Snetchball adware (Virus removal guide)

What is Snetchball?

Snetchball (snetchball.exe) is an adware program. Adware is a form of malicious software that displays unwanted advertisements to computer users. Some examples include pop-up ads, advertising links, unclosable windows, pop-ups, various offers and deals, push notifications and even fake virus alerts. Clicks on the advertisements produce a monetary payoff for the adware creators. Some adware can be used for spying, data collection and monitoring that can be extremely harmful to victims.

Typically, Snetchball malware can infect a personal computer in many ways, the most common of which involves downloading infected files as well as hacked software, freeware, Windows/Office key generators and other similar software. As reported by security researchers, Snetchball adware spreads through Your File Is Ready To Download Virus and malicious exe files (“iPRG.exe”, “Install.exe”, etc).

VirusTotal flagged snetchball.exe as malicious:

QUICK LINKS

• What is Snetchball?
• Protection
• Removal

Snetchball.exe adware in detail

Snetchball is a malicious program that functions as adware. It can redirect your searches, change browser settings, install multiple toolbars, display banner ads, full-screen advertisements, pop ups, videos, or other varieties of online advertising. Maybe you approve the idea that the ads or pop-ups are just a small problem. But these unwanted advertisements eat computer resources and slow down your web-browser performance. Snetchball.exe can be used as a backdoor to deliver malware on your computer and steal data.

Adware programs, and Snetchball in particular, can do great harm to users, since they are capable of collecting user data (for example, logins and passwords) and banking information. The criminals behind this malware do it for the purpose of generating revenue. User monitoring and data collection can lead to significant financial losses; Criminals can use stolen bank information for transfers and purchases. They can also monetize the victim’s contacts, social media accounts, and email addresses in one way or another.

Any malware including Snetchball is a serious threat. It can infect a computer with other types of malicious programs. Trojans can download and run other very dangerous malware such as ransomware and cryptominers. Especially dangerous are ransomware that secretly encrypt the victim’s files and then demand a ransom to decrypt them. The recovery of encrypted files becomes impossible in most cases. Ransomware can lead to the loss of personal documents and important data. Cryptominers are malware that uses computer resources to secretly mine cryptocurrency. This process uses up a lot of system resources, which means that it slows down the speed of the computer. Moreover, cryptominers can lead to overheating of the main components of the computer and their failure.

Attackers often use adware to redirect users to malicious and scam websites. Below are some examples of such sites:

To summarize, Snetchball can lead to malware infection and financial losses. It can seriously affect your privacy, your computer’s performance and security.

How does Snetchball get on your computer

Most adware gets installed when users visit an infected website, download a malicious app, click on a link or an attachment, or install freeware that includes a bundled program. Sometimes it is possible to avoid the setup of any adware: run only reputable software which download from reputable sources, never install any unknown and suspicious apps, keep internet browser updated (turn on automatic updates), use good antivirus software, double check freeware before install it (do a google search, scan a downloaded file with VirusTotal), avoid malicious and unknown web pages.

Examples of scam pages that are designed to trick users into installing malicious software:

Threat Summary

Name	Snetchball, “Snetchball.exe”, “Snetchball virus”, “Snetchball 1.0.0.1”, “Snetchball (32 bit)”
Type	adware, potentially unwanted program (PUP), pop-up advertisements, pop-up virus
Related software	iPRG.exe, Install.exe, Your File Is Ready To Download.zip
Detection names	W32.AIDetectNet.01, Trojan.Win32.Agent.sd!n, PUP/Adware, W32.Trojan.Gen, Trojan.Malware.300983.susgenGen:NN.ZemsilF.36158.lm0@a0s911i
Distribution	hacked software, VHD files, freeware installers, rogue ad networks, adware bundles, fake update tools and torrent downloads
Symptoms	links redirect to a pages different from what you expected, you experience lots of unwanted advertisements, new entries appear in your Programs folder, unwanted browser toolbars/extensions, your browser homepage has modified and you cannot change it back, low ping but slow Internet
Damage	malware infection, loss of personal data, disclosure of confidential information, financial losses
Removal	Snetchball removal guide

Malware examples

On the Internet, users can come across many malicious programs that perform various malicious actions. Among them there are such as Altruistics Virus, Your File Is Ready To Download.iso virus, fake Google Docs Extension, Wacatac trojan, Advanced Windows Manager, AnarchyGrabber Stealer, DPD Delivery Email virus although, of course, there are many more.

Some of the malware designed to collect user data, others install ransomware and trojans on computers, and still others add infected computers to botnets, and so on. In any case, each malicious program (adware, browser hijacker, trojan, worm, …) is a huge threat to both user privacy and computer security. Therefore, malicious programs must be removed immediately after detection; using an infected computer is very dangerous.

How can you protect against adware?

There are a number of methods that you can use to protect against malicious adware. It is better to use them together, this will provide stronger protection.

1. Use an ad blocker. Ad blockers allow you to browse sites without ads, thus eliminating the possibility of clicking on something malicious and preventing it from being downloaded to the machine.
2. Pay for premium versions of popular services. The easiest way to avoid adware is to pay for the service you use. Many Internet services make it possible to use them without ads if you purchase a premium subscription. This helps ensure that malicious adware cannot reach you.
3. Buy devices from trusted companies with built-in security. There have already been many cases where people who bought inexpensive Android devices found that adware was already installed on their devices. Cheap Android devices do not receive security updates and are therefore particularly susceptible to infection and should be avoided.
4. Use an antivirus. Most antivirus programs can block malicious adware. Some malicious adware can block antiviruses, in which case a more aggressive method should be used, which is to use adware removal software. This software can detect and remove adware that has a negative impact on the device.

How to remove Snetchball from computer (Adware removal guide)

We can help you remove Snetchball.exe from your computer without the help of a professional. Just follow the removal guide below if you currently have malicious adware installed on your PC and you want to remove it. If you are having difficulty trying to get rid of the adware, feel free to contact us for help in the comments section below. Read it once and then bookmark this page (or open it on your smartphone) as you may need to exit your web browser or restart your computer.

To remove Snetchball, use the following steps:

1. Kill Snetchball adware
2. Disable Snetchball start-up
3. Uninstall Snetchball related software
4. Scan computer for malware
5. Reset Google Chrome
6. Reset Internet Explorer
7. Reset Firefox

Kill Snetchball adware

Press CTRL, ALT, DEL keys together.

Click Task Manager. Select the “Processes” tab, look for “Snetchball”, “Snetchball.exe” or “Snetchball (32 bit)” then right-click it and select “End Task” or “End Process” option. If your Task Manager does not open or the Windows reports “Task manager has been disabled by your administrator”, then follow the guide: How to Fix Task manager has been disabled by your administrator.

Adware can mask itself to avoid detection by imitating legitimate Microsoft Windows processes. A process is particularly suspicious: it’s taking up a lot of memory (despite the fact that you closed all of your applications), its name is not familiar to you (if you’re in doubt, you can always check the program by doing a search for its name in Google, Yahoo or Bing).

Disable Snetchball start-up

Select the “Start-Up” tab, look for something suspicious that is the Snetchball adware, right click to it and select Disable.

Close Task Manager.

Uninstall Snetchball related software

Check the list of installed apps on your computer and remove Snetchball application, other suspicious and recently installed apps. If you see an unknown program with incorrect spelling or varying capital letters, it have most likely been installed by malware and you should clean it off first with malware removal utility such as MalwareBytes Anti-Malware.

Windows 7	Windows 8
Click ‘Start’. In the Start menu select ‘Control Panel’. Find and select ‘Programs and Features’ or ‘Uninstall a program’. Select the program. Click ‘Uninstall’.	Press and hold Windows key and hit X key. Select ‘Programs and Features’ from the menu. Select the program. Click ‘Uninstall’.
Windows 10	Mac OS
Press and hold Windows key and hit X key. Select ‘Programs and Features’ from the menu. Select the program. Click ‘Uninstall’.	On the top menu select ‘Go’, then ‘Applications’. Drag an unwanted application to the Trash bin. Right-click on the ‘Trash’ and select ‘Empty Trash’.

Scan computer for malware

Using a malware removal tool to detect and remove adware lurking on your PC is probably the easiest solution to remove Snetchball virus. We recommend MalwareBytes Anti-Malware for Windows computers. Hitman Pro and Zemana are other anti-malware tools for Microsoft Windows that offer free malware removal.

You can remove Snetchball automatically with a help of MalwareBytes AntiMalware. We recommend this free malware removal utility because it can easily remove browser hijackers, adware, PUPs and toolbars with all their components such as files, folders and registry entries.
 

 
First, visit the page linked below, then click the ‘Download’ button in order to download the latest version of MalwareBytes.

Once the downloading process is complete, run it and follow the prompts. Once installed, MalwareBytes will try to update itself and when this procedure is done, click the “Scan” button to perform a system scan with this utility for the Snetchball adware. A scan can take anywhere from 10 to 30 minutes, depending on the count of files on your computer and the speed of your personal computer. During the scan MalwareBytes AntiMalware will locate threats exist on your computer. Make sure all threats have ‘checkmark’ and click “Quarantine” button.

MalwareBytes AntiMalware is a free malware removal tool that you can use to remove all detected folders, files, services, registry entries and so on. To learn more about this software, we advise you to read the article or follow the video guide below.

There is another anti-malware tool that can remove adware for free and that is Zemana AntiMalware. It will scan Windows registry keys and files on your PC, as well as system settings and web browser add-ons. If it detects any malware, adware, or malicious add-on, Zemana will completely remove them from your PC.

Installing Zemana Anti-Malware is simple. First you will need to download it from the link below.

After the downloading process is complete, close all windows on your personal computer. Further, open the set up file named Zemana.AntiMalware.Setup. If the “User Account Control” prompt pops up like below, click the “Yes” button.

It will display the “Setup wizard” that will allow you install Zemana on the computer. Follow the prompts and do not make any changes to default settings.

Once the installation is done successfully, Zemana AntiMalware will automatically run and you can see its main window as displayed on the image below.

Next, click the “Scan” button to detect the Snetchball adware. A system scan can take anywhere from 5 to 30 minutes, depending on your computer. During the scan, Zemana Anti-Malware will search for security threats present on your computer.

Once Zemana has finished scanning your PC, it will display a list of security threats detected by the scan. When you are ready, click “Next” button.

Zemana AntiMalware will remove Snetchball and move the selected malicious entries to the program’s quarantine. After finished, you can be prompted to restart your PC.

Reset Google Chrome

In this step we are going to show you how to reset Google Chrome settings. Adware such as Snetchball can make changes to your web-browser settings, add toolbars and unwanted extensions. By resetting Chrome settings you will reset unwanted changes caused by adware. However, your saved passwords and bookmarks will not be changed, deleted or cleared.

First launch the Chrome. Next, click the button in the form of three horizontal dots ().

It will open the Google Chrome menu. Select More Tools, then press Extensions. Carefully browse through the list of installed addons. If the list has the extension signed with “Installed by enterprise policy” or “Installed by your administrator”, then complete the following steps: Remove Google Chrome extensions installed by enterprise policy.

Open the Chrome menu once again. Further, press the option named “Settings”.

The web browser will display the settings screen. Another method to display the Chrome’s settings – type chrome://settings in the internet browser adress bar and press Enter

Scroll down to the bottom of the page and click the “Advanced” link. Now scroll down until the “Reset” section is visible, as shown in the following example and click the “Reset settings to their original defaults” button.

The Google Chrome will display the confirmation dialog box as displayed on the image below.

You need to confirm your action, click the “Reset” button. The web browser will run the task of cleaning. Once it is finished, the internet browser’s settings including search provider by default, home page and newtab back to the values which have been when Google Chrome was first installed on your personal computer.

Reset Firefox

If your Firefox web browser is hijacked by Snetchball, then it may be time to perform the browser reset. Keep in mind that resetting your web-browser will not remove your history, bookmarks, passwords, and other saved data.

Start the Firefox and click the menu button (it looks like three stacked lines) at the top right of the internet browser screen. Next, click the question-mark icon at the bottom of the drop-down menu. It will open the slide-out menu.

Select the “Troubleshooting information”. If you are unable to access the Help menu, then type “about:support” in your address bar and press Enter. It bring up the “Troubleshooting Information” page as displayed in the following example.

Click the “Refresh Firefox” button at the top right of the Troubleshooting Information page. Select “Refresh Firefox” in the confirmation prompt. The Firefox will start a process to fix your problems that caused by the Snetchball adware. Once, it is finished, click the “Finish” button.

How to stay safe online

If you browse the Web, you can’t avoid malicious ads and scam sites. But you can protect your internet browser against it. Download and use an ad blocking program. AdGuard is an ad-blocker which can filter out a huge number of of the malicious advertising, blocking dynamic scripts from loading harmful content.

1. First, visit the following page, then click the ‘Download’ button in order to download the latest version of AdGuard.
   
   

   Adguard download
   26627 downloads
   Version: 6.4
   Author: © Adguard
   Category: Security tools
   Update: November 15, 2018
   
2. When the downloading process is complete, start the downloaded file. You will see the “Setup Wizard” program window. Follow the prompts.
3. After the installation is complete, press “Skip” to close the installation program and use the default settings, or press “Get Started” to see an quick tutorial which will help you get to know AdGuard better.
4. In most cases, the default settings are enough and you don’t need to change anything. Each time, when you run your computer, AdGuard will launch automatically and stop unwanted advertisements, block harmful and misleading webpages. For an overview of all the features of the program, or to change its settings you can simply double-click on the icon called AdGuard, which can be found on your desktop.

Finish words

We suggest that you keep Malwarebytes Anti-Malware (to periodically scan your device for new adware and malware) and AdGuard (to help you stop malicious pop-ups and block phishing sites). Moreover, to prevent any adware, please stay clear of unknown and third party programs, make sure that your antivirus software, turn on the option to search for potentially unwanted programs.

If you need more help with Snetchball related issues, go to here.