Snap.do Removal Guide

Threat Level:
9/10
Rate this Article:
Comments (0)
Article Views: 78462
Category: Browser Hijackers

Using powerful and reliable online search engines is very important these days, and cyber criminals are well aware that such browser extensions as Snap.do could help them access computers all around the world. This well known plug-in may be marketed as the best browsing experience offering system that can produce the “optimal way to share, search, work and play”. This, of course, is just an attractive and deceptive exterior, which is meant to lure you into downloading the application and employing it as your main search engine. If you do not delete Snap.do extension, your surfing habits could be recorded and sent to malignant third parties, something that could help schemers to target you with individual adware attacks.

Even though you could download the malignant plug-in yourself, directly from the official Snap.do website, there are many other ways for it to be installed within the browser. It is very usual to acquire the program whilst downloading such bundled software as video codecs and media players or additional browser extensions and updates. Once this happens, it is possible that you will find your Internet connection running very slowly, because browser helper objects will take up the resources to gather personal information. These unlawfully implemented tools will help schemers to expose your IP address, bookmarks and favorite lists, search history and other information to allow them to disclose what type of advertisements could be applied to fool you into spending your money or executing additional downloads. What is more, this extension could change your home page, filter search results and present affiliate websites at the top of the result pages, cunningly directing you into opening them.

Snap.do removal may be a little trickier than it may appear at the first sight, because schemers will do whatever it takes to keep their malignant tool active. It is possible that you will not be able to find and delete the program from the Control Panel, or finalize its removal from managing browser extensions. Nonetheless, you need to find a quick and reliable way to delete Snap.do from your browser, and automatic removal tools will assist you best. If you are experienced with manual removal and you do not want to protect your system with reliable protection applications, check the list of the files and registry keys you need to delete below. You can also follow the manual guides below.

Snap.do Removal Instructions

Delete from Windows XP:

  1. Navigate to the Task Bar and click Start.
  2. Select Control Panel and then move to Add or Remove Programs.
  3. Click the application you wish to get rid of and select Remove.

Delete from Windows Vista and Windows 7:

  1. Open the Start menu and click Control Panel.
  2. Move to Uninstall a program and locate the undesirable ones.
  3. Right-click and select Uninstall to remove the undesirable software.

Delete from Windows 8:

  1. Right-click on the Metro UI start screen and click All apps.
  2. Open the Control Panel and click Uninstall.
  3. Now right-click the application you wish to remove and click Uninstall.

Delete from Internet Explorer:

  1. Open the browser, simultaneously tap Alt+T and select Manage Add-ons.
  2. Go to Search Providers and Remove the undesirable option. Click Close.
  3. Simultaneously tap Alt+T once more and this time click Internet Options.
  4. Click the General tab, change/remove the Home Page and then click OK.

Delete from Google Chrome:

  1. Launch the browser, simultaneously tap Alt+F and select Settings.
  2. Under On Startup click Set pages and remove the undesirable URL, then click OK.
  3. Under Appearance click Change and remove the undesirable URL, then click OK as well.
  4. Under Search click Manage search engines and remove (click X) the undesirable option. Click Done.

Delete from Mozilla Firefox:

  1. Open Firefox, simultaneously tap Alt+T and select Options.
  2. Click the General tab (on left) and change/remove the Home Page. Click OK.
  3. Now click the search provider icon located on the left of the search box.
  4. Select Manage Search Engines and Remove the undesirable option. Click OK.
Download Remover for Snap.do *
*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter.

Snap.do Screenshots:

Snap.do

Snap.do technical info for manual removal:

Files Modified/Created on the system:

# File Name File Size (Bytes) File Hash
1AppxedtatS.exe400896 bytesMD5: 402ebaea21791ea8d4b92a30b239978d
2spdrmn.dll138752 bytesMD5: 88bebb8d76f9af370b6eb26b9d94d84d
3uninstall.exe539136 bytesMD5: 3eeb6552436c2189fd19322179fee1ad
4AppgnielbuoD.exe400896 bytesMD5: b5284765a908b8ec8916728f906f5d49
5afoir.exe529408 bytesMD5: 4c6c26b926eafde34f7c1abe89f1cc71
6Vaiafineco.exe968070 bytesMD5: 6d8091a7dff2782026cb009a4a3a21aa
7BrowserHelper.exe23320 bytesMD5: b68ba13c92e70b8215e8fd26c82dea23
8srpts.exe32288 bytesMD5: 45ae8b1012321bd23603dc5523147b29
9linker.exe700928 bytesMD5: 2807d714e44f5f41933c42f4845c8d7a
10awna.exe400896 bytesMD5: b78bfb23a0fc01e216c40d63687da071
11AppMedlightppA.exe400896 bytesMD5: e9fccefe06f4911d762a6acc4b773b01
12UniCryptC.exe400896 bytesMD5: 7ad471817d962de0dfb6b43d167f925e
13%UserProfile%\Local Settings\Application Data\Smartbar
14snapdo_dlcom_7292013.exe10690560 bytesMD5: 1601f63ceff3a6fd7b2c03b8c3673ecc
15PackerV2.exe5080576 bytesMD5: ed7839572d12a41a4405c7932f280f6b
16Fin-Dox.dll257536 bytesMD5: 120a953bd952ad2b22f29f44ec3be90c
17AppmatdloH.exe692736 bytesMD5: d0f9b6fec63f8cb1ddeaa0cac2512aa5
18LinkuryInstaller.msi7569408 bytesMD5: 4f0a236f84095ce49487c27064a9e7ff
19idna.exe692736 bytesMD5: 543de71ba6de1353cd397c89a0951663
20Affenpinscher.exe400896 bytesMD5: 670c70c1e9fd14fc57941d9a43d60b43
21imgianttoolbar01.exe
22RonTouch.dll332800 bytesMD5: eb8f37ef4ec155bda033f3275c9d78fd
23SnapDo.exe13824 bytesMD5: 50836d19673d80c46c02533d5618473b
24crambo.exe2927912 bytesMD5: 7ce53c9cc3d30ab0df7d0e0849c9a7bf
25snaper[1].exe
26DCHP.exe400384 bytesMD5: 2a63f81cb49b2b90584ee90152be6337
27Hotfresh.exe692736 bytesMD5: bad3323eee5e6b00d16abdacb5d14250
28snap desktop toolbar.lnk
29AppecivreSpA.exe692736 bytesMD5: 093d6a3ea59a9ffa4a15333aa5ccad0a
30snapbar.dll
31%Windir%/System32/[RANDOM].exe
32Packer.exe12099864 bytesMD5: 2e28e43aaf3807d9199af24391e09892
33snapinstaller.exe
34btmn.dll120320 bytesMD5: f57d5f35c459e318e42e930096af37fb
35SafeFinder.exe25552 bytesMD5: f955adcf13c05eb0352f56f0ef6d0e87
36AppdnifmiN.exe400896 bytesMD5: 24a74f120eccbec5942ce9c627c31db4
37Plusdax.exe981504 bytesMD5: 257307e67723a3b4532a858e83862986
38iretadpUMGR.exe692736 bytesMD5: 8e2e634dbe9e2b63ce7a14d177c6efac
39AppthgilbuS.exe33792 bytesMD5: 5e95e930fa927b6e03521db81a01bfc6
40%LOCALAPPDATA%\Smartbar
41%UserProfile%\AppData\LocalLow\Smartbar
42QuickShare.exe20248 bytesMD5: 28ddd5ffd7e92f6d70ebb722fe21b627
43c20d3ckyizlym.exe57344 bytesMD5: 60e43189f9b258ae24cb983326bec416
44Ronzap.exe692736 bytesMD5: a102ed97b52ade8520dbefad39a9b6d8
45%PROGRAM_FILES%\[RANDOM]
46Sailflex.dll320512 bytesMD5: 3b2a8f20efe0b492edfc7c84ed2d75af
47%TEMP%\Smartbar
48AppgnirtspmaT.exe400896 bytesMD5: a674955ee5b9cf795d74aec1a3bdea46
49Smartbar.Installer.Mini.exe468992 bytesMD5: c6a0952365c43fe24775e1ce22f5fba0
50sulpnar.exe529408 bytesMD5: 11058618f590d31d3bc03fc86078c8cb
51Toolbar136.exe
52Doubleing.exe999936 bytesMD5: 7a9b1a9da97ea4ab537184bf17599130
53BingProtect.exe28680 bytesMD5: 51156e54b88e80ae60e5212b4ed8016c
54serfev.exe528384 bytesMD5: bfc00dc02b1c816670cfdf230f7491e5
55Stpro.exe30224 bytesMD5: 57d620b04e90ddc1685ee761063037c9
56Shopop.exe28168 bytesMD5: 293952930597e708739a3dc79788e8e4
57Zimtouch.dll363520 bytesMD5: d86b52be38d741234a0c9f366cecc6fc
58CloudPrinter.exe674816 bytesMD5: 04d40998fd35d7d9f49fec8df15e8dc3
590kplxain.dll136192 bytesMD5: 5c6ad1d4f3c393faa18cbc539414ca00
60Nettrans.exe68096 bytesMD5: 322a52e76f58fa888c5140e260404f1b
61Snoop.exe27136 bytesMD5: 85ba333b68afe3c18bf47433e3ba75c0
62crdlil64.dll77856 bytesMD5: 8356002a0a0554d7ff79db1a71dcb9d0
63Smartbar.exe19272 bytesMD5: e50598405354af224b286c0966dedd94
64Bamcof.exe826368 bytesMD5: 11d7893c5ca4ee2e2178cb45f6e1ee47
65Saophase.dll4778496 bytesMD5: 00b7256989c85ca6f1f278dfaecf2076
66Faseranfan.dll738816 bytesMD5: 7c39361e2c781101da5a21dc27f27fd2
67Viazap.exe1634816 bytesMD5: 27561eb96c1fe3b86e19b6a8e4877e4d
68BigTrax.dll509440 bytesMD5: de516d2ee97aa8db8538c6a966aa6514
69Quoteex.exe692736 bytesMD5: 016384a52fa6d1ff5c7b6a3e8ac7df2d
70Medotity.exe692736 bytesMD5: a761ce1d6bc4eec1c527324584e9ddd8
71ocep.exe400896 bytesMD5: 2cf641c23d296a503827f6d409e0435d
72smartbar_3312014.exe12443928 bytesMD5: 14dc7bab1c0127e3e671414057af4946
73Utatity.exe692736 bytesMD5: 711203f1378abf0a39822f473287c8d8
74srptm.exe13344 bytesMD5: 7132983a66846e51c5851bc3d5d2e191
75desktoptoolbarhelper.16.1159819979.dll
76Voyasollam.exe1120768 bytesMD5: 3b801136f818f1b78bae2067ae03e82e
77AppxeetouQ.exe692736 bytesMD5: 875908c7e43bcdde454b91cf95e04fbf
78hser.exe400896 bytesMD5: 14f8983c9b2e43d8ace8b4fefdaa61a3
7929ddarny2n5y5.exe57856 bytesMD5: b700d8a229919a13f2dcf3d6115b7916
80xena.exe692736 bytesMD5: 29c2403d870c936bc1a2c272e7479608
81yakdo.exe529408 bytesMD5: 1344930be5e9a447e6440c37fc1d3aab
82Saophase.exe22528 bytesMD5: afd855d5dd16ee86c8484bac0b0503d6
83AppnormanetouQ.exe692736 bytesMD5: 231e963a0edcd331bb00006dfc4ff9aa
84Updater.exe28160 bytesMD5: 993074b30eddf22dacd78d1f6d569b23
85snaper.exe
86Lrcnta.exe22560 bytesMD5: c5070f8b5ebe25b1134801af7b4950ae
87lhgu.exe529408 bytesMD5: 843ff9ec85f2dc3cc22cc40a5a481e82
88Muvic.exe21536 bytesMD5: 35ac6abec54c6a92f1061c0a1a302de2
89uninstall.ico1150 bytesMD5: f0629844b82419eb727a3858f31dc85a
90FRGSmartbar.exe29712 bytesMD5: b0249497a625ced38543ca0359d9372d
91xifs.exe692736 bytesMD5: 7c86b6ad69d8138541cb257f9128df7a
92set.exe2088448 bytesMD5: 763a5fbd66900154a9ac312509556451
93crdlil.dll67096 bytesMD5: 35efba7305b90604ec26e69bcc9342ed
94ApppazmaL.exe400896 bytesMD5: 6111aa5362be5937b109198faf73a0c5
95linmsl.exe21024 bytesMD5: 1dbf7cae9a729754be705cc6eff6ca21
96ApppazthgiL.exe400896 bytesMD5: bc10b2e9cb616b0d7f5765d418131f6f
97Bio-Phase.dll320000 bytesMD5: 3a6e13ecc0d92245d0192871ca2f75b9
98ApppaznoR.exe529408 bytesMD5: 4fdb396e7fef9ea637647c10e6f735bf
99ShowPass.exe27432 bytesMD5: 9daab41af68391ef7b7caf9fabbb18ec

Files in the following directories were modified:

  • %UserProfile%\Local Settings\Application Data
  • %LOCALAPPDATA%
  • %UserProfile%\AppData\LocalLow
  • %PROGRAM_FILES%
  • %TEMP%

Memory Processes Created:

# Process Name Process Filename Main module size
1AppxedtatS.exeAppxedtatS.exe400896 bytes
2uninstall.exeuninstall.exe539136 bytes
3AppgnielbuoD.exeAppgnielbuoD.exe400896 bytes
4afoir.exeafoir.exe529408 bytes
5Vaiafineco.exeVaiafineco.exe968070 bytes
6BrowserHelper.exeBrowserHelper.exe23320 bytes
7srpts.exesrpts.exe32288 bytes
8linker.exelinker.exe700928 bytes
9awna.exeawna.exe400896 bytes
10AppMedlightppA.exeAppMedlightppA.exe400896 bytes
11UniCryptC.exeUniCryptC.exe400896 bytes
12snapdo_dlcom_7292013.exesnapdo_dlcom_7292013.exe10690560 bytes
13PackerV2.exePackerV2.exe5080576 bytes
14AppmatdloH.exeAppmatdloH.exe692736 bytes
15idna.exeidna.exe692736 bytes
16Affenpinscher.exeAffenpinscher.exe400896 bytes
17imgianttoolbar01.exeimgianttoolbar01.exe
18SnapDo.exeSnapDo.exe13824 bytes
19crambo.execrambo.exe2927912 bytes
20snaper[1].exesnaper[1].exe
21DCHP.exeDCHP.exe400384 bytes
22Hotfresh.exeHotfresh.exe692736 bytes
23AppecivreSpA.exeAppecivreSpA.exe692736 bytes
24[RANDOM].exe[RANDOM].exe
25Packer.exePacker.exe12099864 bytes
26snapinstaller.exesnapinstaller.exe
27SafeFinder.exeSafeFinder.exe25552 bytes
28AppdnifmiN.exeAppdnifmiN.exe400896 bytes
29Plusdax.exePlusdax.exe981504 bytes
30iretadpUMGR.exeiretadpUMGR.exe692736 bytes
31AppthgilbuS.exeAppthgilbuS.exe33792 bytes
32QuickShare.exeQuickShare.exe20248 bytes
33c20d3ckyizlym.exec20d3ckyizlym.exe57344 bytes
34Ronzap.exeRonzap.exe692736 bytes
35AppgnirtspmaT.exeAppgnirtspmaT.exe400896 bytes
36Smartbar.Installer.Mini.exeSmartbar.Installer.Mini.exe468992 bytes
37sulpnar.exesulpnar.exe529408 bytes
38Toolbar136.exeToolbar136.exe
39Doubleing.exeDoubleing.exe999936 bytes
40BingProtect.exeBingProtect.exe28680 bytes
41serfev.exeserfev.exe528384 bytes
42Stpro.exeStpro.exe30224 bytes
43Shopop.exeShopop.exe28168 bytes
44CloudPrinter.exeCloudPrinter.exe674816 bytes
45Nettrans.exeNettrans.exe68096 bytes
46Snoop.exeSnoop.exe27136 bytes
47Smartbar.exeSmartbar.exe19272 bytes
48Bamcof.exeBamcof.exe826368 bytes
49Viazap.exeViazap.exe1634816 bytes
50Quoteex.exeQuoteex.exe692736 bytes
51Medotity.exeMedotity.exe692736 bytes
52ocep.exeocep.exe400896 bytes
53smartbar_3312014.exesmartbar_3312014.exe12443928 bytes
54Utatity.exeUtatity.exe692736 bytes
55srptm.exesrptm.exe13344 bytes
56Voyasollam.exeVoyasollam.exe1120768 bytes
57AppxeetouQ.exeAppxeetouQ.exe692736 bytes
58hser.exehser.exe400896 bytes
5929ddarny2n5y5.exe29ddarny2n5y5.exe57856 bytes
60xena.exexena.exe692736 bytes
61yakdo.exeyakdo.exe529408 bytes
62Saophase.exeSaophase.exe22528 bytes
63AppnormanetouQ.exeAppnormanetouQ.exe692736 bytes
64Updater.exeUpdater.exe28160 bytes
65snaper.exesnaper.exe
66Lrcnta.exeLrcnta.exe22560 bytes
67lhgu.exelhgu.exe529408 bytes
68Muvic.exeMuvic.exe21536 bytes
69FRGSmartbar.exeFRGSmartbar.exe29712 bytes
70xifs.exexifs.exe692736 bytes
71set.exeset.exe2088448 bytes
72ApppazmaL.exeApppazmaL.exe400896 bytes
73linmsl.exelinmsl.exe21024 bytes
74ApppazthgiL.exeApppazthgiL.exe400896 bytes
75ApppaznoR.exeApppaznoR.exe529408 bytes
76ShowPass.exeShowPass.exe27432 bytes

Registry Modifications:

The following Registry Keys were created:

  • HKEY_LOCAL_MACHINE\Software\ Snap.do
  • SoftwareMicrosoftInternet ExplorerSearchScopes{006ee092-9658-4fd6-bd8e-a21a348e59f5}
  • HKEY_USERS\.default\Software\Microsoft\Windows\CurrentVersion\Internet HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Reply

Your email address will not be published.

Name
Website
Comment

Enter the numbers in the box to the right *