I have for some reason had my computer hijacked by the Snap.do malware. It takes over my browser and sets my new tab, startup page and default search engine to snap.do, something that I'm not very fond of. I've tried doing the following things:
- Followed the guide on http://blog.anvisoft.com/adware-removal-guide/how-to-remove-search-snap-do-virus-from-ieffchrome-snap-do-toolbar-removal-guide/ to the point, 3 times.
- Removing the add-on/extension
- Reinstalling Firefox
- Doing a full malware scan with SuperAntiSpyware
- Adding a mozilla.cfg file to the Mozilla directory with the following text
lockPref("browser. startup. homepage", "about:home"); lockPref("browser.newtab.url", "about:home"); lockPref("browser.search.defaultenginename", "data:text/plain,browser.search.defaultenginename%3DDuckDuckGo"); lockPref("browser.search.selectedEngine", "http://www.duckduckgo.com");
It is good for a few days and then it resets back to the malware search engine. What is interesting is that I have added the lockPref("browser.newtab.url", "about:home") and just now the new tab is the malware search engine. When I look at the about:config tab I can find the browser.newtab.url has been changed from about:newtab to the malware url instead.
I'm out of luck here, does anyone have any suggestion on what I could do? Any help is appreciated, thank you!
Just remembered I tried using HijackThis to remove the dll files which contained the snap.do malware as well, no luck there either.