I bought new Chromebook at Costco and found that my Chrome browser redirects me to trovi.com search engine. I did not know anything about trovi and after googling I found that trovi is classified as browser hijacker which modifies a web browser’s settings without my permission. Definitely it does not look good. Before removing trovi I did small research about this site. The whois tool shows that it was created by ClientConnect LTD.
|
% whois trovi.com | egrep -i organization Registrant Organization: ClientConnect LTD |
nslookup retrieves A and AAAA records of trovi.com:
|
% nslookup -query=A trovi.com 8.8.8.8 Server: 8.8.8.8 Address: 8.8.8.8#53 Non-authoritative answer: % nslookup -query=AAAA trovi.com 8.8.8.8 Non-authoritative answer: |
To to my astonishment trovi.com is hosted on AWS, so all these IP addresses belong to Amazone.
Info for some IPv4 and IPv6 addresses:
|
% whois 54.192.121.61 | grep Organization Organization: Amazon Technologies Inc. (AT-88-Z) % whois 2600:9000:2211:5000:12:aa89:3880:93a1 | grep Organization Organization: Amazon.com, Inc. (AMAZON-4) |
Now about cleanup. Remove trovi from Chrome browser “On startup” page
The second step delete trovi from Search engine settings:
