198      iPhone_iPad_Mac_apple

google chrome UnoTelly redirect

Macbook Pro os 10.13.2

I was a trial subscriber to UnoTelly VPN service and quit it shortly thereafter, but UnoTelly planted a redirect extension on many url addresses, highjacking them and sending me back to UnoTelly. This affected all three of the browsers I use, safari, firefox, chrome. I cleared my caches, deleted all browser histories, deleted the unotelly VPN proxy servers and flushed the DNS addresses, all to no effect. I finally successfully eliminated the redirects on safari and firefox, but only after deleting both browsers and reinstalling clean versions.

However, none of the above actions has eliminated UnoTelly redirects in google chrome. I've completely eliminated all traces of chrome from my notebook three times and reinstalled fresh versions to no avail. This is a virus that is among the worst malware I've ever encountered. I'm at the point where I'm tempted to completely wipe my notebook and start fresh. I'm a user, not a technician, but I shouldn't need to be a tech to rid my notebook of this headache. I have never experienced anything approaching this with ANY other VPN. This is an invasion of my privacy.

I now use NordVPN frequently and have experienced absolutely no problems at all with unwanted redirect issues on any browser. But UnoTelly is a cancer.

As an example, here's a screenshot of what I get when I try to access abc.go.com.

First.  Make sure that you have clean network settings that do not include modified proxy or DNS settings.  One easy way to do this is to:

• open the "Network" preference pane
• click the lock in the lower left and then authenticate as your admin user
• in the "Location" drop-down, choose "Edit locations..."
• click the "+" button to create a new location, then give it a name like "New Location"
• click "Done"
• click "Advanced..."
• click DNS and make sure that the DNS server that you expect are there
• click "Proxies" and make sure that none of the options are selected

Also, in each browser, look at the settings for search engines and remove all but the one you use.  Look at the extensions installed and remove them all except the very few that you consider essential.  Reinstalling a browser typically does not remove the extensions or settings for the browser so you will need to do this manually in the browser settings, or, delete the entire appropriate user settings directory in "~/Library/Preferences/[browser name]" and "~/Library/Application Support/[browser name]" for the particular browser.

And lastly, use EtreCheck (https://etrecheck.com/) to discover where UnoTelly may have hooked the OS using a background process that you are not aware is running.  If you are unsure of what you are looking for, post the results here and someone will help recommend cleanup steps.

I did everything you suggested, by the numbers. No evidence at all, no mention of UnoTelly in the etrecheck analysis. In network settings I did find one instance of a proxy DNS that I deleted. Did it all.  Logged out of the MBP and logged back in as the administrator. Deleted all chrome extensions. Absolutely no effect. The UnoTelly redirect in chrome is like a leech. It appears to have a particular affinity for tv network sites. Deleted all search engines except google, then deleted google and enabled bing. UnoTelly attaches itself to the tv network site if I type the url directly or select it from the search engine. I should mention, this affliction is unique to my late 2013 15" MBP Retina. I have an early 2015 13" MBP Retina and a 2016 iMac, all linked, and they are not affected. I'm typing on my 13" MBP now and have no UnoTelly interventions. At my wits end. All I need is a way to prevent the extension from clamping itself to the url and I don't know how. If I simply type in the url, e.g., cbsnews.com, that's all that appears but when I hit enter, it goes to the UnoTelly redirect anyway. Then, when the entire extension appears and I delete it character by character then hit enter again, it simply reappears. It's an F'ing nightmare, beseeching me to log back in even though I had cancelled and deleted the account early on.

The only solution I have, and it's not a solution, is to simply not use the chrome browser in that particular MPB.

This is what I'm dealing with: an encrypted connection that I can't delete. And I was mistaken. It has reappeared on all of my browsers, not just google. I can't delete these connections and I can't delete them from my keychain. I can change the keychain preference to "never trust" but they remain in the keychain and there is no change in the browser redirect.

最后更新：2017-12-28 13:17:12

  上一篇： How to play .DAV files on Mac?

  下一篇： would there be any issues in buying an ipad in ...