Snap.do

By GoldSparrow in Browser Hijackers

Translate To:

Threat Scorecard

Ranking:	188
Threat Level:	50 % (Medium)
Infected Computers:	1,974,527

First Seen:	October 12, 2012
Last Seen:	April 25, 2024
OS(es) Affected:	Windows

Snap.do Image

The Snap.do website is associated with the Smartbar toolbar for your web browser. This toolbar is actually an adware component. Even though Snap.do claims that Snap.do can simplify the way you access your favorite websites, this website and its associated toolbar have several unwanted behaviors that are more closely associated with known malware infections than with legitimate applications. Most of the time, the Snap.do toolbar will be bundled along with freeware programs, included in the installation process.

Reading the 'official' description of Snap.do, it would be hard to guess that this website is linked to malware. The people behind Snap.do claim that this website's vision is to become an industry leader in providing simple, smart web solutions to their clients as well as complementary programs that improve browser efficiency and make browsing simply with interfaces and technologies that computer users are already used to utilize. However, this vision does not match up well to reality, since products associated with Snap.do have various components that are more commonly associated with adware. There are three reasons why products associated with Snap.do are considered unsafe for your computer:

Products associated with Snap.do may have spyware capabilities. That is, this website and software associated with Snap.do will collect your personal data and then distribute it to a third party without your authorization.
The Snap.do website and software associated with Snap.do may also be considered adware. This is because Snap.do is designed to deliver intrusive advertisements based on private data collected about your browsing behaviors. These advertisements may appear as pop-up windows or embedded in web pages.
Snap.do is also linked to browser hijackers. These kinds of components are designed to change your web browser's settings, affecting which websites you are able to visit and alters the way you browse the Internet.

While many websites associated with browser hijackers may, in themselves, be perfectly safe, this is not the case with Snap.do and software associated with this website. Due to their adware and browser hijacker components, any contact with the Snap.do website or with software associated with Snap.do should be followed with a thorough scan of your machine with a capable anti-malware application.

Table of Contents

Aliases

2 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
Symantec	Bloodhound.MalPE
AhnLab-V3	PUP/Win32.Toolbar

SpyHunter Detects & Remove Snap.do

File System Details

Snap.do may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	uninstall.dat	9a26a027205072779ac084dfa1073751	16,254
Name: uninstall.dat MD5: 9a26a027205072779ac084dfa1073751 Size: 140.8 KB (140800 bytes) Detections: 16,254 Type: Data file Path: %COMMONPROGRAMFILES%\freshhome Group: Malware file Last Updated: April 17, 2024
2.	uninstall.dat	7c324f4ec4fb9a2ffacf43ad11a6cf60	7,496
Name: uninstall.dat MD5: 7c324f4ec4fb9a2ffacf43ad11a6cf60 Size: 140.8 KB (140800 bytes) Detections: 7,496 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\fixcom Group: Malware file Last Updated: March 17, 2024
3.	uninstall.dat	74d6da248a6f633397d0080a57fc53ee	3,267
Name: uninstall.dat MD5: 74d6da248a6f633397d0080a57fc53ee Size: 140.8 KB (140800 bytes) Detections: 3,267 Type: Data file Path: %COMMONPROGRAMFILES%\biojob Group: Malware file Last Updated: April 9, 2023
4.	uninstall.dat	905472980b9f20d7328fb9627254affe	2,213
Name: uninstall.dat MD5: 905472980b9f20d7328fb9627254affe Size: 140.8 KB (140800 bytes) Detections: 2,213 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\rankjayhome Group: Malware file Last Updated: February 19, 2024
5.	uninstall.dat	bdfbd0d9140ee315a5caba1157541813	1,982
Name: uninstall.dat MD5: bdfbd0d9140ee315a5caba1157541813 Size: 140.8 KB (140800 bytes) Detections: 1,982 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\y-lab Group: Malware file Last Updated: March 26, 2024
6.	uninstall.dat	0884b327b012ded7b390711a6bc6b771	1,870
Name: uninstall.dat MD5: 0884b327b012ded7b390711a6bc6b771 Size: 140.8 KB (140800 bytes) Detections: 1,870 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\warmtouch Group: Malware file Last Updated: April 19, 2024
7.	uninstall.dat	952c61b8d00c3c24c1d54483fe53646f	1,391
Name: uninstall.dat MD5: 952c61b8d00c3c24c1d54483fe53646f Size: 140.8 KB (140800 bytes) Detections: 1,391 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\namstring Group: Malware file Last Updated: March 15, 2024
8.	uninstall.dat	5f472b3fffe093e8b47d00a7cd165108	1,357
Name: uninstall.dat MD5: 5f472b3fffe093e8b47d00a7cd165108 Size: 140.8 KB (140800 bytes) Detections: 1,357 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\zumtouch Group: Malware file Last Updated: June 19, 2023
9.	uninstall.dat	8bcf2573f0fa98fcd4c0e9f62cf3e6cf	1,203
Name: uninstall.dat MD5: 8bcf2573f0fa98fcd4c0e9f62cf3e6cf Size: 140.8 KB (140800 bytes) Detections: 1,203 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\tris-com Group: Malware file Last Updated: January 27, 2024
10.	uninstall.dat	6c5cac85dbc1df3ced89e3ea8645bc32	1,153
Name: uninstall.dat MD5: 6c5cac85dbc1df3ced89e3ea8645bc32 Size: 140.8 KB (140800 bytes) Detections: 1,153 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\viatip Group: Malware file Last Updated: February 17, 2024
11.	uninstall.dat	3fb39004d02ca732c1295c6425bc76c2	755
Name: uninstall.dat MD5: 3fb39004d02ca732c1295c6425bc76c2 Size: 140.8 KB (140800 bytes) Detections: 755 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\dondox Group: Malware file Last Updated: May 3, 2023
12.	uninstall.dat	6c7a8866b3583aa0900302aa01b29936	191
Name: uninstall.dat MD5: 6c7a8866b3583aa0900302aa01b29936 Size: 140.8 KB (140800 bytes) Detections: 191 Type: Data file Path: %COMMONPROGRAMFILES%\alphacancof Group: Malware file Last Updated: July 30, 2022
13.	uninstall.dat	c2d23b86efc0520ee572af5cac9489c9	135
Name: uninstall.dat MD5: c2d23b86efc0520ee572af5cac9489c9 Size: 140.8 KB (140800 bytes) Detections: 135 Type: Data file Path: %COMMONPROGRAMFILES%\dripdubeco Group: Malware file Last Updated: April 16, 2022
14.	uninstall.dat	e7ea46f14f772f79218e9af5c3839211	125
Name: uninstall.dat MD5: e7ea46f14f772f79218e9af5c3839211 Size: 140.8 KB (140800 bytes) Detections: 125 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\mathzentip Group: Malware file Last Updated: March 13, 2023
15.	uninstall.dat	33b0dc715e3482dcaed2ec042d70711d	42
Name: uninstall.dat MD5: 33b0dc715e3482dcaed2ec042d70711d Size: 140.8 KB (140800 bytes) Detections: 42 Type: Data file Path: %COMMONPROGRAMFILES%\an-tone Group: Malware file Last Updated: July 8, 2019
16.	uninstall.dat	6c56cf25f2e127d368462f2fad64159f	41
Name: uninstall.dat MD5: 6c56cf25f2e127d368462f2fad64159f Size: 140.8 KB (140800 bytes) Detections: 41 Type: Data file Path: %COMMONPROGRAMFILES%\labstock Group: Malware file Last Updated: February 28, 2020
17.	gld.exe	c5ea20f32c1ad46670b6a6442ddd04d6	38
Name: gld.exe MD5: c5ea20f32c1ad46670b6a6442ddd04d6 Size: 61.1 KB (61103 bytes) Detections: 38 Type: Executable File Path: %PROGRAMFILES(x86)%\Gorny\gld.exe Group: Malware file Last Updated: June 27, 2020
18.	uninstall.dat	b9c88365b15155e99f3938e9fae3d1ed	37
Name: uninstall.dat MD5: b9c88365b15155e99f3938e9fae3d1ed Size: 140.8 KB (140800 bytes) Detections: 37 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\lamstrong Group: Malware file Last Updated: January 4, 2021
19.	emphasising.exe	25034e95214d42e20e9383a353c125f6	37
Name: emphasising.exe MD5: 25034e95214d42e20e9383a353c125f6 Size: 37.75 KB (37758 bytes) Detections: 37 Type: Executable File Path: %PROGRAMFILES(x86)%\basque\emphasising.exe Group: Malware file Last Updated: June 27, 2020
20.	patience.exe	069ad9a7445f11563b2919a5f006979c	32
Name: patience.exe MD5: 069ad9a7445f11563b2919a5f006979c Size: 9.21 KB (9216 bytes) Detections: 32 Type: Executable File Path: %PROGRAMFILES(x86)%\patience\patience.exe Group: Malware file Last Updated: June 27, 2020
21.	uninstall.dat	682c0a1544d147065cc736e8e163f678	23
Name: uninstall.dat MD5: 682c0a1544d147065cc736e8e163f678 Size: 140.8 KB (140800 bytes) Detections: 23 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\ronbam Group: Malware file Last Updated: November 4, 2020
22.	uninstall.dat	56ee418075850ab0667807a8aff14910	20
Name: uninstall.dat MD5: 56ee418075850ab0667807a8aff14910 Size: 140.8 KB (140800 bytes) Detections: 20 Type: Data file Path: %COMMONPROGRAMFILES%\tipron Group: Malware file Last Updated: March 30, 2020
23.	uninstall.dat	875787d7752903ddb0390f14956b06ca	19
Name: uninstall.dat MD5: 875787d7752903ddb0390f14956b06ca Size: 140.8 KB (140800 bytes) Detections: 19 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\blacklam Group: Malware file Last Updated: May 3, 2022
24.	uninstall.dat	6740ac36c1f3f985477d072add834ec2	17
Name: uninstall.dat MD5: 6740ac36c1f3f985477d072add834ec2 Size: 140.8 KB (140800 bytes) Detections: 17 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\zaambam Group: Malware file Last Updated: February 9, 2023
25.	uninstall.dat	d0510ae29ba5df68e32ebb49008446e6	14
Name: uninstall.dat MD5: d0510ae29ba5df68e32ebb49008446e6 Size: 140.8 KB (140800 bytes) Detections: 14 Type: Data file Path: %COMMONPROGRAMFILES%\inchphase Group: Malware file Last Updated: November 17, 2021
26.	uninstall.dat	660fd6596a4ed4e26d1962233ed39c53	12
Name: uninstall.dat MD5: 660fd6596a4ed4e26d1962233ed39c53 Size: 140.8 KB (140800 bytes) Detections: 12 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\zathlax Group: Malware file Last Updated: July 8, 2019
27.	uninstall.dat	d7d6756cd769b6e077f8d0bbc19e8f82	12
Name: uninstall.dat MD5: d7d6756cd769b6e077f8d0bbc19e8f82 Size: 140.8 KB (140800 bytes) Detections: 12 Type: Data file Path: %COMMONPROGRAMFILES(x86)%\lamhotin Group: Malware file Last Updated: March 25, 2020

More files

Registry Details

Snap.do may create the following registry entry or registry entries:

File name without path

Alphatax.exe

Alphatop.exe

Bam-Phase.exe

Daltla.exe

DanFix.exe

Domnimdex.exe

Doublelax.exe

Fasecore.exe

FaseSaostock.exe

Laquonix.exe

OpeZamjob.exe

SailLatsing.exe

Salttrax.exe

StrongDonlab.exe

TonRaning.exe

Trueex.exe

Unodex.exe

Viawarm.exe

Yearkeysing.exe

ZerCom.exe

ZumDubflex.exe

Zunlotlight.exe

Regexp file mask

%appdata%\agent.dat

%appdata%\giftbag.db

%appdata%\installationconfiguration.xml

%appdata%\noah.dat

%appdata%\uninstall_temp.ico

%localappdata%\agent.dat

%LOCALAPPDATA%\dongls.exe

%localappdata%\freshlab.exe

%localappdata%\funzap.exe

%localappdata%\giftbag.db

%LOCALAPPDATA%\Greenjob.[RANDOM CHARACTERS]

%localappdata%\hatcof.exe

%localappdata%\installationconfiguration.xml

%LOCALAPPDATA%\JobSilsing.exe

%localappdata%\main.dat

%localappdata%\newstatdex.exe

%localappdata%\noah.dat

%localappdata%\qvotop.exe

%localappdata%\relam.exe

%localappdata%\saoeco.exe

%LOCALAPPDATA%\sha.db

%localappdata%\sham.db

%localappdata%\silverity.exe

%localappdata%\silversanair.exe

%localappdata%\yearfix.exe

%localappdata%\zamron.exe

%userprofile%\local settings\application data\funzap.exe

%userprofile%\local settings\application data\hatcof.exe

%UserProfile%\Local Settings\Application Data\sha.db

%userprofile%\local settings\application data\yearfix.exe

%windir%\system32\config\systemprofile\appdata\local\agent.dat

%windir%\system32\config\systemprofile\appdata\local\applicationhosting.dat

%windir%\system32\config\systemprofile\appdata\local\config.xml

%windir%\system32\config\systemprofile\appdata\local\lobby.dat

%windir%\system32\config\systemprofile\appdata\local\main.dat

%windir%\system32\config\systemprofile\appdata\local\md.xml

%windir%\system32\config\systemprofile\appdata\local\noah.dat

%WINDIR%\System32\config\systemprofile\AppData\Local\sha.db

%windir%\system32\config\systemprofile\appdata\local\sham.db

%windir%\system32\config\systemprofile\appdata\local\uninstall_temp.ico

%windir%\syswow64\config\systemprofile\appdata\local\agent.dat

%windir%\syswow64\config\systemprofile\appdata\local\applicationhosting.dat

%windir%\syswow64\config\systemprofile\appdata\local\config.xml

%windir%\syswow64\config\systemprofile\appdata\local\lobby.dat

%windir%\syswow64\config\systemprofile\appdata\local\main.dat

%windir%\syswow64\config\systemprofile\appdata\local\md.xml

%WINDIR%\SysWOW64\config\systemprofile\AppData\Local\sha.db

%windir%\syswow64\config\systemprofile\appdata\local\sham.db

%windir%\syswow64\config\systemprofile\appdata\local\uninstall_temp.ico

HKEY..\..\..\..{RegistryKeys}

SOFTWARE\Microsoft\Tracing\appmallosayov_RASAPI32

SOFTWARE\Microsoft\Tracing\appmallosayov_RASMANCS

SOFTWARE\Microsoft\Tracing\AppoxinloK_RASAPI32

SOFTWARE\Microsoft\Tracing\AppoxinloK_RASMANCS

SOFTWARE\Microsoft\Tracing\AppxeetouQ_RASAPI32

SOFTWARE\Microsoft\Tracing\AppxeetouQ_RASMANCS

SOFTWARE\Microsoft\Tracing\Hotfresh_RASAPI32

SOFTWARE\Microsoft\Tracing\Hotfresh_RASMANCS

SOFTWARE\Microsoft\Tracing\Kipolam_RASAPI32

SOFTWARE\Microsoft\Tracing\Kipolam_RASMANCS

SOFTWARE\Microsoft\Tracing\Kolnixo_RASAPI32

SOFTWARE\Microsoft\Tracing\Kolnixo_RASMANCS

SOFTWARE\Microsoft\Tracing\locep_RASAPI32

SOFTWARE\Microsoft\Tracing\locep_RASMANCS

SOFTWARE\Microsoft\Tracing\mbappert_RASAPI32

SOFTWARE\Microsoft\Tracing\mbappert_RASMANCS

SOFTWARE\Microsoft\Tracing\Pangoc_RASAPI32

SOFTWARE\Microsoft\Tracing\Pangoc_RASMANCS

SOFTWARE\Microsoft\Tracing\Pluslax_RASAPI32

SOFTWARE\Microsoft\Tracing\Pluslax_RASMANCS

SOFTWARE\Microsoft\Tracing\Polygen_RASAPI32

SOFTWARE\Microsoft\Tracing\Polygen_RASMANCS

SOFTWARE\Microsoft\Tracing\snorler_RASAPI32

SOFTWARE\Microsoft\Tracing\snorler_RASMANCS

SOFTWARE\Microsoft\Tracing\Tolnix_RASAPI32

SOFTWARE\Microsoft\Tracing\Tolnix_RASMANCS

SOFTWARE\Microsoft\Tracing\Voyasollam_RASAPI32

SOFTWARE\Microsoft\Tracing\Voyasollam_RASMANCS

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\appmallosayov.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AppoxinloK.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AppxeetouQ.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Hotfresh.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Kipolam.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Kolnixo.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\locep.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbappert.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Pangoc.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Pitachok.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Pluslax.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Polygen.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Quoteex.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snorler.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Tolnix.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Voyasollam.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\snp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\appmallosayov.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\AppoxinloK.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\AppxeetouQ.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Hotfresh.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Kipolam.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Kolnixo.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\locep.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\mbappert.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Pangoc.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Pluslax.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Polygen.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\snorler.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Tolnix.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Voyasollam.exe

SOFTWARE\mtappmallosayov

SOFTWARE\mtAppoxinloK

SOFTWARE\mtAppxeetouQ

SOFTWARE\mtHotfresh

Software\mtKolnixo

SOFTWARE\mtlocep

SOFTWARE\mtmbappert

SOFTWARE\mtPangoc

SOFTWARE\mtPitachok

SOFTWARE\mtPluslax

SOFTWARE\mtPolygen

SOFTWARE\mtTolnix

SOFTWARE\WOW6432Node\Microsoft\Tracing\appmallosayov_RASAPI32

SOFTWARE\WOW6432Node\Microsoft\Tracing\appmallosayov_RASMANCS

SOFTWARE\Wow6432Node\Microsoft\Tracing\AppoxinloK_RASAPI32

SOFTWARE\Wow6432Node\Microsoft\Tracing\AppoxinloK_RASMANCS

SOFTWARE\WOW6432Node\Microsoft\Tracing\AppxeetouQ_RASAPI32

SOFTWARE\WOW6432Node\Microsoft\Tracing\AppxeetouQ_RASMANCS

SOFTWARE\WOW6432Node\Microsoft\Tracing\Hotfresh_RASAPI32

SOFTWARE\WOW6432Node\Microsoft\Tracing\Hotfresh_RASMANCS

SOFTWARE\WOW6432Node\Microsoft\Tracing\Kipolam_RASAPI32

SOFTWARE\WOW6432Node\Microsoft\Tracing\Kipolam_RASMANCS

SOFTWARE\WOW6432Node\Microsoft\Tracing\Kolnixo_RASAPI32

SOFTWARE\WOW6432Node\Microsoft\Tracing\Kolnixo_RASMANCS

SOFTWARE\Wow6432Node\Microsoft\Tracing\locep_RASAPI32

SOFTWARE\Wow6432Node\Microsoft\Tracing\locep_RASMANCS

SOFTWARE\Wow6432Node\Microsoft\Tracing\mbappert_RASAPI32

SOFTWARE\Wow6432Node\Microsoft\Tracing\mbappert_RASMANCS

SOFTWARE\Wow6432Node\Microsoft\Tracing\Pangoc_RASAPI32

SOFTWARE\Wow6432Node\Microsoft\Tracing\Pangoc_RASMANCS

SOFTWARE\WOW6432Node\Microsoft\Tracing\Pitachok_RASAPI32

SOFTWARE\WOW6432Node\Microsoft\Tracing\Pitachok_RASMANCS

SOFTWARE\WOW6432Node\Microsoft\Tracing\Pluslax_RASAPI32

SOFTWARE\WOW6432Node\Microsoft\Tracing\Pluslax_RASMANCS

SOFTWARE\WOW6432Node\Microsoft\Tracing\Polygen_RASAPI32

SOFTWARE\WOW6432Node\Microsoft\Tracing\Polygen_RASMANCS

SOFTWARE\Wow6432Node\Microsoft\Tracing\snorler_RASAPI32

SOFTWARE\Wow6432Node\Microsoft\Tracing\snorler_RASMANCS

SOFTWARE\Wow6432Node\Microsoft\Tracing\Tolnix_RASAPI32

SOFTWARE\Wow6432Node\Microsoft\Tracing\Tolnix_RASMANCS

SOFTWARE\WOW6432Node\Microsoft\Tracing\Voyasollam_RASAPI32

SOFTWARE\WOW6432Node\Microsoft\Tracing\Voyasollam_RASMANCS

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\appmallosayov.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AppoxinloK.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AppxeetouQ.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Hotfresh.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Kipolam.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Kolnixo.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\locep.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbappert.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Pangoc.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Pitachok.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Pluslax.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Polygen.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Quoteex.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snorler.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Tolnix.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Voyasollam.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\appmallosayov.exe

SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\AppoxinloK.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\AppxeetouQ.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Hotfresh.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Kipolam.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Kolnixo.exe

SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\locep.exe

SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\mbappert.exe

SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Pangoc.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Pitachok.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Pluslax.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Polygen.exe

SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\snorler.exe

SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Tolnix.exe

SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Voyasollam.exe

SOFTWARE\Wow6432Node\mtappmallosayov

SOFTWARE\Wow6432Node\mtAppoxinloK

SOFTWARE\Wow6432Node\mtAppxeetouQ

SOFTWARE\Wow6432Node\mtHotfresh

Software\WOW6432Node\mtKolnixo

SOFTWARE\Wow6432Node\mtlocep

SOFTWARE\Wow6432Node\mtmbappert

SOFTWARE\Wow6432Node\mtPangoc

SOFTWARE\Wow6432Node\mtPitachok

SOFTWARE\Wow6432Node\mtPluslax

SOFTWARE\Wow6432Node\mtPolygen

SOFTWARE\Wow6432Node\mtTolnix

SYSTEM\ControlSet001\services\appmallosayov

SYSTEM\ControlSet001\services\AppxeetouQ

SYSTEM\ControlSet001\services\Quoteex

SYSTEM\ControlSet001\services\Voyasollam

SYSTEM\ControlSet002\services\appmallosayov

SYSTEM\ControlSet002\services\AppxeetouQ

SYSTEM\ControlSet002\services\Quoteex

SYSTEM\ControlSet002\services\Voyasollam

SYSTEM\CurrentControlSet\services\appmallosayov

SYSTEM\CurrentControlSet\services\AppxeetouQ

SYSTEM\CurrentControlSet\services\Quoteex

SYSTEM\CurrentControlSet\services\Voyasollam

Directories

Snap.do may create the following directory or directories:

%ALLUSERSPROFILE%\Anwendungsdaten\Logic Cramble

%ALLUSERSPROFILE%\Application Data\AppoxinloK

%ALLUSERSPROFILE%\Application Data\Graveairs

%ALLUSERSPROFILE%\Application Data\Zonsoft

%ALLUSERSPROFILE%\Application Data\Zonsofts

%ALLUSERSPROFILE%\Application Data\apptreppabm

%ALLUSERSPROFILE%\Application Data\apptreppabms

%ALLUSERSPROFILE%\Application Data\appxafmads

%ALLUSERSPROFILE%\Application Data\kipolam

%ALLUSERSPROFILE%\Application Data\mbappert

%ALLUSERSPROFILE%\Application Data\mbapperts

%ALLUSERSPROFILE%\Application Data\pangoc

%ALLUSERSPROFILE%\Application Data\pangocs

%ALLUSERSPROFILE%\Application Data\tolnix

%ALLUSERSPROFILE%\Application Data\tolnixs

%ALLUSERSPROFILE%\AppnegyloP

%ALLUSERSPROFILE%\AppnorriA

%ALLUSERSPROFILE%\AppnorriAs

%ALLUSERSPROFILE%\AppoxinloK

%ALLUSERSPROFILE%\AppoxinloKs

%ALLUSERSPROFILE%\ApppotriA

%ALLUSERSPROFILE%\ApppotriAs

%ALLUSERSPROFILE%\AppthgildeMs

%ALLUSERSPROFILE%\AppxelosknoK

%ALLUSERSPROFILE%\BluetoothPoint

%ALLUSERSPROFILE%\BluetoothPoints

%ALLUSERSPROFILE%\Dados de aplicativos\Logic Cramble

%ALLUSERSPROFILE%\Daltit

%ALLUSERSPROFILE%\Daltits

%ALLUSERSPROFILE%\Dane aplikacji\Logic Cramble

%ALLUSERSPROFILE%\Dati applicazioni\Logic Cramble

%ALLUSERSPROFILE%\Datos de programa\Logic Cramble

%ALLUSERSPROFILE%\Graveairs

%ALLUSERSPROFILE%\Hotfreshs

%ALLUSERSPROFILE%\Pitachoks

%ALLUSERSPROFILE%\Polygen

%ALLUSERSPROFILE%\Polygens

%ALLUSERSPROFILE%\Silsolis

%ALLUSERSPROFILE%\Silsoliss

%ALLUSERSPROFILE%\Singdaxs

%ALLUSERSPROFILE%\Trioflex

%ALLUSERSPROFILE%\Trioflexs

%ALLUSERSPROFILE%\Viaair

%ALLUSERSPROFILE%\Viaairs

%ALLUSERSPROFILE%\Zonsoft

%ALLUSERSPROFILE%\Zonsofts

%ALLUSERSPROFILE%\appcognap

%ALLUSERSPROFILE%\apppitsirt

%ALLUSERSPROFILE%\apprelrons

%ALLUSERSPROFILE%\apprelronss

%ALLUSERSPROFILE%\apptreppabm

%ALLUSERSPROFILE%\apptreppabms

%ALLUSERSPROFILE%\appxafmads

%ALLUSERSPROFILE%\appxinlot

%ALLUSERSPROFILE%\ecivreSevaS

%ALLUSERSPROFILE%\ecivreSevaSs

%ALLUSERSPROFILE%\iretadpUMGRs

%ALLUSERSPROFILE%\kipolam

%ALLUSERSPROFILE%\loceps

%ALLUSERSPROFILE%\mbappert

%ALLUSERSPROFILE%\mbapperts

%ALLUSERSPROFILE%\ohnuze

%ALLUSERSPROFILE%\ohnuzes

%ALLUSERSPROFILE%\pangoc

%ALLUSERSPROFILE%\pangocs

%ALLUSERSPROFILE%\tolnix

%ALLUSERSPROFILE%\tolnixs

%ALLUSERSPROFILE%\xifss

%COMMONPROGRAMFILES%\AlphaString

%COMMONPROGRAMFILES%\Alphafan

%COMMONPROGRAMFILES%\Alphait

%COMMONPROGRAMFILES%\Alphatone

%COMMONPROGRAMFILES%\Apsing

%COMMONPROGRAMFILES%\Bio-Com

%COMMONPROGRAMFILES%\Biolight

%COMMONPROGRAMFILES%\Confind

%COMMONPROGRAMFILES%\Doublelab

%COMMONPROGRAMFILES%\Ecojob

%COMMONPROGRAMFILES%\Finphase

%COMMONPROGRAMFILES%\Fixfax

%COMMONPROGRAMFILES%\Goodlex

%COMMONPROGRAMFILES%\GrooveTax

%COMMONPROGRAMFILES%\Groovecof

%COMMONPROGRAMFILES%\HatTrax

%COMMONPROGRAMFILES%\Hometough

%COMMONPROGRAMFILES%\Icetech

%COMMONPROGRAMFILES%\Inchstrong

%COMMONPROGRAMFILES%\IndigoNix

%COMMONPROGRAMFILES%\Joy-Com

%COMMONPROGRAMFILES%\Kanla

%COMMONPROGRAMFILES%\KinDom

%COMMONPROGRAMFILES%\Kinin

%COMMONPROGRAMFILES%\Labzap

%COMMONPROGRAMFILES%\Lamcof

%COMMONPROGRAMFILES%\Lamity

%COMMONPROGRAMFILES%\Ontofan

%COMMONPROGRAMFILES%\OpenOvedom

%COMMONPROGRAMFILES%\OverLab

%COMMONPROGRAMFILES%\Ozercom

%COMMONPROGRAMFILES%\Physlab

%COMMONPROGRAMFILES%\Quojob

%COMMONPROGRAMFILES%\Quotelux

%COMMONPROGRAMFILES%\Qvoity

%COMMONPROGRAMFILES%\Ranfresh

%COMMONPROGRAMFILES%\Rantax

%COMMONPROGRAMFILES%\Rantip

%COMMONPROGRAMFILES%\Runtax

%COMMONPROGRAMFILES%\Soling

%COMMONPROGRAMFILES%\Strongtech

%COMMONPROGRAMFILES%\Strongtip

%COMMONPROGRAMFILES%\Subsoft

%COMMONPROGRAMFILES%\Tanity

%COMMONPROGRAMFILES%\Tipeco

%COMMONPROGRAMFILES%\ToughHold

%COMMONPROGRAMFILES%\Trusting

%COMMONPROGRAMFILES%\Truststring

%COMMONPROGRAMFILES%\Ventodex

%COMMONPROGRAMFILES%\Ventotone

%COMMONPROGRAMFILES%\Vilaflex

%COMMONPROGRAMFILES%\Villabam

%COMMONPROGRAMFILES%\VolCore

%COMMONPROGRAMFILES%\Voya-Strong

%COMMONPROGRAMFILES%\Zonlex

%COMMONPROGRAMFILES%\Zoomtip

%COMMONPROGRAMFILES%\Zoteco

%COMMONPROGRAMFILES%\Zuntough

%COMMONPROGRAMFILES%\biojob

%COMMONPROGRAMFILES%\dentozimeco

%COMMONPROGRAMFILES%\kanis

%COMMONPROGRAMFILES%\kay-dax

%COMMONPROGRAMFILES%\kinzuncom

%COMMONPROGRAMFILES%\vialax

%COMMONPROGRAMFILES%\zaamtom

%COMMONPROGRAMFILES%\zunfax

%COMMONPROGRAMFILES(x86)%\AlphaString

%COMMONPROGRAMFILES(x86)%\Alphafan

%COMMONPROGRAMFILES(x86)%\Alphait

%COMMONPROGRAMFILES(x86)%\Alphatone

%COMMONPROGRAMFILES(x86)%\Apsing

%COMMONPROGRAMFILES(x86)%\BigHotis

%COMMONPROGRAMFILES(x86)%\Bio-Com

%COMMONPROGRAMFILES(x86)%\Biodonkix

%COMMONPROGRAMFILES(x86)%\Biolight

%COMMONPROGRAMFILES(x86)%\Cofgohold

%COMMONPROGRAMFILES(x86)%\Confind

%COMMONPROGRAMFILES(x86)%\Donsillax

%COMMONPROGRAMFILES(x86)%\Doublelab

%COMMONPROGRAMFILES(x86)%\Ecojob

%COMMONPROGRAMFILES(x86)%\FaseQuoit

%COMMONPROGRAMFILES(x86)%\Finphase

%COMMONPROGRAMFILES(x86)%\Fix-Fan

%COMMONPROGRAMFILES(x86)%\Fixfax

%COMMONPROGRAMFILES(x86)%\FreshReddax

%COMMONPROGRAMFILES(x86)%\Freshlatlex

%COMMONPROGRAMFILES(x86)%\Goodlex

%COMMONPROGRAMFILES(x86)%\GrooveTax

%COMMONPROGRAMFILES(x86)%\Groovecof

%COMMONPROGRAMFILES(x86)%\HatTrax

%COMMONPROGRAMFILES(x86)%\Hometough

%COMMONPROGRAMFILES(x86)%\Icetech

%COMMONPROGRAMFILES(x86)%\Inchstrong

%COMMONPROGRAMFILES(x86)%\IndigoNix

%COMMONPROGRAMFILES(x86)%\Jobwarm

%COMMONPROGRAMFILES(x86)%\Joy-Com

%COMMONPROGRAMFILES(x86)%\Kanla

%COMMONPROGRAMFILES(x86)%\KinDom

%COMMONPROGRAMFILES(x86)%\Kinin

%COMMONPROGRAMFILES(x86)%\KonkDondax

%COMMONPROGRAMFILES(x86)%\Konksailnix

%COMMONPROGRAMFILES(x86)%\Labzap

%COMMONPROGRAMFILES(x86)%\Lamcof

%COMMONPROGRAMFILES(x86)%\Lamity

%COMMONPROGRAMFILES(x86)%\Math-Tax

%COMMONPROGRAMFILES(x86)%\Ontofan

%COMMONPROGRAMFILES(x86)%\OpeHotcom

%COMMONPROGRAMFILES(x86)%\OpenOvedom

%COMMONPROGRAMFILES(x86)%\OverLab

%COMMONPROGRAMFILES(x86)%\Ozercom

%COMMONPROGRAMFILES(x86)%\Physlab

%COMMONPROGRAMFILES(x86)%\Quojob

%COMMONPROGRAMFILES(x86)%\Quotelux

%COMMONPROGRAMFILES(x86)%\Qvoity

%COMMONPROGRAMFILES(x86)%\Ranfresh

%COMMONPROGRAMFILES(x86)%\Rantax

%COMMONPROGRAMFILES(x86)%\Rantip

%COMMONPROGRAMFILES(x86)%\Runtax

%COMMONPROGRAMFILES(x86)%\Sailsaobam

%COMMONPROGRAMFILES(x86)%\Soling

%COMMONPROGRAMFILES(x86)%\Statphase

%COMMONPROGRAMFILES(x86)%\Stockphase

%COMMONPROGRAMFILES(x86)%\Strongtech

%COMMONPROGRAMFILES(x86)%\Strongtip

%COMMONPROGRAMFILES(x86)%\Subsoft

%COMMONPROGRAMFILES(x86)%\SumLax

%COMMONPROGRAMFILES(x86)%\Sunlam

%COMMONPROGRAMFILES(x86)%\Tanity

%COMMONPROGRAMFILES(x86)%\Tinfresh

%COMMONPROGRAMFILES(x86)%\Tipeco

%COMMONPROGRAMFILES(x86)%\Top-Sing

%COMMONPROGRAMFILES(x86)%\ToughHold

%COMMONPROGRAMFILES(x86)%\Tresstring

%COMMONPROGRAMFILES(x86)%\Trippletantip

%COMMONPROGRAMFILES(x86)%\Trisla

%COMMONPROGRAMFILES(x86)%\Trusting

%COMMONPROGRAMFILES(x86)%\Truststring

%COMMONPROGRAMFILES(x86)%\Vento-Zap

%COMMONPROGRAMFILES(x86)%\Ventodex

%COMMONPROGRAMFILES(x86)%\Ventotone

%COMMONPROGRAMFILES(x86)%\Ventotop

%COMMONPROGRAMFILES(x86)%\Vilaflex

%COMMONPROGRAMFILES(x86)%\Villabam

%COMMONPROGRAMFILES(x86)%\VolCore

%COMMONPROGRAMFILES(x86)%\Voya-Strong

%COMMONPROGRAMFILES(x86)%\Xxx-Ransoft

%COMMONPROGRAMFILES(x86)%\Y--Tex

%COMMONPROGRAMFILES(x86)%\Zerex

%COMMONPROGRAMFILES(x86)%\Zonlex

%COMMONPROGRAMFILES(x86)%\ZooSiltam

%COMMONPROGRAMFILES(x86)%\Zoomstock

%COMMONPROGRAMFILES(x86)%\Zoomtip

%COMMONPROGRAMFILES(x86)%\Zoteco

%COMMONPROGRAMFILES(x86)%\Zuntough

%COMMONPROGRAMFILES(x86)%\biojob

%COMMONPROGRAMFILES(x86)%\dentozimeco

%COMMONPROGRAMFILES(x86)%\fixcom

%COMMONPROGRAMFILES(x86)%\freshhome

%COMMONPROGRAMFILES(x86)%\kanis

%COMMONPROGRAMFILES(x86)%\math-plus

%COMMONPROGRAMFILES(x86)%\vialax

%COMMONPROGRAMFILES(x86)%\zaamtom

%COMMONPROGRAMFILES(x86)%\zunfax

%PROGRAMFILES%\drÅÀÌ

%PROGRAMFILES%\eakzaihjajkuc

%PROGRAMFILES%\eauknrbnwrpu2

%PROGRAMFILES%\owdbzuqlndefnbhfezr

%PROGRAMFILES%\patience

%PROGRAMFILES%\rfwjmjnpstqu2

%PROGRAMFILES(x86)%\eakzaihjajkuc

%PROGRAMFILES(x86)%\eauknrbnwrpu2

%PROGRAMFILES(x86)%\owdbzuqlndefnbhfezr

%PROGRAMFILES(x86)%\patience

%PROGRAMFILES(x86)%\rfwjmjnpstqu2

%TEMP%\eakzaihjajkuc

%TEMP%\eauknrbnwrpu2

%TEMP%\owdbzuqlndefnbhfezr

%TEMP%\rfwjmjnpstqu2

Cookies

The following cookies were found:

feed.snap.do

URLs

Snap.do may call the following URLs:

feed.24-stream.com

feed.amazingtab.com

feed.any-templates.com

feed.cryptoverto.com

feed.ebooks-club.com

feed.free-converterz.com

feed.funkystreams.com

feed.game-jungle.com

feed.getlive.news

feed.giph-it.com

feed.live-streaming.online

feed.privatecheetah.com

feed.runspeedcheck.com

feed.salahweb.com

feed.searchfrit.com/?=

feed.sound-hd.com

feed.specialtab.com

feed.streamingworldcup.com

feed.techappnetwork.com

globo-search.com

http://feed.moviebox-online.com/

http://protected-search.com/

http://www.anysearchmanager.com/

https://feed.videoconverterz.com/?publisherid

pixel.pxcollect.com

videoconverterz.com

2 Comments

Douglas Wright 9 years ago Reply

I searched n searched the web for a way to remove snapdo from my computer after not being able to find it in my list of programs in the control panel and resetting my browser setting, i finally recognized the icon in my programs x86 it may come up as PRODUCTUI go in that folder and select uninstall.exe. it is now removed as of 2 mins ago.

rizwana minhaj 8 years ago Reply

i searched and searched the web to remove snapdo virus from my computer

EnigmaSoft's SpyHunter Scores 100% with AV-TEST in 2024

Search

Change Region

Snap.do

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Snap.do

File System Details

Registry Details

Directories

Cookies

URLs

2 Comments

Submit Comment

Trending

Baseauthenticity.co.in

PDFSpark

Uazq Ransomware

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?