How do I uninstall MacKeeper (From TROVI?)

I have a new iMac that I recently transferred files from my old windows machine too. This morning to my displeasure I found that chrome's search engine was set to Trovi something that I battled on the windows machine and thought I won. Later this morning a neat little file called MacKeeper (ver 3.3.8) suddenly appeared. I did NOT download this.


I would like to remove it. Despite much information about its associated problems, few tell how to remove it. Unfortunately, I can not drag and drop it into the trash and it does not ask for an admin password, etc. It's stuck there.


Does anyone have suggestions about how to get either of these malware off my machine?


Regards,
Matt

iMac (27-inch, Late 2013), OS X Yosemite (10.10.2), 1TB Fusion Drive, 32GB

Posted on Mar 17, 2015 8:49 AM

Reply
6 replies

Mar 17, 2015 10:28 AM in response to Meesta Feesha

You may have installed the "Trovi," "Conduit," or "SearchProtect" ad-injection malware. Follow the instructions on this Apple Support page to remove it.

Back up all data before making any changes.

Besides the files listed in the linked support article, you may also need to remove these files in the same way:

~/Library/Application Support/Firefox/searchplugins/MyBrand.xml
~/Library/Application Support/Google/Chrome/External Extensions/fjadmdmahkpbhgbmmkiiaanlnlekelmn.json
~/Library/Application Support/Mozilla/Extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/deacruzemiliano@outlook.com

One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.

If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, then you may have one of the other kinds of adware covered by the support article. Follow the rest of the instructions in the article.

Make sure you don't repeat the mistake that led you to install the malware. Chances are you got it from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.

"SearchProtect" may be distributed along with two other applications: "MacKeeper," which is a scam, and "ZipCloud," which, if not actually a scam, has a dubious reputation. Ask if you need instructions to remove those items.

In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.

Still in System Preferences, open the App Store or Software Update pane and check the box marked

Install system data files and security updates (OS X 10.10 or later)

or

Download updates automatically (OS X 10.9 or earlier)

if it's not already checked.

Mar 17, 2015 2:50 PM in response to Linc Davis

Linc,


This was very useful. I followed the instructions in your link and found nothing EXCEPT the person.searchprotect file which I deleted/emptied trash. This is prob where the MacKeeper came from and maybe Trovi? I'm certain that all of this came with transferred files from my windows machine. The volume of adware that seemed to spontaneously load on that machine was a critical factor in me switching to Mac. I'm disappointed that they've followed me here, but I am more aware of being conscientious of clicks! Thanks very much for your detailed response! Now on to Eric's suggestions RE removing MacKeeper. I hope that's all of it!


Matt

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How do I uninstall MacKeeper (From TROVI?)

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.