PDA

View Full Version : Trovi hijacking my system. Woe



oryol23
10-09-2016, 02:32 PM
Hello Everyone,
I am in dire need of some help. This is my first post, so i apologize if this is my the wrong forum for this topic. Ive always tried searching trovi on the forums and didnt see any results

I somehow granted access to this spyware/malware. It is completely hijacking my browsers (safari, chrome) using a "fake" bing as default search engine also, both my browsers will randomly close without any warning or crash report after the fact making me think something is killing it, possibly trovi.

I have looked through extensions for both browsers and tried clearing the default search engine field. I also cleared browsing data to try to get rid of any cookies.

I searched through the library folder/application support for anything containing trovi, deleted and emptied from trash. Also deleted firefox since a lot of the trovi results pointed to mozillas' libary folders. I also found an xml file called xika or something to that effect. I forgot the exact name but i saw trovi search in the xml contents.

Ive installed malware bytes and after the initial scan it discovered and removed the items but ever since it doesnt detect any issue but trovi continues to hijack my browsers.

Thank you in advance for any help you can offer.
Cheers!

Raz0rEdge
10-09-2016, 03:01 PM
Grab Malwarebytes (https://www.malwarebytes.com/) and see if it will find and delete this malware.

Slydude
10-09-2016, 03:04 PM
That was my first guess also but it looks like the OP has already tried that. Unless I misunderstood the first post.

oryol23
10-09-2016, 03:11 PM
Thanks! But yes, I did run malware bytes and scanned, seemed successful at first but then it came back and started taking over

ferrarr
10-09-2016, 03:34 PM
Hold "Shift" before clicking to open Safari.

harryb2448
10-09-2016, 05:18 PM
Turn off your router for five minutes or so, and clear History in Safari and whatever in that other browser.

pm-r
10-09-2016, 09:28 PM
Try this:
Remove Trovi Search from Apple Mac OS X (Removal Guide)
https://malwaretips.com/blogs/remove-trovi-mac-os-x/

If that doesn't work, try some of these:
https://www.google.com/search?client=safari&rls=en&q=Trovi+mac&ie=UTF-8&oe=UTF-8

And to find and destroy any corrupting files etc., I'd suggest using Find Any File.app
http://apps.tempel.org/FindAnyFile/




- Patrick
======