Computer Hope
Software => Computer viruses and spyware => Virus and spyware removal => Topic started by: harry 48 on August 12, 2015, 02:39:05 PM
-
How do I get rid of snap.do.
I have tried add and remove and its no good, also ran Malwarebytes Anti-Malware and its clear.
# AdwCleaner v4.208 - Logfile created 12/08/2015 at 21:43:37
# Updated 09/07/2015 by Xplode
# Database : 2015-08-12.1 [Server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x64)
# Username : harry - HARRY-PC
# Running from : C:\Users\harry\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NX2AD70R\adwcleaner_4.208 (1).exe
# Option : Cleaning
***** [ Services ] *****
***** [ Files / Folders ] *****
***** [ Scheduled tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
***** [ Web browsers ] *****
-\\ Internet Explorer v11.0.9600.17937
*************************
AdwCleaner[R13].txt - [2087 bytes] - [21/05/2014 20:26:27]
AdwCleaner[R14].txt - [3602 bytes] - [28/10/2014 22:03:50]
AdwCleaner[R15].txt - [1285 bytes] - [13/11/2014 22:28:24]
AdwCleaner[R16].txt - [1500 bytes] - [04/12/2014 20:38:39]
AdwCleaner[R17].txt - [1516 bytes] - [12/03/2015 15:00:32]
AdwCleaner[R18].txt - [1813 bytes] - [26/06/2015 19:10:16]
AdwCleaner[R19].txt - [1530 bytes] - [02/08/2015 21:18:46]
AdwCleaner[R20].txt - [1624 bytes] - [04/08/2015 19:27:58]
AdwCleaner[R21].txt - [1748 bytes] - [04/08/2015 19:33:38]
AdwCleaner[R22].txt - [1808 bytes] - [12/08/2015 21:42:21]
AdwCleaner[S13].txt - [2165 bytes] - [21/05/2014 20:26:58]
AdwCleaner[S14].txt - [3709 bytes] - [28/10/2014 22:06:00]
AdwCleaner[S15].txt - [1236 bytes] - [13/11/2014 22:29:33]
AdwCleaner[S16].txt - [1568 bytes] - [04/12/2014 20:47:20]
AdwCleaner[S17].txt - [1547 bytes] - [12/03/2015 15:02:12]
AdwCleaner[S18].txt - [1890 bytes] - [26/06/2015 19:11:12]
AdwCleaner[S19].txt - [1597 bytes] - [02/08/2015 21:19:47]
AdwCleaner[S20].txt - [1689 bytes] - [04/08/2015 19:28:43]
AdwCleaner[S21].txt - [1732 bytes] - [12/08/2015 21:43:37]
########## EOF - C:\AdwCleaner\AdwCleaner[S21].txt - [1792 bytes] ##########
Results of screen317's Security Check version 1.006
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````[/u]
Windows Firewall Enabled!
avast! Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````[/u]
Ad-Aware
Java 7 Update 80
Java 8 Update 25
Java 8 Update 31
Java 8 Update 40
Java 8 Update 45
Java 8 Update 51
Adobe Reader XI
````````Process Check: objlist.exe by Laurent````````[/u]
Ad-Aware AAWService.exe is disabled!
Ad-Aware AAWTray.exe is disabled!
AVAST Software Avast AvastSvc.exe
AVAST Software Avast ng vbox\AvastVBoxSVC.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````[/u]
Total Fragmentation on Drive C: 3%
````````````````````End of Log``````````````````````[/u]
-
Hi Harry. Take a look here. (http://answers.microsoft.com/en-us/windows/forum/windows_7-performance/what-is-snapdo-and-how-do-i-get-rid-of-it/bf29e321-9563-44f4-b53c-488b239977df?auth=1)
-
Thanks Dave I hope your keeping well.
I ran Microsoft security scanner ( 1 1/2 hours ) and it found nothing, what happens now? if anything :)
-
Please download Junkware Removal Tool (http://thisisudax.org/downloads/JRT.exe) to your desktop.
•Warning! Once the scan is complete JRT will shut down your browser with NO warning.
•Shut down your protection software now to avoid potential conflicts.
•Temporarily disable your Antivirus and any Antispyware real time protection before performing a scan. Click this (http://www.bleepingcomputer.com/forums/topic114351.html) link to see a list of security programs that should be disabled and how to disable them.
•Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click JRT and select Run as Administrator
•The tool will open and start scanning your system.
•Please be patient as this can take a while to complete depending on your system's specifications.
•On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
-
Snap do is still in add and remove.
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.6 (08.10.2015:1)
OS: Windows 7 Ultimate x64
Ran by harry on 15/08/2015 at 19:49:09.84
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
Successfully deleted: [Task] C:\Windows\system32\tasks\0
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] C:\Program Files (x86)\lavasoft\web companion
Successfully deleted: [Folder] C:\ProgramData\lavasoft\web companion
Successfully deleted: [Folder] C:\Users\harry\AppData\Roaming\lavasoft\web companion
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15/08/2015 at 19:51:19.78
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
Snap do is still in add and remove.
What happens when you try to uninstall it?
-
Harry, visit this (http://www.lavasoft.com/mylavasoft/company/blog/how-to-remove-snapdo-browser-hijacker) scroll down and try the suggestions offered.
-
What happens when you try to uninstall it?
Nothing at all, add and remove just sits dead.
-
Ok, did you try that link I sent you?
-
In about ten minutes time
-
Went through the whole lot twice and its still in add and remove, everything else was clear and set.
In search providers why would I have Bing and Microsoft Bing.
In the reg: I have Mozilla firefox I don't use it so can I remove it with a few games I delete months ago.
-
If you can't find it in your Add/Remove programs list try searching for it on your hard drive and delete it. look for something called Resoft. Did you try looking for it in Task Manager?
-
Sorry for all the trouble but its seems a little devil to get rid of.
Its still in add and remove.
not in task manager.
searched all hard drive files its not there.
-
Did you check your browser to see if it's not an add-on?
-
Not an add-on.
[attachment deleted by admin to conserve space]
-
Standard Windows directory ‘Program Files’(where new applications are usually installed) doesn’t have a folder called ‘Snap.Do’, but another one called ‘LTD’ that doesn’t seem to be related to Snap.Do at a glimpse (in fact, this it belongs to Snap.Do). Main executable file of Snap.Do is located in a hidden path (C:\Users\USER_NAME\AppData\Local), in a folder called ‘Smartbar’.
Harry, did you look in ADD/Remove programs for any programs that were install just prior to this thing popping up?
Also try running MBAM again.
If you want to remove Snap.Do from your PC, please find below step-by-step instructions.
Note. This is a self-help guide. Use it at your own risk. This article is provided "as is" and to be used for information purposes.
1. Before you start, please make sure you are logged as a system administrator. Also, please save a copy of your important documents/files on an external hard drive.
2. Close all your browsers if any.
3. Open your Task Manager (right click on your task bar and choose ‘Task Manager’ from the context menu):
• In the ‘Processes’ tab, please find Lrcnta.exe and SnapDo.exe, right click on each one and choose ‘End Process’ from the context menu;
• In the ‘Services’ tab, please find LPTSystemUpdater and stop it using right-click menu.
4. From your desktop, click on Windows Start button and choose Control Panel option (Windows 8 users: right-click on ‘Windows Start’ icon (by default, it is located in the left bottom corner of your screen), and choose Control Panel from the context menu):
• Click ‘Programs and Features’ (Windows Vista, 7 and 8)/‘Add or Remove Programs’ (Windows XP),
• Find 2 entries: Snap.Do and Snap.Do Engine by ReSoft Ltd.,
• Right click on ‘Snap.Do’ and click on ‘Uninstall’ button,
• When a window below opens, click on a ‘CUSTOM’ button, and in the 2nd window check ‘Remove Snap.Do’ (making sure that 2 other boxes are UN-checked):
• in the next window, click on ‘Accept’, and then – ‘Continue’ (as we’ve closed the browsers in step 2):
• Wait a few moments for the program to finish uninstallation. Once done, please press F5 key on your keyboard (while being in ‘Programs and Features’ window making sure you don’t have Snap.Do and Snap.Do Engine here anymore.
5. Please make sure that hidden files in your Windows Explorer are visible: Start –> Control Panel (Appearance and Personalization) –> Folder Options –> ‘View’ tab –> find ‘Hidden files and folders’ and check a box ‘Show hidden files, folders, and drives’.
6. Follow this path - C:\Users\YOUR_USER_NAME\AppData\Local\Temp (XP users: C:\Documents and Settings\YOUR_USER_NAME\Local Settings\Temp) -> highlight all the files/folders here -> press ‘Shift’+’Delete’ and click ‘Yes’ to completely clean this folder (Note. If you receive messages that some files cannot be removed, just skip the file in question).
7. Please find the directories below and make sure that Snap.Do folders are removed:
C:\Program Files (x86)\LPT
C:\Users\YOUR_USER_NAME\AppData\Local\Smartbar
8. Now please make sure that your browser is clean:
-
More to come after these are the processes
[attachment deleted by admin to conserve space]
-
These are the services
[attachment deleted by admin to conserve space]
-
These are add and remove
[attachment deleted by admin to conserve space]
-
MBAM Clear after deleting this
[attachment deleted by admin to conserve space]
-
Nothing found so its not done.
• In the ‘Processes’ tab, please find Lrcnta.exe and SnapDo.exe, right click on each one and choose ‘End Process’ from the context menu;
• In the ‘Services’ tab, please find LPTSystemUpdater and stop it using right-click menu.
4. From your desktop, click on Windows Start button and choose Control Panel option (Windows 8 users: right-click on ‘Windows Start’ icon (by default, it is located in the left bottom corner of your screen), and choose Control Panel from the context menu):
• Click ‘Programs and Features’ (Windows Vista, 7 and 8)/‘Add or Remove Programs’ (Windows XP),
• Find 2 entries: Snap.Do and Snap.Do Engine by ReSoft Ltd.,
• Right click on ‘Snap.Do’ and click on ‘Uninstall’ button,
• When a window below opens, click on a ‘CUSTOM’ button, and in the 2nd window check ‘Remove Snap.Do’ (making sure that 2 other boxes are UN-checked):
• in the next window, click on ‘Accept’, and then – ‘Continue’ (as we’ve closed the browsers in step 2):
How do I do these and where
6. Follow this path - C:\Users\YOUR_USER_NAME\AppData\Local\Temp (XP users: C:\Documents and Settings\YOUR_USER_NAME\Local Settings\Temp) -> highlight all the files/folders here -> press ‘Shift’+’Delete’ and click ‘Yes’ to completely clean this folder (Note. If you receive messages that some files cannot be removed, just skip the file in question).
7. Please find the directories below and make sure that Snap.Do folders are removed:
C:\Program Files (x86)\LPT
C:\Users\YOUR_USER_NAME\AppData\Local\Smartbar
-
You can uninstall all those Java except 8-51. You can't uninstall either of those Snap.do? Are you logged in as Adm?
Do a search for this: C:\Users\YOUR_USER_NAME\AppData\Local\Temp (XP users: C:\Documents and Settings\YOUR_USER_NAME\Local Settings\Temp)
-
You can uninstall all those Java except 8-51. You can't uninstall either of those Snap.do? Are you logged in as Adm?
Do a search for this: C:\Users\YOUR_USER_NAME\AppData\Local\Temp (XP users: C:\Documents and Settings\YOUR_USER_NAME\Local Settings\Temp)
Java cleared
I'm always logged as admin
Cannot uninstall snap do in A&R
Searched but nothing found
-
And you can't find anything in your hard drive such as Program Files? MBAM is supposed to remove this pest.
-
Nothing in files, I have tried as I know best to go through the PC.
I have tried MBAM a few times, no luck.
I guess its here to stay :(
-
I'll do some more checking and will get back to you.