Troubleshoot Uninstalled and reinstalled Chrome, but new tab still set to WeKnow.ac

Status
Not open for further replies.
Infected operating system
MacOS Mojave 10.14.2
Infected device issues
The new tab page on Google Chrome is set to WeKnow.ac and can't be reset.

Janahersey

New Member
Thread author
Dec 29, 2018
2
I followed the instructions exactly for removing the the WeKnow.ac malware from my computer and had a professional help me with it. I then completely uninstalled Chrome, deleting everything listed in your instructions. I copied each string in the the Go To folder field exactly and deleted them. Then I reinstalled Chrome. The new tab page is still set to WeKnow.ac. I have tried everything to fix this and don't know what else to do.
 

Jack

Administrator
Verified
Staff Member
Well-known
Jan 24, 2011
9,378
Hmmm, I don't know why didn't the complete uninstall remove this redirect, I'll try to find a new sample an see what they've changed. One of the steps was to delete the bellow file, so it should have worked:

~/Library/Preferences/com.google.Chrome.plist


Can we go again through the steps please:

  1. Can you please check if there's an AdminPrefs file on the device. If it's there, you should remove it.
    1. Go to System Preferences.
    2. Click Profiles.
    3. The list will include an item “AdminPrefs“. Select this and click the remove “” button in the lower left corner.


  2. Next, scan your device with - Malwarebytes for Mac — Mac Antivirus Replacement


  3. If the issue persists, you will need to completely remove Chrome and all data, then reinstall. To do this, delete all of the following items:

    Code:
    /Applications/Chrome.app
    /Library/Application Support/Google/
    /Library/Google/
    ~/Library/Application Support/Google/
    ~/Library/Google/
    ~/Library/Preferences/com.google.Chrome.plist

    Be aware that this will delete all data for all Google apps you have installed, such as Chrome bookmarks. Export any data you want to keep beforehand.

    If you're not sure how to find these folders, choose Go to Folder from the Go menu in the Finder, then paste one of those paths into the window that opens. Be sure to delete the correct item, as deleting the wrong item could cause data loss or even damage to your system or other apps.

    After deleting all these files, restart the computer. Then re-download Chrome and reinstall. You will need to import any exported bookmarks or other data, and may need to reinstall any other Google apps that you use.
 

Janahersey

New Member
Thread author
Dec 29, 2018
2
I have done all of these steps exactly multiple times. The new tab page is still set to WeKnow.ac.
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top