Snap.do

Snap.do Description

Snap.do Image 1The Snap.do website is associated with the Smartbar toolbar for your web browser. This toolbar is actually an adware component. Even though Snap.do claims that Snap.do can simplify the way you access your favorite websites, this website and its associated toolbar have several unwanted behaviors that are more closely associated with known malware infections than with legitimate applications. Most of the time, the Snap.do toolbar will be bundled along with freeware programs, included in the installation process.

Reading the 'official' description of Snap.do, it would be hard to guess that this website is linked to malware. The people behind Snap.do claim that this website's vision is to become an industry leader in providing simple, smart web solutions to their clients as well as complementary programs that improve browser efficiency and make browsing simply with interfaces and technologies that computer users are already used to utilize. However, this vision does not match up well to reality, since products associated with Snap.do have various components that are more commonly associated with adware. There are three reasons why products associated with Snap.do are considered unsafe for your computer:

  1. Products associated with Snap.do may have spyware capabilities. That is, this website and software associated with Snap.do will collect your personal data and then distribute it to a third party without your authorization.
  2. The Snap.do website and software associated with Snap.do may also be considered adware. This is because Snap.do is designed to deliver intrusive advertisements based on private data collected about your browsing behaviors. These advertisements may appear as pop-up windows or embedded in web pages.
  3. Snap.do is also linked to browser hijackers. These kinds of components are designed to change your web browser's settings, affecting which websites you are able to visit and alters the way you browse the Internet.

While many websites associated with browser hijackers may, in themselves, be perfectly safe, this is not the case with Snap.do and software associated with this website. Due to their adware and browser hijacker components, any contact with the Snap.do website or with software associated with Snap.do should be followed with a thorough scan of your machine with a capable anti-malware application.

Aliases: a variant of MSIL/Toolbar.Linkury.AD potentially u [ESET-NOD32], a variant of Win32/Toolbar.Linkury.U.gen potential [ESET-NOD32], Adware.Linkury (fs) [VIPRE], Adware.MSIL.Linkury.AD [Baidu-International], Adware.Win32.Linkury.U [Baidu-International], Bloodhound.MalPE [Symantec], PE:Malware.RDM.26!5.20[F1] [Rising], PUP/Win32.Toolbar [AhnLab-V3] and TR/Trash.Gen [Avira].

Infected with Snap.do? Scan Your PC

Download SpyHunter's Spyware Scanner
to Detect Snap.do
* SpyHunter's scanner is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware removal tool to remove the malware threats. Read more on SpyHunter. If you no longer wish to have SpyHunter installed on your computer, follow these steps to uninstall SpyHunter.

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in "Safe Mode with Networking" and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of Snap.do outbreaks and other threats from global to local level.

File System Details

Snap.do creates the following file(s):
# File Name Size MD5 Detection Count
1 %PROGRAMFILES%\LPT\srpts.exe 32,288 45ae8b1012321bd23603dc5523147b29 4,744
2 %LOCALAPPDATA%\Smartbar\Application\SafeFinder.exe 28,160 77cb5a088603be7a4c76e4247e75c0c0 3,735
3 %PROGRAMFILES%\Stpro\Stpro.exe 30,224 57d620b04e90ddc1685ee761063037c9 3,557
4 %LOCALAPPDATA%\Ap\MTResources\btmn.dll 120,320 f57d5f35c459e318e42e930096af37fb 3,080
5 %LOCALAPPDATA%\Ap\Updater.exe 28,160 993074b30eddf22dacd78d1f6d569b23 2,708
6 %LOCALAPPDATA%\Ap\MTResources\spdrmn.dll 138,752 88bebb8d76f9af370b6eb26b9d94d84d 1,723
7 %LOCALAPPDATA%\LPT\srptm.exe 13,344 7132983a66846e51c5851bc3d5d2e191 1,664
8 %ALLUSERSPROFILE%\Logic Handler\set.exe 2,088,448 763a5fbd66900154a9ac312509556451 1,348
9 %LOCALAPPDATA%\Smartbar\Application\SnapDo.exe 13,824 50836d19673d80c46c02533d5618473b 1,235
10 %TEMP%\nsxA789.tmp\81\smartbar_3312014.exe 12,443,928 14dc7bab1c0127e3e671414057af4946 833
11 %ALLUSERSPROFILE%\afoir\afoir.exe 529,408 4c6c26b926eafde34f7c1abe89f1cc71 788
12 %LOCALAPPDATA%\Smartbar\Application\ShowPass.exe 27,432 9daab41af68391ef7b7caf9fabbb18ec 762
13 %LOCALAPPDATA%\Smartbar\Application\Shopop.exe 28,168 293952930597e708739a3dc79788e8e4 482
14 %LOCALAPPDATA%\Smartbar\Application\Muvic.exe 21,536 35ac6abec54c6a92f1061c0a1a302de2 472
15 %LOCALAPPDATA%\Smartbar\Application\BingProtect.exe 28,680 51156e54b88e80ae60e5212b4ed8016c 366
More files

Registry Details

Snap.do creates the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
{754DA97B-8295-4C12-A424-C97F545BE2C1}
{28439B3A-66D3-43AD-8C4A-21420B002CEA}
{E46522F5-14D0-47C4-88A6-5D1AB542FBDA}
{6D6299A2-87B5-471A-B5DB-9259A4F97F12}
{6FA71142-5ECD-460E-9490-43F48580BB44}
{12D85DFB-576B-4643-A065-8FBB8B1F2EB1}
{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}
{FB385922-2E32-4462-A7DC-27159614A660}
{a52359df-0e4b-482f-80e6-d48ce3e13593}
{AB65D81D-303A-4DDB-AC7C-12C9CD9F67FB}
{35140f4a-349c-47cb-b176-0b7d75aee69a}
{08dfc13f-9c9e-47ba-8c19-436f01b93131}
{b1a8a81b-f347-48b9-8015-5e69d78731c1}
{F97A8857-2A38-4CE9-A53A-F07E491F2DA8}
{5d6b1888-2812-4739-bab8-489c316786c5}
{8956ABAC-F1A3-4AED-9D71-10C9084C081D}
{BDAF93B9-566F-4C94-A102-980F2805B306}
{4359e553-bc84-46a7-be9c-29cdb40179f3}
{F38B999F-0792-4434-82B9-6337E1856249}
{5AEB9B81-6731-4AA0-8C34-3019F8592675}
{254006BC-97DE-4C82-A1A1-A2BAD2520083}
{496E1034-8FA9-4227-B74A-AF468A6A1D78}
{50116E58-B2E8-420A-90C3-4318CEA5C600}
{AD5D1F6A-CCF9-48C9-8BEC-4C22977824CB}
{E8C5E6E4-AE46-42BB-B8A9-B721930B3FB1}
{ECD557F9-F3A0-45A9-951D-97369E4E0CB0}
{8AF6ABCA-4EA5-4E07-8A26-CDE5F1D76422}
{A98B3198-20A9-4A80-8AB0-789CB2EF10C4}
{2FB1B538-9B68-47BF-9647-C5E416ECFD60}
{C53FF018-DE63-4180-AF7D-7CCF7181C9AA}
{0F14DED4-0EB4-41F3-AC3F-B3F5C9A3B101}
{28B14A13-EF5D-4117-8734-C32C9F8B478C}
{C972C991-1F79-4710-AEB0-3EE629885680}
{9027E087-79B3-4904-AE3A-F429E413B67E}
{2C80560D-7990-4338-A80B-69F7F3549A72}
{8DCBED34-A628-43A0-8AC1-A00315ECE373}
{5C3DE902-6E8E-4B10-AB26-4768DD83A387}
{8993F1CF-2B3A-4B13-9713-828E075A3D10}
{F185CB32-689F-42AF-94D3-E11573C58BB1}
{EF9EC184-3619-472B-877E-9F8F9B0F9B1E}
{ACC9B4E8-5746-4F49-9130-47ECF68E91FC}
{EFC7D642-62D1-48DF-A5A3-697A849B690C}
{13B4E83C-4201-4AD9-8F61-96E6E4318D06}
{7594A295-EF06-4BE9-85D8-99A18A206175}
{B95A4FB4-3E04-4591-92E7-CC0C410BA4F5}
{2B4481C8-D6F7-4890-879B-AF97A879FE44}
{BC4B7F0E-9344-49AC-A1CE-15228B316723}
{BFADDFCB-A4B2-4078-9634-F15B21D2EC43}
{E55BBB26-47BD-4026-A4D2-5A4BCFA889CA}
{8E8810AB-5E47-462B-9087-A333A938BDDE}
{6B02C055-14CE-41A1-939A-600014316B8F}
{04F0E282-570C-4BF9-B446-77E22B7E9C89}
{FF32E50B-B2B0-4ECD-9530-5C37CE360DD2}
{76D809C3-5493-44C2-80AF-E5DF1690A74F}
{3516010E-39E7-43C4-A213-D1681B37322D}\
{844D1BD9-8223-4B54-A3A7-3A8F6868AC17}
{14AC52BD-49FA-4E2D-B28F-C2405E35E4E4}
{76F58206-0617-4510-8C5E-3736B0292C07}
{D926021F-0EF1-465B-B0A7-FB7BA103111C}
{16ADAB80-C315-483A-AFB5-3B67110F0206}
{568C89AB-B002-4C21-B42C-9B29AB1D7DD9}
{1D2E2486-2C82-4E89-A86D-93C7F9315C49}
{B7B50887-234F-43DB-9982-CB75A1B0E572}
{3D03CF02-9A90-4546-9600-9B0D3FE1AFCF}
{0598460A-1C85-406A-9CDC-12AC004B1D81}
{A8EC94E6-6285-4E63-AFAF-CBE99F33F3C0}
{EDE6E1AD-D22D-4750-BECF-09EA34804EF9}
{5FACC4E0-2314-4AE3-A93E-C774A85F231B}
{6B26A14B-151C-43A6-8D54-3CDE59734B5F}
{B024FCC6-B9F4-4BCB-9D85-98323069A8A3}
{8D04ADCB-7AFF-47E2-AF6E-795F9253490E}
{023270AF-DDDF-4F6C-B023-89FEF4EDC7DF}
{32F486CC-D167-4CD0-A67E-D518BFCFF97C}
{04C74AF9-4AA1-465E-B831-31131A8AB6D2}
{064C8179-3EDC-4045-8759-EDB371796100}
HKEY..\..\..\..{RegistryKeys}
Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}
Software\Smartbar
Software\SmartbarBackup
Software\SmartbarLog
IESmartBar.DockingPanel
IESmartBar.IESmartBar
IESmartBar.IESmartBarBandObject
IESmartBar.SmartbarMenuForm
SOFTWARE\Wow6432Node\Microsoft\Tracing\smartbar_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\smartbar_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\SnapDo_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\SnapDo_RASMANCS
SOFTWARE\Classes\IESmartBar.BandObjectAttribute
SOFTWARE\Classes\IESmartBar.SmartbarDisplayState
SOFTWARE\Classes\IESmartBar.SmartbarMenuForm
SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION, value: SnapDo.exe
Record\{181480C8-90AC-3430-B39A-CD121E034A1A}
Software\Google\Chrome\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{754DA97B-8295-4C12-A424-C97F545BE2C1}
Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}
Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}
Record\{8F54FA54-1DF8-3B20-890C-CDD95364BC95}
Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{28439B3A-66D3-43AD-8C4A-21420B002CEA}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Software\Microsoft\Installer\Products\5F22564E0D414C74886AD5A15B24BFAD
Software\Microsoft\Installer\Features\5F22564E0D414C74886AD5A15B24BFAD
Software\Microsoft\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6D6299A2-87B5-471A-B5DB-9259A4F97F12}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6FA71142-5ECD-460E-9490-43F48580BB44}
Software\Microsoft\Installer\Features\24117AF6DCE5E0644909344F5808BB44
Software\Microsoft\Installer\Products\24117AF6DCE5E0644909344F5808BB44
Software\Microsoft\Internet Explorer\DOMStorage\snapdo.com
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{12D85DFB-576B-4643-A065-8FBB8B1F2EB1}
Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION, value: Smartbar.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E3CE881D-94D9-435A-9DEA-EBB5390BC2CC}
Software\Microsoft\Installer\Products\D188EC3E9D49A534D9AEBE5B93B02CCC
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E3CE881D-94D9-435A-9DEA-EBB5390BC2CC}
Software\Microsoft\Windows\CurrentVersion\Uninstall\{01d8d174-f6aa-4d65-a3fe-c4c32aeb2b43}
SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
SOFTWARE\Classes\Record\{181480C8-90AC-3430-B39A-CD121E034A1A}
SOFTWARE\Classes\Record\{8F54FA54-1DF8-3B20-890C-CDD95364BC95}
SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration, value: {AE07101B-46D4-4A98-AF68-0333EA26E113}
.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}
SOFTWARE\Google\Chrome\NativeMessagingHosts\sb.host
SOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\sb.host
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\47DAF77F4EB85684BBAB9BA5EA000721
Software\Microsoft\Installer\UpgradeCodes\47DAF77F4EB85684BBAB9BA5EA000721
Software\Microsoft\Installer\Features\363FB0CBBA367FF4E81FEAD0F717B142
Software\Microsoft\Installer\Products\363FB0CBBA367FF4E81FEAD0F717B142
Software\Microsoft\Installer\Features\35D1D71731679C14B98622199B2208D3
Software\Microsoft\Installer\Products\35D1D71731679C14B98622199B2208D3
Software\Microsoft\Installer\Features\D18D56BAA303BDD4CAC7219CDCF976BF
Software\Microsoft\Installer\Products\D18D56BAA303BDD4CAC7219CDCF976BF
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}
Software\Microsoft\Installer\Features\7588A79F83A29EC45AA30FE794F1D28A
Software\Microsoft\Installer\Features\104BD2400FF24D34A91D795A4EC18F46
Software\Microsoft\Installer\Products\104BD2400FF24D34A91D795A4EC18F46
SOFTWARE\Wow6432Node\Microsoft\Tracing\FRGSmartbar_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\FRGSmartbar_RASMANCS
SOFTWARE\Microsoft\Tracing\FRGSmartbar_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\ShowPass_RASAPI32
SOFTWARE\Microsoft\Tracing\ShowPass_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\ShowPass_RASMANCS
SOFTWARE\Microsoft\Tracing\ShowPass_RASMANCS
Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION, value: ShowPass.exe
Software\Microsoft\Internet Explorer\DOMStorage\browse-search.com
SYSTEM\CurrentControlSet\services\ToolGet
SYSTEM\ControlSet002\services\ToolGet
SYSTEM\ControlSet001\services\ToolGet
SOFTWARE\Microsoft\Tracing\ToolGet_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\ToolGet_RASMANCS
SOFTWARE\Microsoft\Tracing\ToolGet_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\ToolGet_RASAPI32
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ToolGet
Environment, value: SNP
Environment, value: SNF
SOFTWARE\Microsoft\Tracing\SnapDo_run_RASMANCS
SOFTWARE\Microsoft\Tracing\SnapDo_run_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\SnapDo_run_RASMANCS
SYSTEM\ControlSet001\services\SnapDo
SOFTWARE\Microsoft\Tracing\Snap_RASAPI32
SYSTEM\CurrentControlSet\services\Villatop
SYSTEM\ControlSet002\services\Villatop
SYSTEM\ControlSet001\services\Villatop
SOFTWARE\Microsoft\Tracing\Villatop_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\Villatop_RASMANCS
SOFTWARE\Microsoft\Tracing\Villatop_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\Villatop_RASAPI32
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Villatop
SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
SYSTEM\CurrentControlSet\services\eventlog\Application\Application Hosting
SYSTEM\ControlSet002\services\eventlog\Application\Application Hosting
SYSTEM\ControlSet001\services\eventlog\Application\Application Hosting
SOFTWARE\Wow6432Node\Microsoft\Tracing\ApplicationHosting_RASMANCS
SOFTWARE\Microsoft\Tracing\ApplicationHosting_RASMANCS
SOFTWARE\Wow6432Node\mtMedlight
Software\mtMedlight
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Medlight.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Medlight.exe
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Medlight.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Medlight.exe
SYSTEM\ControlSet001\services\Medlight
SOFTWARE\Microsoft\Tracing\Smartbar_RASMANCS
SOFTWARE\Microsoft\Tracing\Smartbar_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
Software\Wow6432Node\mtRonzap
Software\mtRonzap
Software\mtViatax
SOFTWARE\Microsoft\Tracing\Ronzap_RASAPI32
SOFTWARE\Microsoft\Tracing\Ronzap_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\Ronzap_RASMANCS
SOFTWARE\mtyakdo
SOFTWARE\Classes\Record\{2700A4F8-329C-3AC2-A95B-A26F5595869E}
Software\Wow6432Node\mtTrescof
Software\mtTrescof
SOFTWARE\Microsoft\Tracing\Trescof_RASMANCS
SOFTWARE\Microsoft\Tracing\Trescof_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\Trescof_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\Trescof_RASAPI32
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nimfind.exe
SOFTWARE\Wow6432Node\mtNimfind
SOFTWARE\mtNimfind
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nimfind.exe
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Nimfind.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Nimfind.exe
SYSTEM\CurrentControlSet\services\Ronzap
SYSTEM\ControlSet002\services\Ronzap
SYSTEM\ControlSet001\services\Ronzap
SOFTWARE\Microsoft\Tracing\Sunflex_RASMANCS
SOFTWARE\Microsoft\Tracing\Sunflex_RASAPI32
SOFTWARE\Wow6432Node\mtQuoteex
SOFTWARE\mtQuoteex
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ronzap.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ronzap.exe
SOFTWARE\Wow6432Node\Microsoft\Tracing\Utatity_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\Utatity_RASMANCS
SOFTWARE\mtUtatity
SOFTWARE\Wow6432Node\mtUtatity
SOFTWARE\mtControl
SOFTWARE\Wow6432Node\mtControl
SYSTEM\CurrentControlSet\services\backlh
SYSTEM\ControlSet002\services\backlh
SYSTEM\ControlSet001\services\backlh
SOFTWARE\Wow6432Node\Microsoft\Tracing\Lamzap_RASMANCS
SOFTWARE\Microsoft\Tracing\Lamzap_RASMANCS
SOFTWARE\mtLamzap
SOFTWARE\Wow6432Node\mtLamzap
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Quotenamron.exe
SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotenamron_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\Quotenamron_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Quotenamron.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Quotenamron.exe
SOFTWARE\mtQuotenamron
SOFTWARE\Wow6432Node\mtQuotenamron
SOFTWARE\Wow6432Node\mtFaxtip
SOFTWARE\mtFaxtip
SOFTWARE\Wow6432Node\Microsoft\Tracing\Faxtip_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\Faxtip_RASMANCS
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Utatity.exe
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Utatity.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Utatity.exe
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Utatity.exe
SYSTEM\CurrentControlSet\services\lanzap
SYSTEM\ControlSet001\services\lanzap
SYSTEM\ControlSet002\services\lanzap
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Faxtip.exe
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Faxtip.exe
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Faxtip.exe
SOFTWARE\Microsoft\Tracing\Doubleing_RASAPI32
SOFTWARE\Microsoft\Tracing\Doubleing_RASMANCS
SOFTWARE\mtDoubleing
SOFTWARE\Wow6432Node\mtDoubleing
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Lamzap.exe
SOFTWARE\Microsoft\Tracing\Greentanlex_RASAPI32
SOFTWARE\Microsoft\Tracing\Greentanlex_RASMANCS
Software\Microsoft\Installer\Products\78805B7BF432BD349928BC571A0B5E27
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Doubleing.exe
SOFTWARE\Microsoft\Tracing\Nettrans_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\Nettrans_RASAPI32
SOFTWARE\Microsoft\Tracing\Nettrans_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\Nettrans_RASMANCS
SOFTWARE\Microsoft\Tracing\Stanla_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\Stanla_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Doubleing.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Doubleing.exe
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Doubleing.exe
SOFTWARE\Microsoft\Tracing\HotLatdex_RASMANCS
SOFTWARE\WOW6432Node\Microsoft\Tracing\HotLatdex_RASMANCS
SOFTWARE\Microsoft\Tracing\HotLatdex_RASAPI32
SOFTWARE\WOW6432Node\Microsoft\Tracing\HotLatdex_RASAPI32
Software\mtZaamla
SOFTWARE\Wow6432Node\mtZaamla
SOFTWARE\Microsoft\Tracing\LogicHandler_RASMANCS
SOFTWARE\WOW6432Node\Microsoft\Tracing\LogicHandler_RASAPI32
SYSTEM\CurrentControlSet\Services\Plusdax
SYSTEM\ControlSet002\Services\Plusdax
SYSTEM\ControlSet001\Services\Plusdax
SOFTWARE\Microsoft\Tracing\Plusdax_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\Plusdax_RASAPI32
SOFTWARE\Microsoft\Tracing\Plusdax_RASAPI32
SYSTEM\CurrentControlSet\services\PrefersSecure
SYSTEM\ControlSet002\services\PrefersSecure
SYSTEM\ControlSet001\services\PrefersSecure
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}
Browser Infrastructure Helper
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{006ee092-9658-4fd6-bd8e-a21a348e59f5}
{181480C8-90AC-3430-B39A-CD121E034A1A}
{2009AF2F-5786-3067-8799-B97F7832FDD6}
{425E7597-03A2-338D-B72A-0E51FFE77A7E}
{56561B2A-FB5D-363A-9631-4C03D6054209}
{754DA97B-8295-4C12-A424-C97F545BE2C1}
{A717364F-69F3-3A24-ADD5-3901A57F880E}
{CCB08265-B35D-30B2-A6AF-6986CA957358}
{CD92622E-49B9-33B7-98D1-EC51049457D7}
{E041E037-FA4B-364A-B440-7A1051EA0301}
{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}

Site Disclaimer

2 Comments

  • rizwana minhaj:

    i searched and searched the web to remove snapdo virus from my computer

  • Douglas Wright:

    I searched n searched the web for a way to remove snapdo from my computer after not being able to find it in my list of programs in the control panel and resetting my browser setting, i finally recognized the icon in my programs x86 it may come up as PRODUCTUI go in that folder and select uninstall.exe. it is now removed as of 2 mins ago.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as is:
What is 9 + 3 ?