Author Topic: cannot uninstall Snap.Do from control panel  (Read 14084 times)

0 Members and 1 Guest are viewing this topic.

Kpax

  • Guest
cannot uninstall Snap.Do from control panel
« on: November 12, 2013, 07:40:50 PM »
Hi

I've downloaded Gimp (free photos editing software) and my browser (Chrome) was immediately hijacked by Snap.Do and Search.Us. Managed to uninstall Search.US (I think), ran Malwarebytes which found and deleted loads of junk. Also ran  adwcleaner and found + deleted loads of "smartbar" keys associated with Snap.Do in registry.

Snap.Do and Search.Us tabs no longer show, only Chrome ,so seems to be a step in right direction. Problem is that Snap.Do and Snap.Do Engine are still in control panel + machine is now a slow as can be. No matter what I do I can't uninstall those 2 programmes from control panel.

Any help would be hugely appreciated.

Ta

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37508
  • Not a avast user
Re: cannot uninstall Snap.Do from control panel
« Reply #1 on: November 12, 2013, 07:43:43 PM »
also attach OTL diagnostic log


Kpax

  • Guest
Re: cannot uninstall Snap.Do from control panel
« Reply #2 on: November 12, 2013, 09:09:41 PM »
Done.

Kpax

  • Guest
Re: cannot uninstall Snap.Do from control panel
« Reply #3 on: November 12, 2013, 09:18:34 PM »
Also noticed a new icon pinned on taskbar and identical to Google Chrome but called "Search". Here's what it reads:

An administrator has installed Google Chrome on this system, and it is available for all users. The system-level Google Chrome will replace your user-level installation now.

Happened when the browser was hijacked. cannot delete/unpin from taskbar.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: cannot uninstall Snap.Do from control panel
« Reply #4 on: November 12, 2013, 09:31:20 PM »
Hi,


Please download aswMBR and save it to your desktop.

Double click aswMBR.exe to start the tool.
  • Select Yes if prompted to download the Avast database.
     
  • Click Scan
     
  • Upon completion of the scan ( Scan finished successfully ) click Save log and save it to your desktop, and post that log in your next reply for review.
    Note: do NOT attempt any Fix yet.

Please download Farbar Recovery Scan Tool by Farbar and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.


  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Under Optional Scan ensure "List BCD" and "Driver MD5" are ticked.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

Kpax

  • Guest
Re: cannot uninstall Snap.Do from control panel
« Reply #5 on: November 13, 2013, 08:48:05 AM »
Thanks. Done.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: cannot uninstall Snap.Do from control panel
« Reply #6 on: November 13, 2013, 10:16:25 AM »
I see no signs of Snap.do in the logs. Do you still have a problem?

Shortcut you mentioned is deleted by Adwcleaner...
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

Kpax

  • Guest
Re: cannot uninstall Snap.Do from control panel
« Reply #7 on: November 13, 2013, 10:24:38 AM »
Hi

There are 2 entries in the Farbar Addition.txt log

Snap.Do (x32 Version: 1.167.1.12640)
Snap.Do Engine (HKCU Version: 1.167.1.12640)

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: cannot uninstall Snap.Do from control panel
« Reply #8 on: November 13, 2013, 11:12:15 AM »
That are leftovers, we'll deal with it later. Do you have problems in browsers?
« Last Edit: November 13, 2013, 11:15:47 AM by TwinHeadedEagle »
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

Kpax

  • Guest
Re: cannot uninstall Snap.Do from control panel
« Reply #9 on: November 13, 2013, 11:17:13 AM »
No. Chrome opens as normal as far as I can see.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: cannot uninstall Snap.Do from control panel
« Reply #10 on: November 13, 2013, 11:26:49 AM »
Ok, let's recheck system one more time...


1. Please download ComboFix by sUBs from here and save it to your Desktop.
If you are unsure how ComboFix works please read this guide carefully.
note: ComboFix must be downloaded to your Desktop.


--------------------------------------------------------------------
2. Temporarily disable your AntiVirus program.
If you are unsure how to do this please read this or this Instruction.

Instructions how to disable avast:
  • Right-click on the avast! icon in the lower right corner of the screen and choose Open Avast! User Interface.
  • In the window that opens on the top right corner, click Settings.
  • In a new window that opens, choose the option Troubleshooting, Uncheck Enable avast! self-defense, and click OK.
  • => Again, right-click on the avast! icon in the lower right corner of the screen and select avast! shield controls .
  • In the menu that appears, choose Disable Permanently. When you are prompted to turn off security, click Yes.
Note: Do not forget to turn on this option after the cleaning.

--------------------------------------------------------------------
3. Run ComboFix. Click on I Agree!

ComboFix will check if there is a newer version of ComboFix available.
Click Yes if prompted to download.

ComboFix will display DISCLAIMER OF WARRANTY ON SOFTWARE.
Click Yes to allow ComboFix to continue.

If Recovery Console is not installed, ComboFix will offer download & installation.
Click Yes to allow ComboFix to install Recovery Console.
Note:Do not mouse-click Combofix's window while it is running.
If you see a message like "Illegal operation attempted on a registry key that has been marked for deletion" just restart computer once more.


--------------------------------------------------------------------
4. When the tool is finished, it will produce a log report for you. (typical location: C:\ComboFix.txt )
 Attach log reports ( ComboFix.txt) back to topic.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

Kpax

  • Guest
Re: cannot uninstall Snap.Do from control panel
« Reply #11 on: November 13, 2013, 08:18:44 PM »
Hi

I attach log.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: cannot uninstall Snap.Do from control panel
« Reply #12 on: November 13, 2013, 09:50:44 PM »
OK, computer is clean, any problems?
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

Kpax

  • Guest
Re: cannot uninstall Snap.Do from control panel
« Reply #13 on: November 13, 2013, 10:08:49 PM »
Looks good except for annoying Search icon pinned on taskbar that keeps giving me the "the system-level Google Chrome will replace your user-level installation now" message + Snap.do and Snap engine leftovers in control panel.


Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: cannot uninstall Snap.Do from control panel
« Reply #14 on: November 14, 2013, 10:09:23 AM »
Re-run Adwcleaner, press Scan, and after that Clean. Attach me the report.


Re-run MalwareBytes, and press Quick Scan. Attach me the report.



  Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.



My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE