How do I get rid of MacKeeper (www.weknow.ac) on Safari MacOS High Sierra 10.13.6

Question

Level 1

8 points

How do I get rid of MacKeeper (www.weknow.ac) on Safari MacOS High Sierra 10.13.6

Does anyone know how I can get rid of the Malware MacKeeper (www.weknow.ac/search)? I have Googled myself crazy and determined that is is a direct result of Malware and that is why the MacKeeper pops up on my homepage. I have tried everything...Malware Cleaner apps; Adware Cleaner apps; deleting cache, history and suspicious programs but can't get my Safari Home Page Selector to go Black (from gray) so I can go back to making Google my homepage. All I can see is the gray type www.weknow.ac/search...Not really causing a problem...but it feels like the enemy is living in my basement...spying on my every key punch.

Mark

Mac Pro, iMac, MacBook Pro

Posted on Sep 5, 2018 7:54 AM

Reply

Answer 1

Top-ranking reply

Mark Rand Author

Level 1

8 points

Sep 16, 2018 8:58 AM in response to brianfromcuba

Brian...I figured it out!!! After running Malware Bytes, following numerous help communities advice and deleting extensions, cookies, etc., I contacted MalwareBytes and they made some suggestions. Thomas Reed replied and instructed me to follow this link for further instructions:

https://forums.malwarebytes.com/topic/236261-how-to-remove-weknow-malware-and-ot hers/

The instructions were fine but when they told me to go to System Preferences and look for a Preferences Icon, it didn't exist. The instructions said that if there was no Icon, then there weren't any bad Preferences to deal with. WRONG! I did a search for Preferences in the search window and Pow! A window came up with the Preferences for www.weknow.ac and Mac Keeper. I deleted them and restarted the computer. Once booted, I opened Safari and was able to change the home page and now am cooking with gas. So, it looks like the new Malware has a way of hiding preferences (Icon) in System Preferences. Hope this helps those in need.

Mark

Reply

Answer 2

macjack

Level 10

111,242 points

Sep 5, 2018 7:58 AM in response to Mark Rand

Download and run Malwarebytes. Malwarebytes was developed by one of our own colleagues here in ASC and is about the most proven anti-malware software for Mac.

It will detect MacKeeper as PUP (Potentially Unwanted Program) and will remove the app and all of its components. Also should remove weknow.

Reply

Answer 3

macjack

Level 10

111,242 points

Sep 11, 2018 8:53 AM in response to Mark Rand

Mark Rand wrote:

I have run all sorts of Malware and it has done nothing to remove either MacKeeper weknow. Should I just re-download and install High Sierra?

That won't help because reinstalling Mac OS does not affect anything in your user account. Malwarebytes should definitely detect MacKeeper as PUP (Potentially Unwanted Program) and remove the app and all of its components.

Reply

Answer 4

macjack

Level 10

111,242 points

Sep 5, 2018 8:13 AM in response to Mark Rand

Contact Malwarebytes support. They are very responsive.

Reply

Answer 5

Sep 11, 2018 8:35 AM in response to macjack

I did run Malwarebytes and it did remove PUP MacKeeper. "weknow.ac" remains locked in.

Reply

Answer 6

macjack

Level 10

111,242 points

Sep 5, 2018 8:06 AM in response to Mark Rand

No particular pointers. AFAIK Malwarebytes should remove them.

Reply

Answer 7

macjack

Level 10

111,242 points

Sep 11, 2018 8:50 AM in response to brianfromcuba

Look in Safari menu > Preferences > Extensions and if it is there, delete it.

Reply

Answer 8

Mark Rand Author

Level 1

8 points

Sep 5, 2018 8:11 AM in response to macjack

Thanks for the info MacJack...but there is either something I am doing wrong or really wrong about my MacBook Pro. I just re-downloaded the Malwarebytes from your link above. The only things that it found in the scan were other Malware apps that I had forgotten to delete. It did not fix the issue...the Homepage box is still gray with www.weknow.ac....Anyone else out there have any ideas?

Mark

Reply

Answer 9

infosee

Level 2

321 points

Sep 5, 2018 9:11 AM in response to Mark Rand

Remove www.weknow.ac from Mac OS

<Disclaimer: this post contains links to my own website from which I may derive some form of compensation. My website does not contain 3rd party ads. This disclaimer is required by ASC Terms of Use whenever linking to one's own site or product.>

Reply

Answer 10

Mark Rand Author

Level 1

8 points

Sep 5, 2018 8:01 AM in response to macjack

That was the first program I downloaded and it located two PUPs and resolved them...but the issue remains. I will try it again and see though...perhaps I ran the wrong scan. Any pointers?

Reply