Jump to content

Trovi on Chrome for Mac


Recommended Posts

I can't get rid of Trovi on Chrome on my Mac.  I have the latest iOS version.  I made sure I had the latest version of Malwarebytes 3.6.21.  I updated Protection and scanned with Chrome closed.  Scan was clean.  I downloaded deleted the Chrome app and then downloaded a new one from Google.  I made sure there were no suspicious Extensions on Chrome (Google Docs Offline, Docs, Sheets, Slides).  Deleted all Search Engines except Google.  I emptied the Trash and restarted my Mac.    But still Trovi appears when I open a new tab in Chrome.  BTW.  My Safari browser seems clean but I need to use Chrome to log into a site that is does not work with Safari.  Thanks!

Link to post
Share on other sites

Thanks, Thomas.  I had already set my "start-up" page to Google.  See requested screen shot.  The setting does drive the start-up page to Google but any subsequent tab/window will go to Trovi.  See screen shot.  I also deleted all search engines except Google and still get Trovi after start-up.

Screen Shot 2019-02-04 at 9.56.24 PM.png

Screen Shot 2019-02-04 at 10.07.59 PM.png

Screen Shot 2019-02-04 at 9.56.41 PM.png

Link to post
Share on other sites

Any such issues with other browser(s)?

Does the problem appear when using the guest (or any other user you may have) account?

Does the problem appear in safe mode (hold shift key down at reboot)?

Link to post
Share on other sites

  • Staff

I looked at the information you sent me privately, and it looks like all the adware has been removed and the machine was restarted 4 days ago... I assume that was following the removal of the adware? If so, your Mac is clean at this point. It looks like the issue is strictly in the Chrome settings. I'd recommend following the instructions here, under "Nuke Chrome":

https://forums.malwarebytes.com/topic/236261-how-to-remove-weknow-malware-and-others/

Some of this adware will make changes to Chrome's settings and your Chrome profile that are non-trivial to reverse.

Link to post
Share on other sites

  • Staff

I do see components of Crossrider - the adware associated with Trovi - in your quarantine, according to the data you sent, but cannot see when those files were quarantined. So Malwarebytes did quarantine the infection at some point. However, Malwarebytes does not fix browser settings.

Link to post
Share on other sites

Thanks so much!  Nuking Chrome worked.  No more Trovi!  BTW, when I did many Malwarebytes Scans over the past 2 weeks, I never got a notification that Trovi was found and quarantined.  Attached is my scan history as info.   

 

2/11 - Thanks for your continued support!

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.