kizzevin

Q: Trovi Virus Removal Needed

When using Google Chrome on my Macbook Pro, I've got a homepage popping up that is a search engine called "Trovi".  Below is a screen shot of what comes up when I first open Chrome.  My settings are normal inside Chrome, and this only pops up the first time Chrome is opened.  Has anyone had a problem with this, and if so, what is your recommended method for removal of this virus?

Trovi.jpg

MacBook Pro, OS X Mavericks (10.9.2)

Posted on Apr 8, 2014 7:04 AM

Close

Q: Trovi Virus Removal Needed

  • All replies
  • Helpful answers

first Previous Page 6 of 6
  • by christinefrompahoa,

    christinefrompahoa christinefrompahoa May 27, 2016 10:53 AM in response to thomas_r.
    Level 1 (4 points)
    May 27, 2016 10:53 AM in response to thomas_r.

    Thank you for this link to the free Malwarebytes Anti-Malware to remove Trovi. I followed the directions (very easy) and voila, I removed the offending Trovi. Be sure to follow ALL the directions.

  • by gabstero,

    gabstero gabstero Jun 7, 2016 7:07 AM in response to kizzevin
    Level 1 (4 points)
    Mac OS X
    Jun 7, 2016 7:07 AM in response to kizzevin

    Uhm - any of you are getting "Search with Trovi" on a right click (happens on a selected text in any program - Mail, Text Edit, etc.

     

    search_with_trovi.png

    Thanks

  • by Eric Root,

    Eric Root Eric Root Jun 7, 2016 9:23 AM in response to gabstero
    Level 9 (71,450 points)
    iTunes
    Jun 7, 2016 9:23 AM in response to gabstero

    You might want to consider starting a new discussion. Since this one is a couple of years old, less people are likely to look at it. You can link to this one.

     

    Download this program which was written by Thomas Reed, a long time poster. The program will do the work for you which makes it easy.

     

    Malwarebytes Anti-Malware for Mac      10.8 and later

     

    What should I do if Malwarebytes Anti-Malware for Mac didn't solve my problem?

  • by gabstero,

    gabstero gabstero Jun 7, 2016 9:27 AM in response to Eric Root
    Level 1 (4 points)
    Mac OS X
    Jun 7, 2016 9:27 AM in response to Eric Root

    Good point Eric.

     

    thanks,

    Gabi

  • by appreciate,

    appreciate appreciate Jun 7, 2016 10:29 AM in response to kizzevin
    Level 4 (1,276 points)
    Mac OS X
    Jun 7, 2016 10:29 AM in response to kizzevin

    Some steps are there for  removal of malware that are as followed .

    First of all go to finder > applications if  trovi or called by other names conduit , my brand , search protect is to be found do a right click on it and move to trash .

     

    Now , click on go > computer > macintosh HD > library

    Find trovi in these folders

    1. application support

    2.launch agents

    3.launch daemons

    4.priviledged helper tools

    5.preferences .

    6.start up items

    7.scripting additions

    8.frameworks

    9.input metods

    10.internetplugins

    11.caches


    Then , click on go > hold option key > library

    Find trovi malware in these folders

    1.application support

    2.caches

    3.cookies

    4.internet plugins

    5.input methods

    6.preferences

    7.launch agents - if it exists in mac pro OS X 10.9.2 as this folder is removed in el capitan for sure .

    8.saved application state .

     

    And finally : click on go > computer > macintosh HD > system > library > framework

    If trovi files are found remove them by doing a right click > move to trash .

    Now, the the very important step to be followed is restart from apple logo > empty the trash .

     

    Generally trovi could be found in these folders

    applications/searchprotect.app

    library/launchagents/com.conduit.loader.agent.plist

    library/launchdaemons/com.perion.searchprotected.plist

    library/applicationsupport/SIMBL/plugins/CT2285220.bundle

    library/internet-plugins/conduitNPAPIPplugin.plugin

    library/internet-plugins/TroviNPAPIPplugin.plugin

    library/inputmanagers/CTloader  -  input manager is removed in latest el capitan

  • by appreciate,

    appreciate appreciate Jun 8, 2016 4:31 AM in response to macdaddysolutions
    Level 4 (1,276 points)
    Mac OS X
    Jun 8, 2016 4:31 AM in response to macdaddysolutions

    i really appreciate the steps to run malware bytes , but please add a point after # 3 when malware bytes is dragged and dropped in application folder open application folder and find malware bytes ,right click on it then it will prompt for user name password . please enter it . after that click on scan .

     

    Malware bytes is in download folder , so empty it by right clicking it to trash as  .dmg  files occupy hard disk space .finally restart from apple logo and empty the trash .

    A very useful article is there : OS X Yosemite: Open an app from an unidentified developer

  • by kiranbiliyawala,

    kiranbiliyawala kiranbiliyawala Jul 4, 2016 2:57 PM in response to vfrawley
    Level 1 (4 points)
    Jul 4, 2016 2:57 PM in response to vfrawley

    One more question. After doing this, looks like trovi is gone; see the screenshot:

    Screen Shot 2016-07-05 at 3.25.52 AM.png

     

    However, when I right click on some words in textedit, it shows search with Trovi.

    Screen Shot 2016-07-05 at 3.27.34 AM.png

    How can I remove this one? Please help. I'm fed up of this trovi.!!

  • by vickyrae,

    vickyrae vickyrae Aug 3, 2016 5:57 PM in response to christinefrompahoa
    Level 1 (4 points)
    Mac OS X
    Aug 3, 2016 5:57 PM in response to christinefrompahoa

    This did nothing.

  • by chantal from lac des loups,

    chantal from lac des loups chantal from lac des loups Aug 10, 2016 5:34 AM in response to kevin_
    Level 1 (8 points)
    Notebooks
    Aug 10, 2016 5:34 AM in response to kevin_

    Works perfectly, fixed everything. Thank you!

  • by Abdelhamid Zekri,

    Abdelhamid Zekri Abdelhamid Zekri Aug 13, 2016 9:28 AM in response to vfrawley
    Level 1 (4 points)
    Aug 13, 2016 9:28 AM in response to vfrawley

    Thank you, Vfrawley, your tips seems to be working fine until now

first Previous Page 6 of 6