kizzevin

Q: Trovi Virus Removal Needed

When using Google Chrome on my Macbook Pro, I've got a homepage popping up that is a search engine called "Trovi".  Below is a screen shot of what comes up when I first open Chrome.  My settings are normal inside Chrome, and this only pops up the first time Chrome is opened.  Has anyone had a problem with this, and if so, what is your recommended method for removal of this virus?

Trovi.jpg

MacBook Pro, OS X Mavericks (10.9.2)

Posted on Apr 8, 2014 7:04 AM

Close

Q: Trovi Virus Removal Needed

  • All replies
  • Helpful answers

Page 1 of 6 last Next
  • by chattphotos,

    chattphotos chattphotos Apr 8, 2014 7:43 AM in response to kizzevin
    Level 4 (2,424 points)
    Desktops
    Apr 8, 2014 7:43 AM in response to kizzevin

    I'm not sure Trojan/Virus is the right word to use.

    I think you've just gotten an unwanted search provider.

     

    That ad needs some refinement also...

     

    How to fix:

     

    Chrome Settings > Extensions > Remove Trovi

     

    Also

     

    In Settings > Scroll down to search > Manage search engines > Remove everything but your preferred search engine.

  • by thomas_r.,

    thomas_r. thomas_r. Apr 8, 2014 8:00 AM in response to kizzevin
    Level 7 (30,889 points)
    Mac OS X
    Apr 8, 2014 8:00 AM in response to kizzevin

    Trovi is a new one for me, but often these sorts of things are driven by existing adware or network issues. See my Adware Removal Guide and see if anything there solves it. If not, post back here for further suggestions.

  • by kizzevin,

    kizzevin kizzevin Apr 8, 2014 8:32 AM in response to chattphotos
    Level 1 (1 points)
    Apr 8, 2014 8:32 AM in response to chattphotos

    I can go in and refine the settings.  However, it's not just an unwanted search provider as I have gone and already removed all of the unwanted search engines and checked the extensions.  And yet, every time you open the first time, it popped. 

     

    Having said that, I have found a fix.  I simply went in and reset my defaults in Chrome, and it was gone.  I'm not sure how this could completely remove the issue, but for now it does not seem to be there anymore.  I'll update if this changes.

  • by danielruizhueck,

    danielruizhueck danielruizhueck Apr 19, 2014 11:00 AM in response to kizzevin
    Level 1 (0 points)
    Apr 19, 2014 11:00 AM in response to kizzevin

    Thats didnt work for me.

    Please HELP

  • by chattphotos,

    chattphotos chattphotos Apr 19, 2014 11:21 AM in response to danielruizhueck
    Level 4 (2,424 points)
    Desktops
    Apr 19, 2014 11:21 AM in response to danielruizhueck

    Daniel, please create a new discussion (and reference this one)

     

    In your new thread,

     

    Describe your system version

    What browsers are used (do you see Trovi on all of them or not?)

    Have you reset them to default?

     

    Have you seen Thomas_r's adware removal guide? (and followed it?)

     

    Please use the information in this discussion so that we can help you.

  • by danielruizhueck,

    danielruizhueck danielruizhueck Apr 19, 2014 2:02 PM in response to pennbank
    Level 1 (0 points)
    Apr 19, 2014 2:02 PM in response to pennbank

    yes, already tried that

    look at this, now trovi is out but got now a bunch of adds that are driving me crazy

  • by pennbank,

    pennbank pennbank Apr 19, 2014 2:10 PM in response to danielruizhueck
    Level 4 (1,684 points)
    Apr 19, 2014 2:10 PM in response to danielruizhueck

    What browser are you using ?

     

    Is it in all ?

     

    Have you reset them ?

  • by danielruizhueck,

    danielruizhueck danielruizhueck Apr 19, 2014 2:45 PM in response to pennbank
    Level 1 (0 points)
    Apr 19, 2014 2:45 PM in response to pennbank

    I normally use CHROME, but if I opne SAFARI, its also in there.

    I try and reset it and nothing.

  • by pennbank,

    pennbank pennbank Apr 19, 2014 3:06 PM in response to danielruizhueck
    Level 4 (1,684 points)
    Apr 19, 2014 3:06 PM in response to danielruizhueck

    Well as its in Safari and you have tried all the options already given

    Back up all you folders/files etc and clean install your system.  You can not remove safari without a clean install.

     

    Delete all your other browsers except Safari from your applications folders

     

    and try this again

    http://blog.qisupport.com/remove-trovi-com-iesafarichromefirefoxopera-manual-rem oval/

     

    You do not give any info as to which operating system you are using or what year mac etc

    so search these forums on how to do a clean install depending on your equipment

  • by Jon4ofakind,

    Jon4ofakind Jon4ofakind Apr 24, 2014 4:06 PM in response to kizzevin
    Level 1 (0 points)
    Apr 24, 2014 4:06 PM in response to kizzevin

    How do you remove this from safari?

  • by k00703,

    k00703 k00703 Apr 30, 2014 6:36 PM in response to kizzevin
    Level 1 (0 points)
    Apr 30, 2014 6:36 PM in response to kizzevin

    1. Delete all cookies. Remove conduit search engine. Set your page a blank. Reset all browsers. Don't restart the browsers.

     

    2. Go to library/system/ and library/system/Internet Plug-Ins/. Find all related to 'conduit' and 'vsearch'. Delete them.

     

    3. Go to llibrary/system/ and library/system/Internet Plug-Ins/. Find all related to 'conduit' and 'vsearch'. Delete them.

     

    4. Reboot.

     

    I hope it'll work for you!

  • by Live007,

    Live007 Live007 May 9, 2014 1:01 PM in response to kizzevin
    Level 1 (0 points)
    May 9, 2014 1:01 PM in response to kizzevin

    I'm a culprit as well. Found & tried this: http://info.trovi.com/Uninstall

     

    Seems to work. Good luck!

  • by kevin_,Helpful

    kevin_ kevin_ May 9, 2014 4:20 PM in response to Live007
    Level 4 (1,554 points)
    May 9, 2014 4:20 PM in response to Live007

    This is a malware that installs 2 different pieces of adware.. the 1st is the conduit plugin and the 2nd is the vsearchA adware.

     

    I wrote an applescript to remove this if you want to use it.   Just open up the AppleScript Editor which is located in your Applications/Utilities folder.  Copy the script below and paste it into the AppleScript Editor and then press Run.

     

     

     

    set Question to display dialog ¬

              "Please quit all browsers before running this script" buttons {"Cancel", "Run"} default button 1

     

    if button returned of Question is "Run" then

              try

                        do shell script "rm -r /System/Library/Frameworks/VSearch.Framework; rm -r /Library/Application Support/VSearch; rm /Library/LaunchAgents/com.vsearch.agent.plist; rm /Library/LaunchDaemons/com.vsearch.daemon.plist; rm /Library/LaunchDaemons/com.vsearch.helper.plist; rm -r ~/Conduit" with administrator privileges

     

                        do shell script "defaults write com.apple.Safari HomePage -string www.google.com && defaults write com.apple.Safari SearchProviderIdentifier -string com.google.www"

     

                        do shell script "rm ~/Library/Application\\ Support/Google/Chrome/Default/Preferences"

              on error the error_message number the error_number

              end try

    end if

Page 1 of 6 last Next