URLsearchhook keeps comeing back

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by PhotoMan, Jan 18, 2005.

  1. PhotoMan

    PhotoMan Private E-2

    R3 - URLSearchHook: (no name) - {39C22773-0BA1-40CE-7564-8B263346345F} - C:\WINDOWS\system32\treed.exe

    I have corrected this line but keeps comeing back in a hijackthis scan with a different file name at the end. First it was dll240.exe, then titer.exe, and now treed.exe. I think it is causeing a pop up to direct me to an unwanted web page.

    Any help on how to correct it ??
     
  2. jarcher

    jarcher I can't handle a title

    have you already gone through this sticky if not please do so. . .
    READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal:
    if you have double check everything and make sure you did do everything
    and all software is up to date

    if proven unsucessful run through this before attaching a log
    NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting:
    Note that your HijackThis should be up-to-date (v1.99.9) and MUST be extracted to its own safe folder - C:\Program Files\HijackThis! Please do this!!!



    you may find other usefull READ ME's here
    http://forums.majorgeeks.com/forumdisplay.php?f=35
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds