Severity scale:  

Remove (Virus Removal Instructions) - updated May 2020

removal by Lucia Danes - - | Type: Browser Hijackers

Snapdo is promoted as a useful extension but is more likely to be called a potentially unwanted program or even a browser hijacker

Examples of Snapdo search is a so-called potentially unwanted program that should be considered for removing once spotted on your computer. is a browser extension by Resoft Ltd. that promises to enhance browsing experience by providing useful features, such as snapping browser’s screen or getting quick access to social networks. However, security experts note that it’s a potentially unwanted program (PUP)[1] and a browser hijacker.[2]

The add-on has an official website. However, Snapdo is also actively spreading freeware and shareware packages. Thus, it might enter the system unnoticed and cause unwanted changes on Google Chrome, Mozilla Firefox, and Internet Explorer. After the hijack, it might:

  • modify or create new Windows Registry entries;
  • alter the browser’s settings;
  • set or similar domain as the default homepage, search engine, and new tab URL;
  • provide altered search results;
  • trigger redirects to promotional websites;
  • display aggressive or misleading ads;[3]
  • track information about users.

The most obvious sign that virus affected your browser is search redirects to and similar pages. The hijacker might change your default and built-in search engines in order to control user’s behavior and redirect them to affiliate websites. Please, take into account that this search site can easily redirect you to an insecure website filled with malicious links

If you noticed redirect problem during your search sessions, you should check your PC with reliable anti-spyware because it's one of the most obvious signs showing that your PC was hijacked. Security experts from[4] also remind staying away from commercial content displayed by the hijacker to avoid the installation of malicious content and suffering from phishing attempts.

Questions about

Just like any other browser hijacker, Snapdo virus may start tracking your browsing habits. Here's what the developers of this program claim about it:

Statistical Information we collect (……) including, inter alia, advertisements viewed, pages browsed, search inquiries, offers and services that interest you, the type of browser you are using, your IP address, the URL you have come from and the time spent at that URL, cookies and your domain type and server.

Therefore, you should not delay Snapdo removal. Once this shady domain appears on the screen, you have to scan the system with an anti-malware to terminate all hijacker-related entries from the system. Reimage Reimage Cleaner Intego is the quickest method to get rid of all changes that were made by the PUP.

You can also remove manually by following our prepared guide below. However, you should be attentive and delete all files, programs, and browser hijackers that may have installed to the hijacker or were installed with it.

Snapdo browser is a browser hijacker that might alter Chrome, Firefox, and Internet Explorer settings and force to use the questionable search engine.

Applications related to virus is one of the search engines that might be set as default after the hijack. This questionable application might redirect to sponsored websites directly from the search results link. While some of them are absolutely legit and safe to open, others might belong to cybercriminals that might want to obtain sensitive information or infect your PC with malware. is another domain that users might found after the installation of Snapdo extension. Just like the previous search tool, this one also is known for being capable of delivering altered search results and pushing commercial content to the users. The problem is that some of the links or ads might be misleading or malware-laden.

IToolBox Toolbar is a browser extension that has been known for spreading Snapdo and setting one of its search engines as an affected web browser’s homepage or default search engine. Additionally, it might also install a bunch of other PUPs that might cause other browsing-related issues, such as redirects, aggressive pop-ups, etc.

Thus, if you have installed this toolbar and found replaced search engine, you have to uninstall it in order to remove Snapdo search services as well. If you want to keep this extension, you will have to use this search engine. None of this is recommended.

Browse for the Cause extension is another highly suspicious application. Its functionality is questioned by security experts. The add-on claims to donate money to charities. However, it operates as a browser hijacker and promotes services. Therefore, keeping it installed is not recommended.

Shopping Helper Smartbar is a potentially unwanted program that is capable of hijacking popular web browsers and hijacking their homepage or default search engine. The research has shown, that it typically sets instead of the default browser’s startup page.

However, it’s not the only feature why users are advised to stay away from this shopping assistant. It might also display misleading ads, fake shopping offers, or find other ways to obtain personal user’s information.

Software bundling is the main distribution method of the browser hijacker

You may easily install this program on your computer in a bundle with free programs. In order to avoid that, you should avoid illegal programs because they may be filled with malicious components.

Of course, we must also recommend you to be very careful when downloading freeware[5] and shareware. If you think that you really need one or another program, you should select the Custom or Advanced installation process because it will help you to see what “optional” components are hiding inside.

Uninstall the and toolbar once you see them working on your computer without your consent

We highly recommend opting for automatic Snapdo removal. This application spreads bundled and might bring other PUPs into the system. They might be hard to find and identify. As a result, you might be spending ages with locating and terminating hijacker-related components from the system.

However, if running a system scan with reputable anti-malware software does not seem right for you, we suggest checking the manual removal guide below. In order to remove Snapdo entirely, you have to uninstall suspicious programs from the computer, unknown extensions from each of the browsers, and reset them.

You may remove virus damage with a help of Reimage Reimage Cleaner Intego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage Happiness
Intego Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner. snapshot virus

To remove, follow these steps:

Get rid of from Windows systems

To uninstall virus and prevent its reappearance in the future, you need to remove every element of this browser hijacker, including SnapDo toolbar, Snap.Do Updated, Shopping Helper Smartbar, Saving Expert Smartbar and entries by ReSoft Ltd.

  1. Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs). Click 'Start -> Control Panel -> Programs and Features' (if you are 'Windows XP' user, click on 'Add/Remove Programs').
  2. If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program. If you are 'Windows 10 / Windows 8' user, then right-click in the lower left corner of the screen. Once 'Quick Access Menu' shows up, select 'Control Panel' and 'Uninstall a Program'.
  3. Uninstall and related programs
    Here, look for or any other recently installed suspicious programs.
  4. Uninstall them and click OK to save these changes. Right click on each of suspicious entries and select 'Uninstall'
  5. Remove from Windows shortcuts
    Right click on the shortcut of Mozilla Firefox and select Properties. Right click on browsers' icon and select 'Properties'
  6. Go to Shortcut tab and look at the Target field. Delete malicious URL that is related to your virus. Select 'Shortcut' tab and delete '' or other suspicious URL

Repeat steps that are given above with all browsers' shortcuts, including Internet Explorer and Google Chrome. Make sure you check all locations of these shortcuts, including Desktop, Start Menu and taskbar.

Eliminate from Mac OS X system

If your macOS is displaying some infection symptoms, proceed with the following guide:

Remove from Applications folder:

  1. From the menu bar, select Go > Applications.
  2. In the Applications folder, look for entries.
  3. Click on the app and drag it to Trash (or right-click and pick Move to Trash)Uninstall from Mac 1

To fully remove, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:

  1. Select Go > Go to Folder.
  2. Enter /Library/Application Support and click Go or press Enter.
  3. In the Application Support folder, look for any dubious entries related to and then delete them.
  4. Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the entries.Uninstall from Mac 2

Delete from Internet Explorer (IE)

Follow these steps to terminate all hijacker-related components from the Internet Explorer:

Remove dangerous add-ons:

  1. Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
  2. Pick Manage Add-ons.
  3. You will see a Manage Add-ons window. Here, look for and other suspicious plugins. Click on these entries and select Disable.Remove add-ons from Internet Explorer

Change your homepage if it was altered:

  1. Open IE and click on the Gear icon.
  2. Select Internet Options.
  3. In the General tab, delete the Home page address and replace it by your preferred one (for example,
  4. Click Apply and then select OK.Reset IE homepage

Delete temporary files:

  1. Press on the Gear icon and select Internet Options.
  2. Under Browsing history, click Delete…
  3. Select relevant fields and press Delete.Clear temporary files from Internet Explorer

Reset Internet Explorer:

  1. Click on Gear icon > Internet options and select Advanced tab.
  2. Select Reset.
  3. In the new window, check Delete personal settings and select Reset again to complete removal.Reset Internet Explorer

Uninstall from Mozilla Firefox (FF)

In order to remove from the Firefox, follow this guide:

  1. Remove dangerous extensions
    Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions. Click on menu icon and select 'Add-ons'
  2. Here, select and other questionable plugins. Click Remove to delete these entries. Select 'Extensions' and look for malicious entries. Click 'Remove' to get rid of each of them
  3. Change your homepage if it was altered by virus:
    Click on the menu (top right corner), choose Options General.
  4. Here, delete malicious URL and enter preferable website or click Restore to default.
  5. Click OK to save these changes. When in 'General' tab, delete malicious URL from 'Home Page' section or click on 'Restore to Default' button. Click 'OK' to save changes
  6. Reset Mozilla Firefox
    Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information. Click on menu icon and then on '?'. Select 'Troubleshooting Information'
  7. Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete removal. Click on 'Reset Firefox' button for a couple of times

Erase from Google Chrome

Uninstall questionable Chrome extensions and reset the browser as shown below:

  1. Delete malicious plugins
    Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions. Click on menu icon. Select 'Tools' and 'Extensions'
  2. Here, select and other malicious plugins and select trash icon to delete these entries. Look for malicious entries and delete each of them by clicking on the Trash bin icon
  3. Change your homepage and default search engine if it was altered by your virus
    Click on menu icon and choose Settings.
  4. Here, look for the Open a specific page or set of pages under On startup option and click on Set pages. After clicking on menu and 'Settings', select 'Set pages'
  5. Now you should see another window. Here, delete malicious search sites and enter the one that you want to use as your homepage. Click 'X' to remove malicious URLs
  6. Click on menu icon again and choose Settings Manage Search engines under the Search section. When in 'Settings', select 'Manage search engines...'
  7. When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name. Click 'X' to remove malicious URLs
  8. Reset Google Chrome
    Click on menu icon on the top right of your Google Chrome and select Settings.
  9. Scroll down to the end of the page and click on Reset browser settings. When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  10. Click Reset to confirm this action and complete removal. Click on 'Reset' button to complete your removal

Get rid of from Safari

  1. Remove dangerous extensions
    Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences. Click on 'Safari' and select 'Preferences'
  2. Here, select Extensions and look for or other suspicious entries. Click on the Uninstall button to get rid each of them. Go to 'Extensions' and uninstall malicious add-ons
  3. Change your homepage if it was altered by virus:
    Open your Safari web browser and click on Safari in menu section. Here, select Preferences as it was displayed previously and select General.
  4. Here, look at the Homepage field. If it was altered by, remove unwanted link and enter the one that you want to use for your searches. Remember to include the "http://" before typing in the address of the page. When in 'General', delete malicious URL and enter your desired domain name
  5. Reset Safari
    Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari.... Click on 'Safari' and select 'Reset Safari...'
  6. Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete removal process. Select all options and click on 'Reset' button

Access your website securely from any location

When you work on the domain, site, blog, or different project that requires constant management, content creation, or coding, you may need to connect to the server and content management service more often. It is a hassle when your website is protected from suspicious connections and unauthorized IP addresses.

The best solution for creating a tighter network could be a dedicated/fixed IP address. If you make your IP address static and set to your device, you can connect to the CMS from any location and do not create any additional issues for server or network manager that need to monitor connections and activities. This is how you bypass some of the authentications factors and can remotely use your banking accounts without triggering suspicious with each login. 

VPN software providers like Private Internet Access can help you with such settings and offer the option to control the online reputation and manage projects easily from any part of the world. It is better to clock the access to your website from different IP addresses. So you can keep the project safe and secure when you have the dedicated IP address VPN and protected access to the content management system.

Backup files for the later use, in case of the malware attack

Computer users can suffer from data losses due to cyber infections or their own faulty doings. Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact – you can set this process to be performed automatically.

When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use Data Recovery Pro for the data restoration process.

About the author
Lucia Danes
Lucia Danes - Virus researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Lucia Danes
About the company Esolutions

Removal guides in other languages

  1. os pica says:
    November 4th, 2012 at 12:41 pm

    obrigado pelo removedor tankyou

  2. ThePwnageChicken says:
    June 10th, 2013 at 9:48 pm

    Sorry, but I only speak English

  3. Lalas says:
    November 22nd, 2013 at 5:24 am

    He said : “thank you for the removing assistance, thanks”

  4. Joseph says:
    November 17th, 2012 at 9:33 pm

    After I clicked on the download for the remover, it said that I had to register to get off my computer, I made sure to do the trial version.

  5. harry says:
    April 5th, 2013 at 9:50 am

    didnt know it was a virus :/ Im scared

  6. hater says:
    June 2nd, 2013 at 1:52 am

    I tried to delete it through the control panel and clicking un-install programs but it wouldnt un-install.

  7. Rosean says:
    January 9th, 2014 at 9:25 am

    The same thing happened to me

  8. ThePwnageChicken says:
    June 10th, 2013 at 9:47 pm

    Holy Website, I didnt know SNAP.DO was a virus.

  9. Benjamin Fournier says:
    June 28th, 2013 at 12:06 am

    (Apologies for the intro but bear with it and get a guaranteed 10 minute fix for A friend asked me to fix his pc. While I had never personally seen the issue before I was suddenly faced with attempting to remedy the issue. After nearly 3 hours of researching and attempting to apply “so called” fixes on a popular search engine I discovered something. I had spent nearly 3 hours of my time sifting through a completely new scam beyond Whoever researches this fix will quickly run into templated responses that recommend certain “free” downloads that require you to ultimately pay for a product to remove After that there are long extensive “manual fixes” that almost pushes you into saying screw it and I’ll pay for the previous search engine finds until I finally found the actual-non-profit making solution. I apologize now for not linking my source as I am writing this well after the fact and can no longer find the impetus for this post but credit is due for the fix I finally found and I thank you for the catalyst. Yes I did.
    In order to fix the issue simply boot up your pc and wait for all the spam/error messages to cycle threw. Do not open your internet browser. Simply go to control panel (from start menu) and select programs. (Depending on windows version this may differ slightly but there is an option with “programs” in the name of the category and that’s the one you need to click. Once your list is completely loaded look for Either right click or double left click to get to the uninstall option. (Be sure to write down the date associated with first!!))Then click uninstall and minimize all windows except the one that appears after you choose to uninstall.
    [This is where catches everyone and tempts them into buying a product to assist] There should normally be a message here asking if you are sure or if you want to proceed with the uninstall…..instead the uninstall window just sits there for eternity. snap.dos biggest trick is that they hide the option to accept or continue with the uninstall so your pc appears to do nothing. At this point simply click somewhere neutral inside the apparent stuck window a few times. Do not select cancel or attempt to X out of this window. Click outside and back inside this window if you have to until you get a non-looking windows pop up that asks you to proceed. (This window may sneak onto your main toolbar) Then simply proceed with the uninstall using the non-windows looking option to do so.
    Now back to why I had you write the date associated with You need to find and uninstall every program that shares the date matching (also recommend uninstalling anything post this date) as most “if not all” of these programs are part of the issue. Youll find 8-12 of these as being toolbars youve never heard of before. While you’re there go ahead uninstall anything that sounds like a 3rd party program (shame on you for having them in the first place) that is not a game you intentionally downloaded or shares a date with the software that may have come with the purchase of your pc or is obviously listed as a Microsoft program. Do not agree to any option that asks you to restart your pc at this point. This last part is something I stumbled on as a temporary fix before finding the true fix for Im not sure that it is necessary but while I have your attention it cant hurt. Open internet browser, find tools/settings then internet options (if u do not see this tab in IE right click in a dead space just below the address bar and check menu bar) then go to tool>internet options and click on the advanced tab and click “reset” everything to its defaults. (4/5ths down the page from top on right side)
    I also took track of what my friend was running for free antivirus and it almost seemed to feed into the issue. Instead of naming this free antivirus I will simply tell you the ones I use and have so far have not been an issue with this fix. I simply use Microsoft Security Essentials and Avira (free version) which I installed after removing any other antivirus on the pc. (This is the time to install both of them while uninstalling any other anti virus first…again do not choose to restart when given the option.) While one will ask you to remove the other before installation I have found ignoring this prompt has caused no issues and the two work fine together. No need to run them after install and feel free to interrupt them from running initial scan as we have already fixed Regular PC maintenance can be done at this time. Such as cleaning up disk space.
    Restart your pc at this time or shut down if Microsoft updates are pending. Upon restart give your pc time to adjust to what just happened and the changes made as a lot of RAM space has been used. After logging in take 5-10 minutes worth of a break and pat yourself on the back for defeating and its attempt to make you spend money on programs suggested to fix the issue but are more likely to have funded the issue. Then open IE. Set up your default pages. Close it out and reopen it a few times to assure yourself that is gone. Hell restart again if you have to but I assure you is gone. During all the chaos of this walkthrough you have also automatically created a restore point due to the traffic of changes made. (It may be a restore point minus the last program uninstalled)

    Now that youve fixed please copy and paste this post as a response to every fix you may have tried before this one. No link to mine is asked for and I do not require any type of credit for posting this. The people who wasted your time with the first set of paid for posts will most likely also pay to blackball this this easy (while lengthy to read) fix.

  10. miniguy51 says:
    November 11th, 2013 at 11:04 am

    Sometimes is disguised in one of those installer download advertisements in any case try finding an unwanted tool bar instead of in Benjamins first paragraph

  11. Biagio says:
    July 30th, 2013 at 3:55 pm

    This is how I removed for a customers Vista PC:

    Several attempts to uninstall from the control panel failed. I ran MS Security Essentials, Adaware, Malwarebytes. Although they successfully removed a lot of junk, malware, a Trojan, and numerous infected files, was still there.

    I followed the suggestions to remove it from Google Chrome extensions and Internet Explorer add-ons and changed the home pages of both. That was successful. no longer came up as the homepage. As far as I could tell, there were no other symptoms. However, It still remained on the computer. Inspired by Benjamin above, I gave it another shot.

    First, I opened the configuration utility, (from Start Search, type msconfig ). At the start-up tab, I took note of what had a check mark, then unchecked/disabled everything except Microsoft OS. I restarted the PC in safe mode, opened the Control Panel, and successfully uninstalled I received only one prompt – a request to close browsers – to which I answered yes. is gone. Of course, now the items in start-up need to be checked again, except for those you really do not want (you can search each item with your favorite search engine if not sure which to keep checked). I have rebooted several times – no sign of the creepy virus.

  12. Lene says:
    September 22nd, 2013 at 2:45 am

    I have now done the reset of IE og chrome, changed homepage etc.. And I have uninatalled all programs with the same installation date as snap do. I also tried the msconfig solution with the safe mode. I disabled everthing except Intel-files and MS OS. I was afraid that the pc would not start without the Intel-files.
    Still I could not uninstall snap do in the control panel, it looks like its uninstalling, but after the uninstall process, snap do is still in the list of programs in control panel.
    Should i have disabled the intelfiles also?
    Any other solutions?

  13. I says:
    August 23rd, 2013 at 11:11 am

    Did any one think that the real virus could be the removal software offered by 2-spyware? Just one possibility… I am not taking the risk of installing a new software just in case…

  14. Whitney says:
    November 14th, 2013 at 10:35 am

    I had the same issues with uninstalling. When you get to a screen that says “Hide from Internet Explorer or Google Chrome” choose the button on the far left that says custom. You will get a new menu that has an uninstall button. When you click this it will actually uninstall.

  15. annie says:
    November 14th, 2013 at 12:29 pm

    Help, somehow snap do got on my windows 7 computer, I cant seen to get it off unless i purchase a removal program,im usually told this at the end of a “Free Scan” that can take some time! It took over explorer and chrome! Help! can I get this off myself without paying to have it removed? I cant afford a removal tool.

  16. missy says:
    November 15th, 2013 at 9:47 pm

    how can you is completely off your computer,i no longer have it in the control panel,at first when I uninstalled it from the control panel,it was still hiding somewhere,although it didnt show on the control panel,it continued to interfere with my internet explorer,when I click on internet explorer,snap .do comes up,i went online and found some steps to uninstall this problem,now does not pop up when I use internet problem is ,is snap.go completely off my computer,or it could be hiding somewhere?

  17. balzar says:
    November 20th, 2013 at 5:47 pm

    Has anyone found the developers and BEATEN them, with sticks if necessary

  18. Theo says:
    November 29th, 2013 at 5:27 am

    something that makes my computer slow. basically before appearance. and when i found that is a virus no wonder my computer is so slow.

  19. Larry says:
    December 21st, 2013 at 1:10 pm

    While inside “internet options” under IEs tool bar, note that the home page has been changed to something like “feed2” (it goes on for about a thousand characters). Until you delete all that it goes straight to Snap.Dos online website and starts messing with you again! Im in Windows 7 home, BTW, if that makes a difference. Now Im trying to figure out how too get IE itself to start working again, it seems to have been disabled, and “reset” from the “advanced” menu did not fix it. Good grief.

  20. Patrick says:
    January 9th, 2014 at 3:22 pm

    I have found the only way to be SURE snap.dp is gone is to competely reinstall windows from scratch on a new hard drive. Then reinstall all your usual programs. This is a pain but 100% sure. After this comes the tricky bit – before you use any personal data stored on yourold computer such as documents, pictures etc you need to scan each one individually with a trusted antimalware/antivirus program. Wich one you trust is up to you. If you dont do this you could be reinstalling when you copy it to your new disk.

  21. Gene Goss says:
    May 9th, 2014 at 1:59 pm

    Remove anything in app data Local and Local low that says >Smartbar< Smartbar is the application that controls snapdo

  22. Lance forrest says:
    June 3rd, 2014 at 5:08 am

    None of these work at removing the new… think again…

Your opinion regarding