You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

how to remove weknow.ac virus

My Mac Book is infected with weknow.ac virus. How can remove this virus?

MacBook, Mac OS X (10.6.8)

Posted on Sep 13, 2018 10:19 AM

Reply
Question marked as Top-ranking reply

Posted on Mar 3, 2019 2:58 PM

Here's how I solved it.


  1. I did all of the things mentioned above in Terminal with the six command lines. That still didn't work.
  2. I called Apple Support and they had me follow these steps:
    1. Go to System Preferences
    2. Click on Profiles
    3. Delete the profiles (there was one that the virus created for Safari and another for Chrome)
    4. Reopen Browsers and the problem is solved.


I'm not sure this will work for everyone, but it worked for me.


Good luck!

126 replies

Mar 10, 2020 8:09 AM in response to a brody

Thanks for that information, done it and it work, but just one thing, every once in a while it stills get reinstall again, even after the pop up window appears, I always say cancel to avoid install, but no matter what always gets installed, and have to use the commands you shared on the terminal, but the solution is just for a couple of days, since it reinstalls again and again, no matter what. Any help??

Mar 19, 2020 6:48 PM in response to akhobbs

The terminal harkens back to the day before the graphical user interface. It is run from Applications -> Utilities -> Terminal on your hard disk.


A cursor follows a prompt at the end of the line, where you type everything you need in one line.

The prompt in this case is normally a $ sign.

If you receive a series of one line commands with multiple words and symbols, each individual command line separated by a line feed, needs to be entered followed by the enter key to take place.


Mac OS X at its backdrop is a mix of FreeBSD and NetBSD Unix, which Apple has modified to become the language of Darwin.

Unlike MS-DOS all the directory paths use the / slash between them.

Please start a new topic thread if you are running into trouble running the commands for this disinfectant series of commands.



how to remove weknow.ac virus

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.