Operating System
MacOS Mojave 10.14.2
Current issues and symptoms
The new tab page on Google Chrome is set to WeKnow.ac and can't be reset.

Janahersey

New Member
I followed the instructions exactly for removing the the WeKnow.ac malware from my computer and had a professional help me with it. I then completely uninstalled Chrome, deleting everything listed in your instructions. I copied each string in the the Go To folder field exactly and deleted them. Then I reinstalled Chrome. The new tab page is still set to WeKnow.ac. I have tried everything to fix this and don't know what else to do.
 

Jack

Administrator
Staff member
Verified
Hmmm, I don't know why didn't the complete uninstall remove this redirect, I'll try to find a new sample an see what they've changed. One of the steps was to delete the bellow file, so it should have worked:

~/Library/Preferences/com.google.Chrome.plist

Can we go again through the steps please:

  1. Can you please check if there's an AdminPrefs file on the device. If it's there, you should remove it.
    1. Go to System Preferences.
    2. Click Profiles.
    3. The list will include an item “AdminPrefs“. Select this and click the remove “” button in the lower left corner.

  2. Next, scan your device with - Malwarebytes for Mac — Mac Antivirus Replacement


  3. If the issue persists, you will need to completely remove Chrome and all data, then reinstall. To do this, delete all of the following items:

    Code:
    /Applications/Chrome.app
    /Library/Application Support/Google/
    /Library/Google/
    ~/Library/Application Support/Google/
    ~/Library/Google/
    ~/Library/Preferences/com.google.Chrome.plist
    Be aware that this will delete all data for all Google apps you have installed, such as Chrome bookmarks. Export any data you want to keep beforehand.

    If you're not sure how to find these folders, choose Go to Folder from the Go menu in the Finder, then paste one of those paths into the window that opens. Be sure to delete the correct item, as deleting the wrong item could cause data loss or even damage to your system or other apps.

    After deleting all these files, restart the computer. Then re-download Chrome and reinstall. You will need to import any exported bookmarks or other data, and may need to reinstall any other Google apps that you use.