Clear the SweetIM rogue plug-in
I don't know what kind of website I got. Since I went home yesterday afternoon, as long as my computer is on and connected to the Internet, my AVast! The firewall keeps reporting that a program is attempting to send an email with malicious code to a random email address. At most, more than 51 emails are sent every second.
What's strange is that I use AVast! No problems can be found. Therefore, you can only search online. Finally, I found www.bleepingcomputer.com, a magical website. This website contains various software that I have never heard of before to scan and clean viruses, Trojans, and hacker programs. It also provides one-to-one guidance on Trojan removal. They even provide anti-hacker guidance courses.
I didn't quite believe it at first. I should have all kinds of software and websites that use anti-virus banners as Trojans on the Internet. However, after some research and wiki results, we found that the content on this website is true. I did not advertise for them, but later I got some inexplicable Trojans. When traditional anti-virus software does not work, I can try this website.
Back to my rogue plug-in. It is called SweetIM and a member of Sweet Pack. It will be implanted with the advertisement of the spam Page accidentally. The harm is that other pages are displayed from time to time in the browser. At the same time, it will automatically send Trojans to others. Its transmission mode is mainly to insert a pre-loaded webpage link in the registry, so that once a browser is opened, the rogue program starts to execute. Because there are no physical files, traditional anti-virus software does not work at all.
It was detected thanks to Malwarebytes Anti-Malware, which is also a software on bleepingcomputer. Its report finally tells me that the Registry of the system has encountered an exception. It is also easy to clear. You can use Malwarebytes Anti-Malware to directly clear the registry key. However, I am using a combination of RKill + AdwCleaner. The two software are also on the website. For more information, see http://www.bleepingcomputer.com/virus-removal/remove-sweetpacks-toolbar. The explanation on the webpage is too detailed.
Thank you for helping others defend themselves against hackers.