You can make a difference in the Apple Support Community!
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
i downloaded some freeware recently and now all my chrome urls have nova.rambler.ru prepended.
i've never had a virus or trojan on here so i have clue where to even start.
any help would be awesome
MacBook Pro with Retina display, OS X Yosemite (10.10)
Hi! I solved this problem just today after a very long nightmare. So, try to follow these steps:
- first of all, install another Browser (Firefox)
- export your Favourites if you are afraid to loose them ("Bookmarks", "Bookmarks Manager", "Organize" and choose "Export to HTML files")
- exit from Chrome
- go to the "Applications" folder and drag the Chrome icon into the Trashbox.
- Then click on the "Go" button on the upper Finder tool bar, choose "Go to Folder" and write this command:
~/Library/Application Support/Google/Chrome
- select all the Chrome folders and all the Chrome files displayed (you are inside the Chrome folder that is still inside your OS) and drag all of them inside the Trashbox
Now Chrome is completely uninstalled from your OS. Now:
- open Firefox, download the Chrome.dmg file from the Chrome official site and open it
- drag the Install file inside the "Application" folder
- launch Chrome
Now you have a "virgin" and "clear" Chrome installation. Then You have to:
- sign in with your Google account
- import your Bookmarks (but I think they will be already there after I have logged in)
- uninstall Firefox if You want or use both of them if You want.
I really hope this will help you, let me know if it works.
Bye,
I think that we have found the cause of this issue. The good news is, Malwarebytes for Mac is detecting the malware that causes this now. The bad news is, the malware makes changes to the Chrome app and Chrome's settings that are non-trivial to reverse.
Here is my recommendation:
1) Open Malwarebytes Anti-Malware for Mac, making sure you have a network connection so that it can download the latest signature update. Then do a scan, and remove anything that is found. It's possible nothing might be found.
2) If desired, export your Chrome bookmarks:
https://support.google.com/chrome/answer/96816?hl=en
3) Quit and delete the Google Chrome application, which has been modified.
4) In the Finder, choose Go to Folder from the Go menu, then enter the following path in the window that opens:
~/Library/Application Support/Google/
Click the Go button, then, from the Google folder that opens, delete the Chrome folder. This will delete all your Chrome settings.
5) Using a different browser (such as Safari), download a fresh copy of Chrome:
https://www.google.com/chrome/
6) Install the fresh copy of Chrome and open it. If needed, import the bookmarks that you exported in step 2.
I have't tried this solution but I think I have found another solution which worked for me. When you find malware in browser, don't uninstall chrome but try to install chrome again without deleting chrome. Thus, it will override malware. Before I tried this trick, I found this virus every two days but I have't seen for for long time.
If you are ok with losing with your cookies and passwords saved in the chrome browser, you can uninstall and reinstall it. This will get rid of rambler.ru. However, if you don't want any thing missing, then you can go the advance settings of google chrome and scroll to the bottom of the window. Here click the Reset browser settings button. Hope this helps you out.
umerameen wrote:
you can go the advance settings of google chrome and scroll to the bottom of the window. Here click the Reset browser settings button.
That is a good thing to try first. However, many people experiencing this issue tried that with no success. As I mentioned back on April 7, there is known malware that modifies the Chrome app directly and causes this issue. So if all else fails, you need to follow the procedure I outlined then.
Hi, ignore the downloads on this page of course...
http://www.2-spyware.com/remove-nova-rambler-ru-virus.html#h-google-chrome
Thanks for the reply but it didn't fix the issue unfortunately. i followed every step.
There are no suspicious extensions, search urls, etc. I reset chrome again as instructed and the issue persists
So, the ZipCloud removal didn't help?
I deleted chrome and reinstalled. No issues yet
Hi, i have been having the same problem for a a week now. I downloaded malwarebytes and avast, reset chrome a million times and reinstalled it twice. Nothing seems to work.
Someone pls help
Todouskots wrote:
Someone pls help
See my previous posts above.
Can you explain how to clean the data files?
etresoft wrote:
you shouldn't automatically post the contents of that file.
That's part of why I gave the option of sending the info privately instead.
Uninstall Avast. It tends to interfere with the computer's operation while providing minimal to no benefit.
When you change default browser for omnibox in Chrome Settings, you can bypass nova.rambler.ru. Does not solve the problem, but at least you can use some alternative to google search engine.
How to remove nova rambler virus
