How To Remove Weknow.ac Malware (macOS)

Weknow.ac is malware or malicious software. It is basically a program that can hurt your Mac. This particular malware is a fake search engine (www.weknow.ac). It may look innocent but we know.ac records your activity without your permission. On your computer, weknow.ac is probably installed via a fake Adobe Flash update. A fake Adobe Flash will install this. It targets Safari, Mozilla Firefox, and Google Chrome. The way it operates is to hijack your browser settings and then to change your default search engine to https://www.weknow.ac without your participation.
If you have this. You definitely should remove it. This article explains how you can uninstall the weknow.ac malware.
See also: Amazon Winner, Free Gift Card, Congratulations Scams & How To Stop Them
How to remove weknow.ac
Before we continue,
Please do not trust the Fake Adobe Flash Player installer pop-up:

Photos and Video Show Spider-Man’s New Suit
Tuesday October 16, 2018

Now that Mysterio has reared his so-far-fishbowlless head, it’s Spidey’s turn, as pictures have surfaced of Tom Holland in Spider-Man’s new suit while he films Spider-Man: Far From Home. The photos come from a couple of sources, but JustJared is a good hub for them. Additionally, someone took a video of Spidey swinging into action...

The post Photos and Video Show Spider-Man’s New Suit appeared first on W88top.

Please pay special attention what you install. As you can see below, read carefully what is being installed. It is not easy to completely remove this but it is possible.
 Steps:
Please follow the steps below to switch the hijacked default search engine in your browser (Chrome or Safari) back to your default search engine (e.g, Google or Bing etc):
During the steps, please note that if you see these names anywhere (MacSaver, MacVX, MacVaX, MacCaptain, MacPriceCut, SaveOnMac, Mac Global Deals or MacDeals, MacSter, MacXcoupon, Shop Brain, SShoP Brain, PalMall, MacShop, MacSmart, News Ticker Remover, Shopper Helper Pro, Photo Zoom, Best YouTube Downloader, ArcadeYum, Extended protection, Video download helper, FlashFree, GoldenBoy, Genieo, Inkeeper, InstallMac, CleanYourMac, MacKeeper, SoftwareUpdater), remove them.
See also: Critical Security Warning! Your Mac is Infected…Fix
1-Remove the weknow.ac profile. Here is how:

On your Mac, open System Preferences (click the System Preferences icon in the dock)
Click Profiles
Select AdminPrefs
Delete this profile (AdminPrefs) by pressing the minus icon.
Now delete search engine settings:

You Should Be Watching: Tale of Tales (2015)
Monday October 01, 2018

Welcome back to You Should Be Watching, where I recommend lesser known or loved movies and TV series. This week I’ll be continuing my theme of horror, creature-features and anything suitable for Halloween. For this installment we’re slaying sea monsters with John C. Reilly in Tale of Tales, a gruesome and beautiful anthology of the...

The post You Should Be Watching: Tale of Tales (2015) appeared first on W88top.

Chrome: chrome://settings/searchEngines
Safari: Safari > Preferences > Search

2-Delete weknow.ac. Remove anything weknow.ac related. Remove anything suspicious apps to the Trash folder. Look for recently added apps.

Link sopcast Acestream trận Alaves vs Girona (2h30 ngày 1/11)
Wednesday October 31, 2018

 Thứ tư (31/10): bóng đá TBN Dự đoán: 1-1 Kết quả: ? 2h30 ngày 1/11: Alaves vs Girona Kết quả trận Alaves vs Girona: ? ( Xem kết quả bóng đá – livescore ở đây) + Link sopcast trận Alaves vs Girona: … (Bóng Đá 8 cập nhật link sopcast xem trận Alaves vs Girona trước 2h15′ ngày 1/11

The post Link sopcast Acestream trận Alaves vs Girona (2h30 ngày 1/11) appeared first on W88TOP.

Open the Applications folder
Delete Weknow.ac or Weknow.ac.app also look for “MPlayerX”,“NicePlayer”. Look for suspicious apps.
Empty Trash

3-Remove the weknow addon

Safari: Safari > Preferences > Extensions > Locate the weknow.ac extension and remove it
Google Chrome: Go to chrome://extensions/ and find the weknow.ac addon and remove it.
Firefox: Go to about:addons and remove the addon.

4-Delete weknow files:

Go > Go to Folder (or press Shift + Cmd + G)
Enter /Library/LaunchAgents and click Go
Look for suspicious files such as “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, “kuklorest.update.plist”. Some other names you should look for Genieo, Inkeeper, InstallMac, CleanYourMac, MacKeeper, SoftwareUpdater, MplayerX, NicePlayer, installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, “kuklorest.update.plist, com.aoudad.net-preferences.plist”, “com.myppes.net-preferences.plist”, “com.kuklorest.net-preferences.plist”, “com.avickUpd.plist”. If you see any of them, drag them to the Trash folder and then empty Trash.
And now repeat the same process on the following folders:

/Library/Application Support
/Library/LaunchDaemons

5-If your browser is Chrome, follow the steps below to change some Chrome policies, if you are still having the problem:

Open the Terminal app (Go > Utilities > Terminal or press Command+Space and search Terminal)
Enter the commands below, hit Enter after each
defaults write com.google.Chrome HomepageIsNewTabPage -bool false
defaults write com.google.Chrome NewTabPageLocation -string “https://www.google.com/”
defaults write com.google.Chrome HomepageLocation -string “https://www.google.com/”
defaults delete com.google.Chrome DefaultSearchProviderSearchURL
defaults delete com.google.Chrome DefaultSearchProviderNewTabURL
defaults delete com.google.Chrome DefaultSearchProviderName
Researt Chrome

Please note that the developers behind weknow.ac are very sneaky and they will likely further develop this malware so this means that those tips may not work in near future. We will try to keep updating this posts.
You may also want to install and run MalwareBytes.
The post How To Remove Weknow.ac Malware (macOS) appeared first on macReports.

Your email address will not be published. Required fields are marked *