Solved sweetpacks dot com virus

[Larry666]

I thought I would download a shareware game, instead I got this virus from a company with offices in Spain and Israel. It's called sweetpacks, or alternately sweetIM. I can no longer access Google or Chrome, I reloaded Internet Explorer, and it works sort of . It took me 4 log-ons to get to my email. I'm in the process of transferring all my files so I can reload windows. If I could afford to travel to Spain and Israel...

 

[edee]

tsk, tsk , tsk ........NEVER download games straight from the internet.

Get out of your chair, go to the local store and purchase the disk. I cannot tell you how many viruses and trojans I have had to clean up for people that downloaded some game from the internet.

If you cannot purchase a HARD copy of the game either online from the manufacturer or from a local store it's probably not worth the risk of downloading it.

 

[cottonball]

Larry666,

Please go to Start > Control Panel >Programs and Features, and uninstall any entry with Sweetpacks or SweetIM.


Now, remove the SweetIM Toolbar extension from Google Chrome...
Click the Chrome Menu on the browser toolbar
Select: Tools
Click on: Extensions
In the Extensions tab, remove any SweetIM or SweetPacks extensions.

Next, set Google Chrome as the default search engine...
Click the Chrome Menu button, select Settings, and click on: Manage search engines
In the Search Engines, select Google and click: Make Default
Next, look for Search.Sweetim.com in the Search Engines list and click: X (at the end of the row)

Change Google Chrome homepage from home.sweetim.com to its default:
http://support.google.com/chrome/bin/answer.py?hl=en&answer=95314



Last, please download AdwCleaner:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
Save to the desktop.

Close all open programs.

To run the program, right-click AdwCleaner.exe and select: Run as Administrator

Click on Remove and confirm the prompt.

After the program finishes, a text file report opens.

Please post the content of the AdwCleaner report in your reply.

(A copy of the log is also saved at C:\AdwCleaner[R1].txt)

 

[Larry666]

I have Chrome again for the first time in several days. It's a bit slow, and has some issues with hiding the minimize button, but these may clear up. At least it's not that awful start.sweetpacks.com browser. I had to look up what a Chrome Menu button was. There was nothing in the control panel for sweetIM or sweetpacks. I guess their invasivness is getting more sophisticated. I may still reload the OS if things don't clear up, but thanks for the info. Here's the AdwCleaner report:
# AdwCleaner v2.200 - Logfile created 04/16/2013 at 17:45:10
# Updated 02/04/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Larry - LARRY-HP
# Boot Mode : Normal
# Running from : C:\Users\Larry\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16464

[OK] Registry is clean.

-\\ Google Chrome v26.0.1410.64

File : C:\Users\Larry\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R2].txt - [2438 octets] - [16/04/2013 17:21:20]
AdwCleaner[R3].txt - [963 octets] - [16/04/2013 17:43:15]
AdwCleaner[S1].txt - [2226 octets] - [16/04/2013 17:22:45]
AdwCleaner[S2].txt - [835 octets] - [16/04/2013 17:45:10]

########## EOF - C:\AdwCleaner[S2].txt - [894 octets] ##########

 

[cottonball]

Larry666,

Do you have the latest version of Chrome installed?

Or, you may want to uninstall Chrome from Control Panel > Programs and Features, and then install a new copy...


Also, here are some suggestions to make Chrome faster:
http://www.howtogeek.com/119191/browser-slow-how-to-make-google-chrome-fast-again/

 

[Larry666]

I was too hasty to press the "solved" button. It sure isn't! I did remove chrome from the control panel and reload, but then everything was impossibly slow, and I was repeatedly holding the power button for 8 seconds to restart. I loaded RegCure Pro. They say they're a "Microsoft Partner", but that doesn't seem to insure integrity. They are like all the rest who waste my time with a lengthy load and scan, and then want $30 to fix it. I won't foul this message with my opinion of such tactics. If I can't get my registry "cleaned" without spending money, I'll spend the time it takes to restart the whole system.
Thanks for trying to help.

 

[cottonball]

Larry666,

I would stay away from RegCure Pro.

Please do the following...

Also download the Junkware Removal Tool:
Junkware Removal Tool Download
Save to the Desktop.


Make sure you temporarily disable your AntiVirus, Firewall, and any other security applications.
These programs may interfere with the running of JRT.

For information on how to disable protective programs, refer to this info:
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs - BleepingComputer.com


Right-click JRT.exe and select: Run as Administrator


The tool opens and starts scanning the system. Please be patient as this can take a while...


When done, a report (JRT.txt) is saved on the Desktop.

Please post the contents of JRT.txt in your reply.



Next, download RogueKiller:
Tlcharger RogueKiller (Site Officiel)

When you get to the website, go to where it says:
(Download link) Lien de téléchargement:

Select the version applicable to your system (32-bit or 64-bit)
Click the dark-blue button to download.
Save to the Desktop.


Close all windows and browsers.

Right-click and select: Run as Administrator


At the program console, wait for the prescan to finish. (Under Status, it says: Prescan finished.)

Press: SCAN


When done, a report opens on the Desktop: RKreport.txt


Please provide the RKreport.txt (Mode: Scan) in your reply


To find out if the system is 32 or 64-bit, go to a Command Prompt (Start > All Programs > Accessories > Command Prompt)

At the Command Prompt, type (or copy/paste with the mouse) the following command inside the quote box), and press Enter:

echo %PROCESSOR_ARCHITECTURE%

It provides the info as to whether the system is 32 bit or 64 bit.