Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

How Remove "sweetim"?


  • Please log in to reply
13 replies to this topic

#1 rick7

rick7

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:02:32 PM

Posted 17 August 2008 - 02:46 PM

Using Vista Home Premium, when Windows reboots it comes up with a dialog box titled "SweetIM Update Wizard" informing me that a new version of SweetIM is available and asking me if I want to get it. I always close that dialog with the system 'X' in the upper right.

I understand SweetIM is some IE browser toolbar helper, and possibly more. I have never downloaded it, don't want it, am suspicious of it, and would like to remove it completely. AdAware found 15 associated registry entries and deleted them. I rebooted but am still getting the dialog box at restart. Here are the entries that Hijack this found that seem to be relevant:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com

O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe

Should I just delete these two? Could there be more relevant registry entries? Etc? Any help would be greatly appreciated.

BC AdBot (Login to Remove)

 


#2 don77

don77

    Forum Regular


  • Members
  • 3,212 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boston Mass
  • Local time:01:32 PM

Posted 17 August 2008 - 04:39 PM

Hello rick and welcome you should have a look for the program with in the Add/Remove programs see if the following SweetIM is listed there there if so remove it that way

Go to Start > Control Panel > Programs and Features.


Let us know how you make out

#3 rick7

rick7
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:02:32 PM

Posted 17 August 2008 - 08:24 PM

Thanks; I feel like a fool. I'd previous looked in Control Panel for a program called 'SweetIM', and found nothing. Turns out it was under 'Macromedia SweetIM', and I've now removed it. Now when I reboot I DON'T get that "update" dialog.

I feel halfway safe, but Hijack this still shows a registry entry:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com

It's strange, because when I load IE it loads to a blank page, which is what I've specified in Tools | Internet Options. Any idea what's going on?

#4 don77

don77

    Forum Regular


  • Members
  • 3,212 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boston Mass
  • Local time:01:32 PM

Posted 17 August 2008 - 09:12 PM

Go back into options and click on use Default or change it to whatever you would like the start page to be.

having that line in the HJT log should not be a problem try the suggestion above and let me know how you make out

#5 rick7

rick7
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:02:32 PM

Posted 17 August 2008 - 09:34 PM

When I load IE and go to Tools | Internet Options my Home Page is already set to about:blank, just as I want it.

I see that the line in my registry that loads sweetim.com as the Home Page is for the Local Machine (HKLM):

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com

I guess when I load IE I'm acting as the Current User, since Hijack this shows:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

How can I change the Home Page to about:blank for the *Local Machine* (HKLM) without actually loading IE?

Thanks much for the help.

#6 don77

don77

    Forum Regular


  • Members
  • 3,212 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boston Mass
  • Local time:01:32 PM

Posted 17 August 2008 - 09:47 PM

could you give me just the location of where HJT is installed please,
I don't want to see the log just the location of where it was downloaded to

If it is
C:\Program Files\Trend Micro\HijackThis

You can go ahead and fix the line
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com


make sure all open browsers are closed

#7 rick7

rick7
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:02:32 PM

Posted 17 August 2008 - 09:54 PM

Thanks... yes, that's where Hijack This is installed.

Before I check that line and then click 'Fix checked', what exactly will it do? Will it set it to 'about:blank', or completely delete the registry entry, or...?

Thanks.

#8 don77

don77

    Forum Regular


  • Members
  • 3,212 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boston Mass
  • Local time:01:32 PM

Posted 17 August 2008 - 10:52 PM

will delete
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com

#9 rick7

rick7
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:02:32 PM

Posted 18 August 2008 - 12:01 AM

Doesn't there need to be some registry entry for Internet Explorer's Start Page?

#10 don77

don77

    Forum Regular


  • Members
  • 3,212 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boston Mass
  • Local time:01:32 PM

Posted 19 August 2008 - 07:03 PM

You can change your start page to whatever you like

does your start page currently open up to the sweetim page ?

#11 rick7

rick7
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:02:32 PM

Posted 19 August 2008 - 09:05 PM

You can change your start page to whatever you like

does your start page currently open up to the sweetim page ?


No, it curently opens up to blank because I guess when I open IE it reads from the HKEY_CURRENT_USER hive, and in that hive the "Start Page" registry entry is set to "about:blank". So IE loads fine for me. But I assume that if I ever created another user and logged in to Windows as that user and then loaded up IE it would read from the HKEY_LOCAL_MACHINE hive, and then it would load up that SWEETIM web page which I don't want to happen.

Can I just type the same string "about:blank" in the Start Page registry entry in the HKLM hive? I'm nervous about completely deleting that entry (which I think HijackThis would do) because I imagine that IE would get confused if it finds no entry at all for "Start Page".

Sorry for being so obtuse -- I don't ordinarily mess around with the registry. Your help is very much appreciated.

#12 don77

don77

    Forum Regular


  • Members
  • 3,212 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boston Mass
  • Local time:01:32 PM

Posted 21 August 2008 - 06:14 PM

Can I just type the same string "about:blank" in the Start Page registry entry in the HKLM hive? I'm nervous about completely deleting that entry (which I think HijackThis would do) because I imagine that IE would get confused if it finds no entry at all for "Start Page".

Sorry for being so obtuse -- I don't ordinarily mess around with the registry. Your help is very much appreciated.


I m glad to hear your concern :thumbsup:

But so you are aware the reason I asked the location of HJT earlier is that HJT makes back ups of what it fixes and having HJT in a proper folder you have back ups so if by accident you deleted the wrong one the back up can be restored.

Now Don't go fixing everythihng as it might leave you with a computer that wont boot up but I can assure you fixing that 1 entry will cause no harm

#13 rick7

rick7
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:02:32 PM

Posted 21 August 2008 - 07:51 PM

Thanks very much -- I'm not so worried about deleting something accidentally; but just want to know if it's OK to completely delete the registry key for Internet Explorer's "Start Page". Doesn't IE need something there? Appreciate your help.

#14 Marybb2

Marybb2

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:32 PM

Posted 05 February 2012 - 03:41 PM

It looks as though Sweet IM is another one of those programs that is a "tracker" program. They let you put cute little smileys in your letters, etc.
Somehow I got it through Microsoft, which makes it look legit. It is just another "bother". I deleted it through my delete programs under
control panel. No problem.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users