Removal Guide

Remove Treasure Track Ads Virus From Chrome/Firefox/IE

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

This article aims to help users remove Treasure Track Ads from Chrome, Firefox, Internet Explorer and Safari, as well as their respective system.

Remove Treasure Track Ads

What we have in the face of Treasure Track Ads is a typical malware virus. Its main function is to create advertisement and populate your screen with them without your permission. The most common trigger for creating these Ads is when you load a page or link while browsing, so the Ads pop very often and quickly become a nuisance. Unfortunately this is not the only function of Treasure Track Ads – it may also try to sell you bloatware or other useless programs and in some cases even virus applications. Follow your instructions as underlined below in order to safely handle Treasure Track Ads and permanently remove it.


  • Click on the Ads – some offers may be legitimate, but it is also possible to land on infected phishing sites that will try to copy your log-in details for the real sites they impersonate and steal your billing information or make purchases in your name.
  • Download and install anything that Treasure Track Ads offers you – especially free software. If these aren’t infected with viruses they are likely bloatware – they will falsely claim you have problems with your machine and demand payment before they fix the problem – but in fact there is no problem and the program does nothing at all.

Methods of spreading

By far the most common method of the spreading of malware viruses like Treasure Track Ads are the bundled program applications. These days it is typical for the installers of many programs to also install additional software beside the main piece. Usually those will be demos, trials of free programs from the same developer company, but often enough those could be malwares too. This practice happens more commonly with indie developers and free software, but could also happen with pro software too – if the installer is not obtained from the official site.

For this reason it is prudent to always use the Advanced/Expanded installation option. It is no more complicated then the quick default option if you just press next a couple of times, but in the meantime will also show you what exactly is getting installed and also allow you to block it. We recommend that you always block the installations of Apps you don’t really need or look suspicious.

1: Enter Safe Mode.
2: Remove Treasure Track Ads from Chrome, Firefox, Internet Explorer and Safari.
3: Remove the virus from browser shortcuts.
4: Uninstall the virus from your AddRemove Programs.
5: Permanently remove Treasure Track Ads from Task Manager’s processes.
6: Delete the virus from Regedit and Msconfig.
7: Optimize your PC after the removal is done.

Remove Treasure Track Ads

As you begin to remove Treasure Track Ads you may notice that in some steps the virus might not actually be listed for removal. If you followed the instructions and you are certain you haven’t done anything wrong to the point – you shouldn’t worry and skip the current step to proceed to the next one.

This is possible because Treasure Track Ads is constantly getting updated to require different removal instructions, but the older versions remain in circulation. We’ve added all known&necessary steps for the removal of the virus, but some of them might not be strictly needed for the versions of Treasure Track Ads on your computer.


Our first step here is a reboot in Safe Mode. If you already know how to do it, just skip this and proceed to Step 2. If you do not know how to do it, continue reading:

For Windows 98, XP, Millenium and 7 Users:

Restart your computer. To be sure you don’t miss the time when you need to press it, just spam F8 as soon as the PC starts booting. In the new menu, choose Safe Mode With Networking.

Proceed to Step 2.

For W. 8 and 8.1 Users:

Click the Start button ,then Control Panel —> System and Security —> Administrative Tools —> System Configuration.Administrator permission required


Then check the Safe Boot option and click OK.  Click  Restart in the new pop-up.

Proceed to Step 2.

For Windows 10 Users:

  1. Open the Start menu.
  2. Click the power button icon in the right corner of the new Start menu to show the power options menu.
  3. Press and hold down the SHIFT key on the keyboard and click the Restart option while still holding down the SHIFT key.

Windows 10 will perform the reboot. Next do the following:

Click the Troubleshoot icon, then Advanced options —> Startup Settings. Click Restart.
After the reboot click on Enter Safe Mode With Networking (Fifth Option).

Continue with Step 2.


To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading SpyHunter
a professional malware removal tool.

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Treasure Track Ads has infected ALL of your internet browsers and thus you need to remove it from all of them too. If even a single copy remains the virus could just bounce back and clone itself from that copy on next system reboot. Proceed by applying Step 2 and Step 3 for every internet browser on your machine

Treasure Track Ads might also create a message when you try to remove it. The text is randomized to make giving an example harder, but in essence it will try to make you log into a certain site for a reward or download an application for free. Do neither as this is just another trap by the virus.

ie9-10_512x512  For Internet Explorer Users:

Open IE, then click  IE GEAR —–> Manage Add-ons.

pic 3

Find Treasure Track Ads . Remove it by pressing Disable.

If your Home Page is different from the usual, click IE GEAR —–> Internet Options>edit the URL box with your preferred search engine, and click Apply.

Go to STEP 3.

firefox-512  For Mozilla Firefox Users:

Open Firefoxclick on mozilla menu (top right) ——-> Add-onsHit Extensions next.

Remove Treasure Track Ads From Firefox

Treasure Track Ads  should be somewhere around here –  Remove it.

Go to STEP 3.

chrome-logo-transparent-background For Google Chrome Users

 Start Chrome, click chrome menu icon —–>More Tools —–> Extensions. There,  find the virus and  select  chrome-trash-icon(Remove).

Remove Treasure Track Ads From Chrome

 Click chrome menu icon again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines.  Remove anything but the search engines you normally use.

Go to STEP 3.

safari For Safari Users:

Open Safari, and click Safari —–>Preferences —–> Extensions—–>Uninstall the malware.

Go to STEP 3.


Right click on the browser’s shortcut, then click Properties.

NOTE: We are showing Google Chrome, but the method is the same for all browsers.


Once you’ve reached Properties —–> Shortcut (on the band at the top), then in the Target type field, REMOVE EVERYTHING AFTER .exe.

Continue with STEP 4.


Hold the Windows Key and R together. Write appwiz.cpl in the new field, then click OK.


You are now in the Control Panel. Search around for Treasure Track Ads and anything else suspicious-looking. Uninstall it/them. Also, be extremely careful. Viruses often spend one last ditch effort to trick you into installing more of their kind. If you see a screen like this when you click Uninstallchoose NO:


Hold the Windows Key and R againbut this time copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A .txt file will open – don’t touch anything there. If you are hacked and someone has access to your PC, there will be a bunch of other IPs connected to you at the bottom. This is what a hosts file looks like:

hosts_opt (1)

If there are a bunch of strange IPs connecting to you below “Localhost” you may be hacked, and it’s best to ask us in the comments for directions.

Go to STEP 5.


Open the Task Manager by right clicking on the Taskbar and choosing Start Task Manager.


Once it opens, choose the Processes Tab. Look at all of the processes in front of you and try to determine which ones are a virus. Google them or ask us in the comments and we will provide the best assistance we can.


Now you will have to perform the final steps that ensure Treasure Track Ads will be permanently removed. Unfortunately these are a tad more difficult and also fairly dangerous if you aren’t careful. Doing anything wrong can damage your OS or other programs significantly. If you are not comfortable doing this we can recommend you a tried and tested professional Treasure Track Ads remover. It will get the job done and afterwards you can also use it to scan your computer for other hidden viruses. Some of the worst of this lot will remain invisible to the naked eye until it is too late to do anything and an automated scan is the only thing that can detect them.


Right click on each of the virus processes separately and select Open File Location. Also, End the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.

Move on to STEP 6.


Take a look at the following things:

Type msconfig in the search field and hit enter: you will be transported to a new window. 


Go in the Startup tab and Uncheck anything that has “Unknown” as Manufacturer.

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If you can’t find them this way, look in these directories, and delete the registries manually:

  • HKEY_CURRENT_USER—-Software—–Random numbers
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Remember to leave us a comment if you run into any trouble!

Did we help you? Please, consider helping us by spreading the word!

STEP 7 – Optimization

We’ve prepared a short and sweet optimization guide, specifically designed for users who just removed a virus. It is completely free, you do not need to download anything, and it’s not very time consuming. If you are interested – How To Remove Guide’s Optimization Tips.


    • Hi Frans,

      Simply delete them and then save the file. Please let me know if you have any problems while doing this, sometimes the virus can mess with file permissions.

Leave a Comment