Remove virus
Removal instructions

Severity scale:  
  (29/100) virus is also known as virus | Type: Browser Hijackers | Tags: Google redirect virus is a typical potentially unwanted program (PUP), which can infiltrate computers in a bundle with other free downloads. Once it does that, it starts what it was created for - promoting various unknown domains that are related to it. Some of these domains are harmless ( is harmless as well), but some of them may be filled with misleading advertisements and notifications that keep offering for PC users to use different discounts, install various programs or simply watch something for free. Of course, you should stay away from such sites and leave them ASAP. The clearest sign that virus has infiltrated your computer, is the changes in your homepage and default search engine. If you noticed that each of your search sessions are associated with the, you should check your PC with updated anti-spyware. 

How can virus infiltrate my computer? virus can infiltrate the target PC system unnoticed. In fact, people accept with its installation when they don't pay enough attention to freeware's installation process. In order to avoid that, you should always choose a custom or advanced installation method and uncheck these checkboxes that say that you agree to install sweetim or other free additions. If you failed to do that, you may soon find instead of your start page or default search engine. This virus may also initiate modifications in the proxy settings and even the Hosts file. The wort part of this is difficulties when trying to surf the web in a regular way. 

How to remove virus?

In order to remove virus, follow these steps:

Automatic virus Removal Guide

You can remove automatically with a help of one of these programs: SpyHunter, STOPzilla, Malwarebytes Anti Malware. We recommend these applications because they can easily delete potentially unwanted programs and viruses with all their files and registry entries that are related to them.

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove virus you agree with our Privacy Policy and Agreement of Use.
remover for virus
Compatible with OS X
Webroot SecureAnywhere AntiVirus is recommended remover to uninstall virus. You should confirm using free trial that it detects current version of parasite.
Not using OS X? Download a remover for Windows.
Do it now!
remover for virus Happiness
Compatible with Microsoft
SpyHunter is recommended remover to uninstall virus. You should confirm using free trial that it detects current version of parasite.
more than 40.000.000 downloads!
What to do if you failed to remove the infection?
If you failed to remove virus using Webroot SecureAnywhere AntiVirus SpyHunter, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.

Alternate Software

We are testing STOPzilla's efficiency at removing virus (2012-09-03 06:00:15)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency at removing virus (2012-09-03 06:00:15)
XoftSpySE Anti Spyware
We are testing XoftSpySE Anti Spyware's efficiency at removing virus (2012-09-03 06:00:15)
Defender Pro Ultimate
We are testing Defender Pro Ultimate's efficiency at removing virus (2012-09-03 06:00:15)
Virus Removal Phone Support
Help Line to remove virus virus screenshot virus snapshot virus Removal Process

Step 1

Uninstall and related programs

Windows Mac OS X Step 2
Windows 7 / Vista / XP
  • Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs).
Windows 8
  • If you are Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program.
Uninstall and related programs
  • Here, look for or any other recently installed suspicious programs.
  • Uninstall them and click OK to save these changes.
Windows Mac OS X Step 2

If you are using OS X, click Go button at the top left of the screen and select Applications.

Wait until you see Applications folder and look for or any other suspicious programs on it. Now right click on every of such entries and select Move to Trash.

Step 2

Remove from Windows shortcuts

Step 3
  • Right click on the shortcut of Mozilla Firefox and select Properties.
  • Go to Shortcut tab and look at the Target field. Delete malicious URL that is related to your virus.

Repeat steps that are given above with all browsers' shortcuts, including Internet Explorer and Google Chrome. Make sure you check all locations of these shortcuts, including Desktop, Start Menu and taskbar.

Step 3

Remove from each of your web browsers

Internet Explorer Mozilla Firefox Google Chrome Safari Step 4
Remove dangerous add-ons
  • Open Internet Explorer, click on the Gear icon (IE menu) on the top right corner of the browser and choose Manage Add-ons
  • You will see a Manage Add-ons window. Here, look for and other suspicious plugins. Disable these entries by clicking Disable:
Change your homepage if it was altered by virus:
  • Click on the gear icon (menu) on the top right corner of the browser and select Internet Options. Stay in General tab.
  • Here, remove malicious URL and enter preferable domain name. Click Apply to save changes.
Reset Internet Explorer
  • Click on the gear icon (menu) again and select Internet options. Go to Advanced tab.
  • Here, select Reset.
  • When in the new window, check Delete personal settings and select Reset again to complete removal.
Internet Explorer Mozilla Firefox Google Chrome Safari Step 4
Remove dangerous extensions
  • Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions.
  • Here, select and other questionable plugins. Click Remove to delete these entries.
Change your homepage if it was altered by virus:
  • Click on the menu (top right corner), choose Options General.
  • Here, delete malicious URL and enter preferable website or click Restore to default.
  • Click OK to save these changes.
Reset Mozilla Firefox
  • Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information.
  • Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete removal.
Internet Explorer Mozilla Firefox Google Chrome Safari Step 4
Delete malicious plugins
  • Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions.
  • Here, select and other malicious plugins and select trash icon to delete these entries.
Change your homepage and default search engine if it was altered by your virus
  • Click on menu icon and choose Settings.
  • Here, look for the Open a specific page or set of pages under On startup option and click on Set pages.
  • Now you should see another window. Here, delete malicious search sites and enter the one that you want to use as your homepage.
  • Click on menu icon again and choose Settings Manage Search engines under the Search section.
  • When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name.
Reset Google Chrome
  • Click on menu icon on the top right of your Google Chrome and select Settings.
  • Scroll down to the end of the page and click on Reset browser settings.
  • Click Reset to confirm this action and complete removal.
Internet Explorer Mozilla Firefox Google Chrome Safari Step 4
Remove dangerous plugins
  • Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences.
  • Here, select Extentions and look for or other suspicious entries. Click on the Uninstall button to get rid each of them.
Change your homepage if it was altered by virus:
  • Open your Safari web browser and click on Safari in menu section. Here, select Preferences as it was displayed previously and select General.
  • Here, look at the Homepage field. If it was altered by, remove unwanted link and enter the one that you want to use for your searches. Remember to include the "http://" before typing in the address of the page.
Reset Safari
  • Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari....
  • Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete removal process.

Step 4

Complete virus removal

After uninstalling this potentially unwanted program (PUP) and fixing each of your web browsers, we recommend you to scan your PC system with a reputable anti-spyware. This will help you to get rid of registry traces and will also identify related parasites or possible malware infections on your computer. For that you can use our top-rated malware remover: SpyHunter, STOPzilla or Malwarebytes Anti Malware.

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Removal guides in other languages

Information added: 09/07/14 23:48; information updated: 09/07/14 23:48

Additional resources

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

Comments on virus

An "easy" fix for a number of these nuisances is to:
-Press ctrl+alt+del
-Start Task Manager
-Select the "Processes" tab
-Right-click the sweetim process
-Select "End Process Tree"
Yeah,It even takes you to the site of sweetim search (even when you are trying to get drivers from dell)
Even after it is removed, there are folders it leaves on your hard drive. They are in use so you can not just delete them. THIS is the true virus, just uninstalling will not remove the problem. This program is loaded with viruses.
the damn SweetIM comes up anyhow when a new page in Firefox is opened (not when the first page opens) - even if all the possible links to the program. It places an add right in the middle and invites to seach with a line looking like Google.
You have the the feeling they check all the sites visited and passwords typed.
How do I get rid of this nuisance??

thanks in advance
This isn really helpful
It seems uninstalling what you think is the problem then scanning would be the first thing to do. I already did that and 10 minutes later, SweetIM started showing up in my processes again. It didnt work, so Im looking up solutions. Obviously this tutorial doesnt work, so what would be the next step in getting rid of this?
you can remove sweetim from your system using c-cleaner. I dont know why but on a lot of systems that I have had seen with crap like sweetim uninstalling using traditional methods doesnt work. so just install c-cleaner if you have not already, then just go to tools uninstall and the rest is simple :)
Not working
what can i do ?
Jeff Wells
Last night, I downloaded a program from Free RAR Extract Frog. Upon installing it, I was given the opportunity to install three additional items that included SweetIM. I didnt choose any of these add-ons, and unclicked all three boxes. The installation of the program took forever; in fact, I had to manually shut the computer down, but before I did, I saw three new icon shortcuts on my desktop; SweetIM and two others. I deleted the icons, yet SweetIM "had its way" with my system.

I have Windows XP; Firefox 15.0.1; Internet Explorer 8.

SweetIM became my preferred homepage whether I used Firefox or Internet Explorer. I went to Add or Remove Programs through my Control panel, but I couldnt find SweetIM, under any name.

I went to both browsers and changed my homepage back to google, but no matter how many times I did this, SweetIM always hijacked the homepage.

I went to both browsers in order to disable SweetIM as an add-on. I did this successfully in Firefox (but to no avail; it didnt seem to help); I couldnt find SweetIM as an add-on in IE.

When I used Firefox, and when I clicked on the little "house" icon which normally takes me to my homepage, seven new tabs tried to open all at once, pages that were convinced that they were all my homepage.

Luckily, Spybot informed me that SweetIM is a bad program. I did find SweetIM in my program files, but when I clicked on SweetIMs uninstall file, nothing happened. When I clicked on Start and then All Programs, SweetIM did not appear in my program list.

I wrote to SweetIM, telling them that they ought to be ashamed of themselves for unleashing this malicious program. I asked them to help me; SweetIMs technical support sent me an automatically generated reply and suggested that I read their FAQ page; I even tried to use SweetIMs online uninstall, but to no avail. By the way, that reply did not have word wrap, and the e-mail was just one really long sentence that bled off into Outlooks right margin.

This morning (remember, SweetIM attached itself to my system late last night), I ran Spybot which detected 118 SweetIM entries (mostly in my computers Registry). Spybot was able to clean 114 of those items, and suggested that I restart my computer, and allow Spybot to run as it restarted. When the computer restarted, Spybot ran for about 90 minutes.

When Spybot finished, I found SweetIM still in the Program directory, yet there were only four files left (perhaps these were the four that Spybot couldnt fix of the 118 it found the first time through). I deleted those items. I opened Firefox and IE where I found SweetIM as my homepage; I changed the homepages on both, restarted both browsers, and SweetIM is gone.

Ive reported this problem to cnet. SweetIM is nasty; thank goodness for spyware programs such as Spybot. Thank you for this website because SweetIM is dastardly evil in more ways than one.

Post a comment

Attention: Use this form only if you have additional information about virus parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name


(All fields are required)
Like us on Facebook
Recent Malware
Read on mobile
Ask us
Press Mentions
I failed to remove virus using SpyHunter.


add text box
rss feed
help other
Spreading the knowledge: It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!