Remove Sweetpacks Toolbar (Removal Guide)

Sweetpacks is an adware program, which is promoted via other free downloads, and once installed it will add to your browser the Sweetpacks Toolbar, change your homepage to start.sweetpacks.com and set your browser default search engine to search.sweetpacks.com.

Sweetpacks search will display advertisements and sponsored links in your search results, and may collect search terms from your search queries.
[Image: Sweetpacks search virus]

Sweetpacks Toolbar got on your computer after you have installed another free software or add-on that had bundled into their installer this browser hijacker.
For example, when you install SweetIM, SweetPCFix or GamePacks, you will also agree to install the Sweetpacks Toolbar, change your browser homepage to start.sweetpacks.com , and default search engine to search.sweetpacks.com .
However, when you uninstall these programs from your computer, your web browser’s default settings will not be restored. This means that you’ll have to remove from your favorite web browser manually.

You should always pay attention when installing software because often, a software installer includes optional installs, such as this Sweetpacks adware. Be very careful what you agree to install.
Always opt for the custom installation and deselect anything that is not familiar, especially optional software that you never wanted to download and install in the first place. It goes without saying that you should not install software that you don’t trust.

Sweetpacks Toolbar- Virus Removal Instructions

STEP 1 : Uninstall Sweetpacks Toolbar program from your computer

Sweetpacks Toolbar is installed via other third party programs (SweetIM, SweetPCFix or GamePacks), so we will need to uninstall this program.
On our testing machine, we have installed SweetIM, and the Sweetpacks installer has added the following programs: SweetIM for Messenger, SweetPacks Toolbar for Internet Explorer and Update Manager for SweetPacks.

  1. To uninstall Sweetpacks Toolbar program from your computer, click the Start button, then select Control Panel, and click on Uninstall a program.
    If you are a Windows 8 user, you can right-click on a bottom left hot corner (formerly known as the Start button) and select Control panel from there, then select Uninstall a program.
    [Image: Uninstall a program]
  2. Seach and uninstall SweetIM for Messenger, SweetPacks Toolbar for Internet ExplorerUpdate Manager for SweetPacks  and any other unknown programs from your computer.
    [Image: Sweetpacks removal]

Please note that on some computers these programs might have a different name, search for any program developed by Sweetpacks and uninstall it from your computer.
Because Sweetpacks is installed with other additional programs (DealPly, Free Ride Games Player, Ginger, PriceGong, SweetIM for Messenger, Sweetpacks Bundle Uninstaller, Update Manager for SweetPacks or Video Converter), we recommend that you search and uninstall any other unwanted or unknown programs from your computer.


STEP 2 : Remove Sweetpacks Toolbar residual damage from your browser

Sweetpacks Toolbar has installed at least a browser extension, and has changed your homepage and default search engine to search.sweetpacks.com.

Remove Sweetpacks Toolbar from Internet Explorer

  1. Open Internet Explorer, click on the gear icon [Image: icongear.jpg] (Tools for Windows XP users) at the top (far right), then click again on Internet Options.
    Internet Options in IE
  2. In the Internet Options dialog box, click on the Advanced tab, then click on the Reset button.
    Reset Internet Explorer
  3. In the Reset Internet Explorer settings section, check the Delete personal settings box, then click on Reset.
    Internet Explorer back to its default settings
  4. When Internet Explorer finishes resetting, click Close in the confirmation dialogue box and then click OK.
  5. Close and open Internet Explorer.

Remove Sweetpacks Toolbar from Mozilla Firefox

  1. At the top of the Firefox window, click the Firefox button, go over to the Help sub-menu (on Windows XP, click the Help menu at the top of the Firefox window), and select Troubleshooting Information.
    Firefox Troubleshooting Information
  2. Click the Reset Firefox button in the upper-right corner of the Troubleshooting Information page.
    Firefox default settings
  3. To continue, click Reset Firefox in the confirmation window that opens.
  4. Firefox will close and be reset. When it’s done, a window will list the information that was imported. Click Finish

Remove Sweetpacks Toolbar from Google Chrome

  1. Remove Sweetpacks extensions from Google Chrome.
    Click the Chrome menu Chrome menu  button on the browser toolbar, select Tools and then click on Extensions.
    Google Chrome Extensions
    In the Extensions tab, remove (by clicking on the Recycle Bin) SweetIM for Facebook, New Tab 2.0, Sweetpacks Chrome Extensions and any other unknown extensions from Google Chrome.
    [Image: Sweetpacks Chrome extensions]
    NOTE: Sweetpacks may have added additional extensions which you will need to remove. We recommend that you remove any unwanted or unknown extensions from Google Chrome.
  2. Set Google Chrome default search engine from search.sweetpacks.com<) to Google.
    Click the Chrome menu Chrome menu  button, then select Settings and click on Manage search engines in the Search section.
    In the Search Engines dialog that appears, select Google and click the Make Default button that appears in the row.
    [Image: Sweetpacks search redirect]
    Search for search.sweetpacks.com in the Search Engines list, and click the X button that appears at the end of the row.
    [Image: search.sweetpacks.com removal]
  3. Change Google Chrome homepage from start.sweetpacks.com< to its default.
    Sweetpacks has modified your Google settings to open their webpage whenever you start your browser, so we will need to revert this change.
    Click the Chrome menu Chrome menu  button, then select Settings and click on One the New Tab page in the On Startup section.
    [Image: Change Google Chrome homepage to its default]

STEP 3: Remove Sweetpacks Toolbar registry keys with AdwCleaner.

  1. You can download AdwCleaner from the below link.
    ADWCLEANER DOWNLOAD LINK
     (This link will automatically download AdwCleaner on your computer)
  2. Before starting this utility, close all open programs and internet browsers.
  3. Double click on adwcleaner.exe to run the tool.
  4. Click on Delete, then confirm each time with Ok.
    Adwcleaner utility
  5. Your computer will be rebooted automatically. A text file will open after the restart.
  6. NEXT, double click on adwcleaner.exe to run the tool.
  7. Click on Uninstall, then confirm with yes to remove this utility from your computer.

STEP 4: Run a computer scan with Malwarebytes Anti-Malware

  1. You can download Malwarebytes Anti-Malware Free from the below link, then double click on it to install this program.
    MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK (This link will open a download page in a new window from where you can download Malwarebytes Anti-Malware Free)
  2. When the installation begins, keep following the prompts in order to continue with the setup process. DO NOT make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware checked, then click on the Finish button.
    [Image: Malwarebytes Anti-Malware final installation screen]
  3. On the Scanner tab, select Perform quick scan and then click on the Scan button to start scanning your computer.
    [Image: Malwarebytes Anti-Malware Quick Scan]
  4. Malwarebytes’ Anti-Malware will now start scanning your computer as shown below.
    [Image: Malwarebytes Anti-Malware scanning for Sweetpacks virus]
  5. When the Malwarebytes scan will be completed, click on Show Result.
    [Image: Malwarebytes Anti-Malware scan results]
  6. You will now be presented with a screen showing you the malware infections that Malwarebytes’ Anti-Malware has detected.Please note that the infections found may be different than what is shown in the image. Make sure that everything is Checked (ticked) and click on the Remove Selected button.
    [Image:Malwarebytes removing malware]

STEP 5: Run a computer scan with HitmanPro

  1. Download HitmanPro from the below link, then double click on it to start this program.
    HITMANPRO DOWNLOAD LINK (This link will open a new web page from where you can download HitmanPro)
  2. HitmanPro will start and you’ll need to follow the prompts (by clicking on the Next button) to start a system scan with this program.
    HitmanPro installation
  3. HitmanPro will start scanning your computer for malware, as seen in the image below.
    HitmanPro scans for Sweetpacks virus
  4. Once the scan is complete,you’ll see a screen which will display all the infected files that this utility has detected, and you’ll need to click on Next to remove these malicious files.
    HitmanPro scan results
  5. Click Activate free license to start the free 30 days trial and remove all the malicious files from your computer.
    HitmanPro 30 days activation button

If you are still experiencing problems while trying to remove start.Sweetpacks.com and search.Sweetpacks.com from your machine, please start a new thread in our Malware Removal Assistance forum.

IT’S YOUR TURN TO HELP!

If we have managed to help you with your computer issues, then it's your duty to let other people know that this article will help them!
You can share this article on Facebook,Twitter or Google Plus by using the below buttons.

SUPPORT MALWARETIPS! (OPTIONAL)

All our malware removal guides and utilities are completely free!
We do not request any kind of payment for our services, however if you like to support us with our website costs, you can make a small donation. Any amount is appreciated, and will support our fight against malware.

ABOUT STELIAN PILICI

I am the creator and owner of MalwareTips.com.
My area of expertise includes malware removal and computer forensics. I'm active in the various online anti-malware communities where I do researches for new malware threats as they are released.
I live in Bucharest (Romania), where I run my own local computer repair shop.
I repair both hardware and other operating systems related issues, however most of my business is malware related problems.

You can follow me on Google+ and I will keep you up-to-date with the latest computer infections and malware threats.

  • http://malwaretips.com/ Stelian Pilici

    Hello,
    Can you please follow this guide: http://malwaretips.com/blogs/malware-removal-guide-for-windows/ .. RKILL should kill any infection that is preventing you from install any anti-malware product. :)

  • CCRDad

    Thanks for this info, saved a couple of laptops for me! Just in case you want to wring the neck of the buttplug who created this sweetpacks.com crap, heres the idiots info:

    Domain Name: SWEETPACKS.COM
    Registry Domain ID: 1658004162_DOMAIN_COM-VRSN
    Registrar WHOIS Server: whois.godaddy.com
    Registrar URL: http://www.godaddy.com
    Update Date: 2012-01-05 07:18:23
    Creation Date: 2011-05-25 03:47:15
    Registrar Registration Expiration Date: 2016-05-25 03:47:15
    Registrar: GoDaddy.com, LLC
    Registrar IANA ID: 146
    Registrar Abuse Contact Email: abuse@godaddy.com
    Registrar Abuse Contact Phone: +1.480-624-2505
    Domain Status: clientTransferProhibited
    Domain Status: clientUpdateProhibited
    Domain Status: clientRenewProhibited
    Domain Status: clientDeleteProhibited
    Registry Registrant ID:
    Registrant Name: Robert Sherman
    Registrant Organization: SweetIM Technologies LTD
    Registrant Street: 14 Haroshet st
    Registrant Street: P.O.B. 2640
    Registrant City: Raanana
    Registrant State/Province: Israel
    Registrant Postal Code: 43651
    Registrant Country: Israel
    Registrant Phone: 97755302
    Registrant Phone Ext:
    Registrant Fax:
    Registrant Fax Ext:
    Registrant Email: roberts@sweetim.com
    Registry Admin ID:
    Admin Name: Robert Sherman
    Admin Organization: SweetIM Technologies LTD
    Admin Street: 14 Haroshet st
    Admin Street: P.O.B. 2640
    Admin City: Raanana
    Admin State/Province: Israel
    Admin Postal Code: 43651
    Admin Country: Israel
    Admin Phone: 97755302
    Admin Phone Ext:
    Admin Fax:
    Admin Fax Ext:
    Admin Email: roberts@sweetim.com
    Registry Tech ID:
    Tech Name: Robert Sherman
    Tech Organization: SweetIM Technologies LTD
    Tech Street: 14 Haroshet st
    Tech Street: P.O.B. 2640
    Tech City: Raanana
    Tech State/Province: Israel
    Tech Postal Code: 43651
    Tech Country: Israel
    Tech Phone: 97755302
    Tech Phone Ext:
    Tech Fax:
    Tech Fax Ext:
    Tech Email: roberts@sweetim.com
    Name Server: NS1-160.AKAM.NET
    Name Server: NS4-65.AKAM.NET
    Name Server: NS5-65.AKAM.NET
    Name Server: NS7-67.AKAM.NET
    DNSSEC: unsigned
    URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
    Last update of WHOIS database: 2014-5-3T5:00:00Z

    We need to make his life a living hell just as he did to us.

  • Vincentius Ronny Suyoto

    It works! Thanks for sharing

  • Matthew Kiefer

    It’s people like you that make the bad go away thanks, and as soon as I can I’ll donate. Also people, if you know how you got this thing and where, maybe we can build a list of culprits to avoid?

  • Neko

    You are so amazing. thank you so much.

  • Joe Mama

    Great information. Thanks for the help.

  • Lee MD

    Should have mentioned: Sweetpacks rode that bogus 64 bit Firefox 29.0 download.

  • Lee MD

    Sweetpacks is the only one that has gotten by me in a yr and I would have been lost without help here. As we used to say ‘back in the day’…u da man!1, man.

  • Michael Osborne

    I accidentally installed Sweetpacks” when downloading another program. I have followed your tips and I have successfully removed Sweetpacks from Google

  • mark c

    u guys are the dogs b%&*$cks we would all be very stuck with out u guy 10/10 to al of u much appreciated

    this aint the first time u guy saved me .

  • Nicole Shilling

    Thank you for the article. I think that Sweetpacks is finally off my computer. I kept deleting it off Chrome/IE/Firefox and couldn’t find it in my Add/Remove Programs so I didn’t know where it was coming from. The Malwarebytes Anti-Malware found it’s file location and deleted it. Hopefully it it gone forever. Thanks again for the article.

    • http://malwaretips.com/ Stelian Pilici

      Hello,
      Malwarebytes should remove conduit, however if you have the time, you should run all scans.. It’s always a good idea to make an additional checking! :)

      Stay safe!

      • Nicole Shilling

        I did a quick and full scan with Malwarebytes and had also run AdwCleaner. The only one I did not run HitmanPro. Can I run HitmanPro, get the results and then delete the files myself instead of activating the free trial? I rather save the free trial for a time that I really really need it.

        • http://malwaretips.com/ Stelian Pilici

          Hello,
          Yes, I kind do the same trick :P .. Good luck!

  • Mr Badger

    Many thanks

  • Michael Gordon DR Data Recover

    Thank you so much. One of my boys download thus with their stupid free games. I spent 6 days trying to remove all these nasty files and was starting to fear that the boys just destroyed a $3900.00 Alienware.

    You REALLY saved my ass and their’s. I posted a link to you site on our companies internal network and auto saved it to everyone’s browsers.

    Thank again!

  • Lawrence RC

    You are a G! Big up from NZ!

  • Pineneedle

    I’ve been working on getting rid of SweetPack all day…. FINALLY, your recommendation HERE is what worked. THANKS

  • Jan P.

    Thank you so much. I followed your instructions and successfully removed this pain in the #$%. I appreciate your dedication and will gladly make a donation.

  • Leann

    you are my hero, thank you.

  • kitten546

    Thanks:D I was so worried I’d have to delete all of my system data. Not tech savy.

  • Terry Bridge

    Worked great for me – thanks.

  • Bill in Tucson

    Followed your instructions, which were very easy to follow, and my problem was solved. The butt opening sweetpacks is eliminated. I also purchased the software which was easy to use. Thanx!!!

  • bob

    thanks for your help!!!

  • Aerostorms

    Thanks! That thing was pretty annoying.

  • RC

    THANK YOU FOR YOUR HELP

  • abbbeynormal

    Thanks so much for helping me after I stupidly clicked the wrong thing. You would think I’d of learned by now. You’re the Best.

  • CC

    THANK YOU SO MUCH!!! You’ve saved my googling and changed my browsing for the better. I can NOT thank you enough! I feel so stupid, but at the same time incredibly grateful. Thank you so much for teaching me how to do this!!

  • Suzette

    I LOVE YOU! I can now do my homework! (:

  • RAndy

    you’re awesome!

  • scrabbit

    THANK YOU! Oh gods, I felt so stupid for letting this happen, and I wanted to fix it before my husband found out, haha. Thanks for taking the time to help us with this nasty bug. <3

  • cr7official

    Thanks bro that helped me a lot I really aprecciate your work

  • Kanzas

    I ran HItmanPro and at the end it says there are 8 identified threats but when I go to the next part, there is no option to activate for 30 days. What can I do about this problem?

    • http://malwaretips.com/ Stelian Pilici

      Hello,
      HitmanPro has a free 30 days trial for home users, however if you are using a corporate or business computer will not get this free trial.

      Lets try to remove this infection:
      STEP 1: Run a scan with RogueKiller
      1. Please download the latest official version of RogueKiller.
      RogueKiller Download Link : http://tigzy.geekstogo.com/roguekiller.php

      2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Scan button to perform a system scan.
      3. After the scan has completed, press the Delete button to remove any malicious registry keys.

      STEP 2: Run a scan with ESET Online Scanner

      1.Download ESET Online Scanner utility.

      ESET Online Scanner Download Link : http://download.eset.com/special/eos/esetsmartinstaller_enu.exe

      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).

      3.Check Yes, I accept the Terms of Use, then click the Start button.

      4.Check Scan archives and push the Start button.

      5. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.

      6. When the scan completes, click on the Finish button.

      Next, please run a scan with HitmanPro and if a threat is detect, please post the log in your next reply, so that I may take a look.
      Stay safe!

  • Shekhar Razdan

    Thank you so much…. the entire process worked as documented above.

  • Snowedin

    Thank you SO much, this is the second time you bailed me out of a malware mess!!

  • Dan

    Every time I try to remove Sweetpacks from progams, it doesn’t uninstall.
    I tried using Malwarebytes to remove it as well, and restarted my computer, but it remains there even after the restart.
    Advice?

    • http://malwaretips.com/ Stelian Pilici

      Hello,
      Lets try to remove this infection:
      STEP 1: Run a scan with AdwCleaner
      1. Download AdwCleaner from here: http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner

      2.Close all open programs and internet browsers.

      3.Double click on adwcleaner.exe to run the tool.

      4.Click on Clean button. Your computer should restart.

      STEP 2: Run a scan with Junkware Removal Tool

      1.Download Junkware Removal Tool to your desktop from the below link:

      JUNKWARE REMOVAL TOOL : http://thisisudax.org/download

      2. Double-click on the JRT.exe icon to start this utility.

      3. The tool will open and start scanning your system. Please be patient as this can take a while to complete depending on your system’s specifications

      Next, please run a scan with Malwarebytes Anti-Malware and HitmanPro as see in this guide.
      Stay safe!

      • steve

        alright nevermind i ran malwarebytes and im pretty sure it did the trick 84 trojans gone lol wtf happened

  • Ixis

    Finally its dead.I didn’t even install it. That’s the thing .I declined and it went ahead and installed itself anyway. I was freakin’ high-jacked.

    Needless to say I was furious at the time. I finished most of the removal before i came here looking for a way to get rid of all of it.ii did the uninstall and removals but it wouldn’t leave all together.I found after i did the last two steps added to the ones i already did and a few manual searches of my own before hand it was pretty much all gone and i didn’t need those programs you set to be installed here.

    Thanks for the help and i think you should add a warning that this program will try installing itself even when declined.

    It probably shouldn’t have but that really pissed me off all the same.No one likes being high-jacked.I got mine from the gimp digital art program.I wont be checking here for responses but if you want to tell me something or respond to this you can always find me on my deviantart here: http://ixisnyx.deviantart.com/

  • jobseekerz

    Thank you so much, this is help me get rid of that annoying thing! I was wondering if i had a virus for days now and i decided to search google with sweetpacks and wala I found you thank god

  • Jencha

    Thank You very much. I am very happy I found these instructions. God Bless and great work. I really appreciate you.

  • CC

    I have tried everything listed and this SweetPacks keeps coming back. Even after I did a system reset. I don’t even know how this ridiculous add-on got onto my computer especially since I have not downloaded anything recently and whenever I have in the past, I always make sure to look for any add-ons and not allow them to be downloaded. Thanks for the information, but I don’t know what else to do to get rid of this pesky malware.

    • http://malwaretips.com/ Stelian Pilici

      Hello CC,
      Lets try to remove this infection:
      STEP 1: Run a scan with AdwCleaner
      1. Download AdwCleaner from here: http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner

      2.Close all open programs and internet browsers.

      3.Double click on adwcleaner.exe to run the tool.

      4.Click on Clean button. Your computer should restart.

      STEP 2: Run a scan with Junkware Removal Tool

      1.Download Junkware Removal Tool to your desktop from the below link:

      JUNKWARE REMOVAL TOOL : http://thisisudax.org/download

      2. Double-click on the JRT.exe icon to start this utility.

      3. The tool will open and start scanning your system. Please be patient as this can take a while to complete depending on your system’s specifications

      Next, please run a scan with Malwarebytes Anti-Malware and HitmanPro as see in this guide.
      Stay safe!

  • Johnd

    Thank you so much I hate this sweetpacks shit

  • http://malwaretips.com/ Stelian Pilici

    Hello,
    Did you manage to remove this infection? Do you need any additional help?

    • Kevis

      Taking ownership, renaming and then rebooting to delete worked. Very complicated process. I can’t say I got every vestige, but it hasn’t reared its head again.
      I wouldn’t have found this folder and its Trojan library without surfing my registry for “conduit”. Generally if I find Malware I note the names of files etc and then look for registry keys relating to them. So with the Conduit Search thing, I turned up the other tentacles.

  • Arnav

    That was incredibly helpful, thank you for saving me so much time and effort.

  • jennifer

    Thank you! That was driving me nuts -

  • smiles

    thank you so much you don’t know how much I needed that I wish you great health and succses

  • Rik

    Thank you. I want to punch whoever made SweetCraps in the face for ruining my morning.

  • Bernie

    Man, you are awesome. This is the second time you have rescued my PC. I can’t thank you enough.

  • http://malwaretips.com/ Stelian Pilici

    Hello Sara,
    Lets try to remove this infection:
    STEP 1: Run a scan with AdwCleaner
    1. Download AdwCleaner from here: http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner

    2.Close all open programs and internet browsers.

    3.Double click on adwcleaner.exe to run the tool.

    4.Click on Clean button. Your computer should restart.

    STEP 2: Run a scan with Junkware Removal Tool

    1.Download Junkware Removal Tool to your desktop from the below link:

    JUNKWARE REMOVAL TOOL : http://thisisudax.org/download

    2. Double-click on the JRT.exe icon to start this utility.

    3. The tool will open and start scanning your system. Please be patient as this can take a while to complete depending on your system’s specifications

    Next, please run a scan with Malwarebytes Anti-Malware and HitmanPro as see in this guide.
    Stay safe!

  • MutatedGamer

    Yup. I remember back in the day when cnet downloads was amazing. I got everything off of there. Browsers, anti-viruses, CCleaner, Skype, etc. Now it’s all maleware garbage.

  • http://malwaretips.com/ Stelian Pilici

    Hello,
    You can set the default action from Ignore to Delete, as their is no reason to keep those files and registry keys.

    Stay safe!

  • Maurice

    Thanks! Great post and sollution for this $%#%@^ program.

  • jedisg

    that did help. The in the latest version of chrome, the sweetpacks evil was lurking in the “open these pages” tab in settings. Thanks again for the help, and a hex upon malware miscreants.

  • http://malwaretips.com/ Stelian Pilici

    Hello Shannon,
    It’s annoying however on our testing machine, the CAPTCHA pop-up (word verification) also showed, so you can type if the words, as will not harm your computer.

    Alternatively, you can follow these two steps:
    STEP 1: Run a scan with AdwCleaner
    1. Download AdwCleaner from here: http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner

    2.Close all open programs and internet browsers.

    3.Double click on adwcleaner.exe to run the tool.

    4.Click on Delete, then confirm each time with Ok.

    STEP 2: Run a scan with Junkware Removal Tool

    1.Download Junkware Removal Tool to your desktop from the below link:

    JUNKWARE REMOVAL TOOL : http://thisisudax.org/download

    2. Double-click on the JRT.exe icon to start this utility.

    3. The tool will open and start scanning your system. Please be patient as this can take a while to complete depending on your system’s specifications

    Stay safe!

  • snoebay88

    CNET should be hung out to dry for spreading this crap and the Sweetpack devs need to be burned to the ground for coding this !!

  • Frederick

    Thank you so much you helped me so much!

  • Ari

    You done good. It was bothering me on Chrome & causing IE to crash every time.

  • David

    Gracias, amigo.

  • Doug

    This post was awesome. It totally cleaned my computer. Your a life saver

  • katmandoooo

    thanks, it was invading my mozilla even after i had uninstalled!! its all good now. Awesome advice :)

  • http://malwaretips.com/ Stelian Pilici

    Hello,
    Lets try to remove this infection:
    STEP 1: Run a scan with AdwCleaner

    Please run AdwCleaner (as seen on STEP 3) to remove this infection!

    STEP 2: Run a scan with Junkware Removal Tool

    1.Download Junkware Removal Tool to your desktop from the below link:

    JUNKWARE REMOVAL TOOL : http://thisisudax.org/download

    2. Double-click on the JRT.exe icon to start this utility.

    3. The tool will open and start scanning your system. Please be patient as this can take a while to complete depending on your system’s specifications

    Waiting for your reply to see how everything is running…

  • ottofromdurham

    Thank you for helping me get that sweetpacks junk off of my browser. I had been upset after wiping the harddrive and still having a trace but you helped me get rid of it. Thanks!

  • http://malwaretips.com/ Stelian Pilici

    Hello,
    Yes, that’s a captcha code, it’s usually used to prevent accidental uninstall. In this case, you can enter that code.

    Next, run these two programs:
    STEP 1: Run a scan with AdwCleaner

    Please run AdwCleaner (as seen on STEP 3) to remove this infection!

    STEP 2: Run a scan with Junkware Removal Tool

    1.Download Junkware Removal Tool to your desktop from the below link:

    JUNKWARE REMOVAL TOOL : http://thisisudax.org/download

    2. Double-click on the JRT.exe icon to start this utility.

    3. The tool will open and start scanning your system. Please be patient as this can take a while to complete depending on your system’s specifications

    Waiting for your reply to see how everything is running…

  • Grant

    Thank you, Stelian! I let down my guard for a few minutes (I usually have better experiences with software posted on Cnet’s Download.com but not this time!) and you helped me avoid much frustration!

  • http://malwaretips.com/ Stelian Pilici

    Hello,

    Lets try to remove this nasty program:

    STEP 1: Run a scan with AdwCleaner

    Please run AdwCleaner (as seen on STEP 3) to remove this infection!

    STEP 2: Run a scan with Junkware Removal Tool

    1.Download Junkware Removal Tool to your desktop from the below link:

    JUNKWARE REMOVAL TOOL : http://thisisudax.org/download

    2. Double-click on the JRT.exe icon to start this utility.

    3. The tool will open and start scanning your system. Please be patient as this can take a while to complete depending on your system’s specifications

    Waiting for your reply to see how everything is running…

  • Jeff

    Thanks Stelian, your tutorial did the job. I was going to bring my laptop into the repair shop so I figured I would send you some of that dough. Enjoy.

  • Yellow Horse

    Thanks. That seemed to remove Sweet Packs but I still get a small pop-up video ad from Lesstabs Advertisement

    • http://malwaretips.com/ Stelian Pilici

      Hello,

      Lets try to remove this nasty program:

      STEP 1: Run a scan with AdwCleaner

      Please run AdwCleaner (as seen on STEP 3) to remove this infection!

      STEP 2: Run a scan with Junkware Removal Tool

      1.Download Junkware Removal Tool to your desktop from the below link:

      JUNKWARE REMOVAL TOOL : http://thisisudax.org/download

      2. Double-click on the JRT.exe icon to start this utility.

      3. The tool will open and start scanning your system. Please be patient as this can take a while to complete depending on your system’s specifications

      Waiting for your reply to see how everything is running…

  • Yellow Horse

    First thank you for your help. The only program I see to uninstall is “SweetPacks Updater Service”. When I try I get a pop-up from “IB Updater Service” stating
    “We want to make sure you are a person and not an automated system. (there are numbers in a dotted field) Please type the characters in the image above in the field below and then click okay.”
    I don’t do so because it seems suspicious. I have also gotten what appers to be a fake pop-up asking if I want to let Windows execute or something like that.
    Any thoughts? Again, thanks.

    • http://malwaretips.com/ Stelian Pilici

      Hello,

      Lets try to remove this nasty program:

      STEP 1: Run a scan with AdwCleaner

      Please run AdwCleaner (as seen on STEP 3) to remove this infection!

      STEP 2: Run a scan with Junkware Removal Tool

      1.Download Junkware Removal Tool to your desktop from the below link:

      JUNKWARE REMOVAL TOOL : http://thisisudax.org/download

      2. Double-click on the JRT.exe icon to start this utility.

      3. The tool will open and start scanning your system. Please be patient as this can take a while to complete depending on your system’s specifications

      Waiting for your reply to see how everything is running…

  • Joe

    Thank You, I wish I knew where it came from

  • Consti2tion

    I Opted to NOT install this tool bar and it went and tried to install it’s self anyway. I forced the Process to close and before it could start it’s self up again I deleted the files. Currently running Malware-bytes to erase any lingering files. It came with Daemon-Tools lite. Looks like I won’t be using that program anymore if they are going to package it with malware.

  • Michelle

    Thank you!!!!!!!!

  • http://malwaretips.com/ Stelian Pilici

    Hello,

    This alert is from the windows user account control, try again to uninstall sweetpacks and when you will encounter this prompt please respond with: “Yes”.

    Stay safe!

  • E. E. Morgan

    Absolutely Brilliant! You have restored my faith in humanity. THANK YOU!!!

  • bh

    thank you so much for these excellent instructions! they were so clear and your step-wise explanations made it all so easy-to-follow. now i can rest well tonight :)

  • http://malwaretips.com/ Stelian Pilici

    Hello Jenna,

    Lets try to remove this program:
    STEP 1: Run a scan with AdwCleaner
    Please run AdwCleaner (as seen on STEP 3) to remove this infection!

    STEP 2: Run a scan with Junkware Removal Tool

    1.Download Junkware Removal Tool to your desktop from the below link:

    JUNKWARE REMOVAL TOOL : http://thisisudax.org/download

    2. Double-click on the JRT.exe icon to start this utility.

    3. The tool will open and start scanning your system. Please be patient as this can take a while to complete depending on your system’s specifications

    Waiting for your reply to see how everything is running…

  • Nate

    you rock man, thanks for this help.

  • Lauren

    thank you so much! I tried everything to get rid of that sweetpack site I hated it! Really appreciate the help especially as I’m not particularly tech-savvy. Cheers, mate. xx

  • Carolyn

    OH my gosh.. you are the bomb… thank you … I could not get rid of this PARASITE! Thank you on thank you… you rock big time! Whew!!

  • Gendo Ikari

    While the companies that do add-on installs are a disease upon the internet it isn’t proper to refer to them as a “virus.” Terminology is important when dealing with tech.

    This is not a malicious installer– just an annoying one. Even Java is partnered with adware now.

  • VG

    I have to agree with others on this thread. These instructions are the most complete and helpful of any I’ve found. I went through all the steps you outlined. Lastly, I ran the JRT as recommended in previous comments – and JRT *still* found and removed even more Sweetpacks components the the previous 3 scanning tools had missed. Man, this is an evil one. I sure hope all the little threads and fragments are gone now.

    Thanks again! I sent a donation your way…

    • http://malwaretips.com/ Stelian Pilici

      Thank you so much! Stay safe! And if you have any malware related issues, we are always here to help!

  • Malware writer go to jail

    Thanks Stelian. Your solution is work like the charm. I just donated the money to your account. Is there any way we can put those wrote the malware into jail.

  • Trish

    Thank you so much!!! I tried everything. Your instructions were the only ones that worked!!!

  • http://malwaretips.com/ Stelian Pilici

    Hello Daniel,
    Did you run AdwCleaner? Please run AdwCleaner to remove this infection!

    Next please run Junkware Removal Tool:

    1.Download Junkware Removal Tool to your desktop from the below link:

    JUNKWARE REMOVAL TOOL: http://thisisudax.org/downloads/JRT.exe

    2. Double-click on the JRT.exe icon to start this utility.

    3. The tool will open and start scanning your system. Please be patient as this can take a while to complete depending on your system’s specifications.

    Waiting for your feedback.

  • Red

    Thank you for this thread. It works! I feel like I’m constantly learning how to safely navigate the web, and when professionals such as yourself take the time to help educate the rest of us it makes a huge difference. Thanks again!

  • Lorrie Judith

    Wow, you hit it on the nose about not paying strict attention to downloads. I am guilty and the thing is, not any of my malware software found it with the exception of Spybot who recognized some of it. You are so good, I can now use my default search provider. Thanks so very much!

  • Isa

    Your solution worked like a charm. Thank you very much.
    Keep up the fantastic work!

  • Kivela

    I found this writing to be extremely helpful and it helped me to get rid of the problem. The instructions themselves were written so simple even a child could understand how to get rid of this problem. Many thanks!

  • Yolanda

    I picked Sweetpacks up in a free download of K9 Internet Protection on CNET. These steps worked beautifully in the removal and so easy too…thanks!

  • John

    These instructions are superb! Thank you!!

  • Patty

    Thank you for this. It helped me to get rid of this annoying adware.

  • Helenmary Cody

    It looks like DAEMON Tools Lite is installing Sweetpacks as a sidecar.

    Also, the uninstaller for Sweetpacks wanted to make changes to my computer, which I didn’t think was a good idea. Fortunately, Adwcleaner removed ALL of the little monster.

    Thanks for your help.

  • Alec MacLean

    Sweetpacks has gotten smarter. Now when I try to remove it, I get a captcha window from “IB Updater Service,” which I’m not gullible enough to click on. Somehow, Sweetpacks has made itself un-uninstall-able. It got in past the most recent Avast software, and will not allow me to download the updated Malwarebytes files. My last Malwarebytes update is 203 days old, and as soon as I try to update the Malwarebytes, it gets to 1 – 2 % updated – - – and then goes back to 0 %. Sweetpacks is wicked.

    • http://malwaretips.com/ Stelian Pilici

      Hello Alec,
      Not smarter than us… Lets try to remove this program. Did you run Adwcleaner?
      If yes, please run a scan with Junkware Removal Tool.

      1. Download Junkware Removal Tool to your desktop from the below link.
        JUNKWARE REMOVAL TOOL DOWNLOAD LINK (This link will automatically download Junkware Removal Tool on your computer)
      2. Double-click on the JRT icon. For Windows Vista, 7 or 8 users, right-click the file and select Run as Administrator.
        The tool will open and start scanning your system. Please be patient as this can take a while to complete depending on your system’s specifications
      • E. Dowling

        The Junkware Removal tool worked like a charm! Thanks so much!

      • Jimbo

        Also – if Malwarebytes isn’t letting you update the definitions try Malwarebytes Chameleon. It’s in the Malwarebytes folder.

  • Yui

    THANKS SO MUCH! Anyways for the internet explorer i could not hit reset because it demanded i closed my window but i couldnt close my window because if i did the reset button left with it and i was like wth? So i ended up going through my setting and manually deleting everything :P But ether way i found like 3 other viruses when i got rid of sweetpacks and was like YES now my browsers move so much smoother! Thanks so much!

  • Tricia

    This was a perfect solution! Very user-friendly instructions. Thank you so much!