Sweet Packs Malware

[lovemountains]

SweetPacks is on my laptop, and I’d like to get rid of it! I used the Windows program to uninstall it, but it’s apparently still on my laptop, even though Sweet Packs is no longer visible in my list of programs. I have Kaspersky Internet Security and it did not detect a problem.

I noticed a thread about getting rid of a virus on this forum about a week ago, so I followed the directions given by 1492; downloaded “Aniv Resue Disk” to my good computer, copied it to a CD. Then I inserted it in my laptop CD player.

How do I boot the Rescue Disk, so I can use it to fix the problem?

Or is there a better solution to removing Sweet Packs?

[easlingn]

tenbear wrote:
Last time I downloaded a program from CNET I also received Conduit. Conduit is technically not a virus, but allows undesirable programs to run. I now avoid CNET like the plague.

I guess I am just a slow learner. I also got infected with "conduit" then 2 more problems from CNET before I learned to avoid CNET at all times.

[tenbear]

Last time I downloaded a program from CNET I also received Conduit. Conduit is technically not a virus, but allows undesirable programs to run. I now avoid CNET like the plague.

[tenbear]

Last time I used CNET I got Conduit, technically not a virus but allows other not desirable programs to run. I now avoid CNET like the plague.

[Aapikka]

Searching for quick solutions many people become victims of crappy websites that penetrated google top search results and offer spuhunter removal tool. (Like here: http://soft2secure.com/knowledgebase/snap-dohttp://soft2secure.com/knowledgebase/snap-do)

Please do not use it. It is not free and spyware itself. It is better to use free malwarebytes

[1492]

Just remember, Comodo Program Manager(CPM) is not AV software. One of its components is to monitor and record installs, so they can be more thoroughly if not completely uninstalled. CPM does allow you to view registry entries it removes. There is no paid version, with no plans to port to Windows 8.

[mikestock]

I think COMODO does its job. Got a message that it had stopped an unwanted malware program from installing. Only thing is that I was curious to see what it was, but my free version didn't tell.

[1492]

I had a similar experience. You may want to warn CNET readers in a review of that particular app. Comodo Program Manager(CPM) got rid of the app and Sweetpacks with a few clicks. One of CPM's features is auto monitoring of installs, which has an advantage over other free uninstallers that don't actually record the install itself. IMO, much more thorough in removing the primary program, its residual components, including any other linked programs installed at the same time. It also monitors future app updates. Could be another effective malware removal tool. Has done so for me on a couple of occasions.

[mikestock]

I also got it when installing a program from CNet. Even saw where it wanted to install it with the downloaded software but I declined. It installed it anyway. Malwarebytes in safe mode got rid of it.

[nicetech]

There are many steps to take if you wanna get rid of sweetpacks virus.

1. Uninstall its software or toolbar

2. Uninstall add-ons from your browsers

3. Reset your browser settings

4. Scan and delete all hidden malware.

You can refer to this sweetpacks virus removal guide here
http://howtovirusremoval.com/get-rid-of-start-sweetpacks-com-virus-fix-redirect/

[lovemountains]

Thanks for reminding me to install the free Comodo Program Manager. I got Sweetpacks when I downloaded something from CNET.

[1492]

Consider using the Free Comodo Program Manager in the future, as long as you're not using WIN 8. It would have auto monitored any install changes made to your computer when Sweetpacks was installed, whether you knew about it or not. About three clicks is all it took to remove it from my desktop. Also, useful for malware in general that tries to install anything on your system.

BTW, I did warn CNET users in a review about the particular app which caused Sweetpacks to be installed on my system.

[lovemountains]

Sweet Packs is gone! I used a suggestion made by 1492; the YouTube video on how to remove the nasty malware. It took some time to do all the things that the narrator suggested, but hopefully all traces are gone. There were so many "Sweet" files in the registry after getting rid of them in more obvious places.

It's wonderful to have my computer back! Thanks again to all of you who commented.

[mikestock]

phenrichs wrote:
I use malwareytes. You can run it in safe mode too.

Ditto. Note "SAFE MODE". Did not work otherwise. Also ran Spybot while there but Malwarebytes was the key.

[mlts22]

1492 wrote:
I don't think the "Aniv Rescue Disk" is appropriate in this case. Rescue disks are designed more for difficult embedded malware. Those that resist removal while the existing OS is running. Also, browser and search hijacks are not always detected or removed by traditional AV software. Nor are they necessarily removed by using System Restore. See if this YouTube video helps Remove Uninstall sweetIM completely from all browsers.

In any case, I know about SweetPacks personally. Just recently downloaded a freeware utility from a well known tech site. Despite indicating that I did not want any add-ons during the install, quite common with freeware, it installed SweetPacks anyway. But in my case, it just took a few clicks to remove.

You may want to try using the freeware Comodo Programs Manager(CPM) in the future. One of it's features is an Active Monitor which tracks all setup installs, updates, and changes to your system from a particular program. Uninstalling from CPM removes the core program and all linked programs, removing both files and registry changes. It can run automatically to detect setups, or you can right-click on a program you want to install, and it will monitor its installation. Designed for Windows, but does not support WIN 8.

I nearly got bit by this myself because a utility that I use came bundled in a wrapper that downloaded this stuff. However, what did save my bacon was running the program under sandboxie. It proceeded to install whatever crapware, but I was able to access the core program executable, copy it off somewhere safe, then purge the sandbox, flushing all the crapware down the drain (with sandboxIE, any programs sandboxed have all writes and modifications saved in a different directory, so no real files get touched.)