigot, Inc., a company that is well known for producing these kinds of applications. This program is often detected as a spyware or adware infection by many security programs. It installs itself as a Browser Helper Object (BHO) for Internet Explorer, although computer users using the Mozilla Firefox web browser have also reported problems with the Widgi Toolbar. Although the Widgi Toolbar is advertised as a potentially helpful add-on for your web browser, Widgi Toolbar is actually designed to take over your online searches and gather marketing information that can then be used to deliver advertisements to your computer.

The Widgi Toolbar is designed to be difficult to remove through normal means, and using the 'Add/Remove programs' panel in the Control Panel will do nothing against this intrusive toolbar. Removing this add-on by using your web browser preferences will also not work. This is because the Widgi Toolbar makes changes to the Windows Registry that allows it Widgi Toolbar to reinstall itself automatically. This annoying toolbar also runs in the background instantly when you start up your computer, hogging system resources and affecting your connection speeds and system performance. Fortunately, most properly updated anti-malware applications can remove the Widgi Toolbar with few problems. ESG security researchers have observed the activities of this malware threat since May of 2011 and, since then, most security programs are able to detect and remove this Potentially Unwanted Program from your computer.

How the Widgi Toolbar Enters Your Computer in the First Place

Most computer users infected with the Widgi Toolbar will acquire this infection because they have tried to install a freeware application without carefully looking through the installation process. Some examples of freeware programs that tend to include potentially unwanted programs such as the Widgi Toolbar include free PDF conversion programs, audio and video format converters, and freeware media players and editors. The installation process for these programs will often prompt you to install Widgi toolbar and other similar programs as a way to 'help' the creators of the freeware in question. ESG malware analysts recommend looking for freeware alternatives that do not require the installation of dubious software on your computer.

Aliases: SearchSettings [Sophos] and Widgi Toolbar [Sophos].

Infected with Widgi Toolbar? Scan Your PC

Download SpyHunter's Spyware Scanner
to Detect Widgi Toolbar
* SpyHunter's scanner is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware removal tool to remove the malware threats. Read more on SpyHunter. If you no longer wish to have SpyHunter installed on your computer, follow these steps to uninstall SpyHunter.

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in "Safe Mode with Networking" and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of Widgi Toolbar outbreaks and other threats from global to local level.

File System Details

Widgi Toolbar creates the following file(s):
# File Name Size MD5 Detection Count
1 %PROGRAMFILES%\pdfforge Toolbar\WidgiToolbarIE.dll 650,752 0369affb46aa2071d04a3fb361ee5bd0 7,546
2 %PROGRAMFILES%\pdfforge Toolbar\SearchSettings.exe 992,256 2ba55d793667eaca14437277dd472b29 4,432
3 %PROGRAMFILES%\pdfforge Toolbar\SearchSettings.dll 1,114,112 e3b00dc3e381c3e02fc34256d12168c2 2,624
4 %PROGRAMFILES%\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll 757,760 a9289dcc914ed8a96e6e91d9cd2babdb 128
5 %PROGRAMFILES%\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll 20 a9a2ecd63b89704922764fc242a87053 27
6 %PROGRAMFILES%\pdfforge Toolbar\FF\chrome\TBM4A23.tmp 69,832 7d2561803908cd8a4a13098fc8499c93 26
7 %WINDIR%\TEMP\pdfforgeToolbar.exe 4,493,608 07fa90568290c3ae84db3787747940bf 8
8 %ALLUSERSPROFILE%\Application Data\pdfforge Toolbar 2
9 %ALLUSERSPROFILE%\pdfforge Toolbar 1

Registry Details

Widgi Toolbar creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
Installer\Features\A3DFC783A65B1484BABCC97F301B3748
Installer\Products\A3DFC783A65B1484BABCC97F301B3748
Installer\UpgradeCodes\504D229B31D6B2A4EA98800A03AD4420
Software\AppDataLow\Software\pdfforge
SOFTWARE\Classes\Installer\Features\A3DFC783A65B1484BABCC97F301B3748
SOFTWARE\Classes\Installer\Products\A3DFC783A65B1484BABCC97F301B3748
SOFTWARE\Classes\Installer\UpgradeCodes\504D229B31D6B2A4EA98800A03AD4420
SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {B922D405-6D13-4A2B-AE89-08A030DA4402}
Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
{387CFD3A-B56A-4841-ABCB-9CF703B17384}
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{B922D405-6D13-4A2B-AE89-08A030DA4402}
{E312764E-7706-43F1-8DAB-FCDD2B1E416D}

Site Disclaimer

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as is:
What is 14 + 5 ?