SweetIM

[erainai]

Hi guys,


Sorry if the SweetIM topic has already been discussed and solved. I did do a search for it but wasn't able to find anything.


I'm having major issues trying to rid my computer of this annoying software that I didn't initially even install. It installed itself with a free FLV converter and attached itself to my browsers, toolbars and messengers (yahoo and msn).

I have been able to get rid of it from my browsers and toolbars due to information from MalwareTips, but for the life of me I can not find how to get rid of it from my computer.


I just opened my windows task manager to restart windows media and noticed that both SweetIM.exe and SweetPacksUpdateManager.exe*32 are running. I have stopped them previously.


This is such a bad program! I'm hoping someone can help





[attachment=3031]


[attachment=3030]


[attachment=3029]

 

[kuttus]

Hi and welcome to the malwaretips.com forums!

I'm Kuttus and I am going to try to assist you with your problem. Please take note of the below:

• I will start working on your malware issues, this may or may not, solve other issues you have with your machine.
• The fixes are specific to your problem and should only be used for this issue on this machine!
• The process is not instant. Please continue to review my answers until I tell you your machine is clear. Absence of symptoms does not mean that everything is clear.
• If you don't know, stop and ask! Don't keep going on.
• Please reply to this thread. Do not start a new topic.
• Refrain from running self fixes as this will hinder the malware removal process.
• It may prove beneficial if you print of the following instructions or save them to notepad as I post them.

Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.


Before we start:
Please be aware that removing malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start.
<hr />

You should be able to run both scans while in Normal mode...
STEP 1: Run a scan with Malwarebytes Anti-Malware in Chamelon mode

<ol>
<li>Download <>Malwarebytes Chameleon from <a title="External link" href="http://downloads.malwarebytes.org/file/chameleon" rel="nofollow external">here</a> </>and extract it to a folder in a convenient location</li>
<li>Make certain that your PC is connected to the internet and then open the folder where you extracted Chameleon to and double-click on the Chameleon help file and then follow the onscreen instructions to use it.</li>
<li>If the Chameleon help file itself will not open, then double-click each file one by one until you find one that works, which will be indicated by a black DOS/command prompt window <em><>Note:</> Do not attempt to open <>mbam-killer</> as that is not a Chameleon executable and serves a different purpose)</em></li>
<li>Follow the onscreen instructions to press a key to continue and Chameleon will proceed to download and install Malwarebytes Anti-Malware for yo</li>
<li>Once it has done this, it will attempt to update Malwarebytes Anti-Malware, click <>OK</> when it says that the database was updated successful</li>
<li>Next, Malwarebytes Anti-Malware will automatically open and perform a Quick scan</li>
<li>Upon completion of the scan, if anything has been detected, click on <>Show Result</></li>
<li>Have Malwarebytes Anti-Malware remove any threats that are detected and click <>Yes</> if prompted to reboot your computer to allow the removal process to complete</li>
<li>After your computer restarts, open <>Malwarebytes Anti-Malware</> and perform a Full System scan to verify that there are no remaining threats</li>
Please add both logs in your next reply.
</ol>

<hr />

STEP 2: Run a scan with AdwCleaner

<ol><li>Download AdwCleaner from the below link.
<><a href="http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner" target="_blank">ADWCLEANER DOWNLAOD LINK</a></> (This link will automatically download Security Check on your computer)</li>

<li>Close all open programs and internet browsers.</li>
<li>Double click on <>adwcleaner.exe</> to run the tool.</li>
<li>Click on <>Delete</>,then confirm each time with <>Ok</>.</li>
<li>Your computer will be rebooted automatically. A text file will open after the restart.</li>
<li>Please post the contents of that logfile with your next reply.</li>
<li>You can find the logfile at <>C:\AdwCleaner[S1].txt</> as well.</li>
</ol>
<hr/>

What's next?

Add the following logs to your next post (You can find here details on how to use the Attachment System):
1. Malwarebytes Anti-Malware Log
2. AdwCleaner log
3. Let me know if you had any problems with the above instructions and also <>let me know how things are running now!</>

<hr />

 

[erainai]

Thanks for your reply Kuttus.


I have done as you have instructed.

The SweetIM folder in program files has gone! Now when I do a search for "sweetIM" via the start menu, the only things that come up are all the logs saved from the scans you've had me do.

I sure hope this means that it is now gone for good!



[attachment=3033]


[attachment=3032]

 

[kuttus]

Okay Great to hear that.... :biggrin:

Do one more thing.. Run one more scan using the OTL tool and the HitmanPro and Upload me the Log Files.....

Cross Check the Internet Exploder and Mozilla Firefox once again and make sure Internet Exploder and Mozilla Firefox is working fine now....

Let me know if you are facing any other issues on the computer now....


What's next?

Add the following logs to your next post (You can find here details on how to use the Attachment System):
1. OTL Log
2. HitmanPro log
3. Let me know if you had any problems with the above instructions and also <>let me know how things are running now!</>

<hr />

 

[erainai]

Hi Kuttus,

I ran both those scans, but it won't let me attach the log for hitman pro - even though it's the same file format (notepad)..

Hitman did find one issue: AppData\Local\Google\Chrome\User Data\Default\Cookies:dmtracker.com

Both firefox and IE are working fine, as is chrome. SweetIM hasn't come back. Its even gone from the addons in IE where as previously, all it enabled you to do was disable it - not remove it completely! Yay!


Currently, there seems to be no other issues with my computer.


THANK YOU Kuttus!!!!!! :biggrin:



[attachment=3034]

 

[kuttus]

Okay. Everything in the OTL Log Seems to be Good only.... is there anything else what we can assist you with?

In order to avoid infections from the internet please remove the temporary files from the computer daily. 

STEP 1: Run Temp File Cleaner by OldTimer
<ol>
<li>You can download the TFC utility from the below link
<a title="External link" href="http://oldtimer.geekstogo.com/TFC.exe" rel="nofollow external"><>TFC DOWNLOAD LINK</></a> <em>(This link will automatically download Temp File Cleaner on your computer)</em></li>
<li>Please double-click <>TFC.exe</> to run it. (<>Note:</> If you are running on Vista or 7, right-click on the file and choose <>Run As Administrator</>).</li>
<li>It <>will close all programs</> when run, so make sure you have <>saved all your work</> before you begin.</li>
<li>Click the <>Start</> button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. <>Let it run uninterrupted to completion</>.</li>
<li>Once it's finished it should <>reboot your machine</>. If it does not, please <>manually reboot the machine</> yourself to ensure a complete clean.</li>
</ol>
<hr />


What's next?

1. Bulild up your malware defenses by starting a new thread in Security Configuration Wizard forum.
2. Learn how to avoid malware by reading this article <a href="http://malwaretips.com/blogs/how-to-easily-avoid-pc-infections/">How to easily avoid malware</a>
3. Be an active member in the MalwareTips community!

 

[Littlebits]

There is a complete removal guide provided by the vendor of SweetIM, located here.

Enjoy!!

 

[erainai]

Excellent! Thanks again Kuttus. So glad to finally be rid of that program!

There is a complete removal guide provided by the vendor of SweetIM, located here.

Enjoy!!

Thanks But no thanks, I really don't want to go to any site that has anything to do with sweetIM, plus that website has a very poor reputation (go figure)... and I've already tried most of what they have suggested - nothing worked but what Kuttus has instructed.

 

[kuttus]

This thread is now closed.​

Reason:&nbsp;<span style="color: #ff0000;">Resolved</span>​

<span style="color: #ff0000;"><>The procedures contained in this thread are for this user and this user only.&nbsp;&nbsp;Attempting to use the instructions in this thread on your system could result in damaging the Operating System beyond repair.&nbsp;&nbsp;</></span>

<span style="color: #ff0000;"><>DO NOT use any of the tools mentioned in this thread without the supervision of a Malware Removal Specialist.</></span>

All members requesting Malware Removal Assistance are required to follow all procedures in the thread