Malware Removal Instructions

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Friday, 25 January 2013

Remove Snap.do

Posted on 09:35 by Unknown
A concerned reader asks: 'Snap.do has hijacked my web browser. Is it safe? How do I get rid of it?' Here's what you need to know about this so-called Snap.do hijacker malware.

Snap.do is a browser help object. Authors of this web browser plug-in say that they want to enhance your web browser and simplify the way you search the web, share favorite information, work or even play. Sounds good, right? It seems that they really care and want to help you. But hold your horses, Jack! :) Things are often not what they seem to be and that's particularly true for snap.do web browser hijacker. It comes with a cost and the main question is: are you willing to pay the price?



First of all, snap.do and some other Resoft products are considered to be potentially harmful or even malicious, not to mention how annoying they can be. For example, TrendMicro, an antivirus company, classifies snap.do toolbar as spyware and web browser hijacker and they have a good reason for that. According to Resoft privacy policy, their products, including snap.do collect the following information:
1. The Internet domain and IP address from which you access the Resoft Products;
2. Screen resolution of your monitor;
3. The date and time you access the Resoft Products;
4. The page you are visiting with the Resoft Products
5. If you linked to a Resoft website from another referring website, the address of that website.
By using the Resoft Products, you are consenting to have your personal data transferred to and processed both within and without the United States of America
Typically, snap.do installs itself as a web browser toolbar (BHO) but it may be installed with additional functionalities as well. This browser helper object can be downloaded from its official website and may also arrive bundled with other software, usually freeware. We haven't seen any questionable routines or drive-by downloads that might be related to malicious software and snap.do. What's interesting, though, installers downloaded from free video streaming sites and other shady or rogue websites are very aggressive and even if users made sure that the check boxes asking to install add-ons were disabled, snap.do virus was still installed on their computers.

Snap.do works on all major web browsers: Google Chrome, Mozilla Firefox and Internet Explorer. It doesn't work on Windows XP. Installer simply fails to initialize properly. So, XP users are safe. Once installed, Snap.do hijacker modified various web browsers' settings. It changes home page to http://feed.helperbar.com and adds additional search engine provider which redirects users to http://search.snap.do. Each time user opens a new tab the web browser goes to http://search.snap.do instead of blank page, Google or any other website of your choice.

Snap.do removal can be a really challenging task, especially when it comes bundled with other software. Even though, snap.do authors ensure that it can be uninstall from a computer very easily, using the program's own normal uninstallation process, but that's not quite true. It leaves so many modified web browser settings and Windows registry keys and you can't ignore them because they simply change the way you use your web browser. For example, even if you removed Snap.do via Control Panel, modified search engine settings remain untouched. As a result, searching directly from web browser address bar returns results from http://search.snap.do rather than Google. By the way, the plug-in modifies Windows registry and enables its automatic execution at every system start-up. What is more, snap.do infection may cause your web browser to stop working.

To remove snap.do from your computer, please follow the removal instructions below. It will show you how to remove this browser hijacker in Mozilla Firefox, Google Chrome and Internet Explorer. Make sure to uninstall snap.do via Control Panel first and only then proceed to the next steps, unless of course it's not listed there. Have you been hijacked by Snap.do? Post your comment or question below. Good luck and be save online!


Snap.do removal instructions:

1. First of all, download recommended anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this browser hijacker. Hopefully you won't have to do that.





2. Go to the Start Menu. Select Control Panel → Uninstall a Program.





3. Search for Snap.do in the list. Select the program and click Uninstall button to uninstall it.



It will prompt you to close all web browsers before uninstalling Snap.do. Please click Yes to continue.

Then, it will ask you if you want to change your home page and default search provider to the old settings. Please click Yes.


Remove Snap.do in Google Chrome:

1. Click on Customize and control Google Chrome icon. Go to Tools → Settings.



2. Click Set pages under the On startup.


Remove feed.snap.do by clicking the "X" mark as shown in the image below.



3. Click Show Home button under Appearance. Then click Change.



Enter http://www.google.com instead of feed.snap.do and click OK to save changes.



4. Click Manager search engines button under Search.



Select Google or any other search engine you like from the list and make it your default search engine provider.



Select Web (search.snap.do) from the list and remove it by clicking the "X" mark as shown in the image below.



That's it!


Remove Snap.do in Mozilla Firefox:

1. Open Mozilla Firefox. Go to Tools → Add-ons.



2. Select Extensions. Remove Snap.do extension. Close the window.



3. Click on the Snap.do search icon as shown in the image below and select Manage Search Engines....



4. Choose Web Search (Snap.do) from the list and click Remove to remove it. Click OK to save changes.



5. Go to Tools → Options. Under the General tab reset the startup homepage or change it to google.com, etc.



6. In the URL address bar, type about:config and hit Enter.



Click I'll be careful, I promise! to continue.



In the filter at the top, type: snap.do



Now, you should see all the preferences that were changed by Snap.do extension. Right-click on the preference and select Reset to restore default value. Reset all found preferences!



That's it!


Remove Snap.do in Internet Explorer:

1. Open Internet Explorer. Go to Tools → Manage Add-ons.



2. Select Search Providers. First of all, choose Bing or Live Search search engine and make it your default web search provider (Set as default).



3. Select Web Search (search.snap.do) and click Remove to remove it. Close the window.



4. Go to Tools → Internet Options. Select General tab and click Use default button or enter your own website, e.g. google.com instead of http://feed.snap.do. Click OK to save the changes. And that's about it for Internet Explorer.



If you did everything correctly, the Snap.do search hijacker should be completely uninstalled from your computer. However, if it still shows up, you will have to modify or remove certain Windows registry keys. They are listed below.

First, you have to open Windows Registry Editor. Simply search for regedit and run it as administrator.

Once there, navigate to, and delete the following Windows registry keys:
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main → delete "Search Bar"
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search → delete "Default_Search_URL"
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search → delete "SearchAssistant"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchUrl → delete "Default"
Then, navigate to, and modify the following Windows registry keys:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main

Right-click the "Search Page" key and select Modify. Change key value data to: http://go.microsoft.com/fwlink/?LinkId=54896

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}

Right-click the "URL" key and select Modify. Change key value data to:
http://www.bing.com/search?q={searchTerms}

Share this information:
Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest
Posted in Browser Hijackers | No comments
Newer Post Older Post Home

0 comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Popular Posts

  • Remove ShopperReports (Uninstall Guide)
    ShopperReports is defined as adware or a potentially unwanted program that displays marketing related results in a side pane of the browser...
  • Trojan.MBRlock, Внимание! Ваш компьютер заблокирован
    Trojan.MBRlock is a very disturbing piece of malicious code which infects the master boot record (MBR) and prevents Windows from starting. ...
  • Remove RiskTool.Win32.BitCoinMiner (Uninstall Guide)
    RiskTool.Win32.BitCoinMiner is a risk tool or potentially unwanted application that may use your computer's resources to generate bitco...
  • What is wrtc.exe and how to remove it?
    wrtc.exe - by Perion Network Ltd. What is wrtc.exe? wrtc.exe is a part of IncrediMail software, digitally signed by Perion Network Ltd. This...
  • Remove Rattlingsearchsystem.com (Uninstall Guide)
    Rattlingsearchsystem.com is a ZeroAccess/Sirefef rootkit-related browser hijacker that redirects users to shady websites while searching on...
  • False Positive: Ikarus and Comodo detecting TDSSKiller as a Trojan horse
    This awkward moment when you realize that your favorite rootkit removal utility is detected as malware. I probably wouldn't even have no...
  • Remove TR/ATRAPS.Gen2, removal instructions
    Cyber crooks and third parties that buy stolen data are increasingly using more and more sophisticated techniques, in a variety of different...
  • Remove Ask Search and Ask Toolbar (Uninstall Guide)
    Ask Search and Ask Toolbar are very often incorrectly classified as virus/spyware that may cause search redirects. The majority of us pref...
  • Remove Windows Attention Utility (Uninstall Guide)
    Windows Attention Utility is a rogue security application that generates misleading warnings about nonexistent viruses and attempts to lure...
  • Remove "System Check" (Uninstall Guide)
    System Check is malicious software posing as Windows system utility. Although, it may look like a real thing, it isn't! You are actuall...

Categories

  • Adware
  • Answers
  • Antivirus software
  • Browser Hijackers
  • Cloud Computing
  • Fake Alerts
  • Giveaways
  • Hoax
  • How-To
  • IaaS
  • Internet
  • Malicious websites
  • Malware
  • PaaS
  • Parental Controls
  • Passwords
  • Phishing
  • Process Information
  • Ransomware
  • Rogue programs
  • Rootkits
  • SaaS
  • Security Advisories
  • Spam
  • Spyware
  • Trojans
  • Viruses
  • Web Browsers
  • Worms

Blog Archive

  • ▼  2013 (173)
    • ►  December (6)
    • ►  November (13)
    • ►  October (11)
    • ►  September (20)
    • ►  August (4)
    • ►  July (17)
    • ►  June (31)
    • ►  May (25)
    • ►  April (15)
    • ►  March (17)
    • ►  February (7)
    • ▼  January (7)
      • Remove the "Ads not by this site" Browser Hijacker
      • Remove Smart Security (Uninstall Guide)
      • Remove Snap.do
      • How to Remove Security Defender (Uninstall Guide)
      • Livesearchnow redirect virus - removal guide
      • Text Enhance Removal Guide
      • Remove CouponDropDown Pop-ups (Uninstall Guide)
  • ►  2012 (86)
    • ►  November (2)
    • ►  October (4)
    • ►  September (6)
    • ►  August (6)
    • ►  July (11)
    • ►  June (1)
    • ►  May (5)
    • ►  April (7)
    • ►  March (7)
    • ►  February (17)
    • ►  January (20)
  • ►  2011 (239)
    • ►  December (8)
    • ►  November (18)
    • ►  October (21)
    • ►  September (24)
    • ►  August (28)
    • ►  July (32)
    • ►  June (16)
    • ►  May (23)
    • ►  April (15)
    • ►  March (16)
    • ►  February (9)
    • ►  January (29)
  • ►  2010 (2)
    • ►  December (2)
Powered by Blogger.

About Me

Unknown
View my complete profile