Removal instructions for Snail Translator

[Metallica]

What is Snail Translator?

The Malwarebytes research team has determined that Snail Translator is adware. These adware applications display advertisements not originating from the sites you are browsing.

How do I know if my computer is affected by Snail Translator?

You may see this entry in your list of installed programs:



and these icons on your desktop and in your taskbar:



This is the main window of the program:



How did Snail Translator get on my computer?

Adware applications use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Snail Translator?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.

• Please download Malwarebytes Anti-Malware to your desktop.
• Double-click mbam-setup-version.exe and follow the prompts to install the program.
• At the end, be sure a check-mark is placed next to the following:
  • Enable free trial of Malwarebytes Anti-Malware Premium
  • Launch Malwarebytes Anti-Malware
• Then click Finish.
• If an update is found, you will be prompted to download and install the latest version.
• Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
• When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
• Reboot your computer if prompted.

Is there anything else I need to do to get rid of Snail Translator?

• No, Malwarebytes' Anti-Malware removes Snail Translator completely.

How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Snail Translator adware. It would have warned you before the adware could install itself, giving you a chance to stop it before it became too late.

 

Technical details for experts

Possible signs in FRST logs:
 

 () C:\Windows\Snail Translator\Snail Translator\Snail Translator.exe
 HKCU\...\Run: [Snail Translator] => C:\Windows\Snail Translator\Snail Translator\Snail Translator.exe [454656 2016-03-22] ()
 C:\Windows\Snail Translator

Snail Translator 0.8 (HKLM-x32\...\Snail Translator 0.8) (Version: 0.8 - Snail Translator)

Alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    In the existing folder C:\Users\{username}\Desktop
       Adds the file Snail Translator.lnk"="4/28/2016 9:06 AM, 2098 bytes, A
    Adds the folder C:\Windows\Snail Translator\Snail Translator
       Adds the file Snail Translator.exe"="3/22/2016 8:12 PM, 454656 bytes, A
       Adds the file Uninstall.exe"="4/28/2016 9:06 AM, 239164 bytes, A
       Adds the file Uninstall.ini"="4/28/2016 9:06 AM, 2803 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Snail Translator 0.8]
       "DisplayIcon"="REG_SZ", "C:\Windows\Snail Translator\Snail Translator\Uninstall.exe"
       "DisplayName"="REG_SZ", "Snail Translator 0.8"
       "DisplayVersion"="REG_SZ", "0.8"
       "EstimatedSize"="REG_DWORD", 678
       "InstallDate"="REG_SZ", "20160428"
       "InstallLocation"="REG_SZ", "C:\Windows\Snail Translator\Snail Translator\"
       "InstallSource"="REG_SZ", "C:\Users\{username}\Desktop\"
       "Language"="REG_DWORD", 1033
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "Snail Translator"
       "UninstallString"="REG_SZ", "C:\Windows\Snail Translator\Snail Translator\Uninstall.exe"
       "VersionMajor"="REG_DWORD", 0
       "VersionMinor"="REG_DWORD", 8
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
       "Snail Translator"="REG_SZ", "C:\Windows\Snail Translator\Snail Translator\Snail Translator.exe"

Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 4/28/2016
Scan Time: 9:20 AM
Logfile: mbamSnailTranslator.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.04.28.02
Rootkit Database: v2016.04.17.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Enabled
Self-protection: Enabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 364886
Time Elapsed: 10 min, 10 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 2
PUP.Optional.SnailTranslator, C:\Windows\Snail Translator\Snail Translator\Snail Translator.exe, 868, Delete-on-Reboot, [f33fbdf7277254e233e03bf5b15118e8]
PUP.Optional.SnailTranslator, C:\Windows\Snail Translator\Snail Translator\Snail Translator.exe, 2840, Delete-on-Reboot, [f33fbdf7277254e233e03bf5b15118e8]

Modules: 0
(No malicious items detected)

Registry Keys: 1
PUP.Optional.SnailTranslator, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Snail Translator 0.8, Quarantined, [131f1c98b8e1e2549c9ad9643ec5718f], 

Registry Values: 2
PUP.Optional.SnailTranslator, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Snail Translator, C:\Windows\Snail Translator\Snail Translator\Snail Translator.exe, Quarantined, [f33fbdf7277254e233e03bf5b15118e8]
PUP.Optional.SnailTranslator, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Snail Translator 0.8|DisplayIcon, C:\Windows\Snail Translator\Snail Translator\Uninstall.exe, Quarantined, [cc662c886c2d68ce360289b433d017e9]

Registry Data: 0
(No malicious items detected)

Folders: 2
PUP.Optional.SnailTranslator, C:\Windows\Snail Translator\Snail Translator, Delete-on-Reboot, [131f1c98b8e1e2549c9ad9643ec5718f], 
PUP.Optional.SnailTranslator, C:\Windows\Snail Translator, Delete-on-Reboot, [131f1c98b8e1e2549c9ad9643ec5718f], 

Files: 5
PUP.Optional.SnailTranslator, C:\Windows\Snail Translator\Snail Translator\Snail Translator.exe, Delete-on-Reboot, [f33fbdf7277254e233e03bf5b15118e8], 
PUP.Optional.SnailTranslator, C:\Users\{username}\Desktop\snail-setup.exe, Quarantined, [b87a14a0811882b4090af43c847ee31d], 
PUP.Optional.SnailTranslator, C:\Users\{username}\Desktop\Snail Translator.lnk, Quarantined, [082ab9fbaeebe551bd7869d41fe49967], 
PUP.Optional.SnailTranslator, C:\Windows\Snail Translator\Snail Translator\Uninstall.ini, Quarantined, [131f1c98b8e1e2549c9ad9643ec5718f], 
PUP.Optional.SnailTranslator, C:\Windows\Snail Translator\Snail Translator\Uninstall.exe, Quarantined, [131f1c98b8e1e2549c9ad9643ec5718f], 

Physical Sectors: 0
(No malicious items detected)


(end)

As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.