Trovi Virus Removal Needed

When using Google Chrome on my Macbook Pro, I've got a homepage popping up that is a search engine called "Trovi". Below is a screen shot of what comes up when I first open Chrome. My settings are normal inside Chrome, and this only pops up the first time Chrome is opened. Has anyone had a problem with this, and if so, what is your recommended method for removal of this virus?

User uploaded file

MacBook Pro, OS X Mavericks (10.9.2)

Posted on Apr 8, 2014 7:04 AM

Reply
86 replies

Jul 6, 2014 12:35 PM in response to thomas_r.

thomas__r


I should have taken a screen shot for everyone - ugh! It would have very helpful but it was around 2am so I was a bit squirrelly at that moment! It was a list of maybe 10+ files. None of them are named Trovi which makes a search almost impossible. After deleting the files I also emptied my trash can and restarted my computer. (My idea not vfrawley's)


Thank you again!

cjlavin

Aug 3, 2014 11:04 AM in response to cjlavin

I have followed the directions and it did not fix the problem. There were two files that it displayed and I deleted both of them. I rebooted the computer and opened Firefox and when I open a second window is when Trovi shows its ugly face. I went back and did another search and another copy of one of the files that I deleted was back in there. No matter how many times I delete it, it keeps coming back. Any and all help would be greatly appreciated.

Aug 4, 2014 3:33 AM in response to whtrckt

That certainly sounds like a problem with adware or some other modification of that one machine, then.


When you used my Adware Removal Guide, did you just follow the manual identification and removal instructions, or did you actually run the Adware Removal Tool? If you didn't do the latter, try that now.


If that still doesn't work, run the System Reporter script linked to in Step 3 in that guide and e-mail me the results.

Sep 21, 2014 4:56 PM in response to vfrawley

Thank you so much vfrawley for your instruction. I am not computer expert so it took me a while to find the links and buttons you have in your instructions - I did not know the Trash had anything in it except delete or put back. But your directions are explicit and direct. The key is that every word is important! Once I found all the right buttons, I saw the exactness or your directions and I now seem to be completely free of that nasty virus. It even erased the text edit page I had copied your instructions on. LOL


I first noticed the Trovi virus as soon as I had installed updates to my scanner. When I restarted my computer the Trovi url was in the address line and it had over taken my home page. I changed my home page back again, deleted my history and cookies on Safari, but then the next day the same problem appeared in Firefox. That's when I knew I had a rotten thing and searched for and found your instructions.


Can't thank you enough.


Silverfox

Sep 21, 2014 5:11 PM in response to SCSilverfox

Trovi is actually a variant of the Conduit adware, and vfrawley's instructions are not adequate to remove all components. In fact, this adware is known to directly modify the Firefox application itself, so if you have Firefox installed, you will need to delete it and re-download it.


For more information on how to properly remove it, see my Adware Removal Guide.


(Fair disclosure: I may receive compensation from links to my site and software, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

Sep 30, 2014 1:23 PM in response to losangelesnoir

losangelesnoir wrote:


Hi thomas. I ran your program and it removed 4 files. It seems to have fixed my issues in chrome, but the trovi still comes up in safari, despite deleting all plug-ins and reseting the entire browser settings. Coul I possibly have a more serious issue at hand?


See:


http://www.adwaremedic.com/kb/unsolved.php


That will help you figure out what to try next.


(Fair disclosure: I may receive compensation from links to my site and software, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

Oct 3, 2014 8:40 AM in response to SCSilverfox

You are, of course, welcome to do as you like. However, other folks who read this later need to know that you have not fully removed the adware if you followed vfrawley's instructions. Even if you have eliminated the symptoms, you still have components of Conduit (aka Trovi) installed on your system somewhere. Most components of this adware do not actually have "Trovi" in the name.

Oct 19, 2014 10:36 PM in response to kizzevin

Hi I'm back. So for Safari I just changed the homepage and default search engine, I'm not sure if that got rid of the virus but I haven't ran into Trovi yet. This is just for all the people who have them on all the Search Engines. First open Safari and click on the Safari selection next to "File", and select Preferences if you are not already there go to General and you should be able to handle it from there.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Trovi Virus Removal Needed

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.