Skip to main content

Trovi malware still showing up on my computer when I use Google?

  • October 16, 2015
  • 1 reply
  • 28 views

Why is Trove malware still showing up on my computer when I attempt to use Google icon?  Also Cassicopia?

1 reply

Ssherjj
Moderator
Forum|alt.badge.img+62
  • Moderator
  • October 16, 2015
Hello ?,
 
Welcome to the Webroot Community,
 
Cassiopesa.com (or Cassiopesa Search) is a browser hijacker, which is promoted via other free downloads, and once installed it will change your browser homepage and default search engine.Cassiopesa Search homepage got on your computer after you have installed a freeware software (video recording/streaming, download-managers or PDF creators) that had bundled into their installation this browser hijacker.
 
Trovi Search often comes embedded with many download applications and installers such as HyperCam, Cnet Installer, VLC Player, BsPlayer and many others. Trovi Search and trovi.com are increasingly being bundled with programs. During installation, the user might be given the option to modify the home and search pages, however this is often checked by default and overlooked.
 
What you are seeing and describing sounds like it may be what we on the Community refer to as a PUA. (Potentially Unwanted Application) These are very annoying at best in that they cause pop-us, redirect your browser home page, and other behavior that may slow down the computer and direct ads your way, but they are not actually doing anything bad like damaging files or stealing information. Often they are installed intentionally by you the user as browser add-ons for various tasks such as quick search tools.. but they also come with the result of added annoying pop-ups and ads. Other times they 'piggy back' with other software that you installed, or try to 'sneak' onto your system entirely.
 
WSA does detect and remove many PUA's, and more are being added, but WSA does not detect all of them. A simple browser add-on with PUA behavior that is easy to identify and easy to remove is not likely to be detected and removed by WSA. Those that are intentionally difficult to locate and remove are. Please see THIS LINK for more information regarding Webroot's stance on these annoying programs.
 
For those that are not detected by WSA, please see this KB Article. It has some easy to follow directions on locating and removing PUA's. You may also want to submit a Trouble Ticket, especially if you cannot remove it easily from the directions in the KB Article.
 
For those that ARE detected by WSA, but cannot be removed automatically, you can submit a Trouble Ticket.  Webroot Support will help you get these annoying 'crapware' off your computer at no extra charge, and the additional examples may help to better automatic removal of that particular PUA for all users in the future.