SweetIM Toolbar

Also Known As: Search.sweetim.com Redirect
Type: Browser Hijacker
Damage level: Medium
Distribution: Moderate
Damage Level

What is SweetIM toolbar and how to remove it?

SweetIM toolbar is a browser add-on, which adds various shortcuts such as games, deal pages, etc., to your browsers for easy access. This toolbar also changes your homepage to home.sweetim.com

While some people may find SweetIM toolbar useful, this browser add-on can be categorized as an unwanted application. The default homepage set by this toolbar is enhanced by deceptive ads which redirect PC users to survey pages.

Furthermore, the search engine used by home.sweetim.com appears like Google, using a logo with Google colors. In fact, this search engine provides unrelated advertisements that are easy to confuse with organic search results. Another reason why SweetIM toolbar can be categorized as unwanted is that it comes bundled with free software - unsuspecting computer users can easily install it inadvertently. To avoid this situation, ensure you study every window of all program installation processes, since some software developers use toolbars such as SweetIM to monetize free software downloads. Furthermore, the uninstall process of SweetIM toolbar is not full - you need to manually remove it from the Chrome and Firefox browsers.

sweetim toolbar

SweetIM toolbar is not malware or a virus, since it does not  self-install on users' computers. It is often installed by accident when users download and install free software from the Internet. If you have installed SweetIM toolbar and you are satisfied with it, then you do not need to perform any steps. If, however, you have not intentionally installed it, or have done so inadvertently, use the removal guide provided to remove SweetIM toolbar from your Internet browsers.

SweetIM Toolbar removal:

sweetim uninstall screen

sweetim uninstall message

Windows 7 users:

Click "Start" ("Windows Logo" at the bottom left corner of your desktop), choose "Control Panel". Locate and click "Programs and Features". Look for "Internet Explorer Toolbar by SweetPacks", "SweetIM for Messanger", "Update Manager for SweetPacks" and click Uninstall.

Windows XP users:

Click "Start", choose "Settings" and click "Control Panel". Locate and click "Add or Remove Programs". Look for "Internet Explorer Toolbar by SweetPacks", "SweetIM for Messanger", "Update Manager for SweetPacks" and click Remove.

After uninstalling SweetIM Toolbar, scan your computer with anti-spyware software for any remaining unwanted components. Use recommended malware removal software.

Remover for SweetIM Toolbar

If you need assistance removing SweetIM Toolbar, give us a call 24/7:
1-800-681-6438
By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. All the products we recommend were carefully tested and approved by our technicians as being one of the most effective solutions for removing this threat.

SweetIM Toolbar removal from browsers:

Video showing how to remove potentially unwanted browser add-ons:

Uninstalling SweetIM Toolbar is not adequate; remove any remaining unwanted components from your Internet browsers manually.

Remove SweetIM Toolbar from Internet Explorer:

sweetim toolbar Internet ExplorerIf you have accidentally clicked "Yes" in the uninstall screen of SweetIM Toolbar, Click "Tools" (or the gear icon in Internet Explorer 9) select "Internet Options", in the opened window, remove home.sweetim.com and enter your preferred domain, which will open each time you launch Internet Explorer.

Optional method:

If you continue having problems with the removal of SweetIM, you can reset your Internet Explorer settings to default.

Windows XP users: Click "Start", click "Run", in the opened window type "inetcpl.cpl". In the opened window click on "Advanced" tab, then click Reset.

Windows Vista and Windows 7 users: Click the Windows logo, in the start search box type "inetcpl.cpl" and click enter. In the opened window click on "Advanced" tab, then click Reset.

Remove SweetIM Toolbar from FireFox:

sweetim toolbar firefox

Click "Tools" (at the top of the window), select "Add-ons". Click on "Extensions" and disable "SweetPacks Toolbar for FireFox". To reset your homepage, click "Tools", then select "Options", in the opened window, remove home.sweetim.com and enter your preferred domain.

Remove SweetIM Toolbar from Google Chrome:

sweetim toolbar google chrome

Click on the wrench icon (top right of the screen), select "Tools" and click on "Extensions".  Locate "SweetIM for Facebook", select it and click on a trash can icon. To change your homepage from home.sweetim.com to your preferred domain, click on the wrench icon, select "Settings". In "On startup" section click "set pages", hover your mouse over home.sweetim.com and click the x symbol. Now you can add your preferred website as your homepage.

If you continue having problems with the removal of SweetIM, you can reset your Mozilla FireFox settings to default.

Open Mozilla FireFox, at the top left corner of the main window, click "FireFox", in the opened drop down menu, choose Help, and then click on Troubleshooting Information, in the opened window click on the "Reset FireFox" button.

Manual SweetIM Toolbar removal:

If you were unable to remove SweetIM Toolbar using the steps above, you can use this manual removal instruction. Use it at your own risk, since if you do not have strong computer knowledge, you could harm your operating system. Be careful and use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)

End these SweetIM Toolbar processes:

SweetIM.exe

Remove these SweetIM Toolbar registry entries:

HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1
HKEY_CLASSES_ROOT\SWEETIE.IEToolbar
HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1
HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook
HKEY_CLASSES_ROOT\Toolbar3.SWEETIE.1
HKEY_CLASSES_ROOT\Toolbar3.SWEETIE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe\(Default)
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe\".
HKEY_CURRENT_USER\Software\SweetIM\
HKEY_LOCAL_MACHINE\SOFTWARE\SweetIM\

Delete these SweetIM Toolbar files:

%COMMONAPPDATA%\SweetIM\Messenger\conf\users\main_user_config.xml
%COMMONAPPDATA%\SweetIM\Messenger\data\contentdb\cache_indx.dat
%PROGRAMFILES%\SweetIM\Messenger\default.xml
%PROGRAMFILES%\SweetIM\Messenger\mgYahooMessengerAdapter.dll
%PROGRAMFILES%\SweetIM\Messenger\msvcp71.dll
%PROGRAMFILES%\SweetIM\Messenger\msvcr71.dll
%PROGRAMFILES%\SweetIM\Messenger\SweetIM.exe

Summary:

A browser hijacker is a type of adware that alters user's Internet browser settings by changing one's homepage and default Internet search engine to some unwanted website. Most commonly this type of adware infiltrates user's operating system through free software downloads. While browser redirects might seem as a low risk security infection, computer users should know that the websites to which they are being redirected to commonly contain deceptive online advertisements and the Internet search engine that is presented in such websites might return shady Internet search results. Using such websites for one's daily Internet searches might easily end up in privacy issues, identity theft or malware infections.

A computer that is affected by a browser hijacker is exposed to high risk security infections. To prevent further privacy and security issues it's recommended removing any Internet browser settings altering adware as soon as possible. Here are some examples of free software download clients that are used in SweetIM Toolbar distribution:

Free software download managers distributing browser hijackers

To avoid installation of SweetIM Toolbar be very attentive when downloading and installing free software. If your download is managed by a download client be sure to opt out of installing advertised toolbars or applications that seek to change your homepage and default Internet search engine:

Declining installation of browser hijackers

Some of the mentioned free software download clients don't allow downloading the chosen free program if user decides to decline installation of it's offered toolbars, in such cases it's recommended to cancel the installation and look for an alternative download source.

Symptoms indicating that your Internet browsers are affected by a browser hijacker:

  • Your homepage and/or default Internet search engine is changed.
  • Appearance of new toolbars.
  • Slow performance of Internet browsers.
  • New Bookmarks or Favorites added.
  • You can't change your homepage or default search engine.
  • You see online ads on your screen that are not served by the website.
  • You get redirected to pages you never intended to visit.

If you are experiencing problems while trying to remove SweetIM Toolbar from your Internet browsers, please ask for assistance in our malware removal forum.

If you have additional information on SweetIM Toolbar or it's removal please share your knowledge in the comments section below.

Comments 

 
#18 Christian 2013-04-23 14:39
I have had the same problem with the Sweetpacks Toolbar, but I succeeded in finding an easy and very safe way of removing it completely from my computer. I still use Windows XP. You simply need to download and install Spybot and let it scan your computer and ask it to remove all the unwanted things on your computer. Spybot will even clean your registry from Sweetpacks Toolbar. And it won´t influence your Anti virus program. Just remember to turn off the so called Teatimer, as it will slow down your computer significantly. It is easier to do it while installing Spybot and remember to search for updates about once a week. Personally I use the free version 1.6.2, but there other and newer versions, both as free or you can purchase a license. Except for the Teatimer I would not mess to much with the standard settings, but that is up to you.
Quote
 
 
#17 freddy9 2013-01-31 16:59
Does not work (any more?) . SweetIM versions do not show in the installed software list in "add or remove programs". This is an evil program
Quote
 
 
#16 Polly 2013-01-30 03:45
Anything that installs itself on my laptop without my explicit opt in consent is malware and/or nuisanceware.

There is a niche in the market for an applicatoin that databases all this crap (no other word for it) and intervenes when it tries to install, giving full control and choice back to the user.

If you know the package it came bundled with, you can also engage the developer who thought it was a cool idea to bundle his excellent product with something that only annoys and irritates.

Bottom line is that almost no one would choose to install these crap apps...I had to clean up my mother's PC which had lost nearly half of the real estate on her browser to unwanted toolbars.

It is exploitation of the weak...seriously not cool in my book.
Quote
 
 
#15 Matt King 2013-01-29 22:58
So i have been infected with this stupid sweetpacks thing you are all talking about i removed it from my toolbar but i can not remove it from my computer, its not in programs and features, there is no trace of it or anything the only time i can see it is when i type it in the search bar on the bottom left. someone please tell me how to uninstall this thing!
Quote
 
 
#14 Richard 2013-01-27 13:42
Thanks for a very useful post.
One comment -- SweetIM is MOST CERTAINLY, UNQUESTIONABLY malware.

It's designed to be installed surreptitiously onto one's computer, is tricky to uninstall, and even when uninstalled, it still co-opts browser behavior (e.g. - the New Tab action will take you to the SweetIM search screen even tho' the home screen has been reset -- and this was AFTER I went through the registry and deleted every key (that I could find) associated with SweetIM).
Quote
 
 
#13 Michael M. 2013-01-24 13:43
(WEBMASTER: THIS IS PART 3 OF 3)
--------------------------------
(cont.)
Final note: speaking of AppData, in my search I noticed the following strange folder:
C:%USERPROFILE%AppDataRoaming.#
That's exactly what it looks like, a dot and a hash symbol. I deleted it because its date/time stamp indicated to me there was a good chance it was associated with SweetPacks. So far so good, but I would suggest users only delete the "EE…" folder under ProgramData first, then wait a couple days to see if it worked. If so, maybe leave the ".#" folder alone, just in case.

- Michael M.
Quote
 
 
#12 Michael M. 2013-01-24 13:42
(WEBMASTER: THIS IS PART 2 OF 3)
--------------------------------
(cont.) … different is because HERE, BELOW, i the main thing that was missing from the instructions above to completely rid my system of this thing: deleted THIS folder …

C:\ProgramData\ EE3D7B4619\

Notice the similar "EE…" beginning.

I suspect it will be news to some people that they even have a
C:\ProgramData\
folder, because it's hidden and (on my system) still doesn't show when I set the OS to show hidden files. Also because most everyone associates application data with
C:\%USERPROFILE%\AppData
only. (cont.)
Quote
 
 
#11 Michael M. 2013-01-24 13:41
(WEBMASTER: THIS IS PART 1 OF 3)
--------------------------------
Oh you were SO close :) Two things:

First, it is possible, likely even, that the alphanumeric code above (EEE6C35B-6118-11DC-9C72-001320C79847) will be different for different users. Unfortunately it's too late for me to confirm that now, because my own efforts at cleansing my system from this horrible thing included cleaning the registry from different points of attack, so when I discovered this page on this site my registry already had the lines pertaining to SweetPacks removed.

But the reason I think the codes may be … (cont.)
Quote
 
 
#10 Batang 2013-01-24 10:56
That so called sweetIM is never a kind of sweet at all...It's a "Bullshit" application. It is bundle with so many unwanted stupid apps that lurks within it. It's a stupid monkey business, that's why it has a "monkey" icon...so don't ever install it to your PC or your PC would be in deep shit...
Quote
 
 
#9 mick 2013-01-19 18:26
Hi there,

Well this virus keeps popping up every time I open Chrome. I can still use Chrome but this sweetim thing tags along in a separate tab.
I followed your directions yet I cannot find any trace of sweetim in the 'program and features' menu or in the 'extensions' menu. It's as if it's hiding in another file, and it refuses to be found.
I'm not game to manually try and get rid of it because I have no idea how and I don't want to cause any damage to my computer. I don't know what to do.

Can someone please help?
Quote
 
About the author:

I am passionate about computer security and technology. I have an experience of 10 years working in various companies related to computer technical issue solving and Internet security. I have been working as an editor for pcrisk.com since 2010.

Follow me on Google+ to stay informed about the latest online security threats.

Our malware removal guides are free. However, if you want to support us you can send us a donation.