Your computer is infected with malicious software? Do you have popups on your PC?
If so, search this blog for removal instructions or find computer threats by category.

Friday, January 25, 2013

Remove Snap.do

Tell your friends:
A concerned reader asks: 'Snap.do has hijacked my web browser. Is it safe? How do I get rid of it?' Here's what you need to know about this so-called Snap.do hijacker malware.

Snap.do is a browser help object. Authors of this web browser plug-in say that they want to enhance your web browser and simplify the way you search the web, share favorite information, work or even play. Sounds good, right? It seems that they really care and want to help you. But hold your horses, Jack! :) Things are often not what they seem to be and that's particularly true for snap.do web browser hijacker. It comes with a cost and the main question is: are you willing to pay the price?



First of all, snap.do and some other Resoft products are considered to be potentially harmful or even malicious, not to mention how annoying they can be. For example, TrendMicro, an antivirus company, classifies snap.do toolbar as spyware and web browser hijacker and they have a good reason for that. According to Resoft privacy policy, their products, including snap.do collect the following information:
1. The Internet domain and IP address from which you access the Resoft Products;
2. Screen resolution of your monitor;
3. The date and time you access the Resoft Products;
4. The page you are visiting with the Resoft Products
5. If you linked to a Resoft website from another referring website, the address of that website.
By using the Resoft Products, you are consenting to have your personal data transferred to and processed both within and without the United States of America
Typically, snap.do installs itself as a web browser toolbar (BHO) but it may be installed with additional functionalities as well. This browser helper object can be downloaded from its official website and may also arrive bundled with other software, usually freeware. We haven't seen any questionable routines or drive-by downloads that might be related to malicious software and snap.do. What's interesting, though, installers downloaded from free video streaming sites and other shady or rogue websites are very aggressive and even if users made sure that the check boxes asking to install add-ons were disabled, snap.do virus was still installed on their computers.

Snap.do works on all major web browsers: Google Chrome, Mozilla Firefox and Internet Explorer. It doesn't work on Windows XP. Installer simply fails to initialize properly. So, XP users are safe. Once installed, Snap.do hijacker modified various web browsers' settings. It changes home page to http://feed.helperbar.com and adds additional search engine provider which redirects users to http://search.snap.do. Each time user opens a new tab the web browser goes to http://search.snap.do instead of blank page, Google or any other website of your choice.

Snap.do removal can be a really challenging task, especially when it comes bundled with other software. Even though, snap.do authors ensure that it can be uninstall from a computer very easily, using the program's own normal uninstallation process, but that's not quite true. It leaves so many modified web browser settings and Windows registry keys and you can't ignore them because they simply change the way you use your web browser. For example, even if you removed Snap.do via Control Panel, modified search engine settings remain untouched. As a result, searching directly from web browser address bar returns results from http://search.snap.do rather than Google. By the way, the plug-in modifies Windows registry and enables its automatic execution at every system start-up. What is more, snap.do infection may cause your web browser to stop working.

To remove snap.do from your computer, please follow the removal instructions below. It will show you how to remove this browser hijacker in Mozilla Firefox, Google Chrome and Internet Explorer. Make sure to uninstall snap.do via Control Panel first and only then proceed to the next steps, unless of course it's not listed there. Have you been hijacked by Snap.do? Post your comment or question below. Good luck and be save online!


Snap.do removal instructions:

1. First of all, download recommended anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this browser hijacker. Hopefully you won't have to do that.







Also, please feel free to call us (toll free) and we'll be happy to help you on the phone.


2. Go to the Start Menu. Select Control PanelUninstall a Program.





3. Search for Snap.do in the list. Select the program and click Uninstall button to uninstall it.



It will prompt you to close all web browsers before uninstalling Snap.do. Please click Yes to continue.

Then, it will ask you if you want to change your home page and default search provider to the old settings. Please click Yes.


Remove Snap.do in Google Chrome:

1. Click on Customize and control Google Chrome icon. Go to ToolsSettings.



2. Click Set pages under the On startup.


Remove feed.snap.do by clicking the "X" mark as shown in the image below.



3. Click Show Home button under Appearance. Then click Change.



Enter http://www.google.com instead of feed.snap.do and click OK to save changes.



4. Click Manager search engines button under Search.



Select Google or any other search engine you like from the list and make it your default search engine provider.



Select Web (search.snap.do) from the list and remove it by clicking the "X" mark as shown in the image below.



That's it!


Remove Snap.do in Mozilla Firefox:

1. Open Mozilla Firefox. Go to ToolsAdd-ons.



2. Select Extensions. Remove Snap.do extension. Close the window.



3. Click on the Snap.do search icon as shown in the image below and select Manage Search Engines....



4. Choose Web Search (Snap.do) from the list and click Remove to remove it. Click OK to save changes.



5. Go to ToolsOptions. Under the General tab reset the startup homepage or change it to google.com, etc.



6. In the URL address bar, type about:config and hit Enter.



Click I'll be careful, I promise! to continue.



In the filter at the top, type: snap.do



Now, you should see all the preferences that were changed by Snap.do extension. Right-click on the preference and select Reset to restore default value. Reset all found preferences!



That's it!


Remove Snap.do in Internet Explorer:

1. Open Internet Explorer. Go to ToolsManage Add-ons.



2. Select Search Providers. First of all, choose Bing or Live Search search engine and make it your default web search provider (Set as default).



3. Select Web Search (search.snap.do) and click Remove to remove it. Close the window.



4. Go to ToolsInternet Options. Select General tab and click Use default button or enter your own website, e.g. google.com instead of http://feed.snap.do. Click OK to save the changes. And that's about it for Internet Explorer.



If you did everything correctly, the Snap.do search hijacker should be completely uninstalled from your computer. However, if it still shows up, you will have to modify or remove certain Windows registry keys. They are listed below.

First, you have to open Windows Registry Editor. Simply search for regedit and run it as administrator.

Once there, navigate to, and delete the following Windows registry keys:
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main → delete "Search Bar"
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search → delete "Default_Search_URL"
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search → delete "SearchAssistant"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchUrl → delete "Default"
Then, navigate to, and modify the following Windows registry keys:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main

Right-click the "Search Page" key and select Modify. Change key value data to: http://go.microsoft.com/fwlink/?LinkId=54896

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}

Right-click the "URL" key and select Modify. Change key value data to:
http://www.bing.com/search?q={searchTerms}

Share this information:

67 comments:

Anonymous said...

The firefox config fix is handy, thanks.

Anonymous said...

Thank You for posting this ~ It's Helped Me :)
The creators of this little bastard are so sneaky!
Thanks

Anonymous said...

Thanks for this! Used it for Firefox and IE... worked great!

Anonymous said...

Thanks this helped me remove snap.dp from IE. Mozilla and Chrome.
Not even sure how it arrived, but glad it is gone :)

Anonymous said...

Thanks for providing a path out of snap.do hell.

Anonymous said...

AMAZING! I accidentally downloaded it and it took over my internet life!! I uninstalled it immediately thinking I was in the clear, and then it's popping up on all of my search engines. This was an amazing step by step process. Thanks loads! You rock :)
.:HermanaDelSoul:.

Anonymous said...

it was useless, after a couple of days the malware come back. You can not find it in the Programs/Features :(

Anonymous said...

excellent! thanks

Anonymous said...

Thanks for this, I've tried for days to remove this and with your help it's gone in minutes :)

Anonymous said...

Excellent. Thank you for posting this. I removed Snap.do from Google Chrome, Mozilla Firefox and internet explorer with this step by step guidance. I did not match in every step but it worked.
From UK.

Anonymous said...

thanks excellent instructions especially the last stage with ff

Anonymous said...

Fantastic - looks like this actually worked! Cheers.

Anonymous said...

This worked!!! Thank you, thank you, thank you!!! You are awesome!!

Anonymous said...

Seems to have cleared it from all browsers. Thank you!

Anonymous said...

I'm using XP. Despite your comment about it not affecting XP, Snap.do keeps coming back. I have followed the instructions for removing it from Google Chrome and Internet Explorer each several times and have also been running Malwarebytes for a few weeks. Still it returns

Anonymous said...

Excellent job seemed to remove it all. In my case it was attached to another program

Anonymous said...

I cant seem to be able to uninstall it from control panel? Anyone.

Rhi said...

When I remove it from Google Chrome it always finds it's way back, how do am I supposed to keep it from returning?

Admin said...

Rhi,

Right-click Chrome icon, select "Shortcut" Tab. Find "Target" field and remove all the snap.do stuff that goes after the chrome.exe. Save changes.

Anonymous said...

Excellent assistance, thank you. I was at my wits end trying to get rid of the little intruder. You have helped a great deal.

Anonymous said...

It's not in control panel, what should I do?

Anonymous said...

Just uninstall quick share from control panel and extension of your browser.

Anonymous said...

eu ñ posso remover ele agora so daki a dois dias o q pode acontecer nesse tempo

Anonymous said...

This was extremely helpful, thanks

Anonymous said...

Hi,
Thank you for instrucitons.
However, when I uninstalled snap.do in the console, a message showed "please wait while windows configures snap.do", and then nothing happened after the message box disappeared. Despite I have followed your instrcutions to remove snap.do from browser setting and regedit, snap.do still on the program list in the console. Have I got rid of snap.do? or how can I have further action to make sure?

Anonymous said...

Thanks a lot man, i didn't know about that last step for firefox. Already done all else myself, very nice and well written instruction. Much appreciated!

Anonymous said...

Thanks, the config intructions for firefox did the trick. It was driving me crazy. Cheers

Anonymous said...

this was the best thanks so so so so so much this has helped made my homework less harder :P :O :D ;P :)

Anonymous said...

thank you very much! finally i got rid of it!! :)

Anonymous said...

It took me a little wile to find the program. Because it wasn't called snap.do. So what i did was i looked through all the programs on my computer and the ones that i didn't remember installing i clicked on the link for were i had "installed" it from and looked at what the program was and deleted all the ones that i thought was nonsense. Very good instructions they helped me a lot

Anonymous said...

thanksss from Italy! :D

Anonymous said...

Thank you very much. Cheers
Pub

Sirio Troian said...

thank you very much!!

Brian said...

Had this problem after downloading a YouTube downloader.Thank you so much for your help. Everything worked a treat. Cheers.

Anonymous said...

You are a legend! Was tearing myu hair out with this! :-)

Anonymous said...

You are angel!

Anonymous said...

THANKS SOOO MUCH!

Anonymous said...

snap.do has always been such a pain in the rear, I tried everything I knew to get rid of it (not much) and it kept reinstalling itself

Anonymous said...

I've been doing this exact process for months before I even visit this page, and snap.do still appear in my browser, it is so annoying. I wish the people who made this die.

Anonymous said...

Thank you so so so much
I really appreciate the advice it worked!
that will teach the slick bastards who created the so called "helpful toolbar" a lesson.
Thanks

Anonymous said...

Awesome!! cheers :)

Benjamin said...

( Simply go to control panel (from start menu) and select programs. (Depending on windows version this may differ slightly but there is an option with "programs" in the name of the category and that’s the one you need to click. Once your list is completely loaded look for snap.do. Either right click or double left click to get to the uninstall option. (Be sure to write down the date associated with snap.do first!!))Then click uninstall and minimize all windows except the one that appears after you choose to uninstall.
[This is where snap.do catches everyone and tempts them into buying a product to assist] There should normally be a message here asking if you are sure or if you want to proceed with the uninstall.....instead the uninstall window just sits there for eternity. snap.do's biggest trick is that they hide the option to accept or continue with the uninstall so your pc appears to do nothing. At this point simply click somewhere neutral inside the apparent stuck window a few times. Do not select cancel or attempt to X out of this window. Click outside and back inside this window if you have to until you get a non-looking windows pop up that asks you to proceed. (This window may sneak onto your main toolbar) Then simply proceed with the uninstall using the non-windows looking option to do so.
Now back to why I had you write the date associated with snap.do. You need to find and uninstall every program that shares the date matching snap.do (also recommend uninstalling anything post this date) as most "if not all" of these programs are part of the snap.do issue. You'll find 8-12 of these as being toolbars you've never heard of before. While you’re there go ahead uninstall anything that sounds like a 3rd party program (shame on you for having them in the first place) that is not a game you intentionally downloaded or shares a date with the software that may have come with the purchase of your pc or is obviously listed as a Microsoft program. Do not agree to any option that asks you to restart your pc at this point. This last part is something I stumbled on as a temporary fix before finding the true fix for snap.do. I'm not sure that it is necessary but while I have your attention it can't hurt. Open internet browser, find tools/settings then internet options (if u do not see this tab in IE right click in a dead space just below the address bar and check menu bar) then go to tool>internet options and click on the advanced tab and click "reset" everything to its defaults. (4/5'ths down the page from top on right side)

go ahead and restart
do your regular maintenance from there

Anonymous said...

Thanks Bro, it worked for me.

Anonymous said...

Worked really well as it took the 3 web browser off my screen - AVG, Snap.do & mixi?. Not sure they have disappeared for ever!!

Anonymous said...

Thanks a lot. I've been searching for a while and this site does it for me.
Hope someone destroy that annoying malware soon.

Anonymous said...

There is nothing installed has Snap.do on my PC, how ever my Browser was changed to Snap.do...what can i do?
-Munk-

Anonymous said...

There was no snap.do in the Uninstall Programs...

It was QUICK SHARE...

So uninstall that.

Paul Coker said...

Thank You! Thank You! Thank You! Thank You! Thank You! Thank You!

Anonymous said...

Clear and useful. Congratulations for this post.

Anonymous said...

Thank you so much. That stuff was awful and you showed a clear and helpful guide to remove it. Thank you. Thank You. Thank YOu!

Anonymous said...

snap.do is invisible for me, it does not appear in add/remove programs and is not an extension on chrome and my default page still says google but snap.do still appears.
do you know any other ways to fix it or other sites that may have alternate means to be rid of it.

Anonymous said...

thank you very much for your solution to remove this, you are a live saver!!

Anonymous said...

Ha, thank you - I run Norton and other bits and bobs yet Snapdo still got in - kept closing Chrome. Even deep cleaning.. little bugger still hung on. Took me ages to figure out why. Now I can lose it - much appreciation -

Anonymous said...

mil gracias, esta cosa me tenía loca!!

Anonymous said...

These steps of removing snap.do are very clear and helpful.

I am using Windows 7 and have successfully removed snap.do from my computer.

For the registry keys, I find that snap.do also modifies some other keys (besides those listed here)as well.

I have used 'regedit' to search for all 'snap.do' value containing keys and then remove all of them, one by one manually, from the registry.

Anonymous said...

I've taken all the required measures in the browsers to remove this thing; that seemed to work. And also went into the registry and also deleted numerous files with the time / date stamp at about the time snapdo loaded. However, despite all efforts, I can't uninstall it through control panel. I've tried ccleaner, microsoft fix, ever solution I've seen posted. I don't like the idea that I still see in the control programs what appears to be the snap do program but can't seem to find or otherwise uninstall it. Any ideas?

Anonymous said...

I have tried following the Firefox instructions but it has not worked. I cleared it as thuroughly as posible and have checked and rechecked. According to this manual it should be gone. Yet it keeps returning when I open a new tab :/ What on earth is going on?

Anonymous said...

Life saver! snap.do rot in hell!

stephen grant said...

When I click on uninstall, I am asked if I want to allow Resoft (Snapdo people) to make changes to my computer hard drive. I'm reluctant to say 'yes' given the source. Is clicking yes' the only way to proceed?

Admin said...

Hi Stephen,

Yes it's the only way to proceed. After this, scan your computer with anti-malware software to remove the remnants.

Anonymous said...

very handy for firefox! ive been trying so many times and finally it works! thank you!!

Anonymous said...

A big thanks!!!

Lesley said...

A huge thankyou!! I thought I was going to be stuck with the darn thing because it kept sticking around, even after I'd uninstalled it and got rid of it as an extension in Google.

You explained this really well...even so I could understand it and go through the process, step by step.
Again. Thanks so much


Irfan said...

Just follow the following steps :

1. Type in "about:config" in your address bar.

2. search for "snap".

3. Reset all related entries

Welcome !

Anonymous said...

Thank you this helped me out so much, was a little confused at first but then read the because it wasnt showing up as snapdo but i read the comments and saw that it could be QUICK SHARE so i uninstalled that and it vanished, so if are having this same problem and cannot find it then go to your control panel, go into unistall a program and then look for a program called QUICK SHARE, then uninstall this

Anonymous said...

I need help. This advice was great, yes! But When Snapdo got onto my computer, it was blocked from completely downloading all the way(admin needed), and cant be seen on my computer- except it has still managed to become my new tab search... PLEASE HELP!

Hannah Martin-Singh said...

Fantastic! Thankyou!