PUP.Optional.Trovi.A

Detected by Malwarebytes

PUP.Optional.Trovi.A is deemed as potentially unwanted program that performs malicious actions once installed on the computer. This detection by Malwarebytes Anti-Malware program is given to specific software that user may optionally install together with third-party application. However, due to lack of notification during the install process, PUP.Optional.Trovi.A often gets into the PC without user's knowledge. Thus, you may see unwanted program called Trovi.com on the computer without a notice.

Threat behavior

Installation

In usual situation, PUP.Optional.Trovi.A is bundled to freeware or shareware applications. In fact, there may be other unwanted programs that are packed to the main software that users preferred to obtain. Authors behind malicious programs are utilizing pay-per-install scheme to deploy their products over the Internet.

There are also instances that malware are being used to deploy PUP.Optional.Trovi.A. In this case, the threat can be acquired when visiting malicious web pages, downloading compromised files, or using file-sharing apps. Links from spam emails and social media sites are also one medium consumed by attacker to spread PUP.Optional.Trovi.A.

Payload

Once PUP.Optional.Trovi.A is run on the computer, it targets mostly known browsers like Internet Explorer, Google Chrome, Mozilla Firefox, and Safari. This threat performs changes on browser settings that may result to home page hijacking and browser redirect problems. PUP.Optional.Trovi.A also drops extension, add-on, and plug-in to achieve other malicious tasks.

To start instantly when browser is opened, PUP.Optional.Trovi.A installs itself as browser helper object. This also gives the malware to have control on the browser and install its own search engine and toolbar object.

Symptoms

Presence of PUP.Optional.Trovi.A affects your installed browser program. Here are some obvious signs that the malware has invaded the computer.

  • Modified start page, home page or search engine
  • Constant redirect to unwanted web sites
  • Excessive display of pop-up advertisements
  • Browser and new tabs opens on its own

Presence of the following files indicates that computer is infected with PUP.Optional.Trovi.A.

  • C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Preferences “search_url”: “http:// www. trovi. com/Results.aspx?g…

How can you remove PUP.Optional.Trovi.A?

To totally remove PUP.Optional.Trovi.A from the computer and get rid of relevant adware, please execute the procedures as stated on this page. Make sure that you have completely scan the system with suggested malware removal tools and virus scanners.

First step: Scan the computer with Malwarebytes Anti-Malware

1. Download Malwarebytes Anti-Malware from the link below. Save the file on your hard drive.

MBAM Download Link (this will open on a new window)

2. Once the download completes, double-click on the file MB3-SETUP.EXE to run the program.

3. Select desired installation language when it prompts you.Then, click OK.

4. On the welcome screen, click Next to proceed.

MBAM-welcome

5. Next window is about License Agreement, you must accept this and click the Next button.

MBAM-license

6. Proceed with the succeeding prompts until you reach the window Ready to Install. Click on Install button.

7. Installation process will take less than a minute. Click on Finish button to run the program.

MBAM-finish

8. When Malwarebytes Anti-Malware interface appears, please select Scan on sidebar menu. Then, choose Threat Scan as shown in the image below. Click on Start Scan button to begin the process. The program will check for any available update before proceeding. Do not skip this step. Virus scan may take a while, please wait for the process to finish.

MBAM-threatscan

9. When scanning is done, Malwarebytes Anti-Malware will display the list of identified threats. Remove all and restart the computer to finalized the scan process.

Second step: Run AdwCleaner to totally remove PUP.Optional.Trovi.A

1. Download the tool called AdwCleaner from the location stated below.

AdwCleaner Download Link (this will open a new window).

2. Once you have completed the download, please close all running programs on the computer.

3. Locate the file and double-click on adwcleaner.exe to start running the tool.

AdwCleaner

4. It searches for presence of harmful programs, plug-ins, add-ons, or any data that were found malicious and linked to PUP.Optional.Trovi.A. You may have to delete each detected item.

5. Once scan is done, the tool may need to reboot your computer to finalize the cleaning process.

6. After reboot, open AdwCleaner once more. Click on Uninstall to remove this program from your computer.

Third step: Cleanup the Browser using Avast Browser Cleanup

1. Download this free tool and save it to your desktop.

Avast Browser Cleanup Download Link (This will open in a new window).

2. You do not need to install the program. This portable scanner will run automatically once you double-click on the the executable file avast-browser-cleanup.exe. This is effective in deleting PUP.Optional.Trovi.A entries from the browser.

3. When run, Avast Browser Cleanup performs a test on the browser. If unwanted entries were found, it will display a button 'Remove all add-ons listed below and cleanup browser.' You may remove all or delete one entry at a time.

Avast Browser Scanner

4. Avast Browser Cleanup will confirm before it permanently deletes the add-on. Please click Yes to proceed with the removal of PUP.Optional.Trovi.A on the affected browser.

3 thoughts on “PUP.Optional.Trovi.A

  1. Steve Noonan

    This virus (PUP.Optional.Trovi) continues to get into my PC after I delete it using Malwarebytes.

  2. Tom

    Hi

    Did a Malwarebyte (premium) scan and found one threat; a Trovi Optional Pup!

    I followed the instructions step by step and word by word, and was being informed that nasty things were being removed from my system.

    On completion I did a Malwarebyte recheck and, surprise, the Trovi pup is still there!

    Why are these so difficult to remove. Shall try someone else as there must be someone out there who can remove these things.

    Tom

  3. Brian Bell

    MB has been reporting “PUP.Optional.Trovi” for a couple of weeks now. In an attempt to make it go away I updated to -Software Information-
    Version: 3.3.1.2183
    Components Version: 1.0.236
    Update Package Version: 1.0.3350
    License: Premium

    Today I noticed an interesting correlation: At the exact moment I tell MB to quarantine the PUP my Chrome 64 crashes! This is repeatable! Wow!

    Just thought this audience might be interested.

Leave a Reply

Your email address will not be published. Required fields are marked *