How to remove SecurityTool

Friday, September 25th, 2009 at 5:46 am
Home » Rogue Antispyware » SecurityTool

SecurityTool description

Security Tool is typical fake anti-spyware application. It’s a copy of the notorious Total Security scam. It detects and reports numerous computer infections and it requires buying the full version of the program for deleting the threats. Here’s what wrong with this: SecurityTool reports imaginary infections and urges to pay for nonexistent full version.

SecurityTool

Don’t trust SecurityTool and avoid installing this app. The fabricated alerts are not the worst part of this fraud; Security Tool also hijacks web browser and slows machines performance down.

SecurityTool is a Rogue Antispyware software

How to manually remove SecurityTool

To remove SecurityTool spyware you must block SecurityTool sites, stop and remove processes, unregister DLL files, search and delete all other SecurityTool files and registry utility. Follow the SecurityTool detection and removal instructions below.

The most typical software removal method is to remove SecurityTool by using "Add or Remove Programs" service. However there may be hidden SecurityTool files, running processes and registries in your computer, so SecurityTool may recreate all other files after reboot.

SecurityTool manual removal instructions

Block SecurityTool sites:
bestantispyware7.com
antivir-labs.com
security-tool2010.com
total-scan.net Read more how to block SecurityTool sites

Stop and remove SecurityTool processes:
Security Tool.exe
uninstall.exe Read more how to kill SecurityTool processes

Locate and delete SecurityTool registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SecurityTool"
HKEY_CURRENT_USER\Software\Vista Antivirus 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SecurityTool
HKEY_LOCAL_MACHINE\SOFTWARE\SecurityTool Read more how to delete SecurityTool registry entries
Download RegistryBooster 2010 to scan errors caused by SecurityTool

Detect and delete other SecurityTool files:
%System Root%\Samples
%User Profile%\Local Settings\Temp
%Program Files%\SecurityTool
%Documents and Settings%\All Users\Start Menu\Programs\SecurityTool
%Documents and Settings%\All Users\Application Data\SecurityTool
Security Tool.exe
uninstall.exe

We strongly recommend you to use spyware remover to track SecurityTool and automaticaly remove SecurityTool processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: ,

67 Responses to

SecurityTool

  1. Anon
    October 4th, 2009 at 10:52 am

    My computer’s been infected by this virus, it’s blocked taskmanager, I can’t install anti-virus software, etc.

    Help? D:

    Anon Reply:
    October 5th, 2009 at 1:34 pm

    Same happened with me. I restarted in safe mode (XP Pro) and used Windows Defender to disable the Security Tool program from running on startup. The .exe for me was something like “88382439.exe”. Upon reboot I was pleased to find that it didnt start, thus jailbreaking the task manager.

  2. Roman
    October 5th, 2009 at 3:20 am

    i got this virus and now my pc wont even start up…. it just keep trying to boot it self up what do i do ?

  3. Eli
    October 5th, 2009 at 5:38 am

    This program suddenly appeared this morning on my computer and it is blocking everything. I can’t open the task manager either. The only way I can get the computer started is in safe mode but I still can’t run my virus software. Help please!

    Luciana Reply:
    October 5th, 2009 at 10:44 pm

    Use the manual removal guide to delete this infection. It may block the removal tools, but it can’t block you.

  4. Matt
    October 5th, 2009 at 6:08 am

    Hey guys. I had this problem this morning. Go into safe mode and do a search for it. Then delete it.

    Nt Reply:
    October 17th, 2009 at 12:57 pm

    i can’t reboot in safe mode, it gives me a blue screen. Help is appreciated.

  5. Ed
    October 5th, 2009 at 10:36 am

    Same symptoms as #1 Anon.
    In addition, I cannot get to dos prompt, cannot get to regedit, cannot open add/remove programs nor run any type of tool to allow removal of this spyware.
    Cannot delete the folder or file, as it denies access.
    Everything is blocked.
    Any ideas on how to get around this to delete as explained in process above?

    Please advise….Thanks

    Ed Reply:
    October 6th, 2009 at 6:59 am

    Thanks for the tips everyone. I’ll give safe mode a try.

  6. Anon
    October 5th, 2009 at 5:33 pm

    Go into safe mode. MSconfig, startup tab, uncheck the virus.

    Anna Reply:
    October 13th, 2009 at 2:14 am

    Thankyou,i deleted the 8 digit number (beginning with 8) from my startup and now it hasn’t started up upon reboot.

    Now how do i seek and destroy? :)

    TonyM Reply:
    November 14th, 2009 at 5:21 pm

    Thanks Anon, this worked perfect. I guess I caught it soon enough before it ran rampid on my Desktop. THANKS again!

  7. Rose
    October 6th, 2009 at 11:13 am

    I have the security tool thing keep coming on im not sure what i need to do to remove it please help :/

  8. Luciana
    October 6th, 2009 at 10:33 pm

    Scroll up this page till you see “SecurityTool manual removal instructions” title and then follow the tutorial step by step. Make sure you delete all the files and registry entries related to SecurityTool.

  9. Thomas
    October 7th, 2009 at 3:00 am

    I have tried using two different programs to help delete this darn security tool application. I can download programs, but can’t get them to open, any help would be appreciated.

    Luciana Reply:
    October 7th, 2009 at 3:32 am

    SecurityTool malware blocks real security programs but you should be able to run them in a safe mode. You can also delete this infection manually, use the manual removal posted on this page.

  10. Joy
    October 7th, 2009 at 6:15 pm

    Hi, how do I get into safe mode and then what do I do? Sorry, I’m computer-dumb.

    Luciana Reply:
    October 8th, 2009 at 12:47 am

    Restart your computer and keep clicking the F8 key while the PC is still booting up. You’ll get to the menu with option to boot in a safe mode.

  11. john
    October 7th, 2009 at 7:04 pm

    Well none of the above information was good or usefull. None of the registry entries were there? not any of them, NONE of the files were there, and I still have this $#@#% dam program running on my computer and cant get it off. I did how ever find the virus running in my task manager after safe mode reboot, so uncheck it but its still on my desktop. ANY OTHER BRIGHT IDEAS????????

  12. sharon
    October 7th, 2009 at 7:45 pm

    I cannot even start computer in safe mode. When I try I just get a page of scrolling file extensions.
    The only thing I can get on my screen is the pop up screen for this virus.
    I cannot access anything at all.

  13. Sam
    October 8th, 2009 at 6:34 am

    So. I got this frickin’ virus and can’t remove it to save my life. Even in safe mode. I can’t find the files to manually remove them, I can’t get Malware Bytes to work on my computer. I’m frustrated and sad. :( I tried following the manual instructions from this website but I am computer retarded. Seriously, it’s not even funny how little of this crap I understand. Anyone else have any dumb-downed advice they can offer?

    ben Reply:
    October 8th, 2009 at 7:55 am

    I’m in with john and sam. I need a solution to this problem, not steps to get rid of files that don’t exist on my machine. I have run Norton, Malwarebytes, PCTools SpywareDoctor, and none of them have been in the least bit effective. I have XP with updates, so I can’t get rid of internet explorer (which it really likes opening up). I get redirected when I look up information to remove it and have to cut and paste the http into my browser to access information. I don’t even want to turn on my home computer until someone can say definitively, “this solution works.” So does anyone have a solution to this problem that actually works, and – does anyone know where to find the little $%%$ that wrote this program?

  14. James
    October 8th, 2009 at 7:24 am

    It wouldn’t allow me to start in safe mode, blocked task manager and didn’t allow me to install any anti-virus software. What worked for me was F8 when starting the computer and booting it with windows threads only (or something along those lines) and do a system restore

  15. danny
    October 8th, 2009 at 8:08 am

    None of the files are there. I was able to at least get rid of the pop-up by going to task manager and ending process 9874638.exe. But I need to know the files that need to be deleted none of the ones above were there.

    jeff Reply:
    November 12th, 2009 at 1:12 pm

    get the registry editor open Ctrl + F 9874638 kill all the instances you find

  16. Bruce
    October 8th, 2009 at 11:46 am

    If you can not get safemode to start up as I could not.

    open my computer
    Go to c:\Documents and Settings%\All Users\Application Data\

    This folder may be hidden and read only you will need to right click the folder select properties and remove the hidden and reeadonly flags by clicking the boxes so they are empty.

    there were 3 folder in this directory titled by random number ie: 680023 etc. two of theese deleted. One was denied access because it was actively running. I opend that folder which had the running program and deleted the batch file. Though could not delete the .exe which had the shield as an icon. go back one folder to application data and rename the folder which is running the application.

    Restart your machine and the virus will not load. You will now be able to manually remove or install one of the tools for removal.

    Good Luck.

    Wings Reply:
    October 11th, 2009 at 1:20 pm

    Thank you sosososososososo much!!!! It totally worked and I think it is completely off of my computer. It took all day for me to find something that actually worked, and now that it was so simply gone I am astounded I didn’t read it somewhere else before!!! *hugs*

    Colizeth Reply:
    November 8th, 2009 at 4:45 pm

    Thanks so much….I couldn’t run in safe mode or connect to internet or run the task manager is the was the easiest solution…thanks so much!!!!!!!!!!
    I don’t know why this isn’t the solution on every other website.

    Miss C Reply:
    October 15th, 2009 at 3:09 am

    hey…i need your total help??

    i have this virus and im on windows vista…i dont know if that changes anything , lol.

    just i need to get rid of it, asap… and ive tried following the above tasks but cant seems to budge it…any ideas??

    im no computer wizz either…so cant understand half of the things being said, lol..if anyone can help i’ll greatly appreciate it !!!

    Luciana Reply:
    October 15th, 2009 at 4:23 am

    It’s easy to remove the wrong things when you find the removal guide confusing. That’s why I recommend using some anti-spyware tool to delete SecurityTool infection.

    Bortz Reply:
    October 31st, 2009 at 5:00 am

    Great call! This worked awesome. So stinking easy it is annoying that I did not just try to do that in the first place!! Thank you!!

  17. Adam
    October 8th, 2009 at 2:04 pm

    Sam I am totally with you. The only I have done today is scream F—! This virus is making me nutz. I am computer moron and I have no clue how to manually do this. I think I need a drink.

  18. Wade
    October 9th, 2009 at 6:57 am

    I did what Bruce described and it has worked thus far. I had to work the Spyware Doctor in safe mode first to get rid of some of the files and then started hunting for the numbered files in taskmgr. My files were actually eight digit numbers in taskmgr and in documents and settings. If anything else pops up I will make a post. Good luck and thank you Bruce.

  19. TOM
    October 9th, 2009 at 8:18 am

    i got rid of it this this way:

    the progam isnt as quick as the human, pissed off, hand.

    start your computer press control/alt/delete quickly enough to bring up the screen for task manager. click on task manager. click on the “applications” tab. wait for “security tool” to show up. once it does, click “end task” quickly. Now go directly to start/ progams/ accessories/ system tools/ system restore. now follow the instructions and restore to any date before the virus first showed up. It erased it completely from my hard drive.

  20. Leo
    October 9th, 2009 at 1:02 pm

    Hi guys, I’m a tech and one of our PCs was infected by this at work. Here is the solution that worked for me:
    If don’t want to mess with Safe Mode just open you \system32 folder and make a copy of taskmgr.exe copy and paste it in the same folder
    Then rename the copy to iexplore
    Then run it, this will give you the task manager and allow you to see the process.
    You can identify the process because it should be the only one that has a sequece of numbers. (ie. 6944857.exe) Write these numbers down!!!
    Then stop the process and go to your registry and search for those numbers. make sure you scan the whole registry for them. Then delete anything that comes up with that sequence of numbers and EXACTLY that sequence.
    Then go to your profile and the all users profile and search in the application data folder for a folder with that same number and delete it.

    You can check the rest of your PC for anything that has security tool on it or that number and get rid of it. That took care of it for me.

    I hope this helps. I really hate these idiots that come up with this crap.

    I wish you good computing :-)

    Destiny Reply:
    November 15th, 2009 at 10:18 am

    this didn’t work for me. it opened task manager then immediately closed.

  21. Mario
    October 9th, 2009 at 3:10 pm

    This worked for me to load apps and run stuff. first right click the security tool icon and click properties go to the shortcut tab and look at the target location number. then go into safe mode then go to start->Run->type regedit-> go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and delete that number. then start up again in regular mode. for me no more of those messages popped up. im currently running an antivirus software so i hope it works. hope this worked for you

  22. BMF
    October 9th, 2009 at 9:02 pm

    Thanks Bruce, that’s all I have to say! It’s been 3 hours and nothing has popped up and started bugging the sh… out of me yet.
    Cheer,
    B.M.F.

  23. Addy
    October 9th, 2009 at 11:32 pm

    Bruce:
    I.LOVE.YOU!!
    I’ve spent God knows how many hours trying to get my pretty much brand new laptop to work and now, thanks to you I was able to get rid of this crap!!
    Oh man, you have NO idea how happy I am right now, I wanted to throw my laptop out the window.
    You are my hero.
    Thank you! A million times thank you!

  24. Keen
    October 12th, 2009 at 12:54 pm

    I basically did what Bruce said. I started the computer in Safe Mode, and ran SPYBOT SEARCH AND DESTROY and then AVG’s anti-virus scan. (Took for-fickende ever!) Then I ran REGEDIT and looked for all the entries listed above. They were all gone, EXCEPT for the 8-digit number sequence, which I deleted. SEEMS to have solved the problem. I have re-booted several times and the virus is nowhere in sight. Best of luck everyone.

  25. Jeff
    October 12th, 2009 at 3:55 pm

    Bruce, thanks a lot, I did what you said and got rid of it, well at least for the moment. I forgot about the hidden file thing when I looked for it before and so couldn’t find it. Anyway excellent advice!!

  26. Angry Finn
    October 14th, 2009 at 3:41 am

    I cant use task bar, but that is a completely different story. I deleted some if the other random number codes, but one is still left up and running as it is ‘in use’. I hate computers, and this only makes my hate greater, I would appreciate some help. I have the little bastard open, like Bruce did. Yet I find no batch file, only the icon (which, of course, I cannot delete). Any ideas would be appreciated

  27. Keen
    October 14th, 2009 at 10:25 am

    I found something new that needs doing. I got this from another site:
    Use REGEDIT
    open the HKEY_LOCAL_MACHINE folder
    open the Software folder
    open the Microsoft folder
    open the Windows folder
    open the Currentversion folder
    open the Run folder
    find the file that has the random 8-digit name (all numbers)
    click on it and delete it.
    Close the REGDIT window.

    From the command window run MSCONFIG
    This is a serious place to be, so be VERY sure what you’re doing. If you can’t find a suspicious looking file, do nothing. This is just to keep the computer from trying to execute a file that has been removed. It’s annoying, but not critical.

    look in the startup file for a suspicious name. Mine was “jogejase.dll”
    Delete this file.
    Close the window.

    When you re-boot the computer will tell you something has changed. Agree with the question, and go on.

  28. Liz
    October 14th, 2009 at 11:48 am

    I’m a tech that had to get rid of this off one of our comp. machines this week. Had same problem of not being able to run taskmgr, regedit, antivirus, etc even in save mode. what I did was right click each one, click run as and ran them as administrator which is a built in account on most machines. password default is blank unless it was changed during op sys install. this allowed me ro run everything I needed to get rid of this annoying junk. good luck.

  29. nate
    October 15th, 2009 at 4:28 am

    i have no background or icons no more from this…what do i do HELP!!

  30. brian
    October 15th, 2009 at 8:19 am

    Am I doing something wrong?

    I followed all the directions, got spyware doctor, did the scan and fix. Seems ok, but when I turn off computer and restart, there is security tool all over again.

  31. brian
    October 15th, 2009 at 8:58 am

    Ok, the jury is still out, but I combined Bruce’s and Keen’s suggestions and had no problem on my first reboot. I will have to reboot a couple times to feel comfortable that that monster is gone, but so far no annoying pop ups!!! Spyware Doctor took care of most of the files. So I was able to delete the applications folder no problem, and only the current user…run file was left in the registry.
    Yay!!

  32. Jeff
    October 16th, 2009 at 12:33 am

    Just finished getting rid of this nasty program. I used Tom’s suggestion and control alt delete right after start up and was able to stop the program from running. I couldn’t get safe mode to run…..If you wait to long it will start and keep you from opening the control panel or running any virus software. Once you have stopped the program from running, run your virus software. I ran spybot seek and destroy and so far everything looks good. If you lost your icons and wall paper, they will return on start up. Good Luck, Jeff

  33. Doron
    October 17th, 2009 at 7:46 am

    I had a similar problem. The only thing that this application allowed me was to connect to the internet. I could run niether applications from the desktop, nor run setup from internet download. I couldn’t even restart in safe mode. When I tried that it just restarted the computer and I got the ’safe mode’ menu again.

    I found the place of the application by looking at the properies of the SecurityTool application. I renamed the directory and the exe file (both have the same 10 digit number).
    After renaming, I rebooted my computer and this time it worked. I then installed the ‘Spyware Doctor’. It detected the virus and removed it.

  34. Olivia
    October 17th, 2009 at 9:36 pm

    So I got this virus and must have caught it early, I downloaded malwarebytes and it only works in safe mode. My sound is totally shut off, and I keep getting pop-ups. The actual security tool program quit popping up when I start my computer, but everything else is still the same. I don’t understand what to do with your instructions, I have no idea what a registry is, or processes, or anything like that.

  35. Chris.
    October 18th, 2009 at 2:13 am

    I took Leo s advice….number 20

    to search for the file name….6944857.exe.

    “”"”"”"”"
    This was on a clients Dell Vista laptop.

    I booted Puppy Linux and did my regular XP or Vista cleanout.
    Easy peasy.

    Plus deleted this horror in program files…program had the same name.
    Booted no problem.

    Ran Malwarebytes Antimalware
    SuperAntispyware
    Dr Web Cureit
    Removeit Pro SE

    and Hitman Pro.
    Hitman Pro gives you a one only chance to remove malware
    without buying it. Does a Web Scan….( Cloud Scan)

    Removed McCrapee and replaced it with Avira Antivir Free,
    and added Outpost Firewall.
    Job done.

    Majorgeeks is great to download all the above.

    Windows Autoruns is useful to stop startups from slowing your scanners.

    Thanks again Leo for the pointer.

    Chris……cthisbear on the Puppy forum.

  36. nsk
    October 20th, 2009 at 9:12 am

    restarting in safe mode worked for me. i was having a similar problem where the virus was blocking my access for malwarebyte and any other anti-virus/spyware/malware programs, as well as task manager.
    I booted in safe mode and ran malwarebyte. it kept crashing halfway through the scan so i just waited for it to detect some of the files and then aborted the scan and deleted just the ones it found.
    This was enough for me to start my computer back in regular mode and run malwarebyte from there to get rid of the rest.

  37. Lynna
    October 21st, 2009 at 4:02 pm

    I opened up my taskmanager and it didn’t show securitytool.exe and uninstall.exe to delete the processes.

  38. help
    October 22nd, 2009 at 3:50 am

    Help My laptop got this virus yesterday and the screen went blue, and now it doesnt even start up. when i press the on button it doesnt respond. Nnothing works the laptop is like dead. i havent cheked toady doe.

  39. Chris
    October 22nd, 2009 at 6:11 am

    Have this on one of our computers. Regedit, taskmgr nothing will work. I did download hijackthis and saved it in the c: root directory and named it explorer.exe and was able to run it. I stopped the program but I am still unable to to get any malware to install and run. It seems to me that this is running a virtual desktop over the normal one. This looks similar to a virtual pc program I used in school. I just cant get past it. We are going to try to make a boot disc and access the hard drive that way.

  40. task manager hint
    October 22nd, 2009 at 7:35 pm

    for those of you who cannot open programs or task manager, try this. hold down ctrl+alt+delete for a minute or two non-stop. literally that long. this damn virus can try as long as it wants, but in the 20 seconds it will take you to find the process (its a number), it cannot shut down hundreds of task manager windows. it should get rid of the process and then you should be able to run the installer for spyware doctor.

  41. nick
    October 25th, 2009 at 10:06 pm

    Somebody please help!

    I can no longer reach my desktop — instead, I get a series of three error messages, followed by a black screen (no task bar, no desktop — nothing).

    The first error message says windows can’t find some random string of numbers in memory — option to quit, option to debug.

    The second and third messages indicate that Windows has shut down a log-in process for my own protection, gives me an option to report the error.

    And then….nothing. A black screen.

    By clicking out of the error messages, I was able to view the taskbar nine times out of ten. Then I couldn’t reach it at all.

    I can’t reboot in safe mode — something about a paging application out of whack.

    Using my Windows XP cd, I was able to reboot and reach the desktop *once*. I used this chance to delete a few things from the registry. It made the scanners and fake alerts disappear…however, all of my applications were still down. Now every time I tried to open something, it said there was a problem with svchost.

    Now I can’t even boot up with my XP CD. Everything I try works once and only once.

    Back to the black screen.

    If anyone can help, I’d really appreciate it.

    Thanks.

  42. Khanh
    October 26th, 2009 at 9:19 am

    Hi,
    Here are the steps that I use to remove the Security tool spyware:
    1- Go to computer store and buy an USB to SATA/IDE hard drive adapter ($25)
    2- remove your hard drive and connect it to second computer using the Adapter you just bought.
    3- Use the malwarebytes to scan only the hard drive you just connected (use the full scan and choose the hard drive you want to scan)
    4- scan and remove and the spyware.
    5-Remove and reinstall you hard drive.
    6- and f|_|ck you Security Tool and Go to hell.
    Thanks

  43. jake
    November 2nd, 2009 at 12:25 pm

    Hi, im trying to remove the SecurityTool manually and when i pop up task manager there are loads of programs on there and i dont know which one is SecurityTool can anyone help?

    Luciana Reply:
    November 2nd, 2009 at 11:13 pm

    Security Tool.exe
    uninstall.exe

    Here are processes loaded by Security Tool.

  44. janice
    November 15th, 2009 at 1:46 pm

    I have tried everything to get rid of this stupid ’security tool’ virus but I cannot even download the anti spyware doctor to get rid of it with.
    What am I meant to do now?
    I if i cannot download the anti spyware doctor then im going to be stuck with this stupid virus and my basically new laptop will break.
    The people that make these viruses deserve to be put in prison

    help please?

  45. conner
    November 17th, 2009 at 1:22 pm

    what I did was I had to boot into safe mode, because I could not open task manager, I could not open my internet, and it wouldn’t let me open up my antivirus program. What i did was I booted into safe mode, searched for “security tool”. I found the shortcut, and I right-clicked and went to properties so it would show me the location of the .exe. I then deleted the .exe and when i booted back up, it was gone. I then proceeded into opening my antivirus program and scanning my whole computer for any other infections. I hope this helps everyone.

  46. mech
    November 17th, 2009 at 3:57 pm

    I have had the security tool prob. It came all at once with alot of other stuff. The following has happened to me. I would reformat, and things seemed normal. then I put secondary drive online, and eventually sec tool came back in full force. Any tips on removing from secondary drive? There are a bunch of random number hidden folders on secondary drive. They cannot be deleted. read only attributes cannot be changed on them. Have Spybot S and D running in background now, These may keep ST from being reaqctivated and coming back. Things running normal now, but not yet sure if problem is taken care of yet. Any suggestions? I will update again with progress

Trackbacks

Comments are closed.

Download does not start? Try a mirror download here
«
»