Comments on: SecurityTool

By: Remove Total-scan.com, Total-scan.com removal help

Remove Total-scan.com, Total-scan.com removal help — Fri, 26 Feb 2010 13:51:55 +0000

[...] is a rogue website promoted by Security Tool malware. This fake web page enters to your computer via trojan. It is done without user’s [...]

By: mech

mech — Tue, 17 Nov 2009 23:57:59 +0000

I have had the security tool prob. It came all at once with alot of other stuff. The following has happened to me. I would reformat, and things seemed normal. then I put secondary drive online, and eventually sec tool came back in full force. Any tips on removing from secondary drive? There are a bunch of random number hidden folders on secondary drive. They cannot be deleted. read only attributes cannot be changed on them. Have Spybot S and D running in background now, These may keep ST from being reaqctivated and coming back. Things running normal now, but not yet sure if problem is taken care of yet. Any suggestions? I will update again with progress

By: conner

conner — Tue, 17 Nov 2009 21:22:56 +0000

what I did was I had to boot into safe mode, because I could not open task manager, I could not open my internet, and it wouldn’t let me open up my antivirus program. What i did was I booted into safe mode, searched for “security tool”. I found the shortcut, and I right-clicked and went to properties so it would show me the location of the .exe. I then deleted the .exe and when i booted back up, it was gone. I then proceeded into opening my antivirus program and scanning my whole computer for any other infections. I hope this helps everyone.

By: Utilitiesdiscounts.com fake online scanner website

Utilitiesdiscounts.com fake online scanner website — Mon, 16 Nov 2009 14:21:37 +0000

[...] is a fake online scanner website which tries to fool you into downloading SecurityTool – rogue antispyware [...]

By: janice

janice — Sun, 15 Nov 2009 21:46:35 +0000

I have tried everything to get rid of this stupid ’security tool’ virus but I cannot even download the anti spyware doctor to get rid of it with.
What am I meant to do now?
I if i cannot download the anti spyware doctor then im going to be stuck with this stupid virus and my basically new laptop will break.
The people that make these viruses deserve to be put in prison

help please?

By: Destiny

Destiny — Sun, 15 Nov 2009 18:18:21 +0000

this didn’t work for me. it opened task manager then immediately closed.

By: TonyM

TonyM — Sun, 15 Nov 2009 01:21:27 +0000

Thanks Anon, this worked perfect. I guess I caught it soon enough before it ran rampid on my Desktop. THANKS again!

By: jeff

jeff — Thu, 12 Nov 2009 21:12:28 +0000

get the registry editor open Ctrl + F 9874638 kill all the instances you find

By: Colizeth

Colizeth — Mon, 09 Nov 2009 00:45:13 +0000

Thanks so much….I couldn’t run in safe mode or connect to internet or run the task manager is the was the easiest solution…thanks so much!!!!!!!!!!
I don’t know why this isn’t the solution on every other website.

By: Luciana

Luciana — Tue, 03 Nov 2009 07:13:36 +0000

Security Tool.exe
uninstall.exe

Here are processes loaded by Security Tool.

By: jake

jake — Mon, 02 Nov 2009 20:25:57 +0000

Hi, im trying to remove the SecurityTool manually and when i pop up task manager there are loads of programs on there and i dont know which one is SecurityTool can anyone help?

By: Bortz

Bortz — Sat, 31 Oct 2009 13:00:52 +0000

Great call! This worked awesome. So stinking easy it is annoying that I did not just try to do that in the first place!! Thank you!!

By: Khanh

Khanh — Mon, 26 Oct 2009 17:19:08 +0000

Hi,
Here are the steps that I use to remove the Security tool spyware:
1- Go to computer store and buy an USB to SATA/IDE hard drive adapter ($25)
2- remove your hard drive and connect it to second computer using the Adapter you just bought.
3- Use the malwarebytes to scan only the hard drive you just connected (use the full scan and choose the hard drive you want to scan)
4- scan and remove and the spyware.
5-Remove and reinstall you hard drive.
6- and f|_|ck you Security Tool and Go to hell.
Thanks

By: nick

nick — Mon, 26 Oct 2009 06:06:41 +0000

Somebody please help!

I can no longer reach my desktop — instead, I get a series of three error messages, followed by a black screen (no task bar, no desktop — nothing).

The first error message says windows can’t find some random string of numbers in memory — option to quit, option to debug.

The second and third messages indicate that Windows has shut down a log-in process for my own protection, gives me an option to report the error.

And then….nothing. A black screen.

By clicking out of the error messages, I was able to view the taskbar nine times out of ten. Then I couldn’t reach it at all.

I can’t reboot in safe mode — something about a paging application out of whack.

Using my Windows XP cd, I was able to reboot and reach the desktop *once*. I used this chance to delete a few things from the registry. It made the scanners and fake alerts disappear…however, all of my applications were still down. Now every time I tried to open something, it said there was a problem with svchost.

Now I can’t even boot up with my XP CD. Everything I try works once and only once.

Back to the black screen.

If anyone can help, I’d really appreciate it.

Thanks.

By: task manager hint

task manager hint — Fri, 23 Oct 2009 03:35:36 +0000

for those of you who cannot open programs or task manager, try this. hold down ctrl+alt+delete for a minute or two non-stop. literally that long. this damn virus can try as long as it wants, but in the 20 seconds it will take you to find the process (its a number), it cannot shut down hundreds of task manager windows. it should get rid of the process and then you should be able to run the installer for spyware doctor.

By: Chris

Chris — Thu, 22 Oct 2009 14:11:25 +0000

Have this on one of our computers. Regedit, taskmgr nothing will work. I did download hijackthis and saved it in the c: root directory and named it explorer.exe and was able to run it. I stopped the program but I am still unable to to get any malware to install and run. It seems to me that this is running a virtual desktop over the normal one. This looks similar to a virtual pc program I used in school. I just cant get past it. We are going to try to make a boot disc and access the hard drive that way.

By: help

help — Thu, 22 Oct 2009 11:50:47 +0000

Help My laptop got this virus yesterday and the screen went blue, and now it doesnt even start up. when i press the on button it doesnt respond. Nnothing works the laptop is like dead. i havent cheked toady doe.

By: Lynna

Lynna — Thu, 22 Oct 2009 00:02:04 +0000

I opened up my taskmanager and it didn’t show securitytool.exe and uninstall.exe to delete the processes.

By: nsk

nsk — Tue, 20 Oct 2009 17:12:25 +0000

restarting in safe mode worked for me. i was having a similar problem where the virus was blocking my access for malwarebyte and any other anti-virus/spyware/malware programs, as well as task manager.
I booted in safe mode and ran malwarebyte. it kept crashing halfway through the scan so i just waited for it to detect some of the files and then aborted the scan and deleted just the ones it found.
This was enough for me to start my computer back in regular mode and run malwarebyte from there to get rid of the rest.

By: Chris.

Chris. — Sun, 18 Oct 2009 10:13:33 +0000

I took Leo s advice….number 20

to search for the file name….6944857.exe.

“”"”"”"”"
This was on a clients Dell Vista laptop.

I booted Puppy Linux and did my regular XP or Vista cleanout.
Easy peasy.

Plus deleted this horror in program files…program had the same name.
Booted no problem.

Ran Malwarebytes Antimalware
SuperAntispyware
Dr Web Cureit
Removeit Pro SE

and Hitman Pro.
Hitman Pro gives you a one only chance to remove malware
without buying it. Does a Web Scan….( Cloud Scan)

Removed McCrapee and replaced it with Avira Antivir Free,
and added Outpost Firewall.
Job done.

Majorgeeks is great to download all the above.

Windows Autoruns is useful to stop startups from slowing your scanners.

Thanks again Leo for the pointer.

Chris……cthisbear on the Puppy forum.

By: Olivia

Olivia — Sun, 18 Oct 2009 05:36:26 +0000

So I got this virus and must have caught it early, I downloaded malwarebytes and it only works in safe mode. My sound is totally shut off, and I keep getting pop-ups. The actual security tool program quit popping up when I start my computer, but everything else is still the same. I don’t understand what to do with your instructions, I have no idea what a registry is, or processes, or anything like that.

By: Nt

Nt — Sat, 17 Oct 2009 20:57:06 +0000

i can’t reboot in safe mode, it gives me a blue screen. Help is appreciated.

By: Doron

Doron — Sat, 17 Oct 2009 15:46:03 +0000

I had a similar problem. The only thing that this application allowed me was to connect to the internet. I could run niether applications from the desktop, nor run setup from internet download. I couldn’t even restart in safe mode. When I tried that it just restarted the computer and I got the ’safe mode’ menu again.

I found the place of the application by looking at the properies of the SecurityTool application. I renamed the directory and the exe file (both have the same 10 digit number).
After renaming, I rebooted my computer and this time it worked. I then installed the ‘Spyware Doctor’. It detected the virus and removed it.

By: Jeff

Jeff — Fri, 16 Oct 2009 08:33:07 +0000

Just finished getting rid of this nasty program. I used Tom’s suggestion and control alt delete right after start up and was able to stop the program from running. I couldn’t get safe mode to run…..If you wait to long it will start and keep you from opening the control panel or running any virus software. Once you have stopped the program from running, run your virus software. I ran spybot seek and destroy and so far everything looks good. If you lost your icons and wall paper, they will return on start up. Good Luck, Jeff

By: brian

brian — Thu, 15 Oct 2009 16:58:39 +0000

Ok, the jury is still out, but I combined Bruce’s and Keen’s suggestions and had no problem on my first reboot. I will have to reboot a couple times to feel comfortable that that monster is gone, but so far no annoying pop ups!!! Spyware Doctor took care of most of the files. So I was able to delete the applications folder no problem, and only the current user…run file was left in the registry.
Yay!!

By: brian

brian — Thu, 15 Oct 2009 16:19:34 +0000

Am I doing something wrong?

I followed all the directions, got spyware doctor, did the scan and fix. Seems ok, but when I turn off computer and restart, there is security tool all over again.

By: nate

nate — Thu, 15 Oct 2009 12:28:36 +0000

i have no background or icons no more from this…what do i do HELP!!

By: Luciana

Luciana — Thu, 15 Oct 2009 12:23:23 +0000

It’s easy to remove the wrong things when you find the removal guide confusing. That’s why I recommend using some anti-spyware tool to delete SecurityTool infection.

By: Miss C

Miss C — Thu, 15 Oct 2009 11:09:38 +0000

hey…i need your total help??

i have this virus and im on windows vista…i dont know if that changes anything , lol.

just i need to get rid of it, asap… and ive tried following the above tasks but cant seems to budge it…any ideas??

im no computer wizz either…so cant understand half of the things being said, lol..if anyone can help i’ll greatly appreciate it !!!

By: Liz

Liz — Wed, 14 Oct 2009 19:48:10 +0000

I’m a tech that had to get rid of this off one of our comp. machines this week. Had same problem of not being able to run taskmgr, regedit, antivirus, etc even in save mode. what I did was right click each one, click run as and ran them as administrator which is a built in account on most machines. password default is blank unless it was changed during op sys install. this allowed me ro run everything I needed to get rid of this annoying junk. good luck.

By: Keen

Keen — Wed, 14 Oct 2009 18:25:43 +0000

I found something new that needs doing. I got this from another site:
Use REGEDIT
open the HKEY_LOCAL_MACHINE folder
open the Software folder
open the Microsoft folder
open the Windows folder
open the Currentversion folder
open the Run folder
find the file that has the random 8-digit name (all numbers)
click on it and delete it.
Close the REGDIT window.

From the command window run MSCONFIG
This is a serious place to be, so be VERY sure what you’re doing. If you can’t find a suspicious looking file, do nothing. This is just to keep the computer from trying to execute a file that has been removed. It’s annoying, but not critical.

look in the startup file for a suspicious name. Mine was “jogejase.dll”
Delete this file.
Close the window.

When you re-boot the computer will tell you something has changed. Agree with the question, and go on.

By: Angry Finn

Angry Finn — Wed, 14 Oct 2009 11:41:20 +0000

I cant use task bar, but that is a completely different story. I deleted some if the other random number codes, but one is still left up and running as it is ‘in use’. I hate computers, and this only makes my hate greater, I would appreciate some help. I have the little bastard open, like Bruce did. Yet I find no batch file, only the icon (which, of course, I cannot delete). Any ideas would be appreciated

By: Anna

Anna — Tue, 13 Oct 2009 10:14:53 +0000

Thankyou,i deleted the 8 digit number (beginning with from my startup and now it hasn’t started up upon reboot.

Now how do i seek and destroy?

By: Jeff

Jeff — Mon, 12 Oct 2009 23:55:09 +0000

Bruce, thanks a lot, I did what you said and got rid of it, well at least for the moment. I forgot about the hidden file thing when I looked for it before and so couldn’t find it. Anyway excellent advice!!

By: Keen

Keen — Mon, 12 Oct 2009 20:54:33 +0000

I basically did what Bruce said. I started the computer in Safe Mode, and ran SPYBOT SEARCH AND DESTROY and then AVG’s anti-virus scan. (Took for-fickende ever!) Then I ran REGEDIT and looked for all the entries listed above. They were all gone, EXCEPT for the 8-digit number sequence, which I deleted. SEEMS to have solved the problem. I have re-booted several times and the virus is nowhere in sight. Best of luck everyone.

By: Wings

Wings — Sun, 11 Oct 2009 21:20:24 +0000

Thank you sosososososososo much!!!! It totally worked and I think it is completely off of my computer. It took all day for me to find something that actually worked, and now that it was so simply gone I am astounded I didn’t read it somewhere else before!!! *hugs*

By: Addy

Addy — Sat, 10 Oct 2009 07:32:02 +0000

Bruce:
I.LOVE.YOU!!
I’ve spent God knows how many hours trying to get my pretty much brand new laptop to work and now, thanks to you I was able to get rid of this crap!!
Oh man, you have NO idea how happy I am right now, I wanted to throw my laptop out the window.
You are my hero.
Thank you! A million times thank you!

By: BMF

BMF — Sat, 10 Oct 2009 05:02:01 +0000

Thanks Bruce, that’s all I have to say! It’s been 3 hours and nothing has popped up and started bugging the sh… out of me yet.
Cheer,
B.M.F.

By: Mario

Mario — Fri, 09 Oct 2009 23:10:47 +0000

This worked for me to load apps and run stuff. first right click the security tool icon and click properties go to the shortcut tab and look at the target location number. then go into safe mode then go to start->Run->type regedit-> go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and delete that number. then start up again in regular mode. for me no more of those messages popped up. im currently running an antivirus software so i hope it works. hope this worked for you

By: Leo

Leo — Fri, 09 Oct 2009 21:02:38 +0000

Hi guys, I’m a tech and one of our PCs was infected by this at work. Here is the solution that worked for me:
If don’t want to mess with Safe Mode just open you \system32 folder and make a copy of taskmgr.exe copy and paste it in the same folder
Then rename the copy to iexplore
Then run it, this will give you the task manager and allow you to see the process.
You can identify the process because it should be the only one that has a sequece of numbers. (ie. 6944857.exe) Write these numbers down!!!
Then stop the process and go to your registry and search for those numbers. make sure you scan the whole registry for them. Then delete anything that comes up with that sequence of numbers and EXACTLY that sequence.
Then go to your profile and the all users profile and search in the application data folder for a folder with that same number and delete it.

You can check the rest of your PC for anything that has security tool on it or that number and get rid of it. That took care of it for me.

I hope this helps. I really hate these idiots that come up with this crap.

I wish you good computing

By: TOM

TOM — Fri, 09 Oct 2009 16:18:42 +0000

i got rid of it this this way:

the progam isnt as quick as the human, pissed off, hand.

start your computer press control/alt/delete quickly enough to bring up the screen for task manager. click on task manager. click on the “applications” tab. wait for “security tool” to show up. once it does, click “end task” quickly. Now go directly to start/ progams/ accessories/ system tools/ system restore. now follow the instructions and restore to any date before the virus first showed up. It erased it completely from my hard drive.

By: Wade

Wade — Fri, 09 Oct 2009 14:57:14 +0000

I did what Bruce described and it has worked thus far. I had to work the Spyware Doctor in safe mode first to get rid of some of the files and then started hunting for the numbered files in taskmgr. My files were actually eight digit numbers in taskmgr and in documents and settings. If anything else pops up I will make a post. Good luck and thank you Bruce.

By: Adam

Adam — Thu, 08 Oct 2009 22:04:38 +0000

Sam I am totally with you. The only I have done today is scream F—! This virus is making me nutz. I am computer moron and I have no clue how to manually do this. I think I need a drink.

By: Bruce

Bruce — Thu, 08 Oct 2009 19:46:20 +0000

If you can not get safemode to start up as I could not.

open my computer
Go to c:\Documents and Settings%\All Users\Application Data\

This folder may be hidden and read only you will need to right click the folder select properties and remove the hidden and reeadonly flags by clicking the boxes so they are empty.

there were 3 folder in this directory titled by random number ie: 680023 etc. two of theese deleted. One was denied access because it was actively running. I opend that folder which had the running program and deleted the batch file. Though could not delete the .exe which had the shield as an icon. go back one folder to application data and rename the folder which is running the application.

Restart your machine and the virus will not load. You will now be able to manually remove or install one of the tools for removal.

Good Luck.

By: danny

danny — Thu, 08 Oct 2009 16:08:41 +0000

None of the files are there. I was able to at least get rid of the pop-up by going to task manager and ending process 9874638.exe. But I need to know the files that need to be deleted none of the ones above were there.

By: ben

ben — Thu, 08 Oct 2009 15:55:23 +0000

I’m in with john and sam. I need a solution to this problem, not steps to get rid of files that don’t exist on my machine. I have run Norton, Malwarebytes, PCTools SpywareDoctor, and none of them have been in the least bit effective. I have XP with updates, so I can’t get rid of internet explorer (which it really likes opening up). I get redirected when I look up information to remove it and have to cut and paste the http into my browser to access information. I don’t even want to turn on my home computer until someone can say definitively, “this solution works.” So does anyone have a solution to this problem that actually works, and – does anyone know where to find the little $%%$ that wrote this program?

By: James

James — Thu, 08 Oct 2009 15:24:13 +0000

It wouldn’t allow me to start in safe mode, blocked task manager and didn’t allow me to install any anti-virus software. What worked for me was F8 when starting the computer and booting it with windows threads only (or something along those lines) and do a system restore

By: Sam

Sam — Thu, 08 Oct 2009 14:34:11 +0000

So. I got this frickin’ virus and can’t remove it to save my life. Even in safe mode. I can’t find the files to manually remove them, I can’t get Malware Bytes to work on my computer. I’m frustrated and sad. I tried following the manual instructions from this website but I am computer retarded. Seriously, it’s not even funny how little of this crap I understand. Anyone else have any dumb-downed advice they can offer?

By: Luciana

Luciana — Thu, 08 Oct 2009 08:47:17 +0000

Restart your computer and keep clicking the F8 key while the PC is still booting up. You’ll get to the menu with option to boot in a safe mode.

By: sharon

sharon — Thu, 08 Oct 2009 03:45:20 +0000

I cannot even start computer in safe mode. When I try I just get a page of scrolling file extensions.
The only thing I can get on my screen is the pop up screen for this virus.
I cannot access anything at all.