img HowTosOSX

How to remove Trovi adware from Mac

Review this guide to learn what the Trovi adware is, how it compromises computers, and how to completely remove it from an infected Mac machine.

Malware-free Mac OS is unfortunately turning into a delusion at a steady pace. The good news is it’s not as susceptible to viruses as Windows, but potentially unsafe applications such as adware have been capable of compromising Mac machines for quite a while now. The infection which is the subject of this article is called Trovi, and it’s an extreme nuisance and a big time web surfing experience spoiler. This potentially unwanted code is flagged by antivirus utilities as adware, that is, a program taking advantage of hijacked Internet traffic in order to promote certain services. screenshot

The Trovi threat is known to be closely affiliated with Conduit, or Conduit Search – one of the prevalent homepage hijackers in the wild. So if you’ve got one on your machine, the other is probably there as well. Just like its Conduit satellite, Trovi is distributed as part of freeware whose spreading pattern in no way presupposes declaring that any sort of bundle is coming along. Scrutinizing the Terms of Service for random free multimedia utilities or browser helper objects might help avoid the contamination but, first off, not necessarily, and secondly, there aren’t a whole lot of users doing that as a rule.

This adware changes the web browsing preferences on the infected workstation, namely the values for homepage and default search engine. The Mac versions of Chrome, Firefox, as well as Safari therefore start to act up, constantly returning instead of the URLs for the above settings previously configured by the user. There is no actual danger stemming from the landing web page for this adware except for the annoyance aspect. bears a tangible value to its creators, though, because it displays ads to the victims. Whether you click on those banners and sponsored links or not, it’s profitable to Trovi authors.

Removal of this adware should be performed in several stages: resetting the affected web browsers and eliminating the malicious app proper. Below are detailed instructions on what needs to be done.

Trovi manual removal for Mac

To begin with, settings for the web browser that got hit by the Trovi adware should be restored to their default values. The overview of steps for this procedure is as follows:

1. Reset Safari

• Open the browser and go to Safari menu. Select Reset Safari in the drop-down list
• Make sure all the boxes are ticked on the interface and hit Reset

Resrt Safari

2. Reset Google Chrome (if affected by the Trovi virus)

• Open Chrome and click the Customize and Control Google Chrome menu icon
• Select Options for a new window to appear
• Select Under the Hood tab, then click Reset to defaults button

Reset Chrome

3. Reset Mozilla Firefox (if affected)

• Open Firefox and select HelpTroubleshooting Information
• On the page that opened, click the Reset Firefox button

Reset Firefox

4. Further actions

• Go to /Library/InputManagers and send the CTLoader folder to trash
• Proceed to /Library/LaunchAgents/ and trash com.conduit.loader.agent.plist
• Go to System PreferencesUsers & Groups. Select Login Items and remove any suspicious-looking item (Trovi,, Conduit, Conduit Search Protect)
• Go to System PreferencesKeyboard. Hit the Keyboard Shortcuts tab and select Servicesin the left-hand section of the interface. Look through the list, find anything related to Trovi, or Conduit, and deselect the bad item(s)
• Quick all apps and press Command-Shift-G. Type ~/Library/Preferences and click Go. Move the file named to trash and reboot the machine

Trovi virus automatic removal for Mac

1. Download and install MacKeeper application (read review). In addition to security features, this tool provides a vast arsenal of Mac optimization capabilities

Download MacKeeper

2. Get your Mac checked for malicious software by going to System Scan and starting the scan procedure

MacKeeper: Analysis

3. When the app comes up with a list of detected security issues, get those fixed by clicking the respective button. The Trovi adware as well as the Conduit hijacker should now be gone.