Removal Guide

Threat Level:
Rate this Article:
Comments (0)
Article Views: 64984
Category: Browser Hijackers

Using powerful and reliable online search engines is very important these days, and cyber criminals are well aware that such browser extensions as could help them access computers all around the world. This well known plug-in may be marketed as the best browsing experience offering system that can produce the “optimal way to share, search, work and play”. This, of course, is just an attractive and deceptive exterior, which is meant to lure you into downloading the application and employing it as your main search engine. If you do not delete extension, your surfing habits could be recorded and sent to malignant third parties, something that could help schemers to target you with individual adware attacks.

Even though you could download the malignant plug-in yourself, directly from the official website, there are many other ways for it to be installed within the browser. It is very usual to acquire the program whilst downloading such bundled software as video codecs and media players or additional browser extensions and updates. Once this happens, it is possible that you will find your Internet connection running very slowly, because browser helper objects will take up the resources to gather personal information. These unlawfully implemented tools will help schemers to expose your IP address, bookmarks and favorite lists, search history and other information to allow them to disclose what type of advertisements could be applied to fool you into spending your money or executing additional downloads. What is more, this extension could change your home page, filter search results and present affiliate websites at the top of the result pages, cunningly directing you into opening them. removal may be a little trickier than it may appear at the first sight, because schemers will do whatever it takes to keep their malignant tool active. It is possible that you will not be able to find and delete the program from the Control Panel, or finalize its removal from managing browser extensions. Nonetheless, you need to find a quick and reliable way to delete from your browser, and automatic removal tools will assist you best. If you are experienced with manual removal and you do not want to protect your system with reliable protection applications, check the list of the files and registry keys you need to delete below. You can also follow the manual guides below. Removal Instructions

Delete from Windows XP:

  1. Navigate to the Task Bar and click Start.
  2. Select Control Panel and then move to Add or Remove Programs.
  3. Click the application you wish to get rid of and select Remove.

Delete from Windows Vista and Windows 7:

  1. Open the Start menu and click Control Panel.
  2. Move to Uninstall a program and locate the undesirable ones.
  3. Right-click and select Uninstall to remove the undesirable software.

Delete from Windows 8:

  1. Right-click on the Metro UI start screen and click All apps.
  2. Open the Control Panel and click Uninstall.
  3. Now right-click the application you wish to remove and click Uninstall.

Delete from Internet Explorer:

  1. Open the browser, simultaneously tap Alt+T and select Manage Add-ons.
  2. Go to Search Providers and Remove the undesirable option. Click Close.
  3. Simultaneously tap Alt+T once more and this time click Internet Options.
  4. Click the General tab, change/remove the Home Page and then click OK.

Delete from Google Chrome:

  1. Launch the browser, simultaneously tap Alt+F and select Settings.
  2. Under On Startup click Set pages and remove the undesirable URL, then click OK.
  3. Under Appearance click Change and remove the undesirable URL, then click OK as well.
  4. Under Search click Manage search engines and remove (click X) the undesirable option. Click Done.

Delete from Mozilla Firefox:

  1. Open Firefox, simultaneously tap Alt+T and select Options.
  2. Click the General tab (on left) and change/remove the Home Page. Click OK.
  3. Now click the search provider icon located on the left of the search box.
  4. Select Manage Search Engines and Remove the undesirable option. Click OK.
Download Remover for *
*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter. Screenshots: technical info for manual removal:

Files Modified/Created on the system:

# File Name File Size (Bytes) File Hash
4c20d3ckyizlym.exe57344 bytesMD5: 60e43189f9b258ae24cb983326bec416
6Saophase.exe22528 bytesMD5: afd855d5dd16ee86c8484bac0b0503d6
7srptm.exe13344 bytesMD5: 7132983a66846e51c5851bc3d5d2e191
8RonTouch.dll332800 bytesMD5: eb8f37ef4ec155bda033f3275c9d78fd
10BigTrax.dll509440 bytesMD5: de516d2ee97aa8db8538c6a966aa6514
11Smartbar.Installer.Mini.exe468992 bytesMD5: c6a0952365c43fe24775e1ce22f5fba0
12srpts.exe32288 bytesMD5: 45ae8b1012321bd23603dc5523147b29
130kplxain.dll136192 bytesMD5: 5c6ad1d4f3c393faa18cbc539414ca00
14crdlil64.dll77856 bytesMD5: 99a23b9bc51b5b3f7a27755d271306d4
15linmsl.exe21024 bytesMD5: 1dbf7cae9a729754be705cc6eff6ca21
17SafeFinder.exe28160 bytesMD5: 77cb5a088603be7a4c76e4247e75c0c0
19SnapDo.exe13824 bytesMD5: 50836d19673d80c46c02533d5618473b
21crdlil.dll67104 bytesMD5: 00dcbe6566e6b2325f4f3360ff718775
22Shopop.exe29720 bytesMD5: 15f064f41e36e1a102153160c28d8b0c
23%UserProfile%\Local Settings\Application Data\Smartbar
24snap desktop toolbar.lnk
25snapdo_dlcom_7292013.exe10690560 bytesMD5: 1601f63ceff3a6fd7b2c03b8c3673ecc
27Saophase.dll4778496 bytesMD5: 00b7256989c85ca6f1f278dfaecf2076
30AppthgilbuS.exe33792 bytesMD5: 5e95e930fa927b6e03521db81a01bfc6

Files in the following directories were modified:

  • %TEMP%
  • %UserProfile%\AppData\LocalLow
  • %UserProfile%\Local Settings\Application Data

Memory Processes Created:

# Process Name Process Filename Main module size
2c20d3ckyizlym.exec20d3ckyizlym.exe57344 bytes
3Saophase.exeSaophase.exe22528 bytes
4srptm.exesrptm.exe13344 bytes
5Smartbar.Installer.Mini.exeSmartbar.Installer.Mini.exe468992 bytes
6srpts.exesrpts.exe32288 bytes
7linmsl.exelinmsl.exe21024 bytes
8SafeFinder.exeSafeFinder.exe28160 bytes
10SnapDo.exeSnapDo.exe13824 bytes
12Shopop.exeShopop.exe29720 bytes
13snapdo_dlcom_7292013.exesnapdo_dlcom_7292013.exe10690560 bytes
16AppthgilbuS.exeAppthgilbuS.exe33792 bytes

Registry Modifications:

The following Registry Keys were created:

  • HKEY_USERS\.default\Software\Microsoft\Windows\CurrentVersion\Internet HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  • SoftwareMicrosoftInternet ExplorerSearchScopes{006ee092-9658-4fd6-bd8e-a21a348e59f5}


Your email address will not be published.


Enter the numbers in the box to the right *