WE.KNOW.AC

[StarShot]

Anyone know what maleware program I can get to wipe we.know.ac off my MBA. I think about a year ago I wiped it, but its back in spades again.

Does we.know.ac attach itself to every browser or just certion one's? I use only Opera and Safari. I saw one procedure on youtube that did some magic after entering certain strings in "terminal". I don't feel comfortable.

I'm also wondering if I can get rid of we.know.ac by deleting my browsers and then reinstalling them. I realize I could be losing my favorite places in these browsers, but if this tanks we.know.ac, I would do it in a NY Minute.

 

[ddmcnair]

https://macreports.com/how-to-remove-weknow-ac-malware-macos/

I saw this article mentioned above. If you have tried that, and it did not work, I would look for a tool, like DBAN, to erase the disk (HDD) or use Parted Magic (SSD). Chances are you will need to remove the drive to do this, unless it is eMMC, in which case, you will need an external boot drive.

However, there do appear to be many removal guides, besides the one I listed. Good Luck!

 

[tyc0746]

Have you tried either of the trial versions of MalwareBytes or DetectX?

I’d try those before trying any manual method, and definitely before going nuclear with the other poster’s ‘solution’.

 

[LinMac]

You can try to clean the computer, but you can never be 100% certain that cleaning works. The best thing to do is backup specific files to a USB stick, completely format the disk, and reinstall MacOS after erasing everything. Once it is completely wiped, you can use software like Cylance owned by BlackBerry to block future malware from the computer. https://shop.cylance.com/us

It is superior to other options and much more lightweight. It comes from the Enterprise space where it is used primarily by corporate, finance, and military. The key to their success is AI which helps block malware it has never seen before. Unfortunately, it won't be able to help you with an infected machine the way yours is. It can't ensure that the computer is completely clean and unmodified.