How do I get rid of Trovi?

Which browsers?

i got 0sx 10.9.2

I have tried to eliminate Chrome extentions but still its invading all my internet.

please help

Sorry to hear that! You have been infected with trovi.com that is a browser redirect virus! You can follow this removal guide to get rid of trovi.com.

I didn't see this back in April, but if you still haven't solved the problem, take a look at my Adware Removal Guide. This problem is probably caused by one of the adware programs described there.

(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)

goodfuny wrote:

Sorry to hear that! You have been infected with trovi.com that is a browser redirect virus! You can follow this removal guide to get rid of trovi.com.

That applies to Windows, it has no information relating to Macs.

Mavericks 10.9.4 And safari is what I'm using

THIS IS FOR MAC USERS.... I USED UltraEdit or xCode to Open up the files to edit and save...

TROVI

I got it from installing a program called SearchProtect. Find in Finder Application/SearchProtect and run Uninstaller

That should do it for all browsers. You SHOULD be home free

If not go into Safari and get rid of Trovi Extentions.

In Google Chrome it's a little more fun. You'll want to Unhide your Library directory

Usually Users/Your-User-Name/Library the Library is hidden. Unhide via bash.

Then two magical files... find newTab.js and initData.json

It will be a directory similar to this:

Users/Your-User-Name/Library/Application Support/Google/Chrome/Default/Extensions/cbmjmfcldbpelhknnfjbkobmabafpoed/1.0.0 .0/newTab/

Where it's all cbmjmblahblahblah..it might be something else..don't fret...just click on all of them until you see 1.0.0.0..chances are the next one will be newTab..then you are almost there...

Users/Your-User-Name/Library/Application Support/Google/Chrome/Default/Extensions/cbmjmfcldbpelhknnfjbkobmabafpoed/1.0.0 .0/newTab/newTab.js

And edit the file with your favorite editor. I use UltraEdit.

just replace the whole line that looks similar to this:

var newTabUrl = "http://www.trovi.com/?ctid=CT333976&SearchSource=87&CUI=C44F7A0B-DBF3-7823-9F09- D4AA9B600A80&UM=7"

with this:

var newTabUrl = "http://www.google.com"

(Don't fret if the numbers are different... you are getting rid of most of the line anyways...we could talk for hours on what this stuff means...

then lastly edit the initData.json file in the same directory or the one above it...

Support/Google/Chrome/Default/Extensions/cbmjmfcldbpelhknnfjbkobmabafpoed/1.0.0. 0/initData.json

{

"ctid":"CY6530827",

"macUserID":"C44F7A0B-ffff-6789-ffff-D4AA9B600A80",

"title": "chrome new tab",

"displayname": "TroviSearch",

"version": "1.0.0.8",

"takeOverNewTab" : "true",

"takeOverNotFoundUrl" : "true",

"newTabURL" : "http://www.google.com/",

"notFoundURL" : "http://www.google.com/",

"newTabUrlWithoutResult":"http://www.google.com/"

So...the last three lines that have newTabURL, notFoundURL and newTabUrlWithoutResult all have trovi and the extra crap at the end (I deleted it from the sample and added...what I want in there which is google...you can put in whatever...just ignore the line above it but do not git rid of it....

Once you edit those two files you should be home free. You could also take the time to get rid of the extentions in Chrome and you still might need to do that but you will NEED to edit the two files newTab.js and initData.json and unhide that user Library,

Go get em.

Editing the Conduit (aka Trovi) browser extensions is far less effective than removing them entirely.

Further, note that if you have Conduit installed, you will probably have all manner of other files installed elsewhere on your system. In addition, some variants of Conduit will actually modify your Firefox app, so if you have Firefox installed, you need to delete and reinstall it.

For more on proper removal, see:

http://www.thesafemac.com/arg-conduit/

(Fair disclosure: I may receive compensation from links to my site and software, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

My hero!. Thanks for the link to thesafemac and adwaremedic download. That totally solved the persistent trovi problem I had on Google Chrome browser. Always hijacking start up page and new tab. The virus had specifically targeted this and didn't affect anything else. I had tried virtually all other suggested methods of removal (including updating Mac OS,changing browser settings,removing plug ins and extensions,even deleting and reinstalling Chrome app) without success and was on the verge of giving up and switching to another browser.

THANK YOU SO MUCH!!!!!! this helped me times ten thank you

🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂🙂😉😉😉😉🙂🙂