kizzevin

Q: Trovi Virus Removal Needed

When using Google Chrome on my Macbook Pro, I've got a homepage popping up that is a search engine called "Trovi".  Below is a screen shot of what comes up when I first open Chrome.  My settings are normal inside Chrome, and this only pops up the first time Chrome is opened.  Has anyone had a problem with this, and if so, what is your recommended method for removal of this virus?

Trovi.jpg

MacBook Pro, OS X Mavericks (10.9.2)

Posted on Apr 8, 2014 7:04 AM

Close

Q: Trovi Virus Removal Needed

  • All replies
  • Helpful answers

first Previous Page 3 of 6 last Next
  • by SCSilverfox,

    SCSilverfox SCSilverfox Oct 3, 2014 7:46 AM in response to thomas_r.
    Level 1 (10 points)
    Oct 3, 2014 7:46 AM in response to thomas_r.

    I appreciate your post, but I have been free of any noticeable problem from the Trovi intrusion since I used vfrawley's instructions.  That has been several days now.  I wouldn't want to upset anything at this point by trying something else.

  • by thomas_r.,

    thomas_r. thomas_r. Oct 3, 2014 8:40 AM in response to SCSilverfox
    Level 7 (30,924 points)
    Mac OS X
    Oct 3, 2014 8:40 AM in response to SCSilverfox

    You are, of course, welcome to do as you like. However, other folks who read this later need to know that you have not fully removed the adware if you followed vfrawley's instructions. Even if you have eliminated the symptoms, you still have components of Conduit (aka Trovi) installed on your system somewhere. Most components of this adware do not actually have "Trovi" in the name.

  • by adam1423,

    adam1423 adam1423 Oct 14, 2014 7:53 PM in response to thomas_r.
    Level 1 (0 points)
    Oct 14, 2014 7:53 PM in response to thomas_r.

    vfrawleys advise also worked for me. I also deleted before thinking about taking a screen shot, however I'm fairly sure it was a blank file icon called .preferences . The only other files were labeled HTTPS and were my searches for finding a solution to this issue.

  • by adam1423,

    adam1423 adam1423 Oct 14, 2014 8:10 PM in response to thomas_r.
    Level 1 (0 points)
    Oct 14, 2014 8:10 PM in response to thomas_r.

    After reading your comments I went through the various library locations that you recommended and couldn't find anything, it's certainly a weird one !

  • by iantakahashi,

    iantakahashi iantakahashi Oct 18, 2014 4:39 PM in response to kizzevin
    Level 1 (0 points)
    Oct 18, 2014 4:39 PM in response to kizzevin

    Cahttphotos worked for me on chrome and on firefox i just deleted it and re-downloaded it. I just don't know about safari.

  • by iantakahashi,

    iantakahashi iantakahashi Oct 19, 2014 10:36 PM in response to kizzevin
    Level 1 (0 points)
    Oct 19, 2014 10:36 PM in response to kizzevin

    Hi I'm back. So for Safari I just changed the homepage and default search engine, I'm not sure if that got rid of the virus but I haven't ran into Trovi yet. This is just for all the people who have them on all the Search Engines. First open Safari and click on the Safari selection next to "File", and select Preferences if you are not already there go to General and you should be able to handle it from there.

  • by engineharry,

    engineharry engineharry Oct 29, 2014 12:23 PM in response to kizzevin
    Level 1 (0 points)
    Oct 29, 2014 12:23 PM in response to kizzevin

    I used vfrawley's instructions and continued to have weird issues. I then used the program thomas_r suggested and then chrome seemed normal. for safari I just had to delete trovi from the homepage preference and everything seems ok now.  Thanks guys!

  • by dazzaa,

    dazzaa dazzaa Nov 7, 2014 12:12 AM in response to kizzevin
    Level 1 (0 points)
    Nov 7, 2014 12:12 AM in response to kizzevin

    hi if you open chrome>preferences>settings>on start up> set pages> then change to your preferred search engine and save trove now gone the sneaky little git as it stays there even if you move it from the extensions

  • by azbut,

    azbut azbut Nov 18, 2014 5:01 PM in response to thomas_r.
    Level 1 (0 points)
    Nov 18, 2014 5:01 PM in response to thomas_r.

    Thanks so much mate, your site was the only thing that worked for me. I tried following vfrawley et al's instructions but to no avail. Will be making a small donation to your webpage.

  • by msmiw,

    msmiw msmiw Dec 15, 2014 12:23 PM in response to thomas_r.
    Level 1 (0 points)
    Dec 15, 2014 12:23 PM in response to thomas_r.

    Hi all,


    I had the evil Trovi malware in my Chrome browser and tried what vfrawley suggested, but didn't work.

     

    Then I followed thomas_r.'s suggestion (used Adware Medic), and it got rid of Trovi, as well as Genio (another malware that was on my Safari browser). Thank you so much!

  • by BG2000,

    BG2000 BG2000 Dec 21, 2014 12:18 PM in response to thomas_r.
    Level 1 (0 points)
    Dec 21, 2014 12:18 PM in response to thomas_r.

    TL;DR - www.adwaremedic.com solved my problem. I had Trovi, but also other programs that Adware Medic cleaned out.

     

    Just wanted to let you know that I recently ran across this Trovi / Conduit adware BS and was totally dumbfounded.  It was just like be teleported over to a Windows system ... pretty sad day that this stuff weasels its way onto OS X.  Long story short: I tried all of the things in the post before turning to your suggestion as I'm usually very reluctant to use an unknown program to uninstall another unknown program/plugin.  HOWEVER - thomas - Your suggestion Adware Medic did the trick and then some.  Thank you very much! I'll send a small donation along shortly.

     

    UGH UGH UGH UGH UGH I hate this kind of stuff. I do really appreciate those that take the time to post in this forum and create excellent software to help out people like us. Thanks again!

  • by antbobrob,

    antbobrob antbobrob Dec 30, 2014 12:16 PM in response to kizzevin
    Level 1 (0 points)
    Dec 30, 2014 12:16 PM in response to kizzevin

    Just putting this here in case anyone stumbles upon this post in search of an easy fix. 

     

    This adware creates a folder in your Applications folder called "SafeSearch" or something very similar.  Inside this folder is an uninstaller which will completely remove all existence of this adware. 

     

    The only additional step you need to do is switch back your homepage on each browser and you are good to go. Hope this helps!

  • by thomas_r.,

    thomas_r. thomas_r. Dec 30, 2014 6:15 PM in response to antbobrob
    Level 7 (30,924 points)
    Mac OS X
    Dec 30, 2014 6:15 PM in response to antbobrob

    It is NEVER a good idea to rely on the uninstaller for adware. In the only case I can think of where current adware includes an uninstaller, that uninstaller doesn't actually work properly, leaving all kinds of stuff still installed and active in the background.

  • by doiwjeoriehorwierwoih,

    doiwjeoriehorwierwoih doiwjeoriehorwierwoih Jan 20, 2015 3:02 PM in response to Live007
    Level 1 (0 points)
    Jan 20, 2015 3:02 PM in response to Live007

    Too bad this link and most instructions that i find are for PC.   As this forum would indicate,  I am using a MAC, not a PC.  

  • by doiwjeoriehorwierwoih,

    doiwjeoriehorwierwoih doiwjeoriehorwierwoih Jan 20, 2015 3:04 PM in response to Live007
    Level 1 (0 points)
    Jan 20, 2015 3:04 PM in response to Live007

    Too bad this link and most instructions that i find are for PC.   As this forum would indicate,  I am using a MAC, not a PC. 

first Previous Page 3 of 6 last Next