Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Snap.do has installed itself on my computer


  • Please log in to reply
16 replies to this topic

#1 N Crane

N Crane

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:56 PM

Posted 01 June 2013 - 04:38 PM

We have been having difficulties with Internet Explorer for a few days. The page would open, but as soon as we tried to use it we would get a banner saying 'internet explorer is not responding'.  Google Chrome seemed to work OK.

 

Real Player stopped working, and I uninstalled this and tried to download again, but it would only get part-way through the process and then stop.

 

This evening both IE and Google Chrome started to show snap.do.  We had attempted to download a free youtube converter program earlier, and do not know whether Snap.do was embedded in this.

 

I found two Snap.do programs in the programs list and uninstalled both. They had today's date against them.  However this did not resolve the problem, as Snap.do still appears on both IE and Google Chrome.  Internet forums have confirmed that this is not sufficient.

 

I don't know if all these issues are related.

 

We use Norton 360 Premier.

 

Can you help please?

 

Nigel Crane 

 

Edit: Moved from Vista Forum to the more appropriate forum.

Roger


Edited by rotor123, 01 June 2013 - 04:59 PM.


BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,260 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:09:56 AM

Posted 01 June 2013 - 05:48 PM

Adware Cleaner will likely remove this for you. If you still have a problem after using it,

post back for further instructions. Be sure to close ALL browsers before running Adware Cleaner.

AdwCleaner Download

 

You should also clean up your temp files, logs, ad/ tracking cookies, etc. Use Ccleaner. No need to

run Ccleaner's registry cleaner. Best not to. Default settings should be good enough.

Be sure to uncheck the install of Yahoo Toolbar or whatever is offered during install.

CCleaner - PC Optimization and Cleaning - Free Download


Edited by buddy215, 01 June 2013 - 05:52 PM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 glennpenne

glennpenne

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:10:56 PM

Posted 02 June 2013 - 07:54 AM

Snapdo is a legit app. That is why your malware and antivirus aren't picking up on it.

If you go to Snapdo's Help, there is a simple explanation for uninstalling the widget.

http://www.snapdoapp.com/faq/SnapDo/FAQ.aspx?lang=en

 



#4 buddy215

buddy215

  • Moderator
  • 13,260 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:09:56 AM

Posted 02 June 2013 - 01:36 PM

glennpenne....walking is legal, too. But don't walk into my house without asking...uninvited.

Snapdo is a tresspasser. It uses unscrupulous methods to install. It's uninstaller doesn't uninstall

all of the garbage it installs.

 

Do you financially profit from Snapdo?


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,417 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:10:56 AM

Posted 02 June 2013 - 09:25 PM

Hotbar is also so called legitimate, but you don't want that spyware either.
 
What You Need to Know about Smartbar and snap.do by Trend Micro
 
to put simply, a browser plug-in—that changes your browser’s home page and collects information about your computer
 
Do run the suggested tool plus...
 
thisisujrt.gif Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#6 N Crane

N Crane
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:56 PM

Posted 03 June 2013 - 05:27 AM

Hi all,

 

Thanks for your interest.  We have run the adware cleaner, followed by the junkware removal tool.  The contents of the log as as follows:

 

Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows Vista ™ Home Premium x86
Ran by Crane on 03/06/2013 at 10:58:06.26
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
 
 
~~~ Registry Values
 
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-3554550231-3313961566-3633058447-1000\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL
 
 
 
~~~ Registry Keys
 
 
 
~~~ Files
 
 
 
~~~ Folders
 
Successfully deleted: [Empty Folder] C:\Users\Crane\appdata\local\{0CFF8D07-E507-4469-94BA-5E8231BEC0BE}
Successfully deleted: [Empty Folder] C:\Users\Crane\appdata\local\{73FCF6CE-29F1-45C4-ADFB-B095E9ACE0E3}
Successfully deleted: [Empty Folder] C:\Users\Crane\appdata\local\{78C7F4B5-D335-4DBB-84A7-3DE0BF689A3B}
Successfully deleted: [Empty Folder] C:\Users\Crane\appdata\local\{9DAB9A93-2DAE-4897-BE27-DCEE018B2FD6}
Successfully deleted: [Empty Folder] C:\Users\Crane\appdata\local\{9DBDD288-351A-42DE-8BD9-D45E3C46E9E8}
 
 
 
~~~ Event Viewer Logs were cleared
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03/06/2013 at 11:04:25.98
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

Google Chrome seems to be working OK, though IE is still dead.  Once we know that the rubbish has gone, we'll try reinstalling it.

 

Thanks



#7 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,417 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:10:56 AM

Posted 03 June 2013 - 03:21 PM

In IE ..Go to Tools >> Manage ADD ons and see if there is anything of Resoft Smartbar or Snap do to disable.

Now reset Internet Explorer settings, use the FIX-It button.


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#8 N Crane

N Crane
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:56 PM

Posted 07 June 2013 - 06:53 AM

Hi again,

 

There is nothing from Resoft Smartbar or Snap do, but there is something called Tidynetwork.com that I don't recognise.



#9 buddy215

buddy215

  • Moderator
  • 13,260 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:09:56 AM

Posted 07 June 2013 - 09:19 AM

Tidynetwork.com is adware. There may be an uninstaller for it in Add/ Remove. If you saw it listed in

your browser(s) addons, you should disable or uninstall it there, too.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#10 N Crane

N Crane
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:56 PM

Posted 07 June 2013 - 09:37 AM

OK, thanks



#11 CoastalTrader

CoastalTrader

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:07:56 AM

Posted 04 September 2013 - 12:04 AM

BC Advisor - u r da KING.

 

I have had snap.do in my computer for about 4 months and over during that time - with several weekends wasted I went thru about 70 hours of painstaking procedures with some incompetent MS service people - via email - and nothing they recommended (downloads) or procedures they took me thru got rid of it.

 

I come here - find you right off the start - run ADw Cleaner and problem solved.  It found it and removed it.

 

Man - next problem I have I'll be back.  In the meantime many thanks.

 

AWESOME !

 

CoastalTrader.



#12 CoastalTrader

CoastalTrader

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:07:56 AM

Posted 04 September 2013 - 12:18 AM

In case this is a help I'll paste it on. Of note - when ADw finished cleaning it sat idle - then nothing showed up to 'select' keeping or deleting - I think I clicked the clean button - then shorthly after it just started cleaning whatever it had found.

 

*** - another program I was trying to uninstall but wouldn't remove itself was Productools Map - which came out with ADw.

 

Here is the report that came up when it did the auto re-boot.

 

I hope I didn't delete anything that was essential to my normal operations.

 

I replaced my name with XXX

 

__________________________________________________________________________________________________

 

# AdwCleaner v3.002 - Report created 03/09/2013 at 21:48:54

# Updated 01/09/2013 by Xplode

# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

# Username : XXX

# Running from : C:\Users\XXX\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\03LL0W45\AdwCleaner.exe

# Option : Clean

 

***** [ Services ] *****

 

 

***** [ Files / Folders ] *****

 

Folder Deleted : C:\ProgramData\Ask

Folder Deleted : C:\ProgramData\Partner

Folder Deleted : C:\ProgramData\visualbee

Folder Deleted : C:\Program Files (x86)\Conduit

Folder Deleted : C:\Program Files (x86)\Produtools_Maps

Folder Deleted : C:\Users\XXX\AppData\Local\Conduit

Folder Deleted : C:\Users\XXX\AppData\Local\cre

Folder Deleted : C:\Users\XXX\AppData\Local\Savings Vault

Folder Deleted : C:\Users\XXX\AppData\Local\visualbeeexe

Folder Deleted : C:\Users\XXX\AppData\LocalLow\Conduit

Folder Deleted : C:\Users\XXX\AppData\LocalLow\PriceGong

Folder Deleted : C:\Users\XXX\AppData\LocalLow\Produtools_Maps

Folder Deleted : C:\Users\XXX\AppData\Roaming\OpenCandy

File Deleted : C:\END

File Deleted : C:\Users\XXX~1\AppData\Local\Temp\Uninstall.exe

 

***** [ Shortcuts ] *****

 

 

***** [ Registry ] *****

 

Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}]

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS

Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3042917

Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3196716

Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3209604

Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3284023

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_job-service-invoice-template_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_job-service-invoice-template_RASMANCS

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{575BDDF5-790A-4D01-A37D-2863DEC1C085}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AA14B2E9-B3E1-4AF9-8C79-5FC0FA762ED9}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{575BDDF5-790A-4D01-A37D-2863DEC1C085}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{575BDDF5-790A-4D01-A37D-2863DEC1C085}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{575BDDF5-790A-4D01-A37D-2863DEC1C085}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AA14B2E9-B3E1-4AF9-8C79-5FC0FA762ED9}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31B8C6B9-DDDF-47FD-B8FC-D8DAFB3D490D}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{48D6A46D-DB90-461A-8A37-303C9ED72458}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{575BDDF5-790A-4D01-A37D-2863DEC1C085}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{575BDDF5-790A-4D01-A37D-2863DEC1C085}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{575BDDF5-790A-4D01-A37D-2863DEC1C085}]

Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Key Deleted : HKCU\Software\SmartBar

Key Deleted : HKCU\Software\Softonic

Key Deleted : HKCU\Software\visualbee

Key Deleted : HKCU\Software\AppDataLow\Toolbar

Key Deleted : HKCU\Software\AppDataLow\Software\Conduit

Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes

Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider

Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong

Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar

Key Deleted : HKCU\Software\AppDataLow\Software\Produtools_Maps

Key Deleted : HKLM\Software\Conduit

Key Deleted : HKLM\Software\visualbee

Key Deleted : HKLM\Software\Produtools_Maps

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Produtools_Maps Toolbar

 

***** [ Browsers ] *****

 

-\\ Internet Explorer v10.0.9200.16660

 

 

*************************

 

AdwCleaner[R0].txt - [6035 octets] - [03/09/2013 21:38:36]

AdwCleaner[S0].txt - [5987 octets] - [03/09/2013 21:48:54]

 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6047 octets] ##########



#13 buddy215

buddy215

  • Moderator
  • 13,260 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:09:56 AM

Posted 04 September 2013 - 10:19 AM

CoastalTrader....

Explode deserves the credit for creating the program. He does a great job of keeping AdwCleaner up to date

with all the new adware being created. If you have a couple of bucks to spare, tell him thank you.

 

You had a lot of adware. You should do a scan using Free ESET Online Antivirus Scanner

Allow it to remove whatever it finds.

 

I don't see any problems with what AdwCleaner removed. Happy surfing....


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#14 CoastalTrader

CoastalTrader

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:07:56 AM

Posted 04 September 2013 - 12:46 PM

Buddy:

The FREE help I had been receiving from MS was not only useless - but wasted a lot of my time.  The next step would have been to buy one of the 'piss off' products... the one that gives you a free scan - ID's a lot of problems - and then wants you to but the solution - some of which they probably just embedded into your computer.  Or - open an MS account and start paying for their help as per their last email to me:

 

Hi ,
Thank you for your response. I am sorry for the inconvenience caused. Unfortunately the email support for Microsoft Windows Support is no longer available.
To get help on the issue you reported, you may call us on 1-800-MICROSOFT (1-800-642-7676) or contact Microsoft Community.
Please follow the steps below to seek help from Microsoft Community:
1.    Go to Microsoft Community (
http://answers.microsoft.com/en-us/ ).
2.    Sign In using your Microsoft account.
3.    Post your question and we will get back to you with a response.
 
Thanks for choosing Microsoft Support.

 

So having solved the problem here with people that are sincere and helpful in their efforts and service to us non-geeks - is definitely of value to me.

 

My computer is running smooth and about 50% faster.  I have probably also eliminated those occasional 'freeze-up's" I was experiencing.  Time will tell.

 

The ESET scanner you suggested - is that a one time scan or is it a program that downloads and keeps on scanning?

 

How do I contact EXPLODE?  I will gladly make a donation.

 

Much appreciated.



#15 buddy215

buddy215

  • Moderator
  • 13,260 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:09:56 AM

Posted 04 September 2013 - 12:55 PM

Its an online one time scan.

 

Go back to the download page....AdwCleaner Download

scroll down to the donate button.....


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users