gster Posted February 1, 2019 ID:1296182 Share Posted February 1, 2019 I can't get rid of Trovi on Chrome on my Mac. I have the latest iOS version. I made sure I had the latest version of Malwarebytes 3.6.21. I updated Protection and scanned with Chrome closed. Scan was clean. I downloaded deleted the Chrome app and then downloaded a new one from Google. I made sure there were no suspicious Extensions on Chrome (Google Docs Offline, Docs, Sheets, Slides). Deleted all Search Engines except Google. I emptied the Trash and restarted my Mac. But still Trovi appears when I open a new tab in Chrome. BTW. My Safari browser seems clean but I need to use Chrome to log into a site that is does not work with Safari. Thanks! Link to post Share on other sites More sharing options...
Staff treed Posted February 1, 2019 Staff ID:1296201 Share Posted February 1, 2019 Have you checked your Chrome home page settings? (Open Chrome's preferences, then scroll down to "On startup". Link to post Share on other sites More sharing options...
gster Posted February 2, 2019 Author ID:1296334 Share Posted February 2, 2019 Thanks for your suggestion. There was nothing in that field. I changed it to www.google.com. Google was the search engine rather than Trovi upon starting Chrome. However, when I opened another tab, Trovi appeared as the search engine. Link to post Share on other sites More sharing options...
Staff treed Posted February 4, 2019 Staff ID:1296639 Share Posted February 4, 2019 Can you provide a screenshot of what you're seeing in the "On startup" settings? For reference, here's an example from my machine: Make a screenshot by following the directions here: http://support.apple.com/kb/HT5775 Attach the screenshot file, which will be found on the desktop, to a reply to this message. Link to post Share on other sites More sharing options...
gster Posted February 5, 2019 Author ID:1296795 Share Posted February 5, 2019 Thanks, Thomas. I had already set my "start-up" page to Google. See requested screen shot. The setting does drive the start-up page to Google but any subsequent tab/window will go to Trovi. See screen shot. I also deleted all search engines except Google and still get Trovi after start-up. Link to post Share on other sites More sharing options...
alvarnell Posted February 5, 2019 ID:1296806 Share Posted February 5, 2019 Any such issues with other browser(s)? Does the problem appear when using the guest (or any other user you may have) account? Does the problem appear in safe mode (hold shift key down at reboot)? Link to post Share on other sites More sharing options...
Staff treed Posted February 6, 2019 Staff ID:1297103 Share Posted February 6, 2019 I looked at the information you sent me privately, and it looks like all the adware has been removed and the machine was restarted 4 days ago... I assume that was following the removal of the adware? If so, your Mac is clean at this point. It looks like the issue is strictly in the Chrome settings. I'd recommend following the instructions here, under "Nuke Chrome": https://forums.malwarebytes.com/topic/236261-how-to-remove-weknow-malware-and-others/ Some of this adware will make changes to Chrome's settings and your Chrome profile that are non-trivial to reverse. Link to post Share on other sites More sharing options...
gster Posted February 7, 2019 Author ID:1297353 Share Posted February 7, 2019 Thanks so much! Nuking Chrome worked. No more Trovi! BTW, when I did many Malwarebytes Scans over the past 2 weeks, I never got a notification that Trovi was found and quarantined. Attached is my scan history as info. Link to post Share on other sites More sharing options...
Staff treed Posted February 11, 2019 Staff ID:1298028 Share Posted February 11, 2019 I do see components of Crossrider - the adware associated with Trovi - in your quarantine, according to the data you sent, but cannot see when those files were quarantined. So Malwarebytes did quarantine the infection at some point. However, Malwarebytes does not fix browser settings. Link to post Share on other sites More sharing options...
gster Posted February 11, 2019 Author ID:1298150 Share Posted February 11, 2019 Thanks so much! Nuking Chrome worked. No more Trovi! BTW, when I did many Malwarebytes Scans over the past 2 weeks, I never got a notification that Trovi was found and quarantined. Attached is my scan history as info. 2/11 - Thanks for your continued support! Link to post Share on other sites More sharing options...
alvarnell Posted February 12, 2019 ID:1298192 Share Posted February 12, 2019 Scan History is not attached. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now