Wiz, "Snap.Do" Irritating or Evil? Complete Remov

The machines we love to hate

Moderator: Wiz Feinberg

User avatar
Howard Parker
Posts: 2799
Joined: 4 Aug 1998 11:00 pm
Location: Maryland

Wiz, "Snap.Do" Irritating or Evil? Complete Remov

Post by Howard Parker »

This one has me befuddled.

I must have picked up the Snap.Do addon while downloading a fresh copy of Avast from Cnet.

It installed itself into my browser(s) and so far has defied complete removal. I've run Spybot S&D, Avast and Malwarebytes and come up empty in the threat department.

I've Googled a few online remedies but am reluctant to try them. I've seen comments from Snap.Do support recommending the normal remove addon and reboot procedures. That is not working. I might well see the addon appear after days/weeks.

OS - Win XP Pro SP3(all updates)
Firefox 15.0.1
IE 8
Chrome does not seem to be affected.

Suggestions?

Thanks in advance.

h
User avatar
Howard Parker
Posts: 2799
Joined: 4 Aug 1998 11:00 pm
Location: Maryland

Update!

Post by Howard Parker »

After further research I've concluded that Snap.Do is indeed evil, hijacking a browser under the pretense of being a search engine.

I've also concluded that my early attempts at removal were incomplete as the Snap.Do engine not only installs as an addon, it installs as a PROGRAM.

The removal in Firefox is straight forward:

remove from search engine manager
disable toolbar
change homepage (Snap.Do shanges)
remove addon
reboot

In IE the addon can only be disabled. You must go to control panel/add-remove programs to completely delete the program....reboot!

I hope I'm finally successful here. Removal of Snap.Do seems to resolve some performance issues that I've been chasing down. A good thing.

Hopefully I've not overlooked anything.
Please chime in with suggestions.

h
Howard Parker

Enough gear to get the job done!
User avatar
Wiz Feinberg
Posts: 6113
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA

Post by Wiz Feinberg »

If all else fails, run a System Restore to a date or time before you installed the PUP.
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog