[Resolved - K] Can't Remove Snap.Do

  • 22 Replies
  • 6644 Views
*

Offline Bulldog56

  • Bronze Member
  • 13
Re: [Resolved - K] Can't Remove Snap.Do
« Reply #15 on: April 08, 2014, 06:32:31 PM »
System Look Results

SystemLook 30.07.11 by jpshortstuff
Log created at 19:30 on 08/04/2014 by Leona
Administrator - Elevation successful

========== folderfind ==========

Searching for "*snap.do*"
No folders found.

Searching for "snap.do"
No folders found.

========== regfind ==========

Searching for "*snap.do*"
No data found.

Searching for "snap.do"
[HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\C73F6F4F91D8DAD4FBB7903531F34DF3]
"ProductName"="Snap.Do"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3951531334-4254371921-213892438-1000\Products\C73F6F4F91D8DAD4FBB7903531F34DF3\InstallProperties]
"HelpLink"="http://snap.do"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3951531334-4254371921-213892438-1000\Products\C73F6F4F91D8DAD4FBB7903531F34DF3\InstallProperties]
"URLInfoAbout"="http://snap.do"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3951531334-4254371921-213892438-1000\Products\C73F6F4F91D8DAD4FBB7903531F34DF3\InstallProperties]
"DisplayName"="Snap.Do"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F4F6F37C-8D19-4DAD-BF7B-0953133FD43F}]
"HelpLink"="http://snap.do"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F4F6F37C-8D19-4DAD-BF7B-0953133FD43F}]
"URLInfoAbout"="http://snap.do"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F4F6F37C-8D19-4DAD-BF7B-0953133FD43F}]
"DisplayName"="Snap.Do"
[HKEY_USERS\S-1-5-21-3951531334-4254371921-213892438-1000\Software\Microsoft\Installer\Products\C73F6F4F91D8DAD4FBB7903531F34DF3]
"ProductName"="Snap.Do"

-= EOF =-

*

Offline kevinf80

  • Malware Removal Staff
  • Diamond Member
  • 7696
Re: [Resolved - K] Can't Remove Snap.Do
« Reply #16 on: April 09, 2014, 02:36:47 AM »
Run OTM again as follows:

Double click OTM.exe to start the tool. Vista or Windows 7 users accepy UAC alert. Be aware all processes will be stopped during run, also Desktop will disappear, this will be put back on completion.... If your security alerts to OTM either, accept the alert or turn off security until OTM completes...
  • Copy the text from the code box belowbelow to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy). Ensure to start with and include the colon before Reg :Reg

Code: [Select]
:Reg
[-HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\C73F6F4F91D8DAD4FBB7903531F34DF3]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3951531334-4254371921-213892438-1000\Products\C73F6F4F91D8DAD4FBB7903531F34DF3]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F4F6F37C-8D19-4DAD-BF7B-0953133FD43F}]
[-HKEY_USERS\S-1-5-21-3951531334-4254371921-213892438-1000\Software\Microsoft\Installer\Products\C73F6F4F91D8DAD4FBB7903531F34DF3]
:Files
:Commands
[EmptyTemp]
  • Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
  • Click the red button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTM
Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

If the machine reboots, the Results log can be found here:

c:\_OTMoveIt\MovedFiles\mmddyyyy_hhmmss.log

Where mmddyyyy_hhmmss is the date of the tool run.

Let see that log, also let me know if any remaining issues or concerns...

Kevin

*

Offline Bulldog56

  • Bronze Member
  • 13
Re: [Resolved - K] Can't Remove Snap.Do
« Reply #17 on: April 10, 2014, 05:52:09 PM »
OTM Results

All processes killed
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\C73F6F4F91D8DAD4FBB7903531F34DF3\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3951531334-4254371921-213892438-1000\Products\C73F6F4F91D8DAD4FBB7903531F34DF3\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F4F6F37C-8D19-4DAD-BF7B-0953133FD43F}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4F6F37C-8D19-4DAD-BF7B-0953133FD43F}\ not found.
Registry key HKEY_USERS\S-1-5-21-3951531334-4254371921-213892438-1000\Software\Microsoft\Installer\Products\C73F6F4F91D8DAD4FBB7903531F34DF3\ not found.
========== FILES ==========
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrator
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: leona
->Temp folder emptied: 2165 bytes
->Temporary Internet Files folder emptied: 99886941 bytes
->Flash cache emptied: 0 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 94656 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 11414 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 95.00 mb
 
 
OTM by OldTimer - Version 3.1.21.0 log created on 04102014_184728

Files moved on Reboot...
C:\Users\leona\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\leona\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
C:\Windows\SysNative\WPRO_41_2001woem.tmp moved successfully.
C:\Windows\temp\LEONA-PC-20140409-0316.log moved successfully.
C:\Windows\temp\officeclicktorun.exe_c2ruidll(20140409031646650).log moved successfully.
C:\Windows\temp\officeclicktorun.exe_streamserver(20140409031646650).log moved successfully.
File move failed. C:\Windows\temp\ood_stream.x86.en-us.dat scheduled to be moved on reboot.
File move failed. C:\Windows\temp\ood_stream.x86.x-none.dat scheduled to be moved on reboot.
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

Registry entries deleted on Reboot...

*

Offline kevinf80

  • Malware Removal Staff
  • Diamond Member
  • 7696
Re: [Resolved - K] Can't Remove Snap.Do
« Reply #18 on: April 10, 2014, 05:55:44 PM »
What is the current status of your system, any remaining issues or concerns..

*

Offline kevinf80

  • Malware Removal Staff
  • Diamond Member
  • 7696
Re: [Resolved - K] Can't Remove Snap.Do
« Reply #19 on: April 14, 2014, 03:03:35 AM »
Are you still with us?

*

Offline Bulldog56

  • Bronze Member
  • 13
Re: [Resolved - K] Can't Remove Snap.Do
« Reply #20 on: April 14, 2014, 07:46:29 AM »
The computer is virus free.  Thanks so much for all of your help.  It is greatly appreciated.

*

Offline kevinf80

  • Malware Removal Staff
  • Diamond Member
  • 7696
Re: [Resolved - K] Can't Remove Snap.Do
« Reply #21 on: April 14, 2014, 01:40:38 PM »
Thanks for the update, to clean up run the following:

Download "Delfix by Xplode" and save it to your desktop.

"Delfix link mirror"

Double Click to start the program. If you are using Vista or higher, please right-click and choose run as administrator

Make Sure the following items are checked:

  • Activate UAC
  • Remove disinfection tools
  • Purge System Restore
  • Reset system settings

Now click on "Run" and wait patiently until the tool has completed.

The tool will create a log when it has completed, no need to post that log. If no remaining issues or concerns are we ok to close out....

Read the following link to fully understand PC security and best practices, you may find it useful....

http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/#entry2316629

Take care,

Kevin...



*

Offline kevinf80

  • Malware Removal Staff
  • Diamond Member
  • 7696
Re: [Resolved - K] Can't Remove Snap.Do
« Reply #22 on: April 20, 2014, 02:21:46 AM »
Since this issue appears to be resolved the topic has been closed. Glad we could help. 

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.

The fixes and advice in this thread are for this System only. Do not apply the instructions from this thread to your own System. Please start a new thread describing your issue and someone will be along to assist you.