kizzevin

Q: Trovi Virus Removal Needed

When using Google Chrome on my Macbook Pro, I've got a homepage popping up that is a search engine called "Trovi".  Below is a screen shot of what comes up when I first open Chrome.  My settings are normal inside Chrome, and this only pops up the first time Chrome is opened.  Has anyone had a problem with this, and if so, what is your recommended method for removal of this virus?

Trovi.jpg

MacBook Pro, OS X Mavericks (10.9.2)

Posted on Apr 8, 2014 7:04 AM

Close

Q: Trovi Virus Removal Needed

  • All replies
  • Helpful answers

first Previous Page 5 of 6 last Next
  • by thomas_r.,

    thomas_r. thomas_r. Mar 29, 2015 6:34 AM in response to jjmarre
    Level 7 (30,924 points)
    Mac OS X
    Mar 29, 2015 6:34 AM in response to jjmarre

    jjmarre wrote:

     

    1) If Trovi is on your Chrome, even if you delete it from your chrome extension list, it can come back or won't leave at all. Best case scenario is to just uninstall chrome and reinstall it. Its the best way to get ride of it.

     

    2) If Trovi is on your safari, delete it from your extensions and change your homepage and tab settings. Check both.

     

    3) Find Trovi on your computer, trash any traces of it from your computer, then empty the trash.

     

    As has been repeatedly said on this topic, such techniques are not remotely adequate to remove Trovi. Any browser extensions that it installs are the smallest part of the installation. Many installed files won't have the word "Trovi" in their names anywhere, and won't be easy to find regardless of their names. You need to follow some of the more specific and detailed removal instructions that have already been posted on this topic previously.

  • by doiwjeoriehorwierwoih,

    doiwjeoriehorwierwoih doiwjeoriehorwierwoih Mar 29, 2015 9:36 AM in response to thomas_r.
    Level 1 (0 points)
    Mar 29, 2015 9:36 AM in response to thomas_r.

    My problems were fixed as was expressed in this topic.    I know this is something that a lot of people don't want to hear but,  go back to the top of the thread and read the way it all transpired.   I don't remember all the steps or details that I took to remove Trovi from my computer  but they are expressed above.   From my memory, basically,  I started to do some cleanup on my computer.   As popups came up I ran the names of the services or programs through my finder.  Click GO at the top of your screen and run the name through the search.  Ie., Trovi.    You will find some files.   Delete them. Keep a list of things that come up and run those names and delete them also.    Go to your browsers.   You will want to check ALL your browsers.   Chrome, Firefox, Safari etc.,

     

    Trovi is a web search engine that also links to ADWARE.  In addition to hijacking your browsers, it sends information to ad companies who can track your web searches send info to advertisers and send you annoying popup ads.  There is the possibility that it can also send private information to third parties.   What it does is goes to ALL your browsers and replaces your settings to bring up the TROVI search engine instead of Google or whatever you have set. 

     

    There are a few settings in Google and Firefox etc. that need to be changed.  Home Page, Default Browser are a couple that come to mind.  Make sure all your Preference settings are properly set to your preferences.   Also change your extensions.    You are not finished though as Trovi and other programs that often accompany it will also place components into your "Hidden Files" on your computer.   You need to go to your HOME folder and select Library. There is a file in there called Application Support.   Check there and remove files from there also.   If it isn't mentioned here, look into how to view and search HIDDEN FOLDERS. There should be a way to do it easily without inserting code but I don't remember where it is.   Removing your browsers and re-installing them is not a bad idea.  In fact, I did do that.  But, remember, when you, say, search for GOOGLE through your Finder, you may not be getting all of it.   Delete your GOOGLE folder from your Applications Folder and go into your Library>Application Support and remove Google from there too.  Repeat for other programs that you need to delete.   

     

    Lastly,  I downloaded a program called Adware Medic.    When I finished all this and my computer seemed to be running normally, I ran AdwareMedic on my Macbook.   It found a few more files which it deleted.   Amazingly, the list of files that it found were all associated with the same programs and services that I searched for originally.   Files that I thought had been deleted. 

     

    Another bit of info to remember.  Trovi and other programs are usually installed on your computer with your consent.   How they do it is tricky and deceptive. I got the adware from downloading FREEWARE from the internet.   I tried to download a reliable program that i had used before.   Not having any suspicions, and without adequately reading the popups, I just clicked YES or Continue or NEXT on the various installation steps.  It turns out that a couple of those steps asked if I wanted to install Trovi as my default browser and Did I want to install other programs.    After deleting everything and getting my browsers working again, I tried again to install the freeware.   This is where I discovered the step asking about Trovi.   I declined that.   That is when I got another one asking if I wanted to install YAHOO as my browser.   I zipped past that without thinking and Guess what?   Now all my browsers were hijacked by YAHOO and some of the adware came back.    Back to square one and repeated all my steps,  Ran Adware Medic again....   So, the point of this paragraph.   When you download software from the internet, even programs that seem legitimate and reliable,  MAKE SURE YOU ARE DOWNLOADING FROM THE SOFTWARE DEVELOPERS SITE.   Some Freeware is also distributed by third parties who BUNDLE it with other programs (TROVI ETC.) and install it all on your computer.   They take popular software and, apparently, use it, perhaps as a "Tojan Horse" to get you to install their applications on your system.   

  • by Perpetual Frustration,

    Perpetual Frustration Perpetual Frustration Apr 4, 2015 2:31 PM in response to vfrawley
    Level 1 (0 points)
    Apr 4, 2015 2:31 PM in response to vfrawley

    I've done okay with these direction up to step 5.

     

    When I click on the "+" sign by the Save button, I don't get an option box. What I get is this: under the heading "Search: This Mac 'Trash'" was a lighter gray bar with "Kind" and up and down arrows in it, the word "is" and then another little box with "Any" and up and down arrows in it. I don't see any box labeled "Option."

     

    So when I follow step 5, "Click on the first option box that shows up," which to me appears to be "Kind," I do not get a new box that allows me to "Search and select systems files" (step 6). I just get a menu list. When I click the last item in that menu list, "Other," I get a box with the heading "Select a search attribute."

    What am I supposed to do with that? When I try to type in "systems files" in the little box with the magnifying glass icon opposite "Select a search attribute" nothing happens.

     

    What am I missing with these instructions?

     

    I really, really hate computers. Nothing about them is straightforward or easy. Nothing.

  • by thomas_r.,

    thomas_r. thomas_r. Apr 4, 2015 4:52 PM in response to Perpetual Frustration
    Level 7 (30,924 points)
    Mac OS X
    Apr 4, 2015 4:52 PM in response to Perpetual Frustration

    Perpetual Frustration wrote:

     

    What am I missing with these instructions?

     

    You're missing the fact that those instructions aren't any good at all. Ignore them. Even if you follow them to the letter, you're still not going to remove all components of the Trovi adware.

     

    Instead, see my Adware Removal Guide for help removing it.

     

    (Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com.)

  • by raulnieblas,

    raulnieblas raulnieblas Nov 26, 2015 12:13 PM in response to kizzevin
    Level 1 (0 points)
    Nov 26, 2015 12:13 PM in response to kizzevin
  • by yanxiang0321,

    yanxiang0321 yanxiang0321 Nov 29, 2015 10:05 PM in response to vfrawley
    Level 1 (0 points)
    Nov 29, 2015 10:05 PM in response to vfrawley

    Thank you so much. Your tutorial rocks!

  • by yanxiang0321,

    yanxiang0321 yanxiang0321 Nov 29, 2015 10:08 PM in response to Perpetual Frustration
    Level 1 (0 points)
    Nov 29, 2015 10:08 PM in response to Perpetual Frustration

    By 'option", he actually means "Kind". Click "kind", you should be able to select other and "System files" from the pop-ups.

  • by MarcoLimongelli,

    MarcoLimongelli MarcoLimongelli Nov 30, 2015 10:13 PM in response to yanxiang0321
    Level 1 (0 points)
    Nov 30, 2015 10:13 PM in response to yanxiang0321

    this is for anyone having troubles with trovi in the future. I accidentally got it downloaded and was **** ****** off. after reading all different forums and stuff for hours and nothing worked I downloaded this free application called Adware Medic (DL Link: http://www.adwaremedic.com/index.php) i installed this thing. ran it. deleted whatever it found. and restarted my computer and everything was back to normal. so all my searching on the internet and reading wasting hours and getting ****** off was settled with about 12 clicks.

     

    Please dont get too upset about it like i did. just download the thing and u will be fine.

  • by Spidey65,

    Spidey65 Spidey65 Jan 22, 2016 8:39 AM in response to MarcoLimongelli
    Level 1 (0 points)
    Jan 22, 2016 8:39 AM in response to MarcoLimongelli

    Thanks for the link, MarcoLimongelli.


    AdwareMedic has joined with Malwarebytes. Here is the link: http://www.malwarebytes.org/mac-download/

     

    Save your time and forget all the previous post on how to remove Trovi. They don't work.

  • by allow duplicate usernames,

    allow duplicate usernames allow duplicate usernames Feb 22, 2016 10:03 AM in response to kizzevin
    Level 1 (0 points)
    Feb 22, 2016 10:03 AM in response to kizzevin

    Don't bother with all the complicated procedures in this thread. I called Apple and they talked me through using the malware remover from www.malwarebytes.org. It took about 30 seconds and solved the problem completely. Removed it froM all browsers.

  • by macdaddysolutions,

    macdaddysolutions macdaddysolutions Feb 25, 2016 10:00 AM in response to doiwjeoriehorwierwoih
    Level 1 (15 points)
    Mac OS X
    Feb 25, 2016 10:00 AM in response to doiwjeoriehorwierwoih

    Hello,  This post is so diluted I thought I'd help someone out directly. 

    1. Go to www.adwaremedic.com 
    2. Download malwarebytes. 
    3. Install by dragging and dropping into your Applications folder. 
    4. Shut down all browsers (quit)
    5. Open malwarebytes and scan
    6. Remove everything it finds
    7. Empty Trash
    8. Restart computer
    9. Go to each browser and manually change the Home page setting to your choice i.e., google.com, yahoo, etc.
    10. If using chrome, go to settings - Under search click manage search engines
    11. Delete Trovi search engine
    12. Get better extensions for security in all browsers

     

  • by Just_make_it_work,

    Just_make_it_work Just_make_it_work Feb 25, 2016 10:05 AM in response to macdaddysolutions
    Level 1 (0 points)
    Feb 25, 2016 10:05 AM in response to macdaddysolutions

    Amazing!  Worked perfectly and thank you for the step by step process.  That's what we need in this community!!

  • by maxblast,

    maxblast maxblast Apr 12, 2016 12:59 AM in response to kizzevin
    Level 1 (4 points)
    Apr 12, 2016 12:59 AM in response to kizzevin

    This helped me removing the trovi page on startup:

     

    Hint from the from the Trovi Page itself:

     

    Chrome Removal

     

     

      1. Click the Chrome menu (three horizontal lines) at the top of the browser window.
      2. Select Settings.
      3. In the "On startup" section, select Open a specific page or set of pages.
      4. Click Set pages.
      5. Add, edit, or delete startup pages.
      6. 6.Click Ok
  • by macdaddysolutions,

    macdaddysolutions macdaddysolutions Apr 12, 2016 7:22 PM in response to Just_make_it_work
    Level 1 (15 points)
    Mac OS X
    Apr 12, 2016 7:22 PM in response to Just_make_it_work

    No problem.  I love your handle BTW that's what we need in the apple community too.

  • by howardd1,

    howardd1 howardd1 May 7, 2016 1:50 AM in response to vfrawley
    Level 1 (4 points)
    May 7, 2016 1:50 AM in response to vfrawley

    Thanks.

    this helped me too.

first Previous Page 5 of 6 last Next