Spybot Saved the Day
Last night, I downloaded a program from cnet.com: Free RAR Extract Frog. Upon installing it, I was given the opportunity to install three additional items that included SweetIM. I didn't choose any of these add-ons, and unclicked all three boxes. The installation of the program took forever; in fact, I had to manually shut the computer down, but before I did, I saw three new icon shortcuts on my desktop; SweetIM and two others. I deleted the icons, yet SweetIM "had its way" with my system.
I have Windows XP; Firefox 15.0.1; Internet Explorer 8.
SweetIM became my preferred homepage whether I used Firefox or Internet Explorer. I went to Add or Remove Programs through my Control panel, but I couldn't find SweetIM, under any name.
I went to both browsers and changed my homepage back to google, but no matter how many times I did this, SweetIM always hijacked the homepage.
I went to both browsers in order to disable SweetIM as an add-on. I did this successfully in Firefox (but to no avail; it didn't seem to help); I couldn't find SweetIM as an add-on in IE.
When I used Firefox, and when I clicked on the little "house" icon which normally takes me to my homepage, seven new tabs tried to open all at once, pages that were convinced that they were all my homepage.
Luckily, Spybot informed me that SweetIM is a bad program. I did find SweetIM in my program files, but when I clicked on SweetIM's uninstall file, nothing happened. When I clicked on Start and then All Programs, SweetIM did not appear in my program list.
I wrote to SweetIM, telling them that they ought to be ashamed of themselves for unleashing this malicious program. I asked them to help me; SweetIM's technical support sent me an automatically generated reply and suggested that I read their FAQ page; I even tried to use SweetIM's online uninstall, but to no avail. By the way, that reply did not have word wrap, and the e-mail was just one really long sentence that bled off into Outlook's right margin.
This morning (remember, SweetIM attached itself to my system late last night), I ran Spybot which detected 118 SweetIM entries (mostly in my computer's Registry). Spybot was able to clean 114 of those items, and suggested that I restart my computer, and allow Spybot to run as it restarted. When the computer restarted, Spybot ran for about 90 minutes.
When Spybot finished, I found SweetIM still in the Program directory, yet there were only four files left (perhaps these were the four that Spybot couldn't fix of the 118 it found the first time through). I deleted those items. I opened Firefox and IE where I found SweetIM as my homepage; I changed the homepages on both, restarted both browsers, and SweetIM is gone.
I've reported this problem to cnet. SweetIM is nasty; thank goodness for Spybot!