* trovigo.com

[stewart60]

I have just upgraded to V6.

All was going well until I opened Internet>Open web search window.

I then found that the search was linked to Trovigo.com!

(I have 'McAfee Security Scan Plus' and 'Advanced System Care 8' but neither has been able to detect Trovigo.)

I have not noticed Trovigo before and I usually use Google Chrome as the browser.

I have searched my programs and files but it isn't visible....perhaps it's well hidden somehow!

I have Internet Explorer on my computer but I haven't used it for a long time.
However...on opening IE just now, I see that Trovigo has taken control of the search there as well.

I need some help please to remove this unwelcome visitor - perhaps someone knows of key words for this 'malware' so that I can uninstall it.

Thanks
Stewart

[ColeValleyGirl]

Sounds very similar to the problem described here:Astromenda browser (11956) and you may find that https://www.malwarebytes.org/ will help.

[tatewise]

This thread Astromenda browser (11956) had similar problems.

A quick Google search for trovigo found plenty of removal methods.
Try a free one that you are comfortable with, but it does appear it may be rather difficult to remove, and you may need professional help.

[stewart60]

Thank you Helen and Mike,

The program which you recommended Helen seemed to find things associated with Trovigo and files such as conduit etc were quaranteed.However Trovigo still was operational in IE and within Family Historian.

I have found the pest in IE: Tools>Internet Options. Its conduit.com address stubbornly sits there and can't be changed as it reverts back to itself as soon as attempts are made to set the homepage to another browser.

When I tried Tools>Internet Options>Manage add ons>Search Providers .... again 'Conduit Search' is stubbornly set as the default! When I highlight its name it becomes clear that the 'Remove' button has been disabled and yet all the other listed add ons can be removed if required!

I've searched online for a solution but can't find one which works in my case!

Why does it show when I use that internet link in Family Historian V6? Is it that FH uses IE as the browser?

At a risk of revealing my lack of understanding how these things function..... I presume that the internet funtion within FH will not work if the user does not have IE?

Also, if I remove IE from my computer and then download the latest version - might I have a chance of removing Trovigo in that way?

Thanks for your guidance so far.
Stewart

[tatewise]

If you read through the Astromenda thread it explains that all programs that require an internal browser must use the IE Shell, which uses the IE settings, but is not exactly the same as IE itself.
You cannot remove IE from Windows. Unlike other browsers it cannot be uninstalled. IE is an integral part of Windows, Windows Explorer, Windows Desktop, etc.
I doubt if updating IE will make any difference, but you can try.

Trovigo appears to be difficult malware to remove, but try this webpage that seems to offer a comprehensive solution:
http://www.malwareremovalguides.info/tr ... val-guide/

[johnmorrisoniom]

I have just experienced a similar problem with a friends laptop. Conduit software infects all browsers and took over 5 hours of work to remove. Including using 5 different malware removal tools, each one removing deeper traces of infection. But persevere and it can be removed, but will need rebooting between scans with different software.

[jmurphy]

I saw this link in one of the Genealogy groups on Facebook. The article is from last summer so could be outdated.


How to remove Trovi Search

[stewart60]

Update!...Thank you everyone for your helpful suggestions and thoughts.

I believe that I have managed to remove Trovigo.

On reading various comments within forums from others who have used certain programs to remove this unwanted and unwelcome visitor, I must admit that I was some what fearful of downloading and using yet another anti-virus/malware program in case I then developed a more serious computer malfunction as a result.

I had earlier downloaded and used the program recommended by Helen and I thought that I would stick with that one and simply scan again. To my surprise, I discovered that it seemed to discover further offending files.

To cut a long story short....I used https://www.malwarebytes.org/ to scan several times and after each scan I restarted the computer. Each time the program seemed to discover a different layer of Trovigo and its associated files.

Yes it all took several hours but IE now seems to be operating correctly and the Internet function within Family Historian 6 is as it should be.

I have no idea how I got the Trovigo intruder. I am normally really careful when downloading things but this pest sneeked in without me knowing.

Thank you all again...and a special thanks to Helen for recommending such an effective program.

Stewart

[jimlad68]

Bit late now, sorry, but just remembered what I do in this sort of situation. I cut my losses and restore my PC/Laptop from an image before I had the problems. That does of course mean taking "regularish" C:\ drive image backups which can be quite onerous and until I found Macrium Reflect Free edition http://www.macrium.com/reflectfree.aspx somewhat unpredictable. It is of course important to do a trial restore on a spare drive if you can.

In order to keep my C: drive image as small as practicable I keep all my data on other drives (mostly E:) and use portable apps, also stored on another drive, as much as posible. E.G.
My current favourite "holder/menu" - http://www.liberkey.com/
http://www.liberkey.com/en/catalog-flat-list-view.html
http://portableapps.com/apps
http://www.portablefreeware.com/index.php?id=1295

[tatewise]

That is excellent advice Jim.
However, in both the recent cases of IE infection, the user had no idea how long the problem had existed, because they never used IE, and it did not affect their other browsers.
It was only when FH used the IE Shell did they realise they had a problem.

[jimlad68]

Good point Mike, but even then I would keep going back until it was clean of the problem. Although time consuming to reinstall programs etc, the upside is that you might end up with a "refreshed" and faster PC/Laptop.