Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

WeKnow.ac infecting Safari

I have tried every single suggestion I have found on the internet to get rid of this thing, even bought Malwarebytes, used CleanMyMac and they say my computer is fine. I have done what people suggest and restarted my computer about 6 times now, and when I hit Safari browser, it takes me right to the fake search site WeKnow.ac This is ridiculous and I have not had this problem until this recent update to Mojave. There must be a hidden file somewhere on my Mac, how do I find it? Please anyone having the same issue? I can't get rid of it.

Posted on Feb 14, 2019 3:07 AM

Reply
Question marked as Best reply

Posted on Feb 14, 2019 4:14 AM

WeKnow malware

Steps 1 and 5 posted under "Additional steps to take, if necessary" are very important steps.

Please don't miss it.


 1. Use  the latest release of MalwareBytes for Mac to remove malware/adware installed on your Mac.


     Install guide:       https://support.malwarebytes.com/docs/DOC-1817

     Uninstall Guide:  https://support.malwarebytes.com/docs/DOC-1190


     The installer may ask you to allow it in Security & Privacy  /System Preference. Allow it.

     Click the “Scan Now” button. Repeat the scan.Once done quit Malwarebytes for Mac.

     Restart the computer, relaunch Safari holding the shift key down.


     Remove unknown profiles (1), unknown extensions(2), reset search engine (3) and reset Homepage (4 & 5)

     listed under Additional steps.




2. Additional steps to take, if necessary.

  1. Remove unknown profiles.

      System Preferences > Profiles

      Open System Preferences, click the “Profiles” icon ( a checkmark on a gear) .

      When Profiles pane opens, select the unknown profile and click the minus button at the bottom.


  2. Remove unknown extensions: https://support.apple.com/guide/safari/use-safari-extensions-sfri32508/mac


  3. Reset search engine:    https://support.apple.com/guide/safari/customize-your-search-ibrwe75c2a3c/mac


  4. Reset  Homepage.   https://support.apple.com/guide/safari/set-your-homepage-ibrw1020/mac


5 Ref: https://forums.malwarebytes.com/topic/236261-how-to-remove-weknow-malware-and-others/

Similar questions

2 replies
Question marked as Best reply

Feb 14, 2019 4:14 AM in response to lambadger

WeKnow malware

Steps 1 and 5 posted under "Additional steps to take, if necessary" are very important steps.

Please don't miss it.


 1. Use  the latest release of MalwareBytes for Mac to remove malware/adware installed on your Mac.


     Install guide:       https://support.malwarebytes.com/docs/DOC-1817

     Uninstall Guide:  https://support.malwarebytes.com/docs/DOC-1190


     The installer may ask you to allow it in Security & Privacy  /System Preference. Allow it.

     Click the “Scan Now” button. Repeat the scan.Once done quit Malwarebytes for Mac.

     Restart the computer, relaunch Safari holding the shift key down.


     Remove unknown profiles (1), unknown extensions(2), reset search engine (3) and reset Homepage (4 & 5)

     listed under Additional steps.




2. Additional steps to take, if necessary.

  1. Remove unknown profiles.

      System Preferences > Profiles

      Open System Preferences, click the “Profiles” icon ( a checkmark on a gear) .

      When Profiles pane opens, select the unknown profile and click the minus button at the bottom.


  2. Remove unknown extensions: https://support.apple.com/guide/safari/use-safari-extensions-sfri32508/mac


  3. Reset search engine:    https://support.apple.com/guide/safari/customize-your-search-ibrwe75c2a3c/mac


  4. Reset  Homepage.   https://support.apple.com/guide/safari/set-your-homepage-ibrw1020/mac


5 Ref: https://forums.malwarebytes.com/topic/236261-how-to-remove-weknow-malware-and-others/

WeKnow.ac infecting Safari

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.