Home > Rogue Anti-Spyware > Security Tool

How to remove Security Tool?

September 25th, 2009

What is Security Tool?

Security Tool is a fake spyware remover with an impressively generic name even in terms of rogue anti-spyware names. This parasite enters the system without the user’s knowledge or consent, usually by employing the use of various trojans. Security Tool might also convince you into downloading it by using the browser hijacker Sitesecuritytest.com, which is a fake online scan. Security Tool uses misleading advertising to trick users into purchasing it’s so-called “licensed version”.

Once inside and active, Security Tool floods the user with popups and fake system notifications, claiming his system is infected and in need of an anti-spyware program. All of these popups lead to the purchase page of Security Tool. Much like any other rogue, Security Tool will also perform fake system scans, which mark legitimate files as threats. To remove these “threats”  you supposedly have to purchase the full version of Security Tool, which is just as fake as the trial.

Typically, the popups inform about various dangerous spyware, for example :

Security Tool Warning
Spyware.IEMonster activity detected. This is spyware that attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other programs.
Click here to remove it immediately with SecurityTool.

Or

Security Tool Warning
Some critical system files of your computer were modified by malicious program. It may cause system instability and data loss.
Click here to block unauthorised modification by removing threats (Recommended).

Sure, these threats do not exist on your PC, as Security tools scanner is not functional and just a decoy.

Popups aside, Security Tool will also significantly decrease system performance and block certain websites, as well as prevent some applications from running. It is a scam and should be treated as such: do NOT download or buy it and remove Security Tool immediatelly upon detection.

Security Tool Removal instructions:

Getting rid of Security tool might be a complex task, as you need to disable its protection against antivirus software. At the moment Security tool allows users to launch processes similar to browser ones, as it needs user to visit its website. We suggest renaming/copying removers as iexplorer.exe or firefox.exe, which should pass through security tools mechanism. Here how to get rid of Security tool:

1. Disable security tool

a)  By rebooting into safe mode with networking  (press F8 just after reboot)

b) by pressing ctrl+shift+esc right after logging in into windows. go under processes tab, stop all numerical processes.

2. Delete security tool files (see under files in our guide)

a) by investigating where security tool shorcut points to (it will be on desktop)

b) by searching for filename with same name as processes stopped, if you went for 1.b

3. Reboot, do followup scan with free Spyhunter scanner. This will detect any additional problems or files you might have missed.

Alternately, you might want to try one of registration codes for Security Tool to disable it, for example 64C665BE-4DE7-423B-A6B6-BC0172B25DF2 this one. These keys were discovered disassembling security tool and analyzing its gateways by malware researchers at infisecure.com . This will disable various popups and likely to allow running various antimalware tools like Spyhunter or malwarebytes to remove the remaining trojans and traces for the system. Full version of Spyhunter, malwarebytes or decent internet security suite would reduce risk of Security Tool and similar infections considerably.

Another method to remove Security Tool virus is following:

1. Reboot into safe mode.
2. Launch MSCONFIG and clear ALL startup entries. Do not close window.
3. Search MSConfig entries that reference randomly named folders in C:\Program Files or C:\Program Files (x86), for exampe C:\Program Files\sdgsdgsgsdghs . Delete WHOLE folder
4. Go to your users Application Data folder and delete all executables named by numbers, 2352352.exe or similar. Right-clicking on Security Tool’s icon will show exact place where they are located.
5. Delete all the DLLS listed bellow
6. Reboot Into Safe mode with networking
7. Download Spyhunter ( http://www.2-viruses.com/spdoc.exe if pctools are blocked). Do a full system scan. You can scan with other tools like Malwarebytes Anti-Malware, hitman pro. Delete what they find.
8. You can reenable remaining msconfig startup entries
9. Reboot, do followup scans

There are couple other parasites that replace Security Tool and cause havoc in the end of 2010: System Tool and System Tool 2011. They are a bit more aggressive, and their removal differs somewhat.


Security Tool is Extremely dangerous

arrow Security Tool is a corrupt Anti-Spyware program
arrow Security Tool may spread via Trojans
arrow Security Tool may display fake security messages
arrow Security Tool may install additional spyware to your computer
arrow Security Tool may repair its files, spread or update by itself
arrow Security Tool violates your privacy and compromises your security
Download Spyhunter
for Security Tool detection

Note: Spyhunter trial provides detection of parasite like Security Tool and assists in its removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.



Security Tool screenshots


Security Tool screenshot

Manual Security Tool removal


Important Note: Although it is possible to manually remove Security Tool, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Spyhunter or other malware and spyware removal applications found on 2-viruses.com.
Stop these Security Tool processes:
Disable these Security Tool DLL files::
Remove these Security Tool Registry Entries:
Remove these Security Tool files:
It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other Security Tool infected files and get help in Security Tool removal by using free Spyhunter scanner. It comes with free real-time protection module that helps preventing Security Tool and similar threats.

Security Tool is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only Security Tool can help you to remove it after you download the trial version. As soon as the victim downloads Security Tool trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, Security Tool offers to buy the full version to fix these false errors. If the user agrees, Security Tool does not only fix the errors, but it also takes the user’s money and may even install additional spyware into the victim’s computer.

Some Rogue Anti-Spyware, such as Security Tool, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install Security Tool, which is another way for Rogue Anti-Spyware to spread itself.

Most of rogue Anti-Spyware, such as Security Tool, is nearly impossible to remove manually.


How to tell if your PC has been infected by a Rogue Anti-Spyware such as Security Tool?

Numerous undesirable and annoying pop-ups: A typical Rogue Anti-Spyware parasite keeps track of your internet browsing habits, sending your browsing history data to remote servers, owned by third party companies that use this information to advertise their products via numerous pop-ups, toolbars, hijacked homepages and spam letters. All these undesirable advertising methods are used on the victims of Rogue Anti-Spyware.
Changed or new icons: Sometimes, Rogue Anti-Spyware installs unwanted software to a victim’s PC without user’s knowledge and consent. This may lead to slower PC performance and stability, as well as more unwanted programs you can't remove.

Rogue Anti-Spyware

  1. blue carbuncle
    October 6th, 2009 at 18:43 | #1

    I hope that whoever creates this crap is not only sued out of existence, but also has a massive car wreck that kills them, their children’s children, and even people they sent a text to yesterday. Why would it be considered illegal to kick their teeth in?

  2. Kevin
    October 7th, 2009 at 15:05 | #2

    Suddenly I got security tool in my laptop. It really disturbs me and makes me spend time, I can’t work and focus on the other my jobs.
    Even though I installed spyware doctor, it requires money to register.
    Are you selling poison and medicine together?
    Endless disappointment and lost trust to this firm.

    • October 7th, 2009 at 22:41 | #3

      Kevin : you can use manual instructions. There are some free anti-spyware as well. Most of them are community supported and do not update their definitions as fast as commercial ones. But you can try malwarebytes anti-malware.

  3. Joe
    October 7th, 2009 at 19:49 | #4

    Security Tool has completley destroyed my system. it won’t let me run any excutibles or even anything. can you help me? since ive downloaded Spyware doctor on another computer and put it on mine, it wont let me run it because i have a popup message from my toolbar saying: .exe is infected with worm Lsas.Blaster.keylogger. and so on. can someone PLEASE help me.

    • October 7th, 2009 at 22:41 | #5

      Joe: try renaming file to iexplorer.exe or iexplorer.bat.

  4. Devin
    October 7th, 2009 at 23:45 | #6

    Joe I had the same problem. Security tool is now hiding under a random seven digit number name. If you start the task manager while the computer is still booting you can get it to work. End the number process and then you can download any of these programs. It will then also allow you to open the registry editor.

  5. Eric
    October 7th, 2009 at 23:53 | #7

    Rename which file? I’m having the same problem where I cannot add/remove programs, system reboot or download spyware removal because I get a “Security Tool Warning” every time that says “so and so” is infected with worm, etc. etc.

    • October 8th, 2009 at 07:37 | #8

      Eric : download a file to USB stick on another PC.

  6. John
    October 8th, 2009 at 17:01 | #9

    i installed malwarebytes anti-malware but when i try to run it, it says it cant find mbam.exe. ugh this is a pain. i even did the whole rename taskmgr to iexplorer and deleted the string of numbers.

    i get the same error when i run it in safe mode

  7. John
    October 8th, 2009 at 17:48 | #10

    ok this time after i installed malwarebytes, it actually launched….for about 20 seconds before it closed. then when i tried to reopen it it said the same crap. when i log in all the items on my desktop are gone and its black. is it suppossed to be like that? i dont want to sound rude its just this is very frustrating. thanks in advance for your help

  8. Vicki Troyer
    October 8th, 2009 at 18:24 | #11

    I had to install malwarebytes on another pc.. copy mbam.exe to a pen drive.. boot the infected PC into safemode… load malwarebytes and copy mbam.exe into the directory containing the sofware.. then run in safe mode.. this allowed me to reboot into normal mode with all working… problem is about 10 minutes later it came back.. now searching for the nasty little things regenerating files

  9. Ian
    October 8th, 2009 at 22:08 | #12

    John… I found that if I copied mbam.exe onto my desktop as soon as it got installed, I could run it from the copy after the spyware deleted the original executable. Even then, I had to startup malwarebytes a couple of times before it would stay up. And the system still isn’t clean… ran a scan, asked that the bad stuff be deleted, rebooted, and ran a full scan. That’s still running, but it shows I am still infected.

  10. Haze
    October 9th, 2009 at 05:59 | #13

    Thanks Devin, the task manager suggestion worked for me. I’d tried everything else, and was near my breaking point. I recommend any one having problems with the others suggestion try it.

  11. kodykid168
    October 9th, 2009 at 18:31 | #14

    @Joe
    joe, as soon as you start your system, before system tool starts hit alt ctrl delete and open task manager, it will be opened before system tool can kill it, and then find the process that system tool is running under (dont delete processes run by the system) and kill it

  12. Philly Keith
    October 9th, 2009 at 21:04 | #15

    forget all that… try this move, it worked for me after going nuts over this for a whole day.

    Reboot in safe mode
    browse to C:\Documents and settings\all users\ application data

    There will be a folder in there that has eight numbers as a name (ex 91908431)

    Delete this bad boy, empty recycle bin

    Reboot normally, delete all left over shortcuts, empty recycle bin again and you are home free.

  13. Bryan
    October 9th, 2009 at 21:41 | #16

    I have the same problem with this Security Tool thing, and I don’t know what to do. It started like last week and I thought it would go away but it hasn’t. I have no clue where it came from and it is driving me crazy. Can somebody please help me

  14. Azz
    October 10th, 2009 at 05:11 | #17

    Would AVG work?

    • October 11th, 2009 at 00:21 | #18

      Azz : Avg is not too bad, but I doubt it. From free antiviruses, pick avast.

  15. Joe
    October 10th, 2009 at 07:03 | #19

    I can’t get malwarebytes to run once I download and save it to my desktop. I get an error message! Will spyware doctor from PC tools work? I really do not want to pay for spyware doctor if it won’t work!

    • October 11th, 2009 at 00:22 | #20

      Joe: You can try scanning. If it is not stopped during scan, it will remove. If not, you need to update definitions.

  16. Joe
    October 11th, 2009 at 03:18 | #21

    @admin
    Malwarebytes won’t even start up to scan.

    • October 11th, 2009 at 14:32 | #22

      Joe : Try spyware doctor. Malware bytes are too often blocked.

  17. October 11th, 2009 at 16:59 | #23

    Hitting the CTRL ALT DEL Keys while starting up worked for me, in Taskmgr there is a numbered file that I delete and then I can at least use the computer, but it comes back then next start up. That is why I am here to figure out how to remove it for good. It should be easy to catch these criminals, I have spent easily 3 hours myself getting rid of this. I hope anybody associated with this goes to jail.

  18. Earl
    October 12th, 2009 at 01:47 | #24

    Yeah, I’ve been removing more than a few times this weekend, and it keeps coming back! I can remove the 8-digit item, and I’m good for awhile, but it comes back. I’ve used Avast! and even bought Spyware Doctor (chalk me up as another that couldn’t get Malware to run).

    I’ve removed, rebooted, and run full scans, and it keeps coming back eventually. This is maddening! Worse, my PC takes between 5-6 minutes to completely boot up, now.

    Getting very frustrated over this, but thanks for all the suggestions so far, they at least provide temporary relief!

  19. ralph durden
    October 12th, 2009 at 03:24 | #25

    @Philly Keith
    Keith you are right on…worked just like you said. THANKS A BUNCH

  20. Jeanette
    October 12th, 2009 at 04:16 | #26

    @Azz
    I have the free verson of AVG and I have the same trojan virus that you all have,started yesterday (10/10). So, I guess AVG doesn’t help!

  21. Jeff
    October 12th, 2009 at 07:10 | #27

    I got this today and I have used Spyware Doctor to get rid of it. Unfortunately it keeps coming back if I re boot, so I have to go through the whole process again. Is there anyway to find and destroy the thing for good???

    • October 12th, 2009 at 09:44 | #28

      Jeff: update definitions – there might be a new re-download trojan that is reinstaling it. Also, scan with malwarebytes prior reboot, you should be able to launch them once the main virus is removed.

  22. Lauren
    October 12th, 2009 at 11:57 | #29

    where can I find “doguzeri.dll”

  23. Sharon
    October 12th, 2009 at 17:19 | #30

    Philly Keith, you are a genius!!!!!! Have been pulling my hair out for days with this. Fingers crossed it stays away. Many, many thanks.

  24. Aubrey
    October 12th, 2009 at 20:07 | #31

    I have had Spyware Doctor for over 4 years now, and my computer is infected with this “Security Tool” virus and I cannot get rid of it. Every time I start my computer, the icon and the pop ups for this virus are still there. I run the scan over and over again, and Spyware Doctor claims to have removed the virus. It is still there! Please help! What do you mean by update definitions? and Scan with malwarebytes prior reboot? I though Spyware Doctor was supposed to take care of all of this?

    • October 12th, 2009 at 22:24 | #32

      Aubrey : Spyware Doctor uses definitions to remove parasites. When parasite is new or updated, it does not have definitions, till PCTools support add them and roll them out. Once definitions are uploaded, you are protected from particular parasite. Sometimes you get a very new version of trojans that promote rogues and Spyware doctor fails to protect even if he can protect from different strain of trojans promoting same rogue as long as the definitions are not updated. In such cases it is a good choice to scan with another remover, to remove remaining trojans.
      No spyware remover is 100%, and if one claims to be so, it is a sure sign of scam.

  25. kody112
    October 12th, 2009 at 22:15 | #33

    Reboot in safe mode I GUARANTEE YOU THIS WORKS
    browse to C:\Documents and settings\all users\ application data

    There will be a folder in there that has eight numbers as a name (ex 91908431)

    Delete this bad boy, empty recycle bin

    Reboot normally, delete all left over shortcuts, empty recycle bin again I GUARANTEE YOU THIS WORKS

  26. angel
    October 13th, 2009 at 00:22 | #34

    Thank you Philly Keith and Kody112, you’re suggestion works!!! I just took my computer to the Geek Squad and they told me it would cost $199 to fix. Your recommendation works and was quick. However, for me, it was found under C:program data (and not documents and settings). I discovered this by right cliking on Security Tool while I was in safe mode and then going to “open folder location”. This took me right to its location and I was able to delete it. In fact, I had 5 files to delete with the 8 digit code. THANKS, it did work!!! I’m back on my computer again without all the problems of Security Tool.

  27. Jacob
    October 13th, 2009 at 02:34 | #35

    Okay, this is really annoying, I cannot do anything! Do I download that thing above from my other main computer and put it on my flashdrive? Please help, I need this computer as well as my other.

  28. Eric
    October 13th, 2009 at 18:02 | #36

    I did these simple steps and they worked great. I finally got this crap off my computer. These companies need to be shut down and the people need to be gone after. This is outrageous. Anyways, here you guys go.

    1. Click Start, right-click My Computer, and then click Properties.
    2. In the System Properties dialog box, click the System Restore tab.
    3. Click to select the Turn off System Restore check box. Or, click to select the Turn off System Restore on all drives check box.
    4. Click OK.
    5. When you receive the following message, click Yes to confirm that you want to turn off System Restore.

    Now Restart your Computer in Safe Mode with Networking How Do You Restart in Safe Mode with Networking? Right when your computer is booting, press and hold your “F8 Key” which should bring up the “Windows Advanced Options Menu”. Use your arrow keys to move to Safe Mode with Networking and press your Enter key. Then Download Update and Scan Useing Norman Malware Cleaner

    After you Finish Remove Security Tool, Restart You Computer To Be Normal. Once you discover it’s normal, Turn On System Restore.

    Here are the steps to turn it back on

    1. Click Start, right-click My Computer, and then click Properties.
    2. In the System Properties dialog box, click the System Restore tab.
    3. Click to clear the Turn off System Restore check box. Or, click the Turn off System Restore on all drives check box.
    4. Click OK.

    After a few moments, the System Properties dialog box closes.
    Restart you Computer to be Normal.

  29. clutch
    October 13th, 2009 at 20:03 | #37

    My wife recently infected my computer and I have spent quite a number of hours trying to remedy this problem as well. As well as deleting the files from Application Data (or wherever the “open folder location” takes you), make sure you write down all of those nasty numbers. Do: Start > Run > regedit and run a search for each of those numbers and delete the keys until it doesn’t return any results. Be careful when doing this though, because deleting the wrong keys could turn your computer into a VERY overpriced paperweight. Hope this helps.

  30. Liiyavi
    October 13th, 2009 at 20:26 | #38

    It doesn’t help! I can’t download things anymore, and can’t start a program and my background is completely empty, except for the Start-menu!

    Omg, I’m crying behind my PC. ._.

  31. Chuck Eames
    October 13th, 2009 at 21:09 | #39

    @kody112
    It doesn’t work for me. There is no folder in there that has numbers on it.

  32. James
    October 14th, 2009 at 06:16 | #40

    Yeah Nothing works when i download it so all this is B.S im just gonna let it take over my computer cause all this help is just frustrating me and it wont download!

    • October 14th, 2009 at 09:41 | #41

      James : download to another PC and move to infected PC through USB disk. Dont forget to copy executable using couple different names, for example iexplorer.exe

  33. Earl
    October 14th, 2009 at 12:36 | #42

    No, I totally understand the frustration. I THINK it was Friday I was first officially hit, although I had seen slowdowns before that. I tried a few different solutions (SpyDoctor, Avast!) but couldn’t get Malwarebytes to download correctly. Well, I finally did Monday, by renaming the .exe file as it installed, before the virus could kill it. It helped, and I have run it a few times, but I still get the infection over time.

    I am seeing a TEN digit number in some of the Registry entries (Run, Software, Etc), but it is NOT any of the EIGHT digit numbers I had been infected with. Is it at all likely that the ten digit number should be in the Registry at all? I am leery of deleting it (them) and turning my PC into the aforementioned expensive paperweight, but the RUN command does fit the pattern of earlier eight digit infections (points to the Application data\10 digit number\ten digit number.exe) — and there is nothing there, even with hidden items shown.

    Should I kill the references to the ten digit number in the Registry?

    I’m getting to be an old hand at running Task Manager as the system boots (takes 4-5 minutes now) and killing the number stream as it appears (when it does, as it doesn’t always), so I can work on the PC, but it’s still there. I also know to, if I miss it on bootup, rename any files in the Application Data folder that are numbers only, so it can be deleted on a reboot, but these both just seem to be holding actions. I still see browser redirects, and the Automatic Updates item keeps getting shut off.

    Sorry for all the rambling (typing at work). Thanks for any advice anyone can offer. If not, no worries. Thanks again,

    • October 14th, 2009 at 12:59 | #43

      Try spyware doctor with updated instructions, then try malwarebytes (prior reboot).
      Yes, it will be these 10-digit executables, as there should be no executables in application data folder – it is for saving data (not executables) . They are hidden as system files probably, or protected by rootkit – thats why you can not see them. You might also need rootkit revealer or gmer (if you run vista) or AVG anti-rootkit tool.

  34. I won!
    October 14th, 2009 at 19:45 | #44

    So far this page is the best I’ve found regaurding killing this horrid monster of a virus.
    Just a couple notes:
    1) safe mode worked best for me
    2) Delete your MSN/Windows Live Messenger and re-install. Even after I got the virus off my MSN kept sending the link to people.
    3) set your computer to save a restore point EVERY DAY, this way you can just back it up a day if you get infected in the future

  35. Earl
    October 14th, 2009 at 23:08 | #45

    Thanks for the advice. I tried both, nothing new found (something is shutting off Windows Updates, but since I can’t use them ATM, it’s workable), although the 10-digit items are still in the Registry (but I shut one off with msconfig at startup — no changes, but no problems, either) and the PC still takes a long time to boot and sometimes has long pauses.

    Still, better than yesterday :) Thank you so much!

  36. Earl
    October 14th, 2009 at 23:11 | #46

    Sorry, spoke too soon, it appeared again :( I killed it in Task Manager before it could act, but it’s still there.

    Last thing I did was try World of Warcraft …

  37. Earl
    October 15th, 2009 at 01:14 | #47

    Well, last update (sorry to admin for so many). Tentatively looking better. I removed all the references to the 3175614738 (10 digit) in Registry everywhere except the search area. Bootup is much better, about 3 minutes instead of 5, and no problems so far aside from some minor Google misdirects, which I am not sure if it is the virus, or not.

    Thanks for your help!

  38. Ilona
    October 15th, 2009 at 03:23 | #48

    For those who can do MS DOS: Philly Keith’s method works perfectly.

    Start by pressing F8 (safe mode)
    move cursor to COMMAND PROMPT

    cd c:\documents and settings\all users\application data
    dir
    then cd xxxxxxxx (numbers)
    then del *.*
    then cd \ (go one up)
    mdir xxxxxxxxx

    you’re done.

    Next: restart your computer normally
    discard shortcut

    install malwarebytes and hope for the best (just did it, don’t know how long it holds).

    Great site!!!

  39. Mike Mike
    October 16th, 2009 at 02:41 | #49

    @Philly Keith

    Philly,

    THANK YOU THANK YOU THANK YOU. I have been at it all day trying to remove Security Tool Warning. Spy Doctor is no good, Malabyte would not run properly (probably because of the rogue app) and was at the end of my rope!!

    Your instructions were easy and quick and WORK BABY!!!!!!!!!!!!!!!!!!

    When you say to browse the C drive, you can also use the RUN feature in the start up menu and type in C:\Documents and Settings\all users\application data then delete the folder that has eight numbers (ex-92108456) for it’s file name. It could be any eight number combination. I had three files with eight number file names but all that you need to do is click on them until you find that dastardly shield logo then delete, emty recycle bin and make sure all shortcuts are removed.

    THANKS AGAIN

  40. Mikey Mike
    October 16th, 2009 at 02:43 | #50

    I forgot one important piece of info for anyone who reads my forwarding of Philly’s advice. Reboot in SAFE MODE to do this then follow his instructions.

  41. phoenix
    October 16th, 2009 at 07:17 | #51

    what am i doing wrong i did everything even all the help from on this site can anyone help please me and my girl are fighting over this cause we cant get any work done withot pop ups.HELP…………

  42. fritz
    October 16th, 2009 at 18:40 | #52

    this thing has disabled my ability to start in safe mode, what can i do?

  43. Yous
    October 17th, 2009 at 13:56 | #53

    ok.
    I got given this machine this morning to fix. (wxpp-sp3)
    Found this page, and a page on blepincomputer most helpful.

    I think there are at least two variants of this bug.
    The version I had would not allow ‘anything’ to run in ‘normal’ mode.
    Even stopped the three fingered salute from working.

    Rebooted machine into safe mode (f8 on boot)
    Loaded malwarebytes. Ran full scan found 5 items.
    Removed.
    Rebooted
    Seems clear at the moment. – run full avg scan – so far so good.

    Use procexp.exe to check bug no longer running.

    Use hijackthis to check again and clean up system.

    On this machine, I will install firefox and make it the default browser, then
    remove msie from the desktop.

    I had the advantage of my own desktop machine to find info and load programs
    from to a usb stick, to load onto infected machine.
    Good luck folks – the peeps that make programs like this should be shot…….

    Yous..

  44. karen
    October 17th, 2009 at 16:36 | #54

    Hey, i was hack by this security tool virus scam, i just wonder if i reformat my computer, would this help??? or it will only get the situation worse…

    please help me. i have many important information on that computer

  45. Torberg
    October 17th, 2009 at 22:22 | #55

    Philly Keith,

    Your method works well. My computer starts to behave. Thank you!

    But it seems there is still residual issue. Soon after reboot, a program named
    _ex-08.exe appears in Window Task Manager, which takes over the processor, 99% CPU usage. Is it the leftover of Security Tool virus? Anybody has idea on how to get rid of it for good?

  46. Nate
    October 18th, 2009 at 01:24 | #56

    I cannot find app data or program data in my C drive!!! Can someobody please help me??????

    • October 18th, 2009 at 23:39 | #57

      On vista, it is C:\Users\%Username\App Data. On XP, it is C:\Documents and settings\%username\App Data

  47. AJ
    October 18th, 2009 at 19:27 | #58

    Nothing is working for me. I tried to do system restore, it would not open. Tried to download and even run through USB, other virus scanners – spy docter etc, cant run them at all. I get an error by security tool, saying they are infected.

    I cannot boot in safe mode. When i try to do that it goes to blue screen “your compute is infected…please restart”. Anyone any ideas please?

    • October 18th, 2009 at 23:40 | #59

      AJ : Save downloaded files as iexplorer.exe or firefox.exe.

  48. AJ
    October 19th, 2009 at 00:15 | #60

    I tried that, saved them as iexplorer.exe and firefox.exe. But when i try to open them i get the popup – “iexplorer.exe is infected with Lsas.Blogger…” same thing for the firefox.exe too.

    Only success i had was, the “grant access” message appeared once when i tried to run those files. I granted access and back to the error and i got nowhere. What to do now?

    @admin

    • October 19th, 2009 at 08:17 | #61

      AJ : have you access to task manager or regedit ?
      If you have access to regedit (and not task manager), you can reenable it by using registry. Just search for key containing TASK.
      Also, see if you can run process explorer http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx . It might be allowed to run.
      You need to stop Security tool tasks prior launching remover.

  49. wafae
    October 19th, 2009 at 13:22 | #62

    the same problem with security tool help to remove it please

  50. Christine
    October 19th, 2009 at 23:08 | #63

    I have tried everything and this Security Tool is a nightmare. I have windows Vista and I am unable to do anything. If anyone is familiar with windows Vista, can you please give me step by step instructions.

  51. Christine
    October 19th, 2009 at 23:11 | #64

    @Philly Keith
    I have vista, and I can not it.

  52. ATL
    October 20th, 2009 at 06:05 | #65

    I got this crap from Youtube. I followed some of your instructions and I believe I have removed it.

    Before doing anything else, disable your internet and/or wireless connection so this spyware doesn’t do anything else weird, then shut down. If you can go into safe mode, do so as soon as your system starts up (press and hold F8 as soon as your computer powers up).

    Click safe mode when the DOS prompt comes up

    Once Windows loads (not sure if this affects Apple OS Users) (it will probably say Safe Mode in each of the corners of your screen and maybe some technical gibberish at the top. You will want to go in as Administrator if the user prompt shows up) go into My Computer, select Local Disk or C Drive, then Documents and Settings, then All Users, then Application Data. Make sure that youu are able to see hidden files (go to tools, then Folder options, then click the View Tab on the pop up and check the circle next to show hidden files and folders) otherwise you won’t find it, then under Application Data you’ll see the weird folder with the eight digit number you need to delete. YOu might have more than one, so delete all of those that apply. Then, use your search tool under your Start button on the Taskbar and search for “Security Tool” in the search box. Be sure to search in hidden files and folders! This should get this crap out. For anyone unable to go into safe mode, or if your system is really fried, I would recommend going to a PC Repair shop as this is something that most off-the-shelf software can’t delete (this spyware prevents software from being installed from a disk, believe me, I tried previously)

    Best of luck to everyone here. I’m going to have some choice words with both YouTube and GOogle now…

  53. Mel
    October 20th, 2009 at 06:54 | #66

    Will someone please help me remove this before I blow my brains out

  54. AMY
    October 20th, 2009 at 20:54 | #67

    ANGEL, THANK YOU VERY MUCH. IN SAFE MODE WE HAD TO RIGHT CLICK ON THE DESKTOP ICON FOR SECURITY, HIT PROPERTIES, COMES UP WITH TARGET LOCATION, CLICK ON FIND TARGET, CLICK ON THE FILE WITH THE 8 DIGIT NUMERICAL NAME. THE 8 DIGIT NUMERICAL NAME IS NOT NECESSARILY THE SAME FROM ONE COMPUTER TO ANOTHER. EMPTY RECYCLE BIN AS STATED & RESTART.

  55. Cellburn
    October 21st, 2009 at 06:18 | #68

    When you install it, it should be under your all programs tab, Right click security tools go to properties and find out where it is located. Once you have done that, restart/relog. Open the task manager (Ctrl+Alt+delete) before programs start up. This should override it, leave the task manager up. Go to the folder it is contained in and delete it. It worked for me.

  56. cer
    October 22nd, 2009 at 00:18 | #69

    Add me to the list. I am going crazy with this thing. This is my second full day of trying everything. My biggest problem is that I cannot start in safe mode. I get a blue screen and it reboots.

    Cannot get Malwarebytes to run either.

    Any help would be greatly appreciated.

  57. Suz
    October 22nd, 2009 at 02:13 | #70

    @Philly Keith

    Thank you so much!! it saved me lots of time and stress! you saved the day!

  58. ADHI
    October 22nd, 2009 at 08:01 | #71

    I used malwarebytes anti malware and it perfectly worked. Used those program on safe mode.

  59. ptropp
    October 22nd, 2009 at 23:44 | #72

    Cannot even boot in safe mode. Computer just restarts! Help

  60. Brian C
    October 23rd, 2009 at 06:12 | #73

    @cer You could try F8 then Last Known Good. See if that lets you restart into safe mode. It may take more than once.

  61. Alex
    October 23rd, 2009 at 09:06 | #74

    HELP HELP……………who invented this virus…I’m having major issues…

    trying to delete file but won’t let me.

  62. October 23rd, 2009 at 10:33 | #75

    This crap was on my computer when I went back to it after been away. It is shit and is giving me the shits to go with it. I can not even check my e-mails.

  63. Andre Archambault
    October 23rd, 2009 at 15:21 | #76

    It is nice and maybe helpful for some people to details all the problems they are having with this crappy shit.
    I had them also myself but thanks to a friend of mine he got me out in minutes.
    By the way they must change their numbers every day!
    These people after all are all bandits and they are the ones that creates all these viruses so they can sell their crap.
    They should be all ban.
    What I suggest is this.
    Why someone that is involved into a group or company does not start
    a major petition to ban all these companies.
    Without them we would not have any problems.
    I am too old to do that myself and living way out in the country alone.
    I think Google should do the something about it

    André

  64. vic
    October 23rd, 2009 at 20:36 | #77

    for those who can not boot in safe mode, boot from a dos diskette, use this program NTFS4DOS.EXE to get access to your ntfs drive c: then delete all of the sh.. in application data folder

    use another computer to download bootable diskette image and NTFS4DOS.EXE from the net. google them first.

  65. October 23rd, 2009 at 22:27 | #78

    thanks for everyones help here. it might be working…
    heres where I am at:

    I can’t start in safe mode. never had that happen before.
    task manager has been disabled.
    regedit has been disabeled
    folder option is not available to make system/hidden files visible.

    I was still able to search the folder option folder out to find 14834828.exe and delete it (we neeed to see those hidden folders!)… I was able to find out the exact name of the file by looking at the properties of the icon that was conveniently displayed on my desktop… otherwise it would have been hard to find.

    yesterday I deleted advanced virus remover from program files and a shortcut to it from the startup folder. that program has not reappeared since restarting my machine. a lot of pop ups have disappered since then but it seems like overall the invasion still continues. a number of little things are starting to not work right.

    I haven’t restarted yet since deleting security tool so we will see how it goes.

    msconfig is still available.
    there are some programs in the startup tab that I have turned off a whole bunch of times but they always start with the next reboot so I am not sure how to get rid of them since I can’t access regedit.

    I feel like I will probably have to reformat.
    thanks for all of the tips everyone and good luck!!!

  66. John C.
    October 23rd, 2009 at 23:00 | #79

    Thank you for the best info site yet for this abomination! I have tried everything except the manual removal stuff, for which I do not feel competent to try. Tried Spyware Doctor, which at least got rid of the main Security Fool pop-ups, but the puter still seems to be a very sick puppy. I still cannot re-install Malwarebytes, getting the now oh-so-familiar “error codes”. And now I am beset with “the daily heralds” popups, which suspiciously started once the Tool went dormant. I am sure it is still in there somewhere. Most recently, I got a USB memory stick, downloaded Malwarebytes on another computer, ran in safe mode on mine with the stick and actually got the sucker to RUN!!! Did a quick scan which found all kinds of stuff, but could not delete it without a reboot. Rebooted, did the same operation again with the USB, this time running a full scan, found even more stuff, it could not delete again without a reboot. Did this, and started up XP proper. All seemed well – I tried to install Malwarebytes back on the C drive, got almost to the scan, and Security Tool nuked me. Now it won’t even let me access the USB stick. My sense of this is that Malwarebytes can’t get rid of this effing plague, and until they address these new quicks and superpowers of Security Tool, we are all screwed.

    Please tell me I am wrong! I have spent hours each day this week on this. I could have bought a new computer with the lost time. What a waste! May these bastards rot in hell.

  67. Mide
    October 23rd, 2009 at 23:45 | #80

    @fritz
    my sysytem too can’t enter safe mode but here is what i did.
    immediately after the system finished booting i quickly hitted alt+ctrl+del keys before the malware started this brought up the task manager, then ended a process with about 8 digit numbers mine was “62062066″. Then on the desktop where the shortcut is i right clikd to get the menu and clikd on properties. On the properties popup i copied the address where the program was installed.
    i internet explorer then pasted the address there. (mid you you have to delete the last file name with .exe so as not to launch the program again and the preceeding quotation mark) you see the folder then delete all in it.

    Hope you get my explanation. I know i suck at explaining but just fuse the pieces together and it should work for you.

  68. kevin
    October 24th, 2009 at 02:11 | #81

    my background goes gold and no icons

  69. Kelly
    October 24th, 2009 at 04:45 | #82

    Started in safe mode then restored to before this piece of crap took over my computer . So far so good . I run XP Home Edition .

  70. Nick
    October 24th, 2009 at 07:40 | #83

    I’m in the same boat as ptropp. It will not allow me to boot into safe mode, computer just restarts. I have tried the “last known good configuration” to no avail. It also has changed my permissions for being able to access REGEDIT. I installed Ad-Aware, during the first run it stopped in the middle and now will not start at all. When I CTRL-ALT-DEL at start up I can chase down and end most of the trouble making processes but there is one I can’t shut down, there are 2 csrss.exe’s there and I’m pretty sure thats the culprit. Any advice would be much appreciated. Thanks.

  71. Dave
    October 24th, 2009 at 10:24 | #84

    My daughters PC got it and here’s what worked for me from reading in this forum…

    Safe mode – ha, would not work
    Ctr-Alt-Del right away while booting and stop the 8 number process – worked
    Search – comes up but would not start any searches
    My computer – hidden files not accessible and would not allow me to change it
    Click on security to get properties to find actual address – worked
    In Search mode, while search would not work, it did allow me to stumble down the address until I finally got to the folder to be deleted.

    Deleted folder, empty recycle bin, reboot and……..

    IT WORKED. First reboot only had a few icons including the security one, deleted that and the link in the start menu, emptied the recycle bin, shut all the way down and restarted yet again and looks like most if not all came back including a bunch of desktop icons.

    Thanks guys and gals, looks like each of us may have to attack the problem a little differently depending on what this nasty lil bug screws up.

  72. mickser
    October 24th, 2009 at 18:04 | #85

    download vipre antivirus software. There is a 30 day free trial. Disable your current AV software.Vipre will pick it up and remove it. EASY PEEZY!

  73. Phil D.
    October 25th, 2009 at 02:04 | #86

    Well add me to the list. Problem is Security Tool, or something, has diabled both the keyboard and mouse, so I can not promt into safe mode or any other F# key. When it boots up there is just the desktop( blue) and their faux spyware program. I cannot do anything except look at it.

    Any ideas? Take it out and shoot it? Recycle it? Start over, reinstall XP and lose everything on it?

  74. Phil D.
    October 25th, 2009 at 06:10 | #87

    Add me to this list. Security Tool has taken over mine to the point of disabling both the keyboard and mouse. I cannot promt any F# key or anything else. When I boot up I get a desktop (blue) and the ST’s fake program. All I can do then is manualy turn off the computer.

    Any ideas? Reinstall XP and lose everything? Drop the CPU off at the recycling center? Take it out and shoot it?

  75. David
    October 25th, 2009 at 21:27 | #88

    This is really getting me down now. It’s been going on since Thursday night and quite frankly I’ve wasted nearly the whole weekend trying to remove this from my system because of these fucking geek hackers writing this piece of shit virus.

    Must have re-started my PC about a hundred times, both normal and safe mode trying different ways to remove it. Since Thursday I haven’t seen the numerical.exe in the Apps Data folder but I still can’t run Malwarebytes or SpyDoctor or several others I have tried so it’s obviously lurking somewhere in the background like a fucking coward….come out you fucker, I’ll take you on….sorry for the rant it’s not really very helpful, just need to get it off my chest…

  76. André
    October 26th, 2009 at 00:39 | #89

    I got this one on wednesday, spent nearly every day trying to remove it and though my system is not on 100% (I think only reinstalling everything will get me to that) I finally can work again…I used avira-antivir-live-cd zu do a scan and find the trojan base of this; then I used ubuntu-Boot-CD zu get in Linux, deleted the security-tool-files manually and the trojan-files; then I friend helped me re-writing the Master Boot Record. After hat I could start windows and deleted the security tool-base in the registry. Finally I could run Anti-Malware from Malwarebytes, Kaspersky Removal Tool (from that website), Combofix, Spybot, Ad-aware, AVG 9 and now I’m running Zonealarm and Threatfire additionally…

  77. André
    October 26th, 2009 at 00:54 | #90

    Oh, btw: For those just deleting the digitnumber-folder: That just stops security tool, but security tool entered your PC by using a trojan. That base of the virus needs to be removed.
    Though I still can’t rid of my browser hijacker, that redirects bei google-search and Safe Mode still doesn’t work (maybe some files merged with windows-sysfiles and killing those files killed my safemode); any ideas?

  78. John C.
    October 26th, 2009 at 02:58 | #91

    Update – apparent success. Purchased Spyware Doctor, SpyHunter and Security Task Manager. Ran the last first and got rid of some nasty shit. Then SP and SH got rid of more shit. The apparent turning of the tide was downloading AVG 9.0 Free.
    This took out even more stuff and made it so I could INSTALL AND RUN MALWAREBYTES!
    This took out everything. I have purchased the full Malwarebytes and have it running ALL-THE-TIME. Praise Jee-sus!

    • October 26th, 2009 at 11:38 | #92

      John C. : go with AVAST instead of AVG. AVG has no rootkit protection in free version (as far as I know). And that is a big problem in cases like this.

  79. Craig
    October 26th, 2009 at 07:29 | #93

    I’ve been having these problems w/ Security Tool as well. The ctrl+alt+delete, ending the process #s works to stop it from popping up. However, it has removed all of the icons from my desktop as well as made my wallpaper invisible. Any suggestions on how to get them restored.

  80. Craig
    October 26th, 2009 at 08:15 | #94

    Hi all, found this rather helpful. Free Spyware, it seems to have helped me w/ my issues I’ve been experiencing w/ this Security Tool bullshit.

    Avira AntiVir Personal
    http://www.filehippo.com/download_antivir/

    • October 26th, 2009 at 11:37 | #95

      Craig: I would recommend AVAST, if you go with free antivirus. Better detection ratio.

  81. TQ
    October 26th, 2009 at 14:23 | #96

    I’ve had problems with this for a while now. It won’t even let me run explorer.exe…

  82. Phil D.
    October 26th, 2009 at 21:27 | #97

    OK, I have an idea.
    It may be there has been a motherboard failure on the computer, that’s why the mouse and keyboard stopped working.
    How ’bout I pull the hard drive out (because that’s what’s infected) and put it in another computer, then try to run anti-virus/anti-spyware programs?
    I would really like to save the info on this hard drive.
    Any comments?

    • October 27th, 2009 at 12:05 | #98

      Phil D. : It should work. Just scan with antivirus the drive first ( Before copying anything out).

  83. Jay
    October 27th, 2009 at 00:43 | #99

    ty Philly Keith! my roommate bought a laptop & against my advice, uses IE instead of Firefox & didnt install spybot or ad-aware & last night this crap shut it down.

  84. K.L.
    October 28th, 2009 at 01:10 | #100

    Please help me. I have tried all the suggestions listed in this comment string since Oct. 9th, as well as tips from Spywarefixpro. I am unable to boot in safe mode, unable to access the internet or task manager. I have not lost my keyboard or mouse but you guys are scaring me. I tried downloading an automatic Spyware Remover to a flash drive and run that but nothing happens. I just paid $100 to have someone else clear viruses a few weeks ago from this same computer. I’m trying not to pay again. I’ve been working on this all weekend and the last two nights. Any new suggestions?

    • October 28th, 2009 at 08:49 | #101

      K. L. : Have you tried manual instructions ? Do you have access to task manager or process explorer ?

  85. rBlue
    October 29th, 2009 at 03:00 | #102

    when i have the task manager open , in process what do i do to get rid of or delete the “security tool” program.

  86. paul ng
    October 29th, 2009 at 16:57 | #103

    I had problem with Security Tool and applied the solution from Philly Keith:
    1-Reboot in safe mode.
    2-go to C:\Documents and settings\all users\application data.
    3-search and delete file with ex 91908431.
    4-empty recycle bin.
    5-reboot normally.
    6-delete all shortcuts.
    7-empty recycle bin.
    It works. thanks a million.

  87. nani
    October 29th, 2009 at 16:57 | #104

    this system craping system, my desktop disappear…

  88. Phil D.
    October 29th, 2009 at 19:30 | #105

    Thanks admin, that worked for me. Was able to copy all the files I needed off the hard drive and paste on to a diferent one. Maybe I’ll rebuild the old Dell.
    I’am using Zone Alarm’s latest anti-virus/anti-spyware and Spybot on this computer.

    • October 29th, 2009 at 22:43 | #106

      Phill D. : Throw away spybot :) It is not too good with latest parasites. Do occasional scans with malwarebytes or get superantispyware if you want free tools, but I do not thrust in spybot’s updates.

  89. iwant
    October 30th, 2009 at 07:17 | #107

    Philly Keith is right! Their way i s best. Just be sure to goto tools/view/show hidden files , then look for application data in ALL USERS! Delete the 8 digit filename folders and empty recycle bin. ALso remove all shortcuts and links from start up tab.

  90. Iona
    October 30th, 2009 at 21:20 | #108

    I have installed Norton which is working ok but somehow in the process ‘Security Tool’ has appeared!!! It is awful & pops up allllll the time!
    I have looked up on google to try & find how to delete it but I just can’t seem to delete it! Why isn’t Norton version 3.0 getting rid of it??? Can anyone tell me in very easy steps how to remove Security Tool from my laptop. Thank you.

  91. David
    October 31st, 2009 at 00:25 | #109

    After my earlier rant (message #88)I think my system is now clean. I tried all the ways suggested including manual removal, some of which was successful although I still couldn’t run Malwarebytes, SuperAntispyware or my AVG anti-virus so the trojan was still there in the background.

    What I did was post all my problems on a relevant forum and a Hijackthis specialist (even though at this stage I couldn’t run a scan without it shutting down) gave me step by step instructions to remove. Most of these were unsuccessful so as a last resort used a program called Combofix. It is a very aggressive malware removal tool but it seems to have done the trick. However, I would not use it without instruction and again the analyst will walk you through what to do. I hope this in some way helps because I was as frustrated as some of you clearly are.

  92. james303b
    October 31st, 2009 at 00:37 | #110

    @Philly Keith
    I tired that 4 times it didnt work

  93. stewart
    October 31st, 2009 at 13:58 | #111

    I got security tool in my desktop.IAfter using the internet for a while, the wholee system blacks out. How?

  94. paulg
    November 2nd, 2009 at 06:05 | #112

    got this crap on my system tonight. And my problem is that as soon as security tool kicks in, my whole desktop goes blank/gray and all of my icons dissapear. I’m gonna try the recommendations others have provided and see if it works.

  95. paulg
    November 2nd, 2009 at 07:05 | #113

    Success! success! I finally got this shit off of my computer. What I finally did was open the windows task manager, and click on the proccesses tab. And then I highlighted and deleted the 8-digit number that security tool was hidding under (the number in my system was a number that started with a 7, not 9).

    Then I was able to follow the steps that Philly Keith suggested (except I wasn’t in safe mode), and restarted it. Now its back to the way it was before. WOO-HOO!

  96. Erik
    November 2nd, 2009 at 22:32 | #114

    Ok, I’m not sure who suggested it, but when Security Tool was eating the exe for Malwarebytes I made a copy and renamed it F-U-SECURITY-TOOL.exe and the infection didn’t eat it. Then I was able to update it and scan the pc that is infected.

    The ‘people’ that are wasting our lives with this garbage seem to be reading this blog. I can’t get to Safe Mode, the fix worms are getting smarter and this is getting more aggrevating. I don’t think that this is only hoaxware but more like a test bed for worse attacks to come. For those that are struggling with this issue, please be patient and keep being resourceful. For those that are reading this stuff to see what holes we’re all finding in their software, please reference the rename of the file as mentioned above.

    And to those that get mad when they click on something that ends up costing them money, . IF you don’t get it, google it and check the first link that comes up.

  97. Erik
    November 2nd, 2009 at 22:33 | #115

    Ok, why is it that ‘tanstaafl’ got removed from my past post?

  98. Sana
    November 3rd, 2009 at 00:30 | #116

    i have it too but whenever i download the spyware, after presssing run, nothing happens…Stupid person whoever made “Security Tool”.

  99. Sana
    November 3rd, 2009 at 00:49 | #117

    i was very close and i dleted the random number and relogged it had most of my icons for a moment then security tool took over.

  100. Beverly
    November 7th, 2009 at 23:07 | #118

    Keith, it will not let me delete the 8 digit folder, how do I delete it? @Philly Keith

  101. chucky
    November 8th, 2009 at 03:10 | #119

    i cant get the spy doctor to run because of the secruity tool progam wont allow it
    i need help please

    • November 9th, 2009 at 11:56 | #120

      Chucky: You need to disable virus first. Start task manager and stop all numeric-only processes. This should allow spyware doctor to run.
      Andrew : we got a new release of spyware doctor, this should fix the problem. Security tool recently mutated.

  102. Joe B
    November 8th, 2009 at 07:44 | #121

    I just got the security tool virus and im not sure how to get rid of it can someone help me? I can’t open any apps other than the internet. I’ve read comments that say download spyware manager on another computer and put it on their own but i don’t know how to put programs from other comps onto mine.

  103. Zack Hickman
    November 8th, 2009 at 08:22 | #122

    how do I delete it, this is completley taking over my pc I want it gone NOW!!!

  104. Zack Hickman
    November 8th, 2009 at 08:31 | #123

    whenever I click something to delete it, it pops something up and cancels it out
    please help me s.o.s

  105. Zack Hickman
    November 8th, 2009 at 08:33 | #124

    @paulg
    If you click the tool bar you should have an option to show the desktop
    dosn’t last long.

  106. robert Franceman
    November 8th, 2009 at 09:38 | #125

    whoever made this stupid thing must have go the name Tool from someware deep in there conchance. This is the most ignorant thing, I dont feel like waisting all my time to fix some stupid little joke, I dont have the money for this crap.

  107. becca
    November 8th, 2009 at 13:38 | #126

    I Got rid of this Virusus by copying all the stuff to my hard drive(usb) then i deleted evrythin, n i put aall the setting back on, with my stuff. i go out for a night the week after, and its back. i cba to do wat i did again if i know tht it doesn’t work. im really pissed off any ideas for wat i could do!!
    i’ve download malware but i dont wanna pay for anything. i downloaded spy-doctor but u have to pay. i’ve tried manual script n it just comes back. AHHHH IM DIEING OF THIS VIRUS HELP!!!!!!!!!!!!!!!!!1

  108. J.C
    November 9th, 2009 at 23:29 | #127

    my task manager is disabled is there anything i can do to get this off without it

    • November 10th, 2009 at 13:44 | #128

      Try downloading process explorer from microsoft. Rename it to iexplorer.exe or some random name.

  109. Dianne
    November 10th, 2009 at 02:38 | #129

    Wow… this blankety blank Security Tool virus is almost as bad as the H1N1 Virus! I think I’ve deleted all the suspicious files. Need to reboot to be sure… wish me luck!

  110. james
    November 10th, 2009 at 17:05 | #130

    please help !!
    when i try to download any programs to delete it they do not appear on my screen (neither does any program there before) and when i click start and run and search it a security tool warning says there is a problem ! does any1 know how to help

  111. Ralph Shelton
    November 10th, 2009 at 19:18 | #131

    I did not order security tool. It just popped up on my computer and ruined my week. After i get off from work, i can’t even read my e-mails because of the constant pop-ups telling me that my computer is infected. I don’t use my computer very except reading e-mail from our church members. I want very badly to get this virus removed from my computer.

  112. Lauren
    November 10th, 2009 at 19:23 | #132

    This virus has caused my computer to show a dark blue screen on start up saying the system has closed down, there for i can’t get into anything it won’t start up on safe mode either….what am i to do???

    • November 11th, 2009 at 10:31 | #133

      Lauren : Try rescue CD, if you got one. If PC does not boot up, it is reinstall time probably.

  113. Dr Amit K Saiya
    November 11th, 2009 at 19:17 | #134

    @kody112
    Dear Kody and keith,
    Do advise on “left over shortcuts” and oblige
    Regards
    Dr Amit K Saiya

  114. chris
    November 11th, 2009 at 23:29 | #135

    @blue carbuncle
    better yet why is it illegal for people like us to get back at theese kind of people

  115. Heather
    November 12th, 2009 at 03:24 | #136

    the virus wont let me open spyware doc, adware se, task manager, add remove programs, nothing.. HELP

  116. Phyuck Spyware
    November 12th, 2009 at 05:49 | #137

    Dang! Does anyone have an answer???

    This crap makes me want to toss my computer out of the window!

  117. Ian
    November 12th, 2009 at 15:20 | #138

    @blue carbuncle I cannot believe this! Another malware on my computer. This one’s not even creative. For the sake of its builder, I hope we never meet.

  118. patrick
    November 13th, 2009 at 00:51 | #139

    This security tool keeps popping up saying i have 39 viruses. i just keep press continue unprotected. and it will go away but there is still the small icon at the bottom of the screen that keeps showing up that different files are infected by a worm. and all my icons that are on the regular screen are only there when i first log on and if i want to open something i have to hurry and click on some of them before the security starts its fake scan. then after a little bit of messing around with it. the screen goes to a blue page that has something about problem is caused by: SPCMDCOM.SyS and says a few other things then toward the bottom of the page it has a few groups of numbers kinda like 00×0000340 and that page stays there for about 15 secs then it restarts my computer. any idea on how to get this off here?

  119. patrick
    November 13th, 2009 at 01:03 | #140

    Another question before this security tool thing got on my computer i have been having a problem with starting up my computer. when its turned off and i go and turn it on it goes to a blue HP page that has 4 options F9- diagnostics F10-setup F11- system recovery and Esc-boot menu. and that screen only last for about 5 secs if u dont pick one then it goes to a black blank page with an _ at the top like its gonna let me start typing something but i cant do nothing on that page, i always have to hold the power button down to turn it off then turn it back on and when the blue page pops up i have to hit Esc to get to the boot menu and it has >HDD Group 3rd drive:(E.)hitachi hdp*********CD-Rom Group 4th drive:optiarc dvd rw ad-*******< bunch of#s and if i have my external burner on it will show that on there to. but i always pick the 3rd drive (E.) and then it starts up. anyone know how to fix that so it will start up regular again.

  120. chrfles
    November 13th, 2009 at 03:00 | #141

    The easiest way to rid computer of security tool.Start computer press f8 as it is starting. this lets you start in safe mode. In safe mode using the arrow pad go to networking. Push enter.Only the things needed will start.Then open internet explorer Type in trends micro housecall.Go to this web site and download housecall.Close window and agree to there terms Scan computer It takes about six minutes to scan Then click to remove security tool. Then run a registry cleaner to remove any icons or remnents of this trojen.Its very easy to do. The whole things takes about 20 minutes.And it cost you nothing but a few minutes of your time This works on all Trojens,Adware,or any other nasties out there

  121. chrfles
    November 13th, 2009 at 03:32 | #142

    To keep the malwares from stopping your anti virus from working,you will first have to remove your anti virus .Then reload it and rename it with a few key strokes of anything you may like to use.Then the virus can’t shut down or disable your anti virus program.It works

  122. chrfles
    November 13th, 2009 at 03:53 | #143

    If you can’t start in safe mode,try this.Go to a friends computer and download a disc of a anti virus program rename this program..Disconnect your computer from the internet.This will slow security tool down.First try to run a scan with your own anti virus to get rid of security tool.Always run a registry cleaner after removing.If this doesn’t work Put the disc in and download.Now run your scan from the new anti virus program This should remone it Run registry cleaner to get rid of it for good.

  123. michael
    November 13th, 2009 at 04:48 | #144

    Heres how I fixed my computer (I hope its all gone but its working fine now). After reading a few posts here I tried going into Safe Mode but was unable to so before Security Tool could load I hit Ctrl Alt Delete to bring up the task manager. I found the eight diget process and shut it down right when it was loading. I then went to the desktop icon and went to properties and find target location and deleted the file. This allowed me to actually run a full scan on my virus program which came up with an additional 18 infections. My computer seems to be working fine but then again actually being able to use my desktop icons and programs is 1000 times better than a few hours ago.

  124. Sunshine
    November 13th, 2009 at 08:15 | #145

    The security tool was downloaded to my computer. I have Windows Vista, could not get it off at all…tired the regedit (didn’t work)….I had to start in safe mode then do regedit and search for the numbers it gave as the title and delete them and search again about 4 times then load back up in regular mode and now my computer is fine.

    I hope this helps someone out there…I was ready to throw my brand new computer out the window (not really but damn)

    Thanks for the help from the people here!!!!!!

  125. angee
    November 13th, 2009 at 18:31 | #146

    Took your advice. Immediately after start up Control Alt Delete to end task. End process with an 8 digit number (I located mine by scrolling across the security tool icon on the bottom of the screen 23374928.) Found it in the process menu and end the annonying lil thing. Clicked on startup was able to search the web and downloaded malwarebytes. Ran a full scan and fixed the problems. Reboot and thus far havent had a problem. Hope this helps because believe me I was ready to pull my hair out.

  126. dexter
    November 14th, 2009 at 03:19 | #147

    what peace of shit it disturbing i cant use my computer it says many viruses infenct my computer hahahayz

    guys how get this off?

  127. lee
    November 14th, 2009 at 14:05 | #148

    @Philly Keith
    hi Philly Keith, i’ve tried your advice but can’t find the 8 digit “bad boy” in app data any other advice please as this is driving me nuts thanks

  128. Ciarguy
    November 14th, 2009 at 20:41 | #149

    Chrfles, followed your above, downloaded Housecall, removed Security Tool and cleaned my reg. All back to normal now. I would like to see the Security Tool people put before a firing squad!!

    Thanks Again,
    Cigarguy

  129. Winner
    November 14th, 2009 at 20:56 | #150

    Try intalling malware byte in a usb flash drive using a non infected comp. recommended on an 8g drive. Hook it up to the infected comp and run it. Disable the processes before the actual run

  130. allari
    November 14th, 2009 at 23:56 | #151

    @Sunshine
    what is regedit

  131. Elaine
    November 16th, 2009 at 07:42 | #152

    Philly Keith :forget all that… try this move, it worked for me after going nuts over this for a whole day.
    Reboot in safe modebrowse to C:\Documents and settings\all users\ application data
    There will be a folder in there that has eight numbers as a name (ex 91908431)
    Delete this bad boy, empty recycle bin
    Reboot normally, delete all left over shortcuts, empty recycle bin again and you are home free.

  132. Ashley
    November 16th, 2009 at 09:46 | #153

    Hi I’m Ashley. I’m a fifteen year old girl. I as of about two hours ago aquired security tool. At first i thought it was legit. I mean I have technology. But unfortuantely I didnt quite understand the danger this program held. It loaded and repeatedly bothered me. But i saw nothing wrong yet as my norton does this because i have not updated it. (and yes i know i need to.) Until my computer manually shut itself down because of viruses. It was not until i turned my computer back on that i had problems. It would let me access anything. Not even my Task manager. I came to the conclusion that it was a virus itself. So i tried to delete. Originally opening its file up and trying to delete it. That failed. Becoming so frusrated I restarted my computer and tried to delete it before security tool could load. Still didn’t work. Finally after third reloading I went ofr reasearch on then net. After waiting for minutes for internet to load i stumbled upon yahoo answres where upon a link and another five minutes it led me here. and after reading other comments teling me to go to safe mode and then deleting it I decided to try for myslef. It worked. I thank you so much. If not for you I probably would have thrown my laptop. Thank you once agin.

  133. mark q
    November 16th, 2009 at 16:18 | #154

    keith
    used your instructions they worked a treet thanks millions mate

  134. mark q
    November 16th, 2009 at 16:20 | #155

    there might be a few folders with eight numbers i had three folders with eight digits i just deleted the lot and im up and running again touch wood

  135. Josh
    November 16th, 2009 at 19:58 | #156

    What I did was download Sysinternals Process Explorer. Extract it. Rename the executable file to iexplore.exe Put the files on a USB Flash Drive. Use Process Explorer to kill the processes associated with it. Download and run ComboFix. Download and run Malwarebytes.org Anti-Malware.

  136. Tozzi
    November 16th, 2009 at 20:15 | #157

    If it takes more than four hours and/or three attempts to find and eliminate virus issues, you may be better off wiping the HDD and re-installing the OS and all apps.

  137. ken
    November 16th, 2009 at 20:21 | #158

    I can not find the location with the 8 digits. I am running vista and cannot find the extension application data. any one with any suggestions

  138. sarah mc a
    November 17th, 2009 at 00:22 | #159

    I have downloaded spyware doctor and the security tool still appears. i tried everything to delete it from my programmes and it looked like it was gone however when i shut down the computer and logged back on it was still there!

    can anyone help?…. any ideas?

  139. Drena W
    November 17th, 2009 at 00:27 | #160

    Just another note……THANKS TO ALL THE ADVICE, WITHOUT ME SEARCHING THIS OUT, FOR A MOMENT I THOUGHT IT WAS LEGITE BUT THANKS FOR ALL THE ADVICE!!!!!!!

  140. Spike
    November 17th, 2009 at 01:52 | #161

    PHILLY KEITH — YOU DA MAN!!!! Used his fix in safe mode within an hour of gettin this crap. So far, so good!

  141. noel q.
    November 17th, 2009 at 07:40 | #162

    haha… i clicked “system restore” on my hp windows7 then reboot normally..
    deleted the remaining icons and emptied the recycle bin…
    it worked!!! hope it won’t come back..
    thanks all of you guys for the idea! saved me alot of time and money..

  142. kelly
    November 17th, 2009 at 15:42 | #163

    this is crap how does it get n to your computer? i have never seen it before. thank you to all the websigts out their to help you.

  143. jim k
    November 17th, 2009 at 16:49 | #164

    It cost me $30.00 for a year contract but it worked. Even running much faster. I used the spy-bot, search and destroy–uniblue

  144. TROY
    November 17th, 2009 at 16:52 | #165

    How do you get into safe mode to find the 8 digits

  145. Theresa
    November 17th, 2009 at 18:32 | #166

    I am ready to pull out my hair. I can’t even run my computer in safe mode cause when I do my password doesn’t work. wierd. I can’t run any programs, open any attachments, so on and so forth. I think it’s a shame that people have nothing more to do with their time but to make people miserable and completely unproductive. These people should be found and punished to the highest extent of the law…whatever that may be. UGH!!!~!!

  146. Mike
    November 17th, 2009 at 19:38 | #167

    My roommatre accidentally let this program in and it IS an in-your-face irritant. To remove it I rebboted in SAFE MODE, right-clicked on the SECURITY TOOL icon to Properties, to File Location. Then I deleted all files in that location. I rebooted again in NORMAL MODE and then did a System Restore (could not get there prior)to a couple of days prior. That solved the problem.

  147. Mike
    November 17th, 2009 at 19:40 | #168

    @TROY

    Troy. You turn the computer off using the POWER button by holding it down for 15 seconds. Then power on and choose the SAFE MODE at the beginning of the reboot.

  148. Phil
    November 17th, 2009 at 21:24 | #169

    I can’t see the C:\Documents and settings\all users\ application data. I’m running XP Pro and under all users I see desktop, favorites. shared documents, start menu.

    Is application data a hidden file?

  149. noel q.
    November 17th, 2009 at 22:20 | #170

    troy..
    click restart on your pc.
    before it opens again, press f8.choose safe mode
    if u are using windows7 its so much easier! look for all the security tool icons,right click and choose properties. once in there,press locate program. (should be at the bottom left)once located, delete it…and all the remaining icons. click restart again, you should be running on normal and your done!
    or…..
    follow philly keith advice! goodluck man!

  150. noel q.
    November 17th, 2009 at 22:22 | #171

    ……….and don’t forget to empty your recycle bin.

  151. Jim Wendt
    November 17th, 2009 at 22:23 | #172

    @Philly Keith
    I booted up in safe mode but couldn’t figure out the exact steps to reach c:\documents and settings. I am running windows Vista Home Edition. How do I “browse over” to the files you specified?

    Jim

  152. Phil
    November 18th, 2009 at 00:21 | #173

    I may have stumbled onto it. While in Safe mode I searched on Application Data and got a number of matches. I saw a Documents and Settings\All users file folder, clicked on that and saw a file named 77411828 which went right to trash. Prior to that I traced the Security Tool locations by selecting the file name, clicking on Properties and deleting all references / locations.

    Holy smoke, now I’m getting the same crap from a malware package called AntiVirus Pro

  153. Bob Johnson
    November 18th, 2009 at 05:02 | #174

    I have the security tool on my computer. The only thing it does is sits there and does nothing. I don’t have any mouse control and with keyboard, I just the Task Manager and cannot end any process. Looks like I am in trouble. I try safe mode, last safe mode with networking, last known configuration. Nothing works.

    Does anyone has suggestions.

  154. Bob Johnson
    November 18th, 2009 at 16:46 | #175

    Please help…. Anyone, I don’t have any control over my mouse or keyboard, except the only thing that pop’s up is Security Tool, I could CTRL, ALT, DLT, but cannot terminate any of the processes. Cannot go into any Safe Mode. Does this sound like re-imaging the computer.

    Your answer would be appreciatd.

  155. Steven the Sad
    November 19th, 2009 at 00:27 | #176

    Hey I as everyone else on this site… has security tool infecting my comp, I did all the manual stuff and deleted every last damn file with the 8 digit code and blocked all processes I killed every file i found and now i cant find anymore but i still cant run malwarebytes, i cleared the registry i cleared the user apps folders i cleared everything i could think of and the little prick is somewhere deep within the confines of my comp royally fucking shit up… Any suggestions? i need to fix this comp i cant afford a new one..

  156. Lauz
    November 19th, 2009 at 14:52 | #177

    Thank you so much everyone for your advise…very helpful! My computer is currently unprotected – does anyone have any suggestions for antivirus software? I really gotta get me some!!

  157. matt
    November 20th, 2009 at 02:28 | #178

    Philly Keith :forget all that… try this move, it worked for me after going nuts over this for a whole day.
    Reboot in safe modebrowse to C:\Documents and settings\all users\ application data
    There will be a folder in there that has eight numbers as a name (ex 91908431)
    Delete this bad boy, empty recycle bin
    Reboot normally, delete all left over shortcuts, empty recycle bin again and you are home free.

    what do you mean by all left over shortcuts, and how do you reboot in safe mode?

  158. Rick
    November 20th, 2009 at 03:18 | #179

    @Steven the Sad
    Guys I just spent the last 6 hours getting rid of this POS. I tryed all the free ways and ended up getting Spy Doctor ran it in safe mode (Pressing F8 repeatedly upon rebooting system. Security tools wasnt present in my safe mode all the popups were held at bay. I loaded Spy doctor and ran scan. This sucker did lock my internet connection once I was stuck but just rebooted in safe mode and I got back online.Then rebooted in normal mode and had to run another scan. All is write now and im back on working tonite as i lost a day of productivity.

  159. mohd
    November 21st, 2009 at 01:18 | #180

    I tried all this things .. but nothing worked ..

    the only thing helped me .. made restore settings .

  160. Wakay
    November 21st, 2009 at 23:17 | #181

    Hey guys, follow Matt advise it worked for me.. but I’ll be checking time to time :)

    forget all that… try this move, it worked for me after going nuts over this for a whole day.
    Reboot in safe modebrowse to C:\Documents and settings\all users\ application data
    There will be a folder in there that has eight numbers as a name (ex 91908431)
    Delete this bad boy, empty recycle bin
    Reboot normally, delete all left over shortcuts, empty recycle bin again and you are home free.

  161. Wakay
    November 21st, 2009 at 23:24 | #182

    Correction thanks Philly Keith… your the man

  162. Adina
    November 22nd, 2009 at 00:26 | #183

    Haha, I laugh but I shouldn’t. I think I’m the only one on this site that sais that I PAID FOR IT! ;) )) Well, actually not me, my scared mother. Unfotunately I wasn’t home to explain her. Well, the good thing is that now I am scanning my computer using Malwarebytes and actually everything works nicely. My mom said that emediately after she bought it, the viruses listed were “miraculously” deleted and all went back to normal.Now I wonder how much it lasts. Anyway, right now i’m dressing up to go to a store and buy an antivirus, which I thought (from my experience) that I don’t really need, especially that I used to work with computers with less than 512 MB RAM and any antiviruses slowed down my system so much that I wouldn’t be able to open even explorer. Now I learned my lesson.
    Oh, and one more thing, it appears that the most affected program by this virus is Google Chrome, which happens to be my favourite web browser. Right now, even if my mom paid them, I still can’t get any response from Chrome.
    So, I hope we all fix this problem. Good luck!

  163. November 22nd, 2009 at 03:47 | #184

    @kody112

    Hey thanks kody112 i followed your instructions and they were on point i was able to get that junk off my computer i learned a lession from this next i will get have a antivirus on my computer thanks phats456

  164. Mark
    November 22nd, 2009 at 23:28 | #185

    Philly Keith’s solution worked for me. I went to ‘run’, then entered c:\programdata\, and found and deleted the offending folder. A world of warning, however: I noticed that Security Tool had actually placed 4 such folders on my computer (they were all 8 number names), so make sure you scroll through the whole list and remove them all. I also removed the shortcuts it had placed on my desktop, and emptied the Recylcle Bin before rebooting again. Thanks Philly Keith for the very useful tip. So happy to see my Desktop return.

  165. FM18
    November 23rd, 2009 at 07:52 | #186

    i need help! ive been reading all these comments from everyone..
    i found the 8 digit numbered folder[there were 2] i deleted 1 but the other one i cnt delete it, what can i do??help!!!

    • November 23rd, 2009 at 10:34 | #187

      FM18 : You need to stop processes before using task manager. Check what files are in the folder you cant delete and search for these processes.

  166. Bat Thompson
    November 23rd, 2009 at 19:32 | #188

    Instead of government putting focus on collecting data and information on all Americans, they should just hunt these characters down and kill them ! This is costing Americans $Billions in lost time and material..

  167. cassandra
    November 23rd, 2009 at 22:17 | #189

    idk how security tools got on my computer it just poped up a couple of days ago what do i do to get it off for good?

  168. Jibril
    November 24th, 2009 at 03:36 | #190

    Admin, I have downloaded “spdoc.exe”. And Security tool wouldn’t let me use it! HELP!

  169. Tanya
    November 24th, 2009 at 14:27 | #192

    This security tool rogue was driving me crazy………I tried for three hours to get rid of it! Once i followed the instructions via Philly Keith’s solution it actually worked…….Thanks a Bunch!!!!

  170. Evgenia
    November 24th, 2009 at 22:39 | #193

    Thanks to Philly Keith. His solution worked for me, people do not forget to use SAFE MODE than it works.

  171. gena ferguson
    November 25th, 2009 at 01:00 | #194

    help, I have tried to download several programs to get rid of Security Tool. The programs aren’t being allowed to work. I’m not that great with computers so I need help. Thanks

    • November 25th, 2009 at 22:28 | #195

      Gena : rename the program to whatever.pif on save.

  172. Stuart M
    November 25th, 2009 at 17:47 | #196

    @Philly Keith

    tried to delete but comes up with “cannot delete make sure disk not full or write protected and file is not currently in use!!!! Please help i am going out my mind with this s**t

    Thanx

  173. Greg
    November 25th, 2009 at 18:18 | #197

    I have Vista and could not find the numeric file anywhere until I used Mark’s method (post 185) and then did what Philly Keith said to do. Seems to have deleted security tool. Thanks a bunch guys!

  174. Ravicater
    November 25th, 2009 at 22:12 | #198

    O.K. guys I came back to this site and registered just to tell you a very easy method to get the Security Tool permanently removed. It’s simple, just boot up in safe mode (F-8) and do a restore to a past date. (OH,just pick one) I Hope they catch those A-holes that did that program. Now that I’d pay for.

  175. Rick
    November 26th, 2009 at 05:14 | #199

    This thing is pissing me off. Whats the fastest and easiest way to kill it without downloading stuff? I have an english report due at the end of the week and this thing keeps poping up and getting in the way saying harmful software detected and bull.

  176. devil
    November 26th, 2009 at 09:43 | #200

    keith: folder option doesn’t allow me to show all hidden files? and i cant see any “application data folder” in “all user folder”?

  177. raven
    November 27th, 2009 at 00:06 | #201

    this security tool thing
    is messing with my computer
    i found the source, in my computer
    and when i try to delete it.
    it tells me that i dont have
    permission for this action.
    i need help

  178. November 27th, 2009 at 06:29 | #202

    The “Security Tool” on my PC just appeared and I don’t know why. I didn’t purchased nor downloaded it. I am trying to follow your instructions but this virus is corrupting your application. What should I do? I have my very important files on my pc. Please help me. Email your response as soon as possible. I am hoping for your positive response.

  179. bernadette graham
    November 27th, 2009 at 18:30 | #203

    Everytime I log in the screen and is and than my icons disapear, I keep getting the security tools warnings that i need to register and remove the threat

  180. Evgenia
    November 28th, 2009 at 01:13 | #204

    @Stuart M
    you probably did not use SAFE MODE when you reboot. With safe mode all works!

  181. Speed
    November 28th, 2009 at 02:00 | #205

    When i do Reboot in safe mode
    browse to C:\Documents and settings\all users\ application data. I cant find application data can anyone help me

  182. Tom
    November 29th, 2009 at 03:13 | #206

    Okay. I am infected with security tool on my other computer and have been for the past week. I have read articles and solutions in the mean time and turned the computer back on for the first time in the last 6 days two hours ago. It starts in what appears to be safe mode offering me all of the options one would hope for but when I try to run it in safe mode (or any other mode for that matter) it just reboots and I go through the same process over and over and over. Any ideas would be gratly appreciated.

  183. Yvonne
    November 29th, 2009 at 06:51 | #207

    @kodykid168
    Hello Kody,
    I tried what you suggested. I went quickly and clicked on ctrl alt delete and I found the numer sequqnce and I ‘ended the process’ because that’s the only thing that comes up as an option. It still did not ‘kill it’ as you mention it.

    I also tried to start my computer in safe mode. It would not even open another window after typing MSCCONFIG and clicking ok. I tried to start in safe mode with the F8 Key. It would not work either.
    What can I do?

    This thing is horrible. It is weird that the Security lets me access the internet, so I can write this here.

    My Wallpaper of course is no longer there. The background of my screen is pitch black and it ‘steals’ the desktop icons, so one cannot access the Recycle Bin.

    What is this? And where does it come from?

    I have Avira Antivir (which is usually pretty good) and it would not even let me perform a system scan with that.

    Can any of you help me out with a different solution maybe?

    Also further up on this discussion board there are many files listed under HKEY/Current User/software/microsoft/windows … etc….
    How do I find these?

    Also where would I look for doguzeri.dll and 4946550101.ex when opening the the explorer with the right mouse click on the start button?

    I feel so lost right now!

    Thanks for your all help.

    Yvonne.

  184. Yvonne
    November 29th, 2009 at 07:00 | #208

    @Mark
    Mark,

    I typed in c:\programdata\ after clicking on ‘run’, but it told me that it cannot find the file.

    I want to try to start my computer in safe mode again, but I don’t know how to make that work, because it doesn’t work via ‘run’ with MSCONFIG because it doesn’t open another window. I tried with the F8 Key and it wouldn’t work either.

    I am so pissed about all this!
    How can one protect oneself of such stupid viruses?
    How many firewalls does one have to put up?

    I do like to go on Facebook and I also like to play games. Can we not even do that anymore without catching a virus?

    Please for some help.
    Thanks a bunch.
    Yvonne.

  185. Yvonne
    November 29th, 2009 at 07:05 | #209

    @Wakay
    Hello Wakay,
    I went to Documents and Settings/all users/
    The weird thing is that it doesn’t follow with application data.
    Where would I find this maleware file now?

    Can you give me a hint?

    Thanks,
    Yvonne.

    • November 29th, 2009 at 14:06 | #210

      Yvonne : the app data folder is hidden. You wont see, but you can access it by adding it to directory field in explorer.

  186. Zayan
    November 29th, 2009 at 10:24 | #211

    this programme doesnt allow me to open any application.

  187. Yvonne
    November 29th, 2009 at 17:54 | #212

    dear admin.

    how do I do that?
    where do I find the directory field?

    To tell you the truth, a couple years ago we were hit by lightning and it blanked out my computer. Ever since then I have lost my Windows Office Program. I also don’t use IE anymore, but Mozilla Firefox. I can go into the Control Panel anymore to use the ‘search file function’ because anytime I do, there is this little doggy at the bottom of the page, smiling at me as if so he is saying: “Well too bad, but this page stays blank” :(

    Of course I tried to fix things on my own, and I have possibly deleted things that I should not have …. ;)
    After all the computer is working great, but last night I caught the ‘Security Tool’ and it is annoying because I can’t access any icon on my desk top anymore.

    I will try what you have suggested dear admin. :)
    Hope I will find the app data folder so I can add it, and hopefully it will let me do it.

    I can open IE, but for example it won’t play any videos nor did it move the ‘dropp down menue’ when Yahoo still had its old page and one would want to see the weather for example.

    Ok. where do I find this directory field again?

    Thanks,
    Yvonne.

  188. Yvonne
    November 29th, 2009 at 18:01 | #213

    Ok,
    here I am.
    I went as far as ‘all users’ and then it gives me the option to add a new folder.
    Yet, what sense would this make? The Security Tool exe would not be in there!

    The All Users – Folder contains, Desktop – Favorites – Shared Documents – Start Menue.

    I just searched through all of them, by opening these folders. There is nothing that sais “application data folder” …. :(

    Thanks for any help that you can give.

    I will look out for your response, dear Admin.

    Yvonne.

  189. TiffanyL
    November 29th, 2009 at 22:11 | #214

    This is what worked for me after trying just about everything here.
    ctrl+alt+delete upon start up to
    get task manager up before security tool.
    click on start and scroll up to security tool to find its location.
    right click on it.
    open file.
    find string of eight numbers, and delete.
    permanently delete out of recycle bin.
    restart.
    remove any short cuts on desktop for security tool.

    Permanently delete out of recycle bin.
    restore computer to a date before infected with security tool.
    Check to make sure that all anti-virus and malware running properly.

  190. Yvonne
    November 29th, 2009 at 23:28 | #215

    Hi Guys,
    I tried it again. I think I was able to catch the ‘safe mode’ on start-up. Anyhow it only worked once, since when I restarted the computer the desktop icons went back to normal size.

    I also clicked on ctrl alt delete to open the window for the task manager.
    I found the number, but all it allows me to do is to end the process. There is no button for ‘delete’.

    It doesn’t help because anytime I restart it is right back on there.

    I see other exe.

    these are the ones that I cannot make out.

    svchost.exe (many times; I have about 6 or 7 of the same on there)
    spoolsv. exe
    lsass.exe
    jqs.exe
    csrss.exe
    smss.exe

    Does anyone know what type of exe these are and what they relate to?

    Maybe one or more of them came with the suspicious Security Tool?

    I am so grateful for your all help.

    Thanks for your quick responses.
    Yvonne.

  191. Danny
    November 29th, 2009 at 23:50 | #216

    Hey, i got the Security tool flue, and i have Avast, but every time i set it to scan så i can remove it, it shuts down? Any help ?

  192. Yvonne
    November 30th, 2009 at 05:34 | #217

    @Tom
    Hi Tom,

    WOW, I am so glad that I have a second computer, which I just finished hooking up. Of course this one has minimum Memory, so I probably can’t upload my Adobe Photoshop Program on this one here, but it works for the while being until I find a way to fix my other one.

    Yes, I finally clicked on reboot on safemode, then I went to the suggested applications in ‘run’ and I got as far as clicking on ‘SAFE/BOOT” and ‘BOOT.INI”, guess what? I can’t get the computer to boot all the way to my desktop anymore! WHAT IS WRONG WITH MY COMPUTER? … I am so cried-out about this.
    Does anyone know what I can do in order to at least get back onto my desktop?

    I keep highlighting to going back to a point where it was safe, or to start in safe mode, but all it does is is counting down the 30 or 29 seconds to 0, just to start counting down again from 30 or 29 seconds! It also always goes back to ‘start computer normally’.

    Can anyone please help? Thank you.

    I hope I don’t have to take this computer to a store to get it cleaned-out! It costs money, which I can’t free up at this point and time.
    Or, does anyone know how to cean up a computer? I would do it myself, since I do have the Windows XP CD-Rom anyway.

    Hope to hear from anyone, soon.
    Thanks again for you help.

    Yvonne.

  193. November 30th, 2009 at 05:49 | #218

    @ Philly Keith,

    I followed your instructions to the letter and problem solved! To think that I almost shelled out 29.95 for Spy Doctor (that’s what’s in store for those who istall it); you saved me money, time, and frustration. Thank you so much, you really are a lifesaver.

    Yours trully,
    Angelo

  194. Al
    November 30th, 2009 at 07:05 | #219

    Thank you so much everyone!!! The Security Tool (on our Vista) was located in
    C:\program data\35840525

    Working on safe mode, I deleted the folder 35840525 & the 2 shortcut icons, then emptied my Recycle Bin… Reboot it normally afterwards… Security Tool’s gone!!!

    Thanks again!!!

  195. Jen
    November 30th, 2009 at 17:27 | #220

    I know NOTHING about computer virus scan sites. and I accidently installed this Security Tool.. Is there any way at all to just REMOVE the Security Tool fully without actually installing anything else?? I dont own the computer and I just want it off…. Please let me know if there is anything that is simple steps. Thanks!

  196. martin
    December 1st, 2009 at 03:04 | #221

    okay, this somehow ended up on my new pc and it’s not even installed in my computer and it keeps scanning and telling me i have viruses and files that are infected that i know it’s not true. it keeps me from doing my work on microsoft and other programs. i’ve tried installing the Malwarebytes Anti Malware but everytime i try to bring it up on my cd it says that it’s infected and won’t let me do anything. what do i do? please i just got this computer.

  197. KyLO
    December 1st, 2009 at 06:02 | #222

    To All Having Problems Searching For Application Data!!

    I have windows xp media center edition, and ealier the Admin said to Yvonne that the app data folder might be hidden!!!

    First off, let me start by saying that every computer may not have the file name (ex 91908431)…I actually came across three files 09204121, 41220112, & 51200987.

    STEPS

    1. start computer in safe mode

    2. go to start, my computer

    3. go to C:\Documents and settings\all users

    **note** you may encounter four folders Desktop, Favorite, Shared Documents, and Start Menu.

    4. Here you right click anywhere in the box, then go to properties

    5. Now you check hidden (near the bottom), then hit OK… a smaller box will appear, make sure you hide the sub folder as well *IMPORTANT*

    6. Now everything has disappeared!! Dont worry, repeat step 4 & 5… but this time you uncheck hidden then hit OK

    7. Now you have six folders!! Application Data, Desktop, Favorite, Shared Documents, Start Menu and Templates…. double-click the app data folders and find them eight irritating azz numbers and then follow the example giving by my man Philly Keith!!

    DELETE THESE FILES… EMPTY RECYCLE BIN… REBOOT NORMALLY… DELETE SHORT CUTS!!!!

    Hope this helps, if not…. i suggest installing windows again, but of course back up your most important shit :)

    P.S. I just turned 20 today!! 11/30

  198. Norm
    December 1st, 2009 at 18:22 | #223

    Here’s to all of us who have been victimized by this crap. If you would like to talk with a representative of the company that markets/infiltrates the Security Tool all you need to do is dial 1-800-507-4599. After quite a lot of work I managed to get it off my computer and after a few phone calls I managed to get some of the anger and frustration out also. Enjoy the day!

  199. Ken
    December 2nd, 2009 at 00:48 | #224

    Has anyone tried giving Mcafee their $90 and they remove it for you????

  200. Gail
    December 2nd, 2009 at 07:43 | #225

    Security tool has totally messed up my computer. I cant even finish downloading any software that supposedly gets rid of it. Trend Micro does nothing to it. I have a black screen and can’t open any applications. Help!

  201. deb
    December 2nd, 2009 at 18:13 | #226

    @Philly Keith
    how do you reboot in sae mode

    • December 3rd, 2009 at 12:59 | #227

      press F8 couple times when booting your PC. Then choose from menu.

  202. Paul
    December 2nd, 2009 at 19:49 | #228

    After I got rid of the 8 number files, the icons on my desktop were dark, sort of when you cut a document or pic so you can paste it elsewhere? What happened and how can I fix it?

  203. ayesha
    December 3rd, 2009 at 10:48 | #229

    a very very easy solution,,,,just kill the numbered process from task manager before sucurity toll starts and then go to c->documents and settings->all users->applications and delete numbered folder,,,also delete from recycle bin,,,

  204. Hannah
    December 4th, 2009 at 01:19 | #230

    i just got a brand new computer and now i have stupid security tool on it, and my parents are going to be really mad. I need help nothing is working i tried everything. the pop ups are making me so mad… and my computer goes to a blue screen after 30 mins of using it. and then shuts down i dont know what to do… PLEASE HELP ME

  205. jessie
    December 4th, 2009 at 05:48 | #231

    My computer keeps crashing over and over again, i have security tool and it turned my desktop blue, i keep trying to go into ‘change/remove programs’ but it keeps telling me somethings trying to get through to my credit dard information. it wont let me download anything whatsoever. i really need help getting this off.

  206. tex
    December 5th, 2009 at 15:08 | #232

    @AMY
    I found Angles & Amy’s solution(copied below) to be the best and most simple, couldn’t find the file locations on my PC stated by others. Cheers. ANGEL, THANK YOU VERY MUCH. IN SAFE MODE WE HAD TO RIGHT CLICK ON THE DESKTOP ICON FOR SECURITY, HIT PROPERTIES, COMES UP WITH TARGET LOCATION, CLICK ON FIND TARGET, CLICK ON THE FILE WITH THE 8 DIGIT NUMERICAL NAME. THE 8 DIGIT NUMERICAL NAME IS NOT NECESSARILY THE SAME FROM ONE COMPUTER TO ANOTHER. EMPTY RECYCLE BIN AS STATED & RESTART.

  207. Yvonne
    December 6th, 2009 at 00:48 | #233

    When you write ‘kill the numbered process from task manager” what do you mean by ‘kill’? I clicked on END and it would still come back up. How EXACTLY does the process work to ‘kill’ the numbered process?
    Thank you.

    I had tried that and then some other stuff, so now my computer won’t even boot up anymore. I went into bios and even enabled the SUPER BOOT and not I can’t even get back into BIOS anymore!!!

    Can anyone help me to at least get the computer to boot again, so I can go and try the process again to ‘kill’ the Security Tool?, and or to at least save some of my important photographs to CD.

    Thanks so much.
    Yvonne.

  208. Amber
    December 7th, 2009 at 00:07 | #234

    @kody112
    I GUARANTEE you this will only work temporarily. I should know, I’ve only done it about 50 times already.

  209. Laura
    December 7th, 2009 at 08:33 | #235

    Hi, my lap top was infected with ths securiy tool virus a few days ago, it is absolutely unbelievable and unlike anyting i have encountered, i have Norton pemier 3.0 i have tried deleting ‘securiy tool’ files, running comprehensive virus scans etc. it has somehow gotten itself into my ‘program data’ and will not let me delete it manually saying i need permission to perform the action… i’ve tried rebooting everything i can think of, it shuts my computer down ranomly and has disabled my entire desktop and removed my backgound it also hides my tool bar… after reading the posts on here i have made the decision to get professinal help even if that means paying for it as i would rather pay $100 to get it properly fixed as opposed to damaging my 2000 dollar lap top only 3 mnths old tryin to remove it myself and i would stronly suggest this to ANYONE infected by this virus.

  210. Laura
    December 7th, 2009 at 08:36 | #236

    @ayesha
    on my computer it does’t even appear in task manager

  211. EDWARD PINCOMBE
    December 7th, 2009 at 17:08 | #237

    i need rid of security tool as it is fake and damaging my programmes?

  212. Carla
    December 8th, 2009 at 13:25 | #238

    Thanks to Philly Keith…after how many days of aggravating pop-ups…finally removed it!!!

  213. Nyncapoop
    December 8th, 2009 at 20:46 | #239

    Yes there a many FREE spyware removal programs but are there really any that are free, and you do not have to purchase a programs after you have completed a scan? Are there any really free ones available???

    • December 8th, 2009 at 21:22 | #240

      Well… There are couple free for home users, namely spybot S&D and superantispyware. Some are semi-free, aka remover is free and real time protection is paid or there are limits on how many parasites you can remove with free version.
      The problem is that maintaining a good anti-spyware product requires money for staff, equipment and malware tests. There is always a catch how anti-malware manufacturers try to get money :)

  214. Scott
    December 8th, 2009 at 21:25 | #241

    I have a windows Vista and I tried Philly Keiths method but I think it is differnet in Vista. Anyone have any idea how to get rid of it with Vista. I cant download any malware programs etc. It wont let me.

  215. Scott
    December 8th, 2009 at 21:57 | #242

    Thank you. I found it and deleted and it worked.

  216. Samir
    December 8th, 2009 at 22:43 | #243

    I got a bitdefender total security and It didnt decete the fuking malware called security tool. But my Intenet works fine. All you lot and I can do is press ctrl+shift+esc and click process the end process the 8 digit number (sometimes it closes but keep doing it until it opens!!)

  217. Anil
    December 9th, 2009 at 03:28 | #244

    Started it in safe mode logged in as Administrator.

    Did a system restore to a previous date.

    It didnt have any security tool any more

  218. Roxanne
    December 9th, 2009 at 09:06 | #245

    @Scott What did you find? I’m still fighting to download a malware on Vista. Any suggestions?

  219. Yvonne
    December 9th, 2009 at 16:15 | #246

    Hi Roxanne,

    you can download Avira Antivir for free.
    I have it on mine, and it works great!

    By the way, after agonizing with my computer, not being able to start it at all anymore, I was soooooooooooooo lucky about 3 days ago!

    A friend of mine, whom I haven’t seen in a long time, and never even thought about, helped me to start up my computer again and then we had to take it down.
    Security Tool messed up too much already. At least I was able to save my pictures and some documents since we totally had to upload Windows XP anew.

    This killed it, too but it also killed my computer, you know.
    Since I had this second one here with very little memory, he simply placed the drive from the old computer into this one. Now I am ok, and hope this Security Tool stays away FOREVER! …. lol…

  220. Mike
    December 9th, 2009 at 22:13 | #247

    Does anyone know the address of this “Security Tool” place? I think some folks would like to pay them a very personal visit.!!

  221. KingTimmy
    December 9th, 2009 at 23:19 | #248

    Roxanne, in Vista, restart your system.
    after logging on, hit alt ctrl delete and open task manager.
    Click on processes
    Be sure check “show processes from all users”
    Find the process that System Tool is running under. Mine was an 8 digit numerical .exe file
    Highlight it, then click “End Process”
    Next go to C:|program data
    Locate the folder, right click and delete it.
    Be sure to empty it from the recycle bin.\
    Reboot…………hope this helps. It worked for me!

  222. don
    December 10th, 2009 at 02:39 | #249

    I got rid of security tool very easily. I right mouse clicked the security tool icon on the desktop. Went to properties and found the long number with exe after it. I copied that. Went to start on bottom left of screen and opened that on the bottom there is a search screen I pasted what i copied took me to where the number was, I deleted it cleaned my recycle basket and restarted my computer. It hasn’t been back since knock on wood

  223. Zach
    December 10th, 2009 at 04:47 | #250

    for all you ppl saying delete that numbered file alone, and rebooting.. good luck to you.. that doesnt fully remove this..

  224. Justin
    December 10th, 2009 at 04:57 | #251

    I got this virus and it brought along cyber security with it so I had both.

  225. young
    December 11th, 2009 at 06:34 | #252

    @Joe
    If you go into safe move look in your application data folder under all users and you will see an exe that has the same icon as the security tool. Delete it and then it will let you install any antivirus or the preferred malwarebytes antimalware which worked for me.

  226. Jonathan
    December 11th, 2009 at 15:28 | #253

    ooooh!….this “SECURITY TOOL” is a big messy thing. i cannot open my programs due to irritating and annoying pop-ups… whoever the creator of that useless system file should be punished. i do hope that all the “finest” IT experts will work on it to trace that genius but useless creator of Security Tool…the PAC-MAN is not happy for that thing… haaaaayzzz…

  227. Ashley
    December 11th, 2009 at 18:04 | #254

    I can’t run the doctor spyware. I need help. My desk top is now black and can’t se anything on it.

  228. Haneen
    December 12th, 2009 at 04:40 | #255

    I cant open anything i got to this website through their customer srvice and cant open anything with it help me i dont know how to reboot it help me!!!!!!!!

  229. ler
    December 12th, 2009 at 14:54 | #256

    @Philly Keith
    i cant delete the 8 digit number

  230. Zach
    December 12th, 2009 at 17:54 | #257

    Thanks for the numbered file tip, I deleted both of those, but, then again, they were both empty. I think it may have killed itself overnight because there was the Security Tool shortcut last night, and early today (on safe-mode) the same icon was empty, and its properties described it as being re-directed. Also, a curious factoid, on Task Manager, I never saw an eight-digit or ten-digit number followed by .exe, yet my computer was still infected with the rogue anti-virus. This sure has been an odd experience.

  231. Frank
    December 12th, 2009 at 21:08 | #258

    Here’s how I killed it:

    1- I have XP, so I keep hitting F8 to start in the safe mode.
    2- In the SAFE mode, do “Run”, type in MSConfig. Here upcheck the process in “Startup” that has a six digit numberic number, in my case, “807999″, click “Apply”.
    3- Re-boot, and startup WILL NO LONGER activate the virus, taking control of your PC, even though the malware is still in the system. Now, you can take control of things to download tools needed to remove the executables, registry entries etc. of the virus.
    4- Download Malwarebytes, free version, to remove what remains in the system.
    5- I separately deleted the “Security Tool” icon on the desktop.
    6- Change the wallpaper back to normal.
    6- Resume work ….

  232. Frank
    December 12th, 2009 at 21:11 | #259

    Here’s how I killed it:

    1- I have XP, so I keep hitting F8 to start in the safe mode.
    2- In the SAFE mode, do “Run”, type in MSConfig. Here uncheck the process in “Startup” that has a six digit numberic number, in my case, “807999″, click “Apply”.
    3- Re-boot, and startup WILL NO LONGER activate the virus, taking control of your PC, even though the malware is still in the system. Now, you can take control of things to download tools needed to remove the executables, registry entries etc. of the virus.
    4- Download Malwarebytes, free version, to remove what remains in the system.
    5- I separately deleted the “Security Tool” icon on the desktop.
    6- Change the wallpaper back to normal.
    6- Resume work ….

  233. Stacy
    December 13th, 2009 at 09:11 | #260

    Used My system Restore before my computer had fully booted. Set it back 14 days, Ran that. Added new Anti Virus working fine.

  234. Randy
    December 13th, 2009 at 19:29 | #261

    Instead of downloading the software to remove it just simply follow the steps to remove it in the registry… you should also boot in safe mode and goto Run/msconfig and remove ALL STARTUP ITEMS, this is called selective startup and you disable EVERYTHING, and then windows will only launch what is needed to run, this way Security Tool is not trying to launch and interfering with the removal process, if you are familiar with system registry keys then goto Run / regedit.exe and follow the steps at the beginning of this page and remove the reg keys from the system.

    Also i recommend CCleaner by Piriform to repair your registry and ALWAYS DISABLE SYSTEM RECOVERY otherwise when you reboot the virus’s etc will return.

    -Randy
    Bachelors of Science
    Programming / Network Forensics

  235. KyLO
    December 14th, 2009 at 03:03 | #262

    @ler

    Sup dude… STool can be a pain in the ass lol….. Try downloading “rkill”… what it does, it temporally terminates all mal-ware program (security tool)… here i will place the link

    http://download.bleepingcomputer.com/grinler/rkill.com

    Once it is downloaded, double-click on the rkill.com in order to automatically attempt to stop any processes associated with Security Tool and other Rogue programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step. If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by Security Tool when it terminates programs that may potentially remove it. If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate Security Tool . So, please try running Rkill until malware is no longer running. You will then be able to proceed with the rest of the guide.

    Do not reboot your computer after running rkill as the malware programs will start again!!!

    If you are still having problems… i will make another video sutible for your cause ;)

  236. brenda
    December 14th, 2009 at 12:05 | #263

    This ‘security tool’ has been drving me insane!
    So far, I’ve been able to do the above suggested by ‘KyLO’ (#222) but can’t find my recycle bin to empty it! My desktop isnt showing and my background is a funny green colour.
    DOES ANYONE KNOW ANOTHER WAY TO ACCESS RECYCLE BIN?!?!
    I’ve been searching for the last 45min but still can’t find it! GRRRRR!

  237. Biggity Bob In NorCal
    December 14th, 2009 at 13:29 | #264

    @Philly Keith
    Dude your way worked perfectly….no buying one spamware tool to erase another, no exhaustive processes, just to-the-point directions…..and results. You, sir, deserve a holiday named after you and a park made in your honor.

  238. Rhys
    December 15th, 2009 at 00:01 | #265

    That yellow shield is finally gone.
    What a great Christmas gift.

    Thank you guys,
    Rhys

  239. Georgie H
    December 15th, 2009 at 00:13 | #266

    kody112 :Reboot in safe mode I GUARANTEE YOU THIS WORKSbrowse to C:\Documents and settings\all users\ application data
    There will be a folder in there that has eight numbers as a name (ex 91908431)
    Delete this bad boy, empty recycle bin
    Reboot normally, delete all left over shortcuts, empty recycle bin again I GUARANTEE YOU THIS WORKS

    Thank you for this -I was goofing up at the browse stage…I kept clicking Browse after typing in directory – Instead of OK–Press OK…guys/gals

  240. Rhys
    December 15th, 2009 at 02:22 | #267

    Yellow shield back.

    Rhys

    • December 15th, 2009 at 12:08 | #268

      Rhys : Have you scanned with any anti-spyware after it was gone? There might be a security vulnerability open by the security tool or some hidden trojan downloader. You HAVE to make sure everything is clean after you remove Security tool

  241. virushater!
    December 15th, 2009 at 04:16 | #269

    i downloaded the spydoc but the security tool wont let me download it!!! every time i try to open it to install it, it says somthing about sending me credit card deals or something help me FAST!!

    • December 15th, 2009 at 12:10 | #270

      virushater : rename it to spydoc.pif on save . It should pass.

  242. Bethany
    December 15th, 2009 at 08:35 | #271

    @Philly Keith
    Ok, great – I got to the application data and found the file and was trying to delete it to the Recycle bin and an error message popped up saying that it couldn’t delete, access denied. What do I do now????

    • December 15th, 2009 at 12:11 | #272

      Bethany : disable the processes first. Start task manager and stop the numerical processes.

  243. KyLO
    December 15th, 2009 at 16:41 | #273

    @brenda… you can access your recycle bin by going to my computer and that “arrow down button”

  244. securitytoolmurderer
    December 16th, 2009 at 00:52 | #274

    HELP!!!!!!!! OMG THIS THING HAS BEEN ATTACKING MY COMPUTER FOR A WEEK NOW. HOW CAN I GET IT OFF. I EVEN TRIED PHILLY KEITH’S WAAY BUT I CANT FIND APPLICATION DATA UNDER ALL USERS AND I DID A DOMAIN SEARCH FOR IT ON THE WHOLE COMPUTER BUT STILL COULD NOT FIND IT..!!! HELPP PLEASEE I HAVE A HUGE PROJECT AND CAN NOT ACCESS MICROSOFT WORD.!!! WHAT DO I DO..????

  245. Aaron
    December 16th, 2009 at 11:16 | #275

    @Philly Keith
    how do i delete other remaining pop ups?

  246. Paul
    December 16th, 2009 at 22:39 | #276

    ok i got this damn virus to and its killing my computer! So you say that there is manual instructions what are they? how do i do it manually? I cant even open my desk top anymore. Please help me i dont want to download anything i just want it off manually! thanks.

  247. DKN
    December 16th, 2009 at 23:23 | #277

    @Philly Keith

    Wouw thank you SOOOO MUUUCCCHHHHHH !!
    I was about to get crazyyyyy, u saved mee

    THANKS

  248. erik
    December 17th, 2009 at 12:28 | #278

    hi!! my computer was suddenly infected by security tool. i try too get ridd of it but i didnt make it. what can i do??? its really boring too have it on my computer! please help me!

  249. Hezrin
    December 17th, 2009 at 15:54 | #279

    Help, I Just found out that this ‘Security Tool’ is a VIRUS. I am trying to remove it using Spydoc. Does it works???

  250. Chris
    December 18th, 2009 at 00:59 | #280

    Hey theres a sercurity tool which won’t let me access anthing on my computer. SOMEONE PLEASE HELP ME RID OF IT

  251. rose
    December 18th, 2009 at 06:54 | #281

    Hi, would system restore after you do the task manager thing works to get rid of this? thanks

  252. Jimmy Lim
    December 18th, 2009 at 19:48 | #282

    @securitytoolmurderer

    if you load normally, hit ctrl+alt+del before security tool loads, go to the processes tab and end the process that has a 8 numbered name, this will NOT solve the problem, this will allow you to use the computer to fix the problem.

    open up my computer and in the address bar at the top type the following and hit enter

    C:\Documents and Settings\All Users\Application Data

    That will take you to the folder whether it is hidden or otherwise. There should be a file (sometimes more than one) that are also named with 8-digit numbers, Delete these then empty your recycle bin.

    Following this remove any desktop shortcut and startup item for security tools and empty recycle bin again.

    Restart your computer again and it should run ok. I would suggest running a registry cleaning software after to remove anything from there and also a scan with a program like Malwarebytes to hunt out the trojan that put security tools there.

    ::NOTE:: these file locations are for windows XP, if you are running Vista or Windows7 they may be in a different location, if this is the case, right click on the security tools icon on the desktop and click properties. Once this window opens hit the ‘find target’ button and it will take you to the folder housing security tools. Once there delete the numbered folders as in above instructions.

    If anyone is having trouble with the F8 safe mode boot, after killing the numerical prcess via the task manager open your start menu and go to run. Type in msconfig and hit enter

    this will bring up the windows configuration utility, go into the BOOT.INI tab and check the box marked /SAFEBOOT and the box saying minimal (if you want network access check the network box instead of minimal) then restart your computer. Leave it to start and it will automatically boot in safe mode

    ::NOTE:: When using msconfig it will continue to boot this way until you return to msconfig and tell it to reboot normally. when finished in safe mode, before restarting, run msconfig again, on the first screen check the option ‘normal startup’ and hit apply. Next time you restart it will load as normal. (again i have only tested this on XP so someone else will have to confirm for vista/windows7

    Hope this helps you guys as I read through and see a lot of repeated comments about the same things. Just trying to do my part as a previous victim of this wretched program.

    Good Luck
    Jim

  253. December 19th, 2009 at 05:11 | #283

    i cant remove this so if u would please help me remove this :( !!!!!!!!!!

    Thanks Logan Chandler

  254. Edie
    December 19th, 2009 at 17:43 | #284

    how do you boot up in safe mode

  255. Leah
    December 20th, 2009 at 19:22 | #285

    I just did a system restore and it’s no longer on my desktop or in my tool bar or start up menu. Did this get rid of it? Anyone know?

    • December 21st, 2009 at 09:57 | #286

      Laeh: Do a scan with anti-spyware programs. Many provide free scanners, and it is highly recommended to make it sure.

  256. Suana
    December 21st, 2009 at 08:37 | #287

    ok this security tool is driving me crazy!! I am scanning my spyware doctor but this thing makes my computer restart in the middle of my scan so.. is there any other way to remove this?? thxx

  257. Suana
    December 21st, 2009 at 10:13 | #288

    ok i opened my mozilla firefox internet and it says

    “how embaressing
    firefox is having trouble recovering your windows and tabs
    you can try removing one or more tabs that you think cause the problem or start a new session.”

    Windows1
    Security tool-how to remove

    remove or start new session?????
    what do i do, pleaseee help

  258. c kato
    December 21st, 2009 at 13:10 | #289

    I had a problem with this just yesterday i tried a ton of stuff to get rid of it but the popups never went away. i was in the middle of renewing my mcafee virus protection then it started to disable my internet and deleted all my desktop icons and i couldnt open files. It was on my toolbar and hiding in my files too.
    I went to a few sites that showed you how to get rid of it but that didnt work either. I actually had to call mcafee and just pay $90 for them to get rid of it for me. they were cheaper than dells virus removal and others. Im pissed i had to pay so much but at least they have a 100% guarantee that it will be removed. i wouldnt trust doing it myself since the virus can come back after being deleted.
    the safe mode only works for awhile but it will still be on your computer. supposidly the longer its hiding on there the more damage it’ll do. unless you know exactly which files to look in i would just have a pro do it. after getting rid of it i was finally able to renew my mcafee disk and it hasnt been back since. it took them about 20min to fix it. 90 bucks for 20min is crazy but it worked.

  259. Karen
    December 21st, 2009 at 14:09 | #290

    Hi Guys
    Just wanted to say thanks for all the information on this page i was infected by this virus last night and after hours of trying found this site. Great and easy instructions.
    Thanks again.

  260. gwendolen
    December 21st, 2009 at 17:55 | #291

    1. Bootet the pc with Bart PE (windows-environment link:http://www.nu2.nu/pebuilder/).
    2. Removes those 8-10 digits exe-files (under UserData/All User/Application Data – remember to make those folder visible!)
    3. Boot af pc. “Security Tool” doesnt start anymore. (Blessings!)
    4. Doing Malwarebytes AntiMalware and looking for some patterns in registry (regedit)
    5. Have fun.

  261. redd
    December 21st, 2009 at 22:10 | #292

    Thanks to Keith and Kylo whose info helped me kill this SOB! All works now!

  262. N/A Unknown
    December 22nd, 2009 at 02:05 | #293

    ctrl alt delete as soon as windows logs on b4 virus boots up,open task manager,end process of the 8 digit number,go to documents and settings,application data delete security tools,get rid of it in start menu,and task bar if its still there,run a virus scan just in case,and yur gud!

  263. roseline
    December 22nd, 2009 at 05:00 | #294

    Omg i have this virus too omg i want it gone ASAP hellp something freee would do nice!!!! so annying i didnt know there was people out there having the same issues so lame man!

  264. jim b
    December 22nd, 2009 at 19:07 | #295

    Right:

    This caused me no end of aggro so thanks to all the helpful people who posted advice here.

    I got the number of the offending spyware program when I went to close down my PC – I got a message saying that one program won’t close etc – did I want to end now. The number of the spyware program was shown then – it was an eight digit number beginning with 4.

    I then restarted, hit ctrl-alt-delete immediately on start up, and went into processes, found the process with that number, and turned it off.

    I found that I was then able to run malwarebytes and remove all the related spyware components from my system. That was 15 minutes ago and everything seems okay now (touch wood).

    Thanks to those who suggested the ctrl-alt-delete on start up, if I hadn’t done that I wouldn’t have been able to open malwarebytes and get any further.

    This has now taken up around 2 hours of my day now…..#%&^*!

  265. Patty
    December 22nd, 2009 at 22:48 | #296

    Thank you Frank, you are an angel.
    Your directions allowed me to eliminate that devil “Security Tool” which turned out to be the KoobFace worm in disguise. I am certain my children picked up this infection from facebook. Now that my computer has been successfully de-wormed(shudder) I feel I should send everyone to the showers to wash away all traces of slime.
    Merry Christmas and Happy New Year

  266. Katharine
    December 23rd, 2009 at 04:29 | #297

    Within an hour of aquiring it, the Security Tool virus quickly rendered my PC unusable, even though I subscribe to a low-end version of Norton Antivirus. Using another computer, I examined the options and decided I felt insecure trying to eliminate Security Tool by myself. I decided to go with Spyware Doctor. They charged me $30 but it may have been the best $30 I’ve ever spent. The trick was starting Task Manager at boot-up to silence the virus temporarily and regain use of the computer to download and run the eradication program. They tell you how to do that. I am quite satisfied with the results. The only thing I seem to have had to restore is the custom background picture for my desktop. They tell you it only takes minutes, and that’s true for the actual eradication once you have and have registered the software, but the download and registration process took me an hour. I’ve had Spyware Doctor less than a day and it has already caught other incoming infections so I feel pretty confident recommending this for folk like me who aren’t particularly technologically savvy.

  267. Flexman
    December 23rd, 2009 at 17:39 | #298

    I was flustered for 2 days with this @&$#ing thing
    then I found this site and did the reboot in safe mode
    went to C:\Documents and settings\all users\ application data and looked for 8 digit file (ex. 91908431) and deleted it and then emptied recycle bin
    then I rebooted normally and then deleted all shortcuts on desktop and elsewhere to Security Tool and then emptied recycle bin
    that was it gone!!!
    I then ran my registry fixer (iolo system mechanic professional)did registry scan and clean it found all remnants of this Security Tool and removed it
    I installed malwarebytes anti-malware and ran that
    finished and clean

    try this method it really works…..take it from someone that was ready to kick my computer and to hunt down the inventors of this vicious virus and kill them!!

  268. December 24th, 2009 at 00:28 | #299

    @Mike Mike
    hello, when you tried to delete the 8 digit folder did it say access denied, because mine is and i can’t deete it. HELP!!! please. thank you.

  269. Disco Stud
    December 24th, 2009 at 05:59 | #300

    Will System Restore Do The Trick?

  270. Bruno
    December 24th, 2009 at 06:52 | #301

    @Philly Keith
    Keith – thanks for the tip. It worked!

  271. Disco Stud
    December 24th, 2009 at 10:04 | #302

    GREAT!!!!! MY COMPUTER HAS NO HOPE!!!!!!!!!!!!

  272. Kevin Dixon
    December 24th, 2009 at 17:10 | #303

    I really hope whoever created this is jailed or seriously prosecuted.

    I can’t believe people have such no life to sit at home for hours on end creating something like this. It doesn’t make you popular.
    Going to try and remove now.

  273. margaret
    December 26th, 2009 at 17:57 | #304

    Security Tool eneded up on my computer. I read through this entire forum, deleted the things that people here suggested (I had several instances of the 8 digit numbers in the App Data Folder and in Registry) and then cleaned with Malwarebytes to get what was left of the beast.

    Everything seems to be fine with one exception. If I try to type in something in a search window of google or yahoo, I get no results back from the search. Bottom left corner of pane says “Done”. But, if I type a web address in the top of Internet Explorer it will go to any website. I went to Microsoft site and can search using the “Bing” search window and get results.

    Now my question, did this thing mess up Internet Explorer? How can I fix this. I was going to reload IE8 but wanted to get you guys feedback first.

    Thanks You all so much for letting us know how to destry the Security Tool

  274. Eddy
    December 26th, 2009 at 18:59 | #305

    Folks,

    For all those Vista users, what worked for me was booting up in safe mode and then restoring the computer to a couple days prior

  275. Katie
    December 26th, 2009 at 19:47 | #306

    @Flexman
    What if it keeps saying “access denied” ?
    Please help me!

  276. Ireland
    December 26th, 2009 at 23:30 | #307

    @Philly Keith

    Philly Keith YOU ARE the MAN!!! It worked! However, idk if anyone else has this problem but my icons and page are huge. I have gone into resize and such but o no avail! Still big icons and the page seems zoomed… Again, I went into everything to re-size fonts and fix page size but nothing. All systems are working great except for this. I also did a simple sytem restore. Should I just back up everything and run a full recovery?

    Help, please! YOU ROCK! btw =)

  277. Whitney
    December 27th, 2009 at 03:42 | #308

    What the crap is going on?? AHHHHH! I have a spyware terrminator already in my system how do i get rid of this stupid security tool thing, this sucks! Every two seconds the stupid security tool wants to me remove all the “bad” programs!

  278. Victor
    December 27th, 2009 at 08:42 | #309

    This had bothered me for 2 days it kept popping up with things saying like this is trying to send credit card info and i was scared but so then i rebooted my computer and went into safe mode then i right clicked the icon in my desktopand went to properties then i put locate file i think and it asked if i wanted to delete it i put yes i did this for about three times and then i went to the start menu and looked for the progrm and deleted it for two timesthen i shut my computer down and turned back on and its fine now i have windows vista
    hope this helps

  279. Darrin
    December 27th, 2009 at 09:11 | #310

    @Jimmy Lim
    Jimmy Lin, you are my hero. Followed your instructions and they worked beautifully. The world needs more people like you and a whole lot less of the moron(s) that designed the bug. Thanks mate.

  280. Big John
    December 27th, 2009 at 16:32 | #311

    I am trouble shooting my wifes laptop which is running Vista. I wasnt able to follow the paths given in some of the previous texts but: I did a system restore and have rebooted 3 times. So far so good. Good luck people.

  281. Roman
    December 27th, 2009 at 23:04 | #312

    @Philly Keith
    thanks alot bro! got rid of the security tool.

  282. Spike
    December 28th, 2009 at 01:12 | #313

    Guys, I used Philly Keiths’s method from October 9th, been good for over a month now.

  283. Red
    December 28th, 2009 at 13:03 | #314

    I`ve downloaded the spyware-doctor and Malewarebytes anti-maleware , but when i trying to install it security tool says it`s infected and i can`t install it
    I can`t reboot in safe mode and task maneger dosen`t work .
    Help me please

  284. Philobavoire
    December 28th, 2009 at 21:48 | #315

    I have already found the 8digit file and deleted and this has worked thus far succesfully (1hr). Google search now just goes to a blank screen when searching. Does anyone no how to sort this out?

  285. Philobavoire
    December 28th, 2009 at 21:50 | #316

    Red :I`ve downloaded the spyware-doctor and Malewarebytes anti-maleware , but when i trying to install it security tool says it`s infected and i can`t install itI can`t reboot in safe mode and task maneger dosen`t work .Help me please

    I have already found the 8digit file and deleted and this has worked thus far succesfully (1hr). Google search now just goes to a blank screen when searching. Does anyone no how to sort this out?

  286. Fritz
    December 28th, 2009 at 21:54 | #317

    I have this crap on my laptop. I boot in safe mode but when I access the dir for the Application Data, all I get Volume serial number. There are no files. What now?

  287. kevin s
    December 28th, 2009 at 22:06 | #318

    this is the way to shut this thing down. thank you.@Jimmy Lim

  288. Philobavoire
    December 28th, 2009 at 22:47 | #319

    I have tried other search engines and the same thing seems to happen. (just a blank screen). Why would this be?

  289. Fritz
    December 28th, 2009 at 23:15 | #320

    ok, I just did restore back to a date before the virus hit. What else do I need to do? I don’t want to touch it until I know it’s gone! Thanks!

  290. Fauzi
    December 29th, 2009 at 00:09 | #321

    @Red: You have to use manual instruction instead, I’ve blocked with this software and I can’t even install my Super Anti-Spyware. To use manual instruction, you have to run windows in safe mode, then right-click on Security Tool properties, then click find target/open file location, then delete the software. After that, you have to open registry editor, then delete the registry folder that has a same name with what you’ve deleted before. Hope this could help.

  291. December 29th, 2009 at 04:18 | #322

    @kody112
    not very sure how to restart my computer in safe mode and what i am lookin for

  292. December 29th, 2009 at 04:20 | #323

    this security tool want let my computer do anything. and i am not very computer litterit

  293. my name
    December 29th, 2009 at 05:25 | #324

    @Philly Keith
    your advice didnt work for me,and i tried it twice.
    is there anything else i can try,this thing is getting on my nerves!!!!!

  294. Eun
    December 29th, 2009 at 07:23 | #325

    @Philly Keith
    I did that, but when I scan with spyware doctor, I still see security tool. Get rid of this, I need to spend money for spyware doctor. Do I have to this???

  295. Eun
    December 29th, 2009 at 07:27 | #326

    @admin
    I scaned it and shows 3 threats and 5 infactions. I trid to fix those and spyware doctor said I need to pay for it. What do I do?

  296. junjoni
    December 29th, 2009 at 14:06 | #327

    Hi ^_^ just got infected last night and went through hell all day today. ^_^
    read the tips up a above and did some things to stop it from appearing while I searched for help. I tried windows defender and stopped it from appearing at startup and further on. it hasn’t bothered me now. I’ll try and go on safe mode and do what you guys tried to do to permanently take it out of it’s misery…

  297. Therese
    December 29th, 2009 at 15:14 | #328

    Everthing is working and I cant find any more files of Security tool but it is still blocking all download and update sites on the internet. How do I fix this?

  298. steve
    December 29th, 2009 at 19:15 | #330

    I have a dell and when i go to safe mode i get the blue screen of death

    • December 30th, 2009 at 09:48 | #331

      Steve: Check which error you get on BSOD. You can remove security tool without “safe mode”, for that you have to press couple times ctrl+shift+esc during login phase of windows so task manager launches. Stop numerical processes and then delete them.

  299. jo3y
    December 30th, 2009 at 07:38 | #332

    well, like you i have Security tool crap. it won’t let me open IE, nor do i have a system restore (not sure if S/Tool disables that? or renders it unusable?) nor am i able to Ctrl-Alt-Delete to get task manager. i have vista/32bit home edition. can someone give me a rundown how to rid this POS Security Tool and what i should do to prevent against it or future invasions? i use Spybot and update it weekly. also adaware and use it weekly and i use the Free AVG that runs daily at nooon. once, i used this other program (ashampoo i think) and it cleared my registry..is that my system restore? i hope not…thanks for your help. jo3y in baytown.

  300. ghraze
    December 30th, 2009 at 15:09 | #333

    OMG… my computer got the security tool.. im trying to download the spyware doctor but the security tool is blocking it. what should i do? help me please,,

    • December 31st, 2009 at 16:37 | #334

      Ghraze : there is an alternate link to spyware doctor. Try it.

  301. Candace
    December 30th, 2009 at 17:10 | #335

    I have this on a computer at work so it’s pretty important that I fix it… I can’t use task manager and I can’t use safe mode. I can hardly even get to the start bar because this virus makes my computer SO slow… how am I supposed to fix this?

    • December 31st, 2009 at 16:36 | #336

      Candance : Try launching task manager right after boot (keep hitting ctrl+shift+esc).. Virus might need time to launch. Another alternative is downloading process explorer .

  302. December 30th, 2009 at 21:43 | #337

    @jo3y So far today I’ve been able to stop it three times with Windows Defender. I, like you,would like to eliminate it completely. It’s amazing that most of the removal answers are so difficult to read. If I discover something this afternoon, I’ll try to make it simple enough for me to understand.

  303. December 30th, 2009 at 23:56 | #338

    On my laptop, the file shows up as c:/ProgramData\41818325 I deleted it there, and in software in Defender, and from desktop. It hasn’t shown up for about 3 hours now. Windows Defender seemed very successful at temporarily stopping the file. I ran two other anti-virus programs and they didn’t recognize it.

  304. Christina
    December 31st, 2009 at 03:10 | #339

    @Philly Keith
    How do you know what the left over files/shortcuts and such are? My daughters pc got this crap on it somehow.

  305. dashaun
    December 31st, 2009 at 16:22 | #340

    my desktop is blank i almost always get the stop screen ( the blue screen ) and i cant take this “tool” off!! Please help me get this thing off! Thank you.

  306. Tony
    December 31st, 2009 at 17:00 | #341

    Where do you go to type C:\…etc. in at ? I do not follow you?

  307. Jeremie
    December 31st, 2009 at 17:41 | #342

    @dashaun
    You need to hold down ctrl/alt/delete and end the process. That will free up your computer. Then you need to start working on this tutorial.

  308. Peter
    December 31st, 2009 at 22:03 | #343

    Philly Keith’s solution worked like a charm. thank you !

  309. De’Varion
    December 31st, 2009 at 23:48 | #344

    The best thing to do is use Norton Antivirus. Spyware doctor is great and all but it’ll detect things on the computer that isn’t there. If u can’t buy the full Norton Antivirus or Internet Security get the trial version and it’ll find the security tool and delete it for you.

  310. chan4070
    January 1st, 2010 at 02:27 | #345

    You know, me and my wife just spent the last few hours trying to get this mess removed from our desktop. To who ever the person is who wrote this mess, please pray that i dont find you. The painful things I want to do to you are massive.

  311. Linda English
    January 1st, 2010 at 03:10 | #346

    My husband actually went out and purchased a new computer today and we now have this virus back!

  312. Linda English
    January 1st, 2010 at 03:11 | #347

    How could this happen again???

  313. Linda English
    January 1st, 2010 at 03:12 | #348

    He loaded up all of the typical software programs and also Skype

  314. Linda English
    January 1st, 2010 at 03:35 | #349

    We have no idea how this could have happened again with a brand new computer. any thoughts on this one?

    • January 2nd, 2010 at 21:58 | #350

      This can happen if there are another infected PC in your network or you visit infected websites, Linda

  315. Linda English
    January 1st, 2010 at 04:21 | #351

    My husband was able to get the virus deleted and it looks like it is gone for now. However, if the pop up appears again what is the very first thing we should do at that point in time? Thanks so much and Happy New Year.

  316. Cade
    January 1st, 2010 at 16:53 | #352

    I think this worked for me on my wifes laptop… I disabled her wireless connection to stop ST from updating or getting out, restarted her computer and interrupted the boot into safe mode. When windows launched, I started task-manager immeadiately, which was up in the back ground, even though ST was still giving messages, Task Manager stayed up. I found the numeric dll process and ended it, then I was able to get into her system menu to restore to an earlier checkpoint. I installed malwarebytes on my computer via flash and transferred to her via flash, allowed it to update and it ran great, it is running now, and working like it did before the virus. Maybe this helps, It did for me.

  317. sam
    January 2nd, 2010 at 06:14 | #353

    @Philly Keith

    What a pain! Philly Keith is exactly right!!!!!! Make sure to go to tools and and unhide all hidden folders because mine was hidden at first inside all users! thank youuu

  318. Nina
    January 2nd, 2010 at 07:01 | #354

    A couple months ago I purchased Spyware Doctor onto my computer but somehow it is not getting rid of this “Security Tool” that has been popping up the last few days. (As someone suggested above) I was able to delete a couple of folders with an 8 digit name but one remains unable to be removed. Anyway i’m doing all the possible scans on Spyware Doctor yet it still is not removing this darned Security Tool. what to do? what to do?…

    • January 2nd, 2010 at 22:00 | #355

      Nina : Have you updated Spyware Doctor? This is weird, because I am possitive that Spyware Doctor removes most of the versions of Security tool. Try doing update (in safe mode with networking) and performing full scan.

  319. Emily
    January 2nd, 2010 at 19:09 | #356

    Pls help me..

    I have downloaded Malwarebytes until I can’t open this file bcoz security tool blok my desktop icons and I get just black background. when I open Malwarebytes from document, I can see just malware icon but, I can’t run this..
    How can I do?

    • January 2nd, 2010 at 22:00 | #357

      Emily: Malwarebytes is blocked by Security Tool. You need to either try different removers or disable the Security tool manually.

  320. ana
    January 3rd, 2010 at 06:29 | #358

    @Philly Keith
    i search but i g0tz many f0lderz wut d0 i delete???it driving me nuts

  321. phyllis
    January 3rd, 2010 at 17:42 | #359

    i just got this what do i do to get rid of it

  322. Linda Hayes
    January 4th, 2010 at 21:24 | #360

    I got this stupid security tool thing, too and was at my wits end trying to get rid of it. Believe me, I am not a savvy computer user, just a 67 yr. old grandma so if I can get rid of it, you can, too. I truly had to shut down my computer by hand as the Sec. Tool wouldn’t even let me close it down normally. Once it started booting up, I just kept clicking control/alt/del until the list of processes appeared. I searched for the one which had 8 numbers in it (hides the Sec. Tool app.) and clicked to remove it. Bingo! Worked like a charm and it’s now gone.

  323. sherri
    January 5th, 2010 at 02:57 | #361

    @Randy
    thanks for the tip on ctrl alt delete when its starting up!!! i couldnt access anything bc this stupid thing would prevent anything from opening. so getting it to stop in the set up before it was running helped at least to get into a program and online. so now im going thru one of the free spyware thats supposed to catch this one. wish me luck!

  324. linda
    January 5th, 2010 at 04:00 | #362

    i just got this stupid virus like 8 hours ago.
    im in C:/Users/Linda, but i cant seem to find App Data. nor i can find the file in C:/Program Files/. please help. im very new at this stuff..

    • January 5th, 2010 at 10:03 | #363

      Linda : Go to folder options and choose show hidden/system files. Or you can write app data in the address bar of your explorer

  325. thia
    January 6th, 2010 at 00:17 | #364

    i recently got this shit on my comp. i followed everything but the only problem now is that when i open firefox, explorer etc it all runs really really slow! i’ve been scanning my computer every hour and its getting really irritating anyone can help me with this?

  326. Ray
    January 6th, 2010 at 07:01 | #365

    Thanks to all the helpful hints in this thread I was able to remove Security Tool but now my computer is REALLY slow. Any advice to bring it back up to what it was before? Thanks in advance

    • January 7th, 2010 at 10:11 | #366

      Ray : do a follow-up scan with updated spyware doctor. Also, check the proxy server.

  327. Fazza
    January 6th, 2010 at 08:53 | #367

    What i did was restarted my system and wile it was starting up in windows i pressed Alt+Ctrl+Del and stopped the service. It was under some Number 364…. I just stopped that and after that i was able to run a normal Cleaning program. Try that.

  328. Roza
    January 6th, 2010 at 19:02 | #368

    Got this on my PC today, here is what I did:
    (I use vista)
    Somwhow it downloaded itself from a website (laaame)
    And it tried to launch “CMD” several times, but vista will block any action (first time im greatfull for it)
    So I disabled my internet connection, then I restarted my computer (removing the power) restarted in safemode, followed the shortcut on my desktop (SecurityTools) and it led me to the .exe which I deleted and now im letting AVG do a linescan before I restart my pc normaly.

    Seems to be gone so far

  329. suzy
    January 7th, 2010 at 05:58 | #369

    omg liike the system security has like tooootally crashed my new laptop…cus liike first i was online and then the system tool popup came up and i accidently clicked ok and it downloaded a bunch of crap on my pc and like now i cant get on to itunes or anything else!!!!..this thing is really pissing me off i tried using the instructions on how to remove it but likeee…i dont wanna download anything else cus im scared ill jst break it some more….i meaan like really im like a teenager….I NEED MY COMPUTER!!

  330. Per
    January 7th, 2010 at 15:35 | #370

    My cumputer was infected with Security Tool virus. I have followed this guide:

    How to manually remove Security Tool Virus
    1.Stop Security Tool Processes: [random numbers].exe
    2.Remove Security Tool Files
    3.C:\Documents and Settings\All Users\Application Data\[random numbers]\
    4.C:\Documents and Settings\All Users\Application Data\[random numbers]\[random numbers].exe
    5.Remove Security Tool Registry Keys
    *HKEY_CURRENT_USER\Software\Security Tool
    *HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Security Tool
    6.Remove Security Tool Startup Entry: [random numbers].exe

    And it seems to work okay, no sign of Security tool or other popups.
    I have one problem left and it is my google search that doesn´t work. If I search for a word in google, it just like freeze and goes no where.
    I dont no if this problem relates to security tool, but it started after i had the virus installed.

    I hope someone can help me!

    • January 8th, 2010 at 11:31 | #371

      Per : disable proxy server and empty your hosts file. Also, do a follow up scan with spyware doctor to make sure there are no additional parasites left.

  331. LaDescarada
    January 8th, 2010 at 02:31 | #372

    Oh thank you SO, SO, SO, SO much! I spent the last two hours in a fret over this horrible, nasty, headache riddled program. It would NOT let me boot up in safe mode. I used CTRL/ALT/DEL and ended the program which finally let me run the C:/Documents and Settings/all users/application data, deleted the file and emptied my recycle bin. This took care of it!

  332. amy
    January 8th, 2010 at 23:50 | #373

    hi just woundering how to get rid of this stupid thing its on my laptop i dont no how to get rid of it permanintly can you help if so can you explain it in really simple terms as i am not that good with computers thanks

  333. Vikusha
    January 9th, 2010 at 06:40 | #374

    C:\Winsows\System32\config\systemprofile\Start Manu\Programs

    I found another one there. o.o

    what i did is Restarted my computer quickly did ctrl+alt+del ( task Manager)

    Removed stranger numbered or named exes ( that i have never seen before )

    then quickly removed security tool on desktop

    then removed 1 in

    C:\Documents and settings\all users\ application data

    numbered folder

    and in C:\Windows\System32\config\systemprofile\Start Manu\Programs

    and in Start> All programs on the last list . I remived Securuty tool again.

    That makes 4 Security tools files installed.

    By the way i’m not familiar with the other exes in Task manager:

    SSSheduler.exe

    Siszyd32.exe ( i alse see it in Satart up in all praograms [ Start.All Programs)

    any 32 numbered exes ;o are they bad?

  334. Per
    January 10th, 2010 at 00:06 | #375

    Thanks it worked to delete my host files in c: Windows_directory\system32\drivers\etc\hosts
    My google search works again

  335. Jason
    January 11th, 2010 at 13:15 | #376

    I need help!
    My school’s computer is infected with the virus!
    It almost totally crashed!
    The computer can only start internet explorer and documents!

  336. Tizzle
    January 13th, 2010 at 10:49 | #377

    thanx guys it really worked for me. delete the 8digit folder.

  337. ocie
    January 14th, 2010 at 00:53 | #378

    I’ve successfully removed the security tool virus using the tutorial on UTUBE and Anti-Malware software. However, when I try to do a search on Internet Explorer, I get a blank page. If I have a bookmark, it will bring me there and display correctly, but if I do a new search a get a blank page. I’ve tried reseting I.E. I’ve tried reinstalling I.E. I’ve tried installing Firefox. No change. I’ve run Spyware Doctor and it says I’m clean. Please advise.

    • January 15th, 2010 at 09:55 | #379

      Ocie : Check Your proxy server and hosts file. this might cause the problem.

  338. Fretag
    January 14th, 2010 at 22:40 | #380

    Just wanted to say thanks to everyone who posted you were not only helpful but some provided comic relief which was very much needed.

  339. ocie
    January 15th, 2010 at 21:17 | #381

    @admin
    Could you please elaborate? Where is the proxy and host file located and should I just delete them?

  340. abigail
    January 16th, 2010 at 19:35 | #382

    this is annoying me. i thought it was a bit suspicious and am glad i looked it up on the net,now i just have to remove this shit.

  341. deb johnst
    January 16th, 2010 at 22:20 | #383

    @Philly Keith
    how do you browse on a laptop when in safe mode networking

  342. DaWiz
    January 17th, 2010 at 05:55 | #384

    Was called this evening by a client. They were infected by Security Tool. Could not get online and their desktop was jacked. I began by starting his Windows XP machine in safe mode. From there I ran CMD and disabled ALL his Services and Start Up items. I then renamed his most recently modified files in Windows/System32/config (with old as the extension, not all modified files let me rename them.) After doing that I back to Windows and opened C:\Documents and Settings\All Users\Application Data (unhide files!) and deleted two numerical files. We shut down his computer and then logged in normally. Things appear normal for now but I will check his computer again in a day or two. His desktop icons are back and he is able to get online once again. Needless to say I think that these people should be hit by a massive ‘Technical malfunction’ and their Servers be akin to a McDonald french fry, Fried Long and Hard!!!

  343. jena blakley
    January 17th, 2010 at 06:30 | #385

    @ralph durden
    ralph: how do i get to C:\documents and settings??

  344. Håkan
    January 17th, 2010 at 09:40 | #386

    Here’s my story how to get and get rid of Security tool, if you can start in Safe mode (If you just want to know how to lose it, skip down to 20 :) )

    1 Download zip folder Zuma deluxe from your torrentz supplier of choice
    2 Open and click on anything that looks like install.exe
    3 Play Zuma
    4 Go to sleep
    5 Wake up and find your computer taken over by aliens
    6 Try to fix it your self
    6 Try to fix it your self
    6 Try to fix it your self
    9 Call friends and follow their advice
    10 Find this site and follow all advices here
    11 Still find your computer taken over by aliens
    12 Go to your local drugstore and buy a huge amount of alcohol
    13 Drink
    14 Pass out in front of computer, angry
    15 Wake up on floor in front of computer
    16 Puke on your spouse’s clothes
    17 Argue with your spouse
    18 Kiss and make up, have wonderful hangover/make up sex
    19 Find new solutions

    20 Start your pc in safe mode with network
    21 Go to housecall.trendmicro.com and download Housecall
    22 Follow instructions
    23 Wait for scanning result (in my case, 4 hours)
    24 Restart, nervously
    25 Heureka! No more Security tool!
    26 Clean up some leftover files like C:\Documents and settings\all users\ application data and other good adviced places recommended above in this thread (I also deleted Zuma and all of it’s content)
    27 For security, I re-installed Firefox, Msn, Msn live and other programmes using straight up internet.

    Good luck!

  345. octavio
    January 17th, 2010 at 20:40 | #387

    it blocks spyware how do i stop it i dont know how to do it manual im 12 god

  346. Kauner
    January 17th, 2010 at 22:00 | #388

    security tool is destroying me
    i just got this laptop and now i am considering another.
    I’m not the best with computers and i dont no where to search for security tool files and how to delete them. the instructions don’t go in depth enough for someone with low computer training to follow.

  347. Jim Anderson
    January 18th, 2010 at 02:10 | #389

    A computer geek since 1958. How to prevent this infection:
    Post a notice showing the Security scam page OR simply detailing what it looks like “Security Alert: You are infected with xxxxxx viruses”.
    Action:
    1. STOP IMMEDIATELY whatever you are doing. It is better to redo than try to remove this beast.
    2. Disconnect physically from the internet by removing the CAT5 cable or power off the cable modem. This prevents sending an acknowledgment to the rogue server.
    3. do one of these: Power off the PC (DO NOT do a shutdown)by pulling the power cord or turning the power supply OFF. (2) Turn off the power strip, if used. (3). Turn off the battery backup, if used.

    Then power on the PC but leave the network cable disconnected.
    Enter safe mode (F8) with networking.
    Open Internet Explorer. Then open Tools/internet options/ remove cookies and temporary internet files.

    Has worked every time for me and my users….
    3.

  348. cheri
    January 18th, 2010 at 17:19 | #390

    @kody112
    what cody112 recommended seems to work for us. I just to had to type in application data at end because we couldn’t find it. thanks cody112….

  349. Cassie
    January 19th, 2010 at 21:25 | #391

    It will not let me start up in safe mode!!!!!! argh!!!

  350. nikki
    January 20th, 2010 at 07:29 | #392

    @Craig
    hi all
    my desk top was empty too, accidentally found that if you right click on the empty part of the tool bar it gives you the option of ‘display desktop’ it disappears periodically but you can just do it again to see icons again.

  351. Alan
    January 20th, 2010 at 15:23 | #393

    i started following your instructions, but now when i reboot it automatically goes to the pre-screen with SAFE MODE on it. if i choose NORMALLY BOOT nothing happens, all other options start scanning driver files and get stuck on:

    windows\system32\DRIVERS\isapnp.sys

    what i’ve read is that i need to run a restore from the boot disc, but this is a netbook w/o a drive. any ideas before i have to turn to external/networked drive?

    thanks.

  352. Ashley
    January 20th, 2010 at 21:52 | #394

    I’m gonna SNAP. Idk how this stupid thing got on my laptop but I cannot get it off. I went into program files and deleted the numeric file in the security tool file and all the icons blah blah blah and then restarted this thing and it’s STILL here. I cannot open task manager. I have no idea what I’m doing. Can someone please explain in english??
    1) Reboot in safe mode

    then what??….

  353. renae
    January 21st, 2010 at 04:15 | #395

    So I didn’t mean to click on the subscribe button or whatever it was I clicked. That’s what i get for not paying much attention. I am in safe mode right now with network connections. When I go back to the regular settings I can’t get into anything. Not even task manager to shut anything down. Everytime I Ctrl+Alt+Delete and choose task manager it flashes on the screen for a second like it’s trying real hard to start but then goes away. While I am in safe mode there are no security tool processes or applications running or at least I can’t find any of them, maybe I’m looking in the wrong places. As for renaming the files I haven’t tried but I couldn’t rename anything in normal mode if I wanted to, and if I rename it in safemode will the changes carry to normal mode when I restart? Thanks so much!!

    • January 21st, 2010 at 11:18 | #396

      Renae: If you rename something in safe mode, it will stay renamed in normal.
      To start task manager, try hitting ctrl+shift+esc right after logging in in windows. Security tool might be not active then and will not close task manager.

  354. GLM
    January 21st, 2010 at 05:02 | #397

    my wifes pc has this freaking virus. i run avast virus w/spybot, and windows defender. when the pc boots up, all that crap comes up. using task mgr, i noticed another window open, i used alt tab to cycle thru the windows, low and behold, windows defender found the threat and allowed me to remove all (uh huh), so, rebooted, same ole. but now i have the knoweldge to let WD shut down the sw which allows/ed the removal via the method above (manual) some of the entries, etc weren’t on the system, but most were. good luck to you..

  355. sherlene thomas
    January 21st, 2010 at 23:08 | #398

    security tool interruption has delayed the completion of my grandchildren’s homework assignments. Really don’t appreciate that!!!!!

  356. January 22nd, 2010 at 20:06 | #399

    I have not gotten rid of Security Tool yet, but what has helped me, so I can get in and out of programs without being over ridden by Security Tool is stopping the computer and installing the Drivers and Utilities disc that came with my computer (leave it until you find the answer). You will still get popups, but you can over ride them.

  357. melissa
    January 24th, 2010 at 20:26 | #400

    i cant believe i got this too – i did the ctl+alt thingy but cant fnd the next step:- 2. Delete security tool files (see under files in our guide)

    can you please point me in the right direction

    …but so far i go tno pop ups thank god!!!

    thanks for this guide guys!!!!

  358. Pierre
    January 24th, 2010 at 20:30 | #401

    Philly Keith’s way of deleting Security Tool works beautifully: it’s fast, easy, and gets rid of it in minutes. One thing that was differnt I went to look for application data in documents and settings, but it was not there. For people who encountered the same problem is easily remedied if you go to the start menu and type in the address Philly Keith had put in: C:\documents and settings/ all users/ application data

  359. meaghan
    January 25th, 2010 at 06:04 | #402

    where do i type that c:\documents and settings thingy

  360. Benjamin Rico
    January 29th, 2010 at 22:28 | #403

    Por fabor remuevan su oferta de mi computer ya que esta bloqueada y no me deja trabajar por esto les p[ido que remuevan su inicio de instalacion porque no lo quiero Gracias

  361. Debra
    January 30th, 2010 at 20:31 | #404

    @Pierre
    so what do you do after you type it in?

  362. Ape
    January 31st, 2010 at 18:57 | #405

    I got a new laptop for christmas, and now Security Tool has started saying I have loads of trojans and viruses. It keeps saying stuff about: vdsldr.exe and stealing credit details or something whenever I’m doing nothing. I just want a completly FREE remover of Security Tool, because this ‘Spyware Doctor’ still makes you pay money to remove the stuff…For god’s sake…Just please can somebody just help me. GOD DAMMIT! I CAN’T DO ANYTHING!!! FFS!

  363. David B
    January 31st, 2010 at 20:54 | #407

    My sons laptop has just been infected with security tool, spent all aftrenoon trying to get rid of it. in the end i tryed systerm restore which took the systerm back 2 days and somehow it worked. all runing ok now. very easy to do and i cant beleve it worked. i hope this help someone.

  364. texan
    January 31st, 2010 at 22:11 | #408

    hey David, I got rid of security tool on my pc by 1st rebooting your computer, pressing F8 as the computer starts back up BEFORE the windows screen with the blue loading bar begins. then scroll to SAFE MODE.Then press enter. when your normal screen pops up, click on the start menu, then control options. double click on file options, it should be on your left in the first row. scroll down and click show hidden files and folders, click apply, then ok. Right click on start menu, click explore, click on documents and settings, All Users, the first file on the list should show 8 digits. this is the file you want to delete.right click on it, click delete, it should disappear right away. then reboot in normal mode, and download a free antivirus to find and uninstall security tool or manually do it from your files.

  365. Sarah
    January 31st, 2010 at 23:23 | #409

    @kevin
    My BackGround On My Laptop Goes Black And No Icons..?

  366. Ben
    February 1st, 2010 at 02:50 | #410

    Thanks for all the good infos. In my case, in safe mode there was no process running. All I had to do is to delete files and entries in the registry named “94754837″ and shortcuts to Security Tool. I ran CCleaner after to remove remaining spyware traces.

  367. Mac
    February 1st, 2010 at 16:56 | #411

    I would just like to repeat Ben’s message above … i used that method successfully …a bit of searching but pretty straight forward

    MANY MANY thanks to u guys and gals who contributed

  368. lisa
    February 2nd, 2010 at 05:04 | #412

    people, help me! my laptop worsen. my folder option is missing, my task manager has been disable, cant do system restore, cant boot in the safe mode. when i choose to boot in safe mode windows will turn back to the safe mode screen again and again till i still have to chose start windows normally. i follow the step above, but i cant do anything. people help me. :(

  369. julia
    February 2nd, 2010 at 08:27 | #413

    i have 2 diff. kinds of security tool warning popping up on my lap top how do i get this off i have tried alot of stuff .. dont want to spend money that i dont have to get it fixed..

  370. kara
    February 3rd, 2010 at 03:58 | #414

    what do you mean when you said stop all numerical processes?

  371. crewchiefvh60
    February 3rd, 2010 at 23:53 | #416

    had security tool on laptop with windows 7. spydoctor said it removed it. when i rebooted still there. I then right clicked on security tool shortcut went to target file in the open folder location then deleted it. it said C:program data 71113244 not C:\documents… before rebooting ran spy doctor it did not find the virus. rebooted with no problem. I did notice that while trouble shooting the virus seemed to counteract whatever i did. I was able to get into safemode at first then i was blocked.

    • February 4th, 2010 at 09:39 | #417

      crewchiefvh60 : Do you have a firewall? I would guess it is either an infected computer on your network OR a new rootkit/trojan that redownload security tool. Do following :
      1. Delete your internet cache in your browser.
      2. Scan with spyware doctor again, do a full scan (not fast one)
      3. without reboot, scan with some other anti-malware ( malwarebytes is ok, superantispyware, etc).
      4. Reboot.

  372. nguyen
    February 4th, 2010 at 08:18 | #418

    thank you so much for the information guys, angel you got the best way to remove the security tool virus. thanks thanks so much

  373. michelle
    February 4th, 2010 at 09:01 | #419

    Security Tool totally ruined my computer! Now I can’t open Word or task manager or any program. Please help me!

  374. katie
    February 4th, 2010 at 20:28 | #420

    HELP!!!! I have Vista, I had Security Tool virus.Thanks to #248 King Timmy,I was able to get removed. Then I ran my BObit Security 360 & clean programs & cleaned the registry & files. I had disconnected my AirCard(wireless) while I was doing this. I got a new AirCard from Sprint Mobile. We’ve spent two days trying to get connected. I have turned off security programs & firewall but cann’t connect to internet.Get error ” wizard cann’t connect to internet” Did I turn off IE some way??? PLEASE HELP!!!

    • February 5th, 2010 at 10:05 | #421

      Katie : Do not use IOBit Security. They use a stolen database from other security manufacturer, so I would guess they are not too reliable on updates themselves.

  375. katie
    February 4th, 2010 at 22:41 | #422

    Please HELP!!!!! I have a desktop with Vista. I had Security tool virus but thanks to KingTimmy #248 his easy to read & understand directions,I got it removed. I ran IObit Security 360 & also cleaned the resitery. While I was doing this,I uninstalled & removed my mobile broadband to be sure it won’t sneak back in while I was working. After when I tryed to reinstall Mobile broadband it won’t work. I got a new AirCard & been working with Sprint. We disinabled the security program & firewall to be sure “Sprint SmartView” was getting in. But cann’i connect to IE,say’s “wizard cann’t connect to internet”

  376. Garrett
    February 5th, 2010 at 00:25 | #423

    i don’t know what to do. i went on my face-book today, and Security tool just popped up and started ruining everything. I can’t do anything. I’m totally lost. i don’t even know where to start.

  377. alex
    February 5th, 2010 at 01:51 | #424

    the security tool blacks out my background and eliminates the icons. it also disables many programs such as windows media, word, internet explorer, and even my antivirus program. what should i do?

  378. crewchiefvh60
    February 5th, 2010 at 05:37 | #425

    admin. yes i have a firewall my wife got security tool from facebook pop-up. since removing it from the folder no more problems

  379. dan claus
    February 5th, 2010 at 08:06 | #426

    Security tool is very annoying – wouldnt let me download any spyware programs.(not too mention annoying popups) If having this problem….when booting up computer press F8 and select safe mode with networking. You should be able to download spyware doctor or use windows defender to eliminate effects of security tool. A computer repair center wanted $150 to fix problem but i purchased spyware doctor for $29.95 and it fixed the problem within minutes. Simple and fast – Highly recommended!!!!

  380. BigMattKong
    February 5th, 2010 at 16:28 | #427

    Your website rocks. My sisters computer got security tool and I thought it was toast. Did philly’s version in safe mode and it worked. It wouldnt let me pull up recycle bin in safe mode, so after I deleted nos. I shut down/rebooted and deleted recycle bin after normal restart. It worked. Thank you for having a site like this.

  381. Kara
    February 6th, 2010 at 22:34 | #428

    I got Security Tool on my laptop yesterday and I’m tryin Keith’s idea I have windows 7, When i try to browes my documents and settings folder is locked any ideas. Please if anyone can help. Thanks

  382. George
    February 7th, 2010 at 00:48 | #429

    I too was picked up the “Security Tool” virus. I installed Kaspersky Internet Security 2010, and it rid my laptop of the menace,

  383. JMT
    February 7th, 2010 at 18:57 | #430

    @Philly Keith

    You are the man!!!…Thanks so much. Your instructions was right on. Didn’t have to download anything. I just followed your instructions. Had two set of 8 digit random numbers attached to a folder. I Deleted them and I am as happy as can be. Been at this now for three hours. I am praying it holds. Thanks.

  384. odette
    February 7th, 2010 at 21:09 | #431

    @kody112
    thanks my pc stock 3 months ago for having this bad boy virus, and suddenly i found your post which i follow your instruction and it works… well done to you guys, as well as philly, good job….

  385. mikimeun
    February 8th, 2010 at 09:41 | #432

    reboot in safe mode -when restart your pc press f8 continously
    when already in safe mode, right click the security tool icon, find target or open folder then delete, then empty recycle bin

  386. jaymeegeek
    February 9th, 2010 at 22:25 | #433

    I had to tackle this last night. I wanted to say two things: first, several other sites recommended that after you enter safe mode, to go to System Restore and turn it off until after the virus is removed. This makes sure the virus is not saved in a restore point in case you need to go back later on. Secondly, if you use Malwarebytes Anti-Malware (I did and it worked great), you NEED to update it in order to catch Security Tools. Make sure you are running in Safe Mode with Networking, and if you are running on a laptop, your WiFi will be disabled in Safe Mode, so plug it directly into the router. Hope that helps! We ended up with 6 other trojans as well as Security Tools, so be on the lookout.

  387. Crystale
    February 10th, 2010 at 01:28 | #434

    @kody112
    Everyone listen to kody112 instructions. This virus plagued my computer and was driving me abolutely nuts. I tried everything, was ready to buy a program to rid my laptop of it, take it to a professional at the tune of $200.00. Kody 112′s suggestions were easy and it worked in a flash. Thank you kody112. you saved my day….My hero.!!!!!

  388. angela
    February 10th, 2010 at 02:06 | #435

    After getting this virus, my computer will not reboot at all. I’ve tried rebooting it in safe mode, etc and it lists a bunch of files to halfway down the screen and then freezes. Is there anything I can do?

    • February 10th, 2010 at 10:53 | #436

      Angela : repair instalation with rescue disk. If you can’t or it will not help, you will have to bring PC to techs or backup data on another pc and reinstal windows.

  389. Sue
    February 10th, 2010 at 18:54 | #437

    So glad I found this site. My computer became infected a few days ago. Followed kody112 instructionS above which got rid of it entirely. THANKS SO MUCH!

  390. T-Phen
    February 13th, 2010 at 05:37 | #438

    @Philly Keith…thank you so much for the info…it worked on my vista^^, …thanks to this site as well…more power y’all ^^,

  391. Chris
    February 13th, 2010 at 06:25 | #439

    @ATL Thanks so much ATL this worked so good for me I got this fuking mess by watching music videos in yahoo I spended a good 8 hours trying to fix it till i found your advice, my god what a relief u rock, thank you, thank you, thank you. my computer is nice clean and working in full capacity yea once I deleted all those folders with the numbers and started my computer the only thing left over was a icon in my screen I inmidiatly sended that sucker into the ricycle bin and emtied jaja yeaaa. put my screen picture back and good to go. jaja how you like me now mr. security tool,kizz my ss.

  392. Heather Wright
    February 13th, 2010 at 08:59 | #440

    I am so tired of this security tool thing because it itself is a tool. I want it off of my computer NOW!!!!!!!!!!!!!!!!!!!!! Can someone please help me get this off my computer… It is not allowing my to use my magic jack and it wont let me access my files for school… I have downloaded spy ware doctor and that didnt work and I dont have a credit card so i am screwed there. I need some answers.. I cant afford some fancy puter cleaning system or any house calls… Please help!!!!

  393. Sheila
    February 14th, 2010 at 05:14 | #441

    I tried to do the process of removing Security Tool but I only went to the stopping the numerical processes part. Should I just skip that step and move onto removing Security Tool files?

  394. February 14th, 2010 at 05:22 | #442

    the stupid security tool thing want let me do anything on my computer and my mom and i have no clue how it even got on our computer!!!!

  395. shawn brown
    February 14th, 2010 at 08:48 | #443

    i have this damn security tool on my cp i want it off

  396. Gam3Freak
    February 14th, 2010 at 15:13 | #444

    THX ALOT DUDE!
    i had real trouble dealing with that motha phacking stupid virus thing, thanx alot again!!! :D

  397. Angela
    February 14th, 2010 at 22:10 | #445

    I’m not really sure how it works, I downloaded the intelliscan, but I still have a lot of infections, how do I get rid of them? And, security tool goes away each time I scan, but when I didnt scan it, it stayed there, so how am I just entiltled to scan each time I log in to the computer? And how do you remove files?

  398. Mike A
    February 14th, 2010 at 22:17 | #446

    I hope I’m not past the point of saving, but my laptop won’t even boot-up. I’m running vista, and I get to the point where it says “Resuming Windows” and then no more picture. I tried putting my reinstallation disk in but it doesn’t help.
    Any advice?

  399. Daniel DeLaVega
    February 14th, 2010 at 22:46 | #447

    I with this Heather girl(woman)! These security tool people need to be shot!!!!! Quit screwing with people. This has to be one of the most inconsiderate things I have ever seen! I also can’t afford to have my computer fixed. Please send help this way too!!!!!!!

  400. 11232
    February 15th, 2010 at 02:43 | #448

    Hello,
    I just recieved security tool several days ago and it has been driving me nuts everr sincee. Is there a FREE download that knocks it off of the computer? Because the information you provided is not quite working with my computer or I should say I dont understand it. Can you please write back to me a FREE recommended download that will not only kill security tool but will also not slow down my computer. I would appreciate it.
    THANK YOU! :)

  401. Sarah
    February 15th, 2010 at 04:02 | #449

    For my computer I used System Restore, wich you can acess by hitting the start button (which should still work), then going to all programs, then Accesories, then go down to system tools and you should find System Restore there.

  402. kristal
    February 15th, 2010 at 05:11 | #450

    I just got this today and it is now off of my laptop…this is what I did.
    I restarted my comp….hit f8 right after the restart went into safe mode. Once logged into windows went to start….then to accessories and the to system restore. Restored to a date before this lame a$$ virus took over and wallllaaa! gone:) Hope it works for everyone!

  403. Maria
    February 15th, 2010 at 21:41 | #451

    I just got this spyware today and i removed it with the steps you gave to remove it. I also have a question, after removing this program is it going to affect my computer or take any passwords???? thank you for your help…..

  404. Aaron
    February 15th, 2010 at 22:20 | #452

    This is hell but i recon i will just put a fresh install of windows 7 on my pc but atm malwayre bytes its workin what i did was go into safe mode and i deleted all u needed files and programs then ran 10 antivirus full scan all findin different things then using malwayre bytes in normal mode and hoping for this to work,,,,,,

  405. Jessica
    February 15th, 2010 at 22:46 | #453

    this thing wont let me do anything.. it has shut down my computer like 5 times now. its soooo annoying.

  406. Sana Ansari
    February 16th, 2010 at 01:48 | #454

    kristal-Thank you so much!!!!!

  407. Peter
    February 16th, 2010 at 02:55 | #455

    Picked up this virus on our home computer last night. After spending a couple of hours trying to deal with it I found this site and worked through using system restre. I am running Windows 7 and it looks like we are good. Thanks for the help in working through this. Responsible parties for this virus should be SHOT!

  408. Cat
    February 16th, 2010 at 03:57 | #456

    @Jimmy Lim
    I have Windows 7 and tried your suggestion, but it won’t delete because it says it is open, so how do I close it??

  409. mikayla
    February 16th, 2010 at 05:01 | #457

    @kristal
    yeah,but on some computers like mine don’t create restore points or whatever it was called to restart the computer to.

  410. February 16th, 2010 at 05:29 | #458

    How do I get this off my computer I have a emachine it is driving me crazy. Help

  411. Viv
    February 16th, 2010 at 11:31 | #459

    @Philly Keith

    Thank you Philly Keith, after a very frustrating day, this worked for me.

  412. Pamela
    February 18th, 2010 at 00:14 | #460

    Thank you so much Philly Keith, my daughter called and was going nuts over this for hours and I came along this site to see what we can do and you saved us. Bless you and thank you so very much!

  413. Sabrina
    February 18th, 2010 at 05:46 | #461

    Security Tool isn’t letting me onto anything without popups for their system and everything! Its driving me inasane! And it hacked into my personal documents, saw how much I loved Germany, and now all my warnings and popups are in German! Oh, and it went ahead and deleted all my icon things on my screensaver, and it deleted my screensaver! Now its just all black! Help me, please!

  414. Lauren
    February 18th, 2010 at 17:36 | #462

    This realy helped i couldnt go to seconds without security tool poping up! i dont see why these hakers need to mess up ur computer it can cause the person being hacked alot of trouble. I realy hate when stuff like this happens. This happened to me befor with a program called MaCatte it was tring to descise its self as MacAffee. Thankyou for the help i appreiciated ALOT!!!!

  415. Linda
    February 19th, 2010 at 01:22 | #463

    I can’t thank you enough for getting rid of this worm. I couldn’t have done it without you.

  416. dutch
    February 19th, 2010 at 05:56 | #464

    i got rid of security tool i think,i don’t know anything about computers, i read alot of remedies online to get rid of it but kept getting more confused. i went to safe mode pressing F8. i right clicked the security tool icon, went to properties and it showed the target file and name of the file i clicked “find target” and a 7 or 8 digit file popped up with the damn security tool logo with that same 7 or 8 digits next to it, i deleted it and booted up normally and it never popped back up i went back and forth from safe mode to normal…. nothing,i deleted the icon and i think that’s it. I’M A HAPPY MOTHERF…..!!!!!!hope someone else tries this, goodluck.

  417. paula
    February 19th, 2010 at 19:34 | #465

    Sharon :Philly Keith, you are a genius!!!!!! Have been pulling my hair out for days with this. Fingers crossed it stays away. Many, many thanks.

    what workeddddddddddddd? do tell me im going nuts :(

  418. widdywool
    February 20th, 2010 at 03:46 | #466

    I had the same virus. What a pain. I started up in safe mode (F8) then clicked on restore. I choose a date earlier than the date the virus took hold.
    This worked for me I am running windows 7

  419. billie mcmanus
    February 21st, 2010 at 16:47 | #467

    I sure hope this works and gets rid of security tool virus

  420. lisa
    February 21st, 2010 at 18:14 | #468

    okay this is the most annoying virus ever. i downloaded like 50 things to help but absolutley nothing is working. please help me step by step i don’t get how to remove it and im going insane

  421. Philly Bud
    February 21st, 2010 at 21:18 | #469

    Thanks for all the advice to get rid of this pest.
    Philly Keith’s method hits the nail on the head. Also, someone advised to hit “ALT/CTRL/DEL” keys twice to bring up TASK MGR (under PROCESSES) and then END the 8 digit numeric process to get temporary stop Security Tool. This worked and gave me back control of my PC.
    I fortunately had the Free version of SuperAntiVirus on my system (Win XP) and was able to run a scan and it detected & deleted 23 infections and fixed. There were several files with the 8 digit numeric names in “documents and settings”.
    I would recommend the SuperAntiVirus Free version, even though it did Not prevent Security Tool infection it got rid of it.
    Philly Bud

  422. dan
    February 22nd, 2010 at 01:02 | #470

    I’ve just got rid after hours of stress……

    1) ctrl/alt/tab whilst booting to bring up task manager before security tool loads.

    2) Goto processes tab and find the process that is made of numbers and has about 10-15 processes going, select this and end process.

    3) Goto system restore (start-all programs-accessories-system tools- system restore) and follow the steps to restore to when you like. (I went 3 days!!)

    Worked for me, good luck!!!

  423. Nat
    February 22nd, 2010 at 01:18 | #471

    @widdywool

    hi , im on window 7 too and when i press (F8) it doesn’t do anything :/
    please help ! :(

  424. badboy
    February 22nd, 2010 at 15:19 | #472

    i had the sam prblem but i reboted my pc and prest F8 emidetly
    ven i did that i reinstald my software so ewry ting on my harddriwe vas delited
    its a good opsin but you will lose all your work music and game files

  425. hunter8605
    February 22nd, 2010 at 21:22 | #473

    @Philly Keith
    tried rebooting in safe mode and every time i do i am not allowed to scroll through the options to get to safe mode and am just kicked back to regular mode anyone have any suggestions?

  426. kristy
    February 22nd, 2010 at 22:55 | #474

    blue carbuncle :I hope that whoever creates this crap is not only sued out of existence, but also has a massive car wreck that kills them, their children’s children, and even people they sent a text to yesterday. Why would it be considered illegal to kick their teeth in?

    @lisa

    lisa :okay this is the most annoying virus ever. i downloaded like 50 things to help but absolutley nothing is working. please help me step by step i don’t get how to remove it and im going insane

    Amen 2 that!!! this thing is DRIVING ME FN MAD CRAZY!!!! I am going crazy 4 real!! The person who created this should b found & punished 2 the max!!!

  427. Daniel
    February 23rd, 2010 at 13:25 | #475

    @Philly Keith
    Thank you sooo much it worked i love you man!

  428. halfasscoonass
    February 23rd, 2010 at 22:10 | #476

    i have tried eveything!!!!this is driving me nuts!
    can someone simply walk me thur doing this in safemode.i dont know how to do that!please help”{

  429. Poupet
    February 23rd, 2010 at 23:06 | #477

    Philly Keith you are a star. Thanks a lot. This thing was getting really irritating and would not let me delete in normal mode. I totally agree with blue carbunkle.I hope the creator of this program rots in hell. I also hope they crap in their pants for a whole year and have chilli rubbed on their private parts followed by lemon juice for extra burn sensation.

  430. Jerry Che
    February 24th, 2010 at 03:08 | #478

    this works im only a kid and i figured out how to get rid of it

  431. Hornetman
    February 24th, 2010 at 22:48 | #479

    @Philly Keith
    Just removed SECURITY TOOL spyware from my windows xp computer. For non tech savvy user I stumbled through the directions and removed the virus in less than 30 minutes. I spent hours researching all the tech options I found on the internet and chose Philly Keiths methods based upon favorable replies I found from users on this forum. This is the second time I have been hit with similar spyware. The first time I was tricked into purchasing a non workable spyware program. Cost me $75.00 to clean up my computer. Beware the SECURITY TOOL spyware looks so very much like the legitimate AVG spyware program I have installed on my computer, I almost fell for it. The cavet was the fake security messages would not let me exit the screen or removed the messages from the screen. I had legitimate secirity programs installed on my computer; AVG free, Spybot search & contol & Malewarebytes-anti maleware and still got the virus. Plaudits to Phlly Keith and this website – LIFE SAVER!

  432. February 24th, 2010 at 23:45 | #480

    hell men i dont no how to remove it

  433. Lisa
    February 25th, 2010 at 00:31 | #481

    @admin
    avast does work if u can get it on ur computer before security tool pops up. I have it (avast) on the computer I am using now and doing pretty good job so far…, but didn’t hjave avast on the other computer and have security tool and now I can’t get logged on to take my pix off:( Help anyone????

    • February 25th, 2010 at 09:32 | #482

      Lisa : Use manual removal instructions to stop Security tool processes. Also, you will have better result with any tool that targets malwares/spyware rogues than generic antivirus like avast.

  434. Kristina
    February 25th, 2010 at 12:35 | #483

    I had problems with “security tool” as well, it took me hours to fix but what finally worked for me was ending numerical processes under task manager, doing a search for both any files with that number AND any files named “security tool” (this part allows you to delete the desktop shortcut as well,) and emptying the recycle bin. Afterwards I used AVG free version to delete anything I may have missed, after that a reboot and everything was fine, my desktop was back to normal and all the annoying pop ups gone. I attempted Spyware Doctor first but I would not recommend it to anyone because although the free version will locate the malicious software you must first purchase the premium version for it to quarantine/delete the problematic files.

  435. Emmie
    February 25th, 2010 at 19:45 | #484

    I’ve got this security tool thing. and as everybody else trying to deleted file, I did same..
    ofcourse don’t let me deleted. so I unplug from internet ( sine virus come through internet) while internet not connected,I clearn up all file everythings while internet is deseable.. and by chance it all cearn up…
    but I was allmost singe up my credit card etc..for just wanted over it..and my question is since they correct money though credit card…can we trace back them…? I know it’s not easy things as I thought..but somebody have to correct money from acount…so hope they go jail or get punish very long time!

  436. Rachel
    February 26th, 2010 at 02:03 | #485

    I cannot find the specified files needed to remove this Security Tool….I’ve tried everything and I still cannot find what I need to remove it.

  437. J Art.
    February 26th, 2010 at 21:43 | #486

    Hello everyone here
    I’ve recently been hit by Security Tool. i readed most things on the website like all of you[most of you] it didn’t work so i devised my own cure for my pc by reading some of the usefull info on here i added it to my own remedy which was get the tastbar up a second after i’ved logged in then deleted the proccessort and after it literaly nothing else worked so what i did was use the deletion of the security tool which keeps the security tool maintained untill you relog again then used the SYSTEM RESTORE to restore my pc to a date when i didnt have this sickenen virus that plagued me. Thank you all.

  438. Jegan
    February 28th, 2010 at 03:11 | #487

    Hi i have a question admin does norton remove it at all?

    • February 28th, 2010 at 13:05 | #488

      Jegan : best to my knowledge norton removes at least some of Security Tool versions. Though from experience can tell that not all. I am not a big fan of symantec, thus I use ESET Smart Security myself, which I can recommend for antivirus protection.
      The problem is, anti-malware/spyware programs are MUCH better and faster in handling parasites like Security tool, thus such programs like Spyware Doctor with real time protection saves A LOT of headaches latter.

  439. Don
    February 28th, 2010 at 05:24 | #489

    Hello All,
    I too fell victim to Security Tool earlier tonight. Like J Art above, I used the System Restore method to cure my PC. Although I couldn’t have done that without the suggestion to reboot in “safe mode”….that was the only way I was allowed to access System Restore. I then ran my McAfee full scan for good measure. Thanks to everyone for your useful suggestions…they really helped.

  440. Lisa
    February 28th, 2010 at 18:42 | #490

    Thanks to the input of all. It happened on my daughter’s computer last night..probably something to do with a Google website she was on all day..watch out Google! After reading this I felt “qualified” (sort of ) to tacke it. indows 7 didn’t offer the same f8 or control-alt-delete options, so it came up with a start up recovery type option, or start windows normally. I selected the start up recovery place and in there were the old options of safe mode, command prompt etc. I tried the Command prompt and dos advice, but it wouldn’t cd (change directory) to the C: drive. There was the option to do a System Restore and fortunately we had a retore point from 1 day earlier, so I went with that–do a system restore–nothing much if anything was lost. And it seems as though there never was this thing at all. Definitely EASIER than I envisioned after reading all this on your site and elsewhere! Anyone know what agencies track these folks that do this kind of thing to all of us…if they got credit card payments from some people, surely they can be tracked by someone…I am very willing to report this if anyone knows who to tell??

  441. Monice
    February 28th, 2010 at 19:23 | #491

    @Frank
    I was just wondering when do I find my six digit code for my Windowa XP laptop?
    Why do people create this type of madnee?

  442. Manon
    February 28th, 2010 at 23:38 | #492

    Hello.
    my laptop unfortunately got infected. After following the instructions found here, I have lost internet on the infected pc (not the one I’m writing from). Can this be caused by Security tool? I do not get the pop ups anymore, word is working fine but I don’t have internet access anymore!! Help!!

  443. Ben
    March 1st, 2010 at 00:33 | #493

    This virus completely destroyed my computer… When i had the computer on and it was working, but had security tools infecting it, i went to taskmanager and disabled it so i could use my computer without the interruptions. Later on i turn the computer off and when i turn it back on its just a black screen…. about 10 minutes later i am able to run the “Recovery System” under the choice of Operating System. This means all i am able to do is enter basic codes… and i have no clue how to do anything from that.

    I want to find whoever created this so i can personally punch them in the face and sue them.

    What the hell am i supposed to do now?

  444. Mary
    March 1st, 2010 at 00:35 | #494

    I removed by using tast manager when I rebooted. Could not open in Safe Mode. Security Tool was not listed, but a 93842228 number was. I ended that task and so far so good. So frustrating. It totally disabled my computer. Any thoughts as to where this came from? It believe I got it from AOL IM. Computer crawled after opening and soon after the pop ups started. I have uninstalled. Any thoughts?

  445. Maria
    March 2nd, 2010 at 00:56 | #495

    @Mike Mike
    Mike,

    Thank you for your post. I was trying to follow Philly Keiths instructions but there was no application data file ????? Then I got to your post with the instructions to find it through run and I am free!!! Yeay!!

    Thanks
    Maria

  446. Maria
    March 2nd, 2010 at 00:57 | #496

    Just an FYI…I usually use avast on my pc’s and I was downloading a new version to a laptop that didn’t have it yet when I got the security tool virus. So, be careful.

  447. stan
    March 2nd, 2010 at 04:22 | #497

    Philly Keith was absolutley on target. MY dughter had it on her laptop, I followed his instructions in Safe mode and restarted and bye bye!

  448. charl
    March 2nd, 2010 at 08:20 | #498

    man thank you all so much safe mode worked 4 me.thank you

  449. Jess
    March 3rd, 2010 at 02:42 | #499

    Well I downloaded the Spyware Doctor and finished the scan, but then it says I have to purchase online?? Any help here because I thought the spyware was free?.

  450. Jess
    March 3rd, 2010 at 03:01 | #500

    Nevermind, I’ve worked out how to delete the program now, thank you!!

  451. Terrence
    March 3rd, 2010 at 03:54 | #501

    Philly Keith- Great your method worked.I was able to reboot in the safe mode and delete the file.

    Thanks

  452. Joann
    March 3rd, 2010 at 16:14 | #502

    Thank you!!!

    That was really irritating. Safe mode worked great!!! Back to Normal!!!

  453. dallas adams
    March 3rd, 2010 at 22:44 | #503

    okay i got the tool of and if you wanna know how what i did was i turned my computer on and as soon as i got loged in i pres ctrl alt delete and the task manager and then when it pops up you go to process and find it it is in a 7 digit number name click it and end process it says r u sure u wanna end process click yes (i most certainly do)then there you go you got it off

  454. Jessica
    March 4th, 2010 at 01:13 | #504

    I found a WAY EASIER WAY to get rid of it. I had been struggling with this problem for a long time and these annoying popups kept frustruating me. Well, fist security tool has a shortcut on the desktop so you right-click it and click OPEN FILE LOCATION. Then, you just delete the file folder. Afterwards, you just go to the recycle bin and empty it all. Finally you go to the desktop and double click the security tool icon then a message will appear that states something similar to this: “This file has been permanently changed, removed or deleted. Do you wnat this shortcut to be deleted??” then you just press OK. THE END!!!!! i really really really really really really hope this helps a lot;) wink wink

  455. Jennifer
    March 4th, 2010 at 04:38 | #505

    I’m having this same exact problem. I’m dog sitting for a neighbor of my aunt’s. Was using their computer just fine this morning and then later in the day I somehow ended up with Security Tool installed on the computer. I was so nervous and worried about this I brought the laptop into the Geek Squad at Best Buy. Unfortunately they can’t do anything to fix the problem unless I pay $199.99 for them to get rid of Security Tool. I told the guy I don’t have that kind of money to fix the problem. Although when I asked about finding a solution online he said I should google instructions on how to fix it myself. Other than that bit of information they can’t saying anything else or they would be performing a service. I’ve looked online for solutions and found some, but I don’t want to download anything to remove security tool. Not sure I’m confident enough to do a manual removal of the items listed further up on this page. I tried to do system restore but the damn security tool thing wouldn’t let me fix the problem that way. Does anyone out there have some idiot proof ways to get rid of this? I don’t want to have to explain to the people what happened and what Best Buy said. I just know that it would get back to my aunt who lives a few houses away and then it’ll get back to my mother(who I live with). I don’t need to be reemed out for messing up the computer. I always do my best to not mess with anything when using someone else’s computer for email, etc… Wish I could go back to this morning before I even used the computer. Hell I even wished my ipod touch would connect to a network, then I wouldn’t have had to deal with this security tool crap. Sorry for the long submission, but it kind of also gave me a chance to vent my frustration.

  456. Jennifer
    March 4th, 2010 at 18:46 | #506

    @Jessica

    Dear Jessica,

    I wish to thank you for suggesting a simple way to get of Security Tool from a computer. I was able to follow the way you went about it and it solved my problem. Just to make sure it truly worked I shut down the computer and then rebooted it. Absolutely none of the Security Tool stuf was on the computer. This makes me very very happy and also gets rid of the sick feeling I had in my stomach since yesterday. I assume when you had to get rid of it on your computer you did it in safe mode(it’s how I did it)? Thanks again!

  457. smac
    March 5th, 2010 at 03:03 | #507

    I have been struggling for the past 24 hours to remove this virus. The 10/9/09 post from Philly Keith worked like a charm. My application data file didn’t come up as mentioned, but I did a file search and found it that way.

  458. Jack
    March 6th, 2010 at 14:36 | #508

    @Philly Keith
    If you have newer versions of Windows ie. Windows 7, instead of browsing in documents and settings… like philly keith recommends, you need to look in ProgramData instead.

  459. William Shafer
    March 6th, 2010 at 16:42 | #509

    @Philly Keith
    Keith, my husband and I want to thankyou, we have been working on our computer for four days and followed your instructions and it was gone in seconds. We appreciate you giving this information, in times like this you can’t afford to go out there and buy,buy,buy. Keith you saved us alot, thankyou again.

  460. Yvette
    March 7th, 2010 at 11:10 | #510

    Many thanks to you Philly Keith! This BOGUS security tool was removed just as you instructed!

  461. Adam
    March 9th, 2010 at 03:34 | #511

    I have windows 2007 and those extensions you mention are not the same. How do i locate the numeric file?

  462. Adam
    March 9th, 2010 at 03:35 | #512

    How do I find program data?

  463. Johnny
    March 9th, 2010 at 16:42 | #513

    Philly Keith,

    You saved my ass man. I owe you BIG TIME!!!

    Johnny

  464. Jr.
    March 9th, 2010 at 21:56 | #514

    Under my registry, I had to delete any key with the following number: 96901328. Didn’t find any with the aforementioned 4946550101. Maybe that will help someone?

  465. Jessie
    March 10th, 2010 at 04:00 | #515

    I just got this stupid thig last night! I don’t know anything about this crazy computer stuff so none of this makes any sence to me :( I figured out where to find the system restore but it won’t let me open it, it won’t let me open anything at all. I can get on to the internet but that’s about it! Is there any way to explain how to fix this that I would understand? (like you are explaining somthing to a 5 year old) because that’s about all I will understand :’(. This is so frustrating…

  466. 2920
    March 10th, 2010 at 05:10 | #516

    This is a bad virus it has a new file number on my pc 05316823 I send the file to my Documents and then burn it to a DVD and it remove the virus. My pc is working ok. It was a all day project to remove. What a pain in the A@##
    FYI I hope this works for all of you. I will give update 3/11/10
    If my pc is working ok.

  467. Glengarry 76
    March 10th, 2010 at 22:08 | #517

    @Philly Keith

    Hey thanks a million Philly Keith – actually thought I was going to lose my mind. Not just that but it got downloaded to a work laptop – shudder to think of the consequences of calling the I.T Helpdesk.

    If it’s any help at all if you reboot in safe mode and then right click on the desktop icon it can direct you straight to the source file and you can delete it from there.

    Thanks again mate – hate these tossers that peddle this kind of sh*t – hardly in the spirit of www is it?

  468. 2920
    March 10th, 2010 at 22:47 | #518

    My pc is still working well

  469. umit
    March 10th, 2010 at 22:49 | #519

    just wanted to say thank you to this guy. we got a new computer today and managed to get this virus straight away. really panicking but your advice did the job. a huge thank you, this is a horrible virus

  470. umit
    March 10th, 2010 at 22:50 | #520

    just wanted to add that was philly keiths advice we followed that did the job. thanks

  471. maggi
    March 12th, 2010 at 03:06 | #521

    Hey,
    Please, help! I don’t see any numbers in task manager…. I don’t know what can I do…..

  472. debbiej
    March 12th, 2010 at 04:16 | #522

    Thanks so much for the comment – Philly Keith you were a lifesaver!

  473. IDK
    March 13th, 2010 at 07:36 | #523

    IDK IF I CAN TRUSR ANY OF YOU GUYS FOR ALL I KNOW IS YOU ALL CAN BE SECURITY TOOL VIRUSES I COULD BE 1 TO YOU GUYS 2 (I’M NOT) JUST GO BUY A ANTISPYWARE FROM A STORE AND USE IT IT MIGHT WORK. I MEAN WHAT IF THIS WEBSITE IS A VIRUS EVER THOUGHT OF THAT COME PEOPLE THINK BUT I AM ON THE SAME SITE SO PEACE IM OUT U GUYS DISCUSS THIS PROBLEM YOU HAVE OR WHATEVER YOU VIRUSES TALK ABOUT.

  474. cody
    March 13th, 2010 at 07:53 | #524

    I follow the steps on this website and it got rid of it… im not sure if my computer is still infected but i can at least opperate like i did before i was infected. im not going to try and credit cards on here for a while just incase.

  475. Mike
    March 13th, 2010 at 09:52 | #525

    Philly Keith’s method foiled security tool for me too!! If anyone knows if the rat bastards who created security tool are behind bars please post it would make my day!

  476. ken
    March 14th, 2010 at 17:39 | #526

    i cant start windows normally

  477. annmarie
    March 14th, 2010 at 23:04 | #527

    hey this thing is horrible. im trying philly keith’s method (thank you)
    but im having trouble browsing to C:\Documents and settings\all users\ application data..
    im not sure how to do it ? do i type it in my search engine ?
    im not too good with computers so if any one could help, that would be awesome !
    thank you !

  478. annmarie
    March 14th, 2010 at 23:11 | #528

    Never mind that last comment of mine !
    @Glengarry 76 ‘s comment helped me !! Thanks to both of you, it is really greatly appreciated.
    thank you so so so much!

  479. Kim
    March 16th, 2010 at 23:35 | #529

    Our computer got hit with Security Tool this weekend. I used Windows Defender’s Software Explorer and found the file for it; under “currently running programs,” I hit “end process,” and under “start up programs,” I hit “disable.” I deleted the short cut and emptied the recycle bin. I don’t know much about computers, and this is the first time we caught a virus, but it seems like what I did is similar to the method described here to get rid of Security Tool. I cannot find the file for the virus now using either the safe mode start or the Task Manager method described here and apparently have no remaining effects from the virus. I have scanned my computer with my existing anti-virus software and new ones I just downloaded, including Spyware Doctor, and no scan has found Security Tool. Even though it seems like I got rid of the virus, I still have some reservations and am reluctant to doing anything like banking or billpay online. I would appreciate any input as to whether the method I used to get rid of the virus is a good one or should I be concerned that it is still lurking about on my computer. Also, I have the regkey for the file for Security Tool but don’t know how to go about checking my computer’s registry for it. Again, any advice is greatly appreciated. Thanks!

  480. Barbara
    March 17th, 2010 at 17:48 | #530

    This Dam thing is put on your computer by Mcafee .Belive it they told me to get rid of pay 89.00 and they have something to get rid of it. when it shouldnt have been able to get on my computer

  481. Ziba
    March 18th, 2010 at 04:54 | #531

    @blue carbuncle I’m with you all the way!

  482. Vimal
    March 19th, 2010 at 15:50 | #532

    Tiz security tool stuff appears on my screen tiz mrning..n i cnt b able to excess to any folders..so,how i get rid of tiz?it is asking me to pay $79.90 to get rid of it..im using McAfee instead..n i dun tink im hv tat much of virus in my pc..

  483. Robert
    March 20th, 2010 at 15:39 | #533

    This freakn sucks. I cant even restore it now. My icons dont show up at all. I tried to download spyware, but it wont let me get to it. I think its different and smarter. If thats possible.
    Someone help. I cant afford to pay for anything. Is there something I can do.

  484. pam
    March 21st, 2010 at 18:50 | #534

    I fan find the file but when i go to move to recycle bin it says i dont have authorization…

  485. nukkie
    March 23rd, 2010 at 09:50 | #535

    what in the world are you guys all trying to do , all i did was do a system restore using my windows installation cd as a boot device, okay it took a while for the system restore screen to pop up …. if it doesn’t, try clicking another option and it’ll pop up … but it’s simple & it worked & that’s what really matters

  486. The swede
    March 24th, 2010 at 20:59 | #536

    I think I actually made it go away thanks to these intsructions :D So thank you very much for the help!

  487. chalee
    March 24th, 2010 at 23:22 | #537

    how do i detele it??? it is messing up my laptop!!!
    helpp???

  488. Kurtz
    March 25th, 2010 at 18:19 | #538

    I got this on my Win7 laptop despite using recent versions and updates of IE/Firefox. I am a savvy computer user; even work in IT support, and no one except me has ever touched or used the computer. I didn’t approve for any malicious code to execute so I think this found its way in through some web browser security hole.

    There are recent versions of this that seem even worse than the ones mentioned in this discussion. Personally I tried automatic removers, Vipre/Norton/AVG, Windows Defender, renaming/deleting the file, cleaning away the mentioned registry keys. Keep coming back. Safe mode does not work and just ends up with a hang.

    So now I opted for formatting the computer completely, and this is what I think everyone who has gotten infected and care for their personal data should do too. Once compromised always compromised, in a way.

    I mean, people … those who wrote this program aren’t some script kiddies but HIGHLY PROFESSIONAL CRIMINALS. They are after your money and have likely NO sympathy whatsoever, fully at the same level as violent bank robbers. Backdoors might have been opened in your computer via rootkits or whatever. These criminals are NOT likely to show any mercy if they come over data or files which can be used to blackmail or otherwise use you.

  489. Dave
    March 26th, 2010 at 23:32 | #539

    I got this virus the other day on a brand new computer running Windows 7 with a wireless keyboard – it was a pain initially but I watched the security tool removal video and followed the instructions and removed it effortlessly in about 5 mins. Despite having the wireless keyboard I could still get into safemode with networking using F8 after numerous attempts. Don’t be put off getting rid of it yourself and don’t waste money on lots of malware programs – you don’t need them.

  490. William McDonald
    March 28th, 2010 at 01:07 | #540

    Thank you! Your directions worked completely and quickly. Incredible solution!

  491. Monica
    March 28th, 2010 at 22:30 | #541

    I must say the manuel removel worked like a charm- thanks you soo much- worked in 5 minutes-Wonderful

  492. Leo Fuellas
    March 29th, 2010 at 09:13 | #542

    after one week of nerve wracking experience with this virus, i finally have it removed…i tried everything based on the instructions of different people having this sort of problem but to no avail, probably i have the worst case here, thanks to my spanish journalist friend! she told me to create another user account, because vst virus is usually attached to the user account, so i did, when open the new user account, i didn’t encounter the virus, but just to make sure, i scanned my hard drives using malwarebytes and avast and found several viruses, after deleting the virus i reboot to my previous user account just to check if the virus is still there, thank GOD….finally, VST IS ALL GONE! hope this will work for you also….. thank you TERESA! HEAVEN SENT ANGEL.

  493. Oscar
    March 30th, 2010 at 07:16 | #543

    if you have another computer ..
    make shure is louded whith antivirus software.
    I have AVAST, Malware, microsoft security essential
    you have to remove your drive from your computer
    using a SATA, IDE, ATA connector ( adapter )
    you can find them at FRY’S electronics store
    conect your disk to the computer

    I recomend to use Windows vista
    go to search and select the drive letter
    that correspond to .. type Security Tool ..
    and the system will give you a list of
    whatever it might be locater
    when finish searching select everything
    that says security tool and delete them.
    take your drive to your lap top
    and load malwarebite avast update them and scan your comput

    • March 30th, 2010 at 09:17 | #544

      Oscar: yeah, right : most of security tool related trojans use random directory/file names…. Sadly you will not find them with search for “Security Tool”. There is also a problem with your approach : it will not fix registry problems, and, most likely, it will not fix hosts file or proxies and some other known configuration issues as these tools are designed to check configuration of WORKING system. That means your PC remains vulnerable to infection.

  494. Jeff
    March 31st, 2010 at 05:31 | #545

    @Jessica
    Thanks Jessica – Your fix worked for me. I was trying all the different processes and yours was much simpler – I now have my PC back!!!!!

  495. jenny
    March 31st, 2010 at 07:06 | #546

    hi,
    i really dont get rid this security tool in my laptop and if im doing it right and also do i have to download thr spyware doctor or buy it????/

  496. des
    March 31st, 2010 at 17:33 | #547

    THanks so much that worked so easy!

  497. Jan
    March 31st, 2010 at 18:13 | #548

    gggrrrrrr!!! this security tool is anoying!! iv bin workin on it for 4day straight!!!

  498. Melissa gurusinghe
    March 31st, 2010 at 18:56 | #549

    @Devin
    HI devin, i dont really have the solution for your problem, but the security tool system is also in my dad’s computer, and even though he gets rid of it one time once you reboot it again it comes back, but i recomend you listen to philly keiths and Kody168 suggestions they really helped my dad;s computer.

    try it its really good

  499. Adrian
    March 31st, 2010 at 21:33 | #550

    @Ashley

    hehe ..
    yeah , same problem over here ..

    unfortunately i don’t understand what application data means XDD
    Im from Norway ..
    i dont have a clue … about .. .where i should start looking for that security tool bullshit … so i can delete it ..

    im in safe mode now ..

    help anyone ?

    Norwegian please XD

  500. Adrian
    March 31st, 2010 at 23:01 | #551

    @Philly Keith

    October 9th, 2009 at 21:04 | #15 Reply | Quote forget all that… try this move, it worked for me after going nuts over this for a whole day.

    Reboot in safe mode0
    browse to C:\Documents and settings\all users\ application data

    There will be a folder in there that has eight numbers as a name (ex 91908431)

    Delete this bad boy, empty recycle bin

    Reboot normally, delete all left over shortcuts, empty recycle bin again and you are home free.

    dude , i cant find the eight number shit …
    damn damn damn damn .. help me :(

    @Philly Keith

  501. Lauren
    April 1st, 2010 at 13:32 | #552

    Thank You Clutch !!! i tried to do Philly Keith’s way but i couldn’t find the files that you had to click on so dont know where they are, Reboot your computer and go to ‘Safe Mode’ wait till everything loads then go to start menu or the shortcut on your desktop for ‘Security Tool’ and right click on it and Click ‘Open File Location’ this will then bring a new folder up with 8 numbers as the file name (exp. 38197937) WRITE THIS NUMBER DOWN ! Then click Start > Run > type in Regedit (you may have to search your start menu for Run) it will come up with a windows message, click Continue and ‘Registry Editor’ will come up, i then clicked edit at the top and went to ‘Find’ in the ‘Find What’ box type in the 8 digit number you wrote down, this will bring up any files under that name, DELETE THEM! it will ask if your sure and of course you are :) , you will need to do this a couple of times, so just keep going back to Edit > Find etc. keep typing in the number and deleting any files under that numbered name, eventually you will get a message saying that there are no more files under that 8 digit name, i did it once more after i got that message just to make sure (as you never know with viruses), then delete the shortcut on your desktop, the shortcut on the start menu and even in the start menu list of programmes, empty recycle bin ! Reboot your computer again then go back into Normal Mode. This worked fine for me hope it will work for you guys too !!

  502. Luchis
    April 1st, 2010 at 20:50 | #553

    My gf got that FAKE program Security Tool on her pc. I rebooted in Safe mode with networking. Opened the start menu. Typed in the name security tool under search. Right clicked on the name and opened the file location. There was a 8 digit number file I right clicked on it and selected delete. Her laptop is working fine for now so we will see.

  503. Lee
    April 1st, 2010 at 21:36 | #554

    Thank you! This worked. Phew- Can’t thank you all enough. What an annoying virus. Just one minor thing…since getting rid of this my desktop remains black (the icons are still there). Any idea how I get back the vista desktop? Many many thanks

  504. garrett
    April 1st, 2010 at 21:36 | #555

    this damn program got on my program last night and just ruined my report for class. thanks to all the comments on how to get rid of this shitty (pardon my french) program. i will try them and see what happens….wish me luck. and hope that no onelse gets this.

  505. wendy
    April 1st, 2010 at 21:41 | #556

    ok…just got this frustrating virus this am….but mine is acting a little differently…when I go to the task manager and hit view processes for all users I don’t have any 8 digit #s..although I do have alot of svchost.exe files…when I finally found the AppData file (I had to unhide it) it didn’t have any 8 digit #s either…I can boot in safe mode with networking…I don’t have a desktop icon for this little bugger…however it is on my tool bar at bottom right of screen…wont let me do anything but click onit to activate it.
    Finally found an icon…it is hanging out in my control panel with the label Security Center…when I click on it the “fake” scan starts…wont let me delete it from the control panel…any clue as where to start with this? Any help is greatly appreciated…

  506. mother trying to fix her daughters pc
    April 1st, 2010 at 22:51 | #557

    @kody112
    ok so im stupid! there isnt a button to browse on in windows 7. can you give me some advice

  507. tyler
    April 2nd, 2010 at 02:28 | #558

    okie like yea i hope they do get sued for this and im having alot of trouble how do i reboot this doesnt make sence to me someone please take me step by step

  508. Khalid
    April 2nd, 2010 at 15:40 | #559

    WHAT IS TASK MANAGER. please can some one help me whit this task manager and how do i found it

  509. Jason
    April 2nd, 2010 at 18:40 | #560

    @Christine
    Dear Christine, you like me, have vista. Just open the pc in safe mode with networking, use system restore, and pick a restore point prior to the download of ST. When it restarts, your free

  510. gary
    April 3rd, 2010 at 06:51 | #561

    @dave
    go to msconfig… any thing without a formal address… turn it off.. and when it reboots, just tell it to boot with changes. should turn off the bad programs until you turn them back on, or delete them.. once you see it is working

  511. gary
    April 3rd, 2010 at 06:54 | #562

    @admin
    if you are going to go to all that trouble… just reformat and start over.. only sure way to remove a virus… most people dont know where the hard drive is.. never the less remove it and add it to another system as an outboard. r u a geek in training? or a geek?

    • April 3rd, 2010 at 15:21 | #563

      Gary: Reformating PC is postponing away the solution. Geek or not, having unprotected PC means that you will get infected and infected again. Having up-to date security suites and antimalware saves these hours for other, more pleasant things in my life than formating, reinstalling PC and gathering back all the software I had.

  512. d.poon
    April 3rd, 2010 at 09:05 | #564

    Thanks Philly Keith!!! Your straight forward instructions works perfectly on my Vista laptop. I also search the “REGEDIT” and deleted those “8 digits” bad boys. Happy Easters.

  513. d.poon
    April 3rd, 2010 at 09:16 | #565

    @tyler
    To reboot, either press and hold the power button. Or last resort, unplug yr power cord.

    When power on, make sure your keep pressing F8 until you see a list of Windows operating options like “Safe Mode with Command Prompt”…

    Then follow “Philly Keith” & “Admin” instructions above.

    From Philly Keith:
    Reboot in safe mode
    browse to C:\Documents and settings\all users\ application data

    There will be a folder in there that has eight numbers as a name (ex 91908431)

    Delete this bad boy, empty recycle bin

    Reboot normally, delete all left over shortcuts, empty recycle bin again and you are home free.

    Admin: On vista, it is C:\Users\%Username\App Data. On XP, it is C:\Documents and settings\%username\App Data

    • April 3rd, 2010 at 15:22 | #566

      D.Poon yes, I know. Also, in some cases it is in different location all together: I have seen version where it was in C:\ProgramData\[randomnumbers]. Typically, we list all possible places in top of instructions.

  514. d.poon
    April 3rd, 2010 at 09:46 | #567

    @mother trying to fix her daughters pc
    Hi, you won’t find the browse button in Windows 7. Kody112 doesn’t mean that.

    I’m trying help you to solve the issue. Try your best to follow this step by step.
    1. To reboot: either press and hold the power button. Or at last resort, unplug yr power cord, plug it back again. Then power your pc.

    2. Once power it on, make sure your keep pressing F8 until you see a list of Windows operating options like “Safe Mode with networking…” .
    Use the arrow keys on your keyboard to select “Safe Mode with networking” option. Then press the “Enter” key on your keyboard and wait.

    3. When Windows 7 should start with the “Safe Mode” water mark around the PC screen. Now open “Windows Explorer” (i.e., click “Start”, then select “All Programs”, then select “Accessories”, then select “Windows Explorer”

    4. Within Windows Explorer, use the Search function to search this name “Application Data”. That is,type “Application Data” (without quote) in the Search box.
    5. Once the Search result returns, you should see the Application Data folder displays.
    6. Double click the Application Data folder
    7. Now, you should see a folder with a 8-digit name. e.g. 91908431. It shoudl be the first folder of the list.
    8. Click once on this folder e.g. 91908431
    9. Hit the Delete key on your keyboard. Then clikc “Yes” to confirm deletion.
    10. Now, reboot your pc (same as step 1 above). When your PC power on again, you should see a black & white screen. At this point, make sure you use your arrow key to select “Start Windows Normally” option. By default, this option is selected for you. Now press “Enter” on your keyboard.
    11. Once Windows 7 started, locates any “Security Tool” icons on your desktop. If you find one, delete it.
    12.Then locate the “Recycle Bin” icon on desktop. Double click it to open it.
    13. Within Recycle Bin window, select “Empty Recycle Bin” option. Click “Yes” to confirm deletion.
    14. Your PC should be fine and your daugther should be happy.

    Happy Easters!

    “Thanks to Philly Keith’s resolutions”

  515. d.poon
    April 3rd, 2010 at 09:55 | #568

    @Lee
    To change yr desktop background/wallpaper, just perform a right-click on a empty area of your desktop. A sub-menu should appear. Now, select “Personalize”. A window should pop-up with tones of personal prefrerence options. Click “Desktop background” to personalize your desktop background appearance…solid colours, pictures, etc…

  516. kk
    April 3rd, 2010 at 20:54 | #569

    @blue carbuncle
    hahaq yea same here i really am ready to call them and cuss them mf out

  517. Alexandra
    April 3rd, 2010 at 22:09 | #570

    okay…please help. I dont understand the instructions listed above. Can someone please explain them differently? I am pulling my hair out trying to figure out how to get rid of this stupid thing. Its really really really annoyinig!!! Please help ASAP!

  518. Michelle
    April 4th, 2010 at 02:48 | #571

    I tried this and thought I was onto something. My computer cut off all of a sudden after I deleted 3-4 ST items in my recycle bin. Now I cannot get it to cut back on. NO! The battery was not dead b/c it was charging the whole time I was working on it. I guess I will have to spend money to get it fixed now. Let me know if there is anything more I can do.

  519. Andrew
    April 4th, 2010 at 04:33 | #572

    Listen i found out how to do it…. go to My Computer then click Local Disck C, go into Documents and Settings click All Users the folder were looking for is hidden so go up to the tool bar and go into Tools, Folder Options click the View tab click the Show Hidden Files and Folders the go down to were it says Hide Protected Operating System Files click it, a warning will pop up click yes now go back and you will see Application Data Click it there will be a file with 8 diget number go into the file and you will see it… you cant delete it yet cause its runing so RENAME it what ever you want now reboot your computer now you will see it wont pop up any more now follow the steps again to get to it now you can delete it MAKE SURE YOU TURN YOUR SETTINGS BACK ON IN THE OPTIONS MENU!!! thats the one i had you go into and turn off settings NOW ITS GONE

  520. Andrew
    April 4th, 2010 at 04:34 | #573

    The File Is hidden Use the steps above and you can find it and delete
    it

  521. Andrew
    April 4th, 2010 at 04:38 | #574

    you have to rename it or it wont work rename it then reboot so then the program wont run cause if a program runs you cant delete it correct?

  522. Trever
    April 4th, 2010 at 16:09 | #575

    In addition to all of the other problems listed above, my computer backgroud is black and i no longer have any shortcuts because of the virus (which claims to be going through skypenames.exe. it will not let me play music or even raise the volume which it muted, it brings up a pop up saying that i have a new infection or something every time i try. It will also not let me get to a cookie debuging program on my computer because when i search for it and click on any one of three i can use the pop up comes up making me have to start all over. I am using windows 7.0. I am going to try your way now.

  523. JoBanana
    April 5th, 2010 at 03:57 | #576

    HERES SOME POTENT ADVICE PEOPLE : Way back at the beginning of all these posts about this hellish “Security tool” virus – there are 2 very important posts by “Kody112″ and “philly Keith” (See October 9th and 12th 2009). They tell you step by step what to do whilst in safe mode. I JUST DID IT. IT TOOK ONLY A COUPLE OF MINUTES AND IT WORKS !!! (See also Angels post on 13th October 2009 for more info regarding this method). My computer is back to normal. I have switched off and back on twice and everything is functioning as it was yesterday before that nasty little worm struck.

    I’ve eliminated it for good. I suggest you all try to do this before anything else.

    Thanks so very much Pilly Keith, Kody112 and Angel. I’m over the moon. I can’t afford to pay to have my computer fixed and I am so happy to have come to this website and found a quick and easy answer that I could do myself in just a few minutes. I am no computer whizz and this was soooo easy. Good luck everyone.

    I wonder how much $$ those crooks have fleeced from unaware people. Cyber Crime is no Joke. Lock ‘em up and throw away the keY !!!

  524. Darlene
    April 5th, 2010 at 05:22 | #577

    OMG! Thankyou i was panicking i thought this virus would never go away and my laptop is brand new! Its pretty easy im 15 and i got it i feel so relieved thankyou!

  525. Meghan
    April 5th, 2010 at 16:59 | #578

    I recently got this virus and have been to MANY sites listing how to manually delete this virus and all of them list the virus under the “Application Data” folder. I don’t know if it’s different since I have Windows Vista, but that folder doesn’t exist on my system. I did a whole computer search for the random # as a file and “No Search Results Found” keeps coming up…. I know how to get rid of it once I find the files… can anyone PLEASE help me locate the files???

  526. April 5th, 2010 at 21:04 | #579

    This stupid viris keeps poping up on my screen every two seconds and its very stressfull.!!!!!!!!!!!

  527. mad mamma
    April 5th, 2010 at 21:26 | #580

    so i have this virus.. i really cant get rid of it.. ive tried alot of things.. im computer illiterate..lol but id just like to say, i hope theres a special place in hell for ppl who invent these damn viruses

  528. Bella
    April 5th, 2010 at 21:35 | #581

    im having a difficult time. this thing is on my laptop and i dont have an internet connection on it anymore and i dont know how to get rid of it. i have very important things on there so it cannot crash. i’m such a clutz and i get instructions mixed up and whatnot so would it just be better to call in a professional to look at it? im just afraid to mess with it…these instructions are confusing for 14 year old…

  529. pogi
    April 5th, 2010 at 23:19 | #582

    please tell me how to remove the black displaying on my screen. it happened after being infected by the security tools. i would appreciate it.

  530. Me Mungo
    April 6th, 2010 at 16:30 | #583

    The company is Russian based known as Browsing Solutions!
    They have no contact details and are based in….guess where????
    Moscow!!
    Why have the Credit Card companies not got together and banned this company from allowing it to scam people. The Bank will not refund you and it’s a well known con!

  531. Finnbob101
    April 6th, 2010 at 18:55 | #584

    in safe mode do a date modified search when you think you got securty tool virus and the numbered file pops up with the securty tool icon just delete and bye bye virus

  532. brian welgush
    April 6th, 2010 at 21:32 | #585

    hi i found a very easy way to get rid of this piece of shit virus. i went into safe mode then i did a system restore 2 days prior to getting this virus and it work got rid of it very simple and easy way of doin it

  533. helicopter hogs
    April 6th, 2010 at 22:57 | #586

    this crap got on my laptop and woudnt let me run anything. i had to reboot get task manager open and termanite the random numbers process. i then found where it lived in the ProgramData folder. i then deleted its files

  534. helicopter hogs
    April 6th, 2010 at 23:20 | #587

    @Meghan
    the ApplicationData folder is hidden. go to drive C:/ApplicationData and delete the random number folder example 43332854.

  535. helicopter hogs
    April 6th, 2010 at 23:22 | #588

    @helicopter hogs

    @Bella the ApplicationData folder is hidden. go to drive C:/ApplicationData and delete the random number folder example 43332854
    i am running win 7

  536. Coreen
    April 6th, 2010 at 23:29 | #589

    Thank you SO much for this info last time I never thought of checking how to do it & it cost me $60 for my computer guru to fix it. One last duh question this happened when my computer was off do I have to leavy my computer on 24/7 so that the Security Tool won’t “invade” it again.
    Thanks again.

  537. JoBanana
    April 7th, 2010 at 02:23 | #590

    JUST TRY THIS PEOPLE…………..IT WORKS AND ONLY TAKES A COUPLE OF MINUTES ….BELIEVE ME I WAS SOOOOO RELIEVED THAT IT WORKED. (SEE MY POST ABOVE)

    MEGHAN: TRY THIS TO FIND THE FILES: right click on Security Tool whilst in safe mode and then click on “open folder location”. This will take you right to its location and you can delete it to recycle bin and empty the recycle bin in safe mode too…….hey presto…………gone !!! it worked for me.

    EVERYONE ELSE: TRY ABOVE ADVICE FOR MEGHAN or this way below:
    Reboot in safe mode (to do this constantly press F8 key after turning computer on…. black screeen will eventually come up…. use arrow keys to choose safe mode)

    browse to C:\Documents and settings\all users\ application data

    There will be a folder in there that has eight numbers as a name (ex 91908431)

    Delete this bad boy, empty recycle bin

    Reboot normally, delete all left over shortcuts, empty recycle bin again and you are home free.

    GOOD LUCK.

  538. Michael
    April 7th, 2010 at 07:53 | #591

    The Security Tool Doesnt Remove Viruses It is the Virus

  539. Will D
    April 7th, 2010 at 12:18 | #592

    @Philly Keith thankyou so much, I’m not so good on the old pc but did just what you said and it worked. Next time your in northern ireland I’ll buy you a beer.

    Cheers again and to this site owners Cheers

  540. mitch
    April 7th, 2010 at 22:09 | #593

    What are the steps for removing the Security Tool demon using Windows 7?

  541. mitch
    April 7th, 2010 at 23:03 | #594

    have done eveything suggested… removes the peice of ca ca… but it comes back after reboot… what am I doing wrong… somebody, anybody?

    • April 8th, 2010 at 08:54 | #595

      Mitch: Do a scan with Spyware Doctor. Maybe there is another infection that re-downloads security tool, or a new location

  542. Dansparks
    April 8th, 2010 at 02:39 | #596

    Philly Keith your a god!!! Thank you for helping. This does work!!! If you have the security tool shortcut Right click on it and click on file location. The number is there. Delete number than delete shortcut. This worked for me.

  543. James
    April 8th, 2010 at 09:09 | #597

    I ran into this nasty virus ‘security tool’ from whatever jerk created it and it pissed me off for 2 hours! For anyone interested, try running ‘system restore’ in ‘safe mode’ it seems to have worked for me. I restarted my computer three times just to make sure all was well and no signs of those annoying pop ups. Hope it’s done for good.

    • April 8th, 2010 at 09:20 | #598

      James : Do a free followup scan with some good anti-spyware programs instead rebooting :) No signs does not mean there are no hidden downloader, which will reappear after a while

  544. Paul Mx
    April 8th, 2010 at 09:36 | #599

    Here is how I got around it.

    1. Boot into Safe Mode – turning your PC off incorrectly should display this option if your having problems using the normal solution of pressing F8 as the PC posts etc.
    2. Install Malwarebytes (*MWB)
    3. Run MWB – quick scan will do the trick (if you prefer run a full scan)
    4. Remove any traces using MWB
    5. Do a full scan
    6. Re-boot your pc
    7. Don’t click on strange pop-ups on the web. :)

  545. ruru
    April 8th, 2010 at 16:17 | #600

    i need study how to remove security tool

  546. LH
    April 9th, 2010 at 03:26 | #601

    Thanks Philly Keith. That works. You have to do it somewhat quickly. Even in safe mode the darn thing will start running and then you cannot delete the file.

  547. Sally
    April 9th, 2010 at 16:24 | #602

    Just did a system restore whilst in safe mode, back to yesterday morning (only option available in safe mode.) System restore took a couple of minutes to come up. Seems successful so far. Good luck. This virus is a bastard.

  548. Sally
    April 9th, 2010 at 16:25 | #603

    @James
    I did it too and it seems to be working.

  549. chuma
    April 9th, 2010 at 18:43 | #604

    @Mel
    get McAfee Stinger this got rid of mine

  550. Ryan
    April 10th, 2010 at 00:16 | #605

    Thank you so much,

    I have been trying to get rid of security tool for two days now and thanks to you it is gone!!!

  551. Space Pirate
    April 10th, 2010 at 01:17 | #606

    @Azz

    One of my client’s computers got infected with Security Tool, and he was using AVG Free with ZoneAlarm Free Version.

    As good as the free versions of AVG, AntiVir or Avast might be (in the sense that they work very well for the price :) ), they are not as effective as other products. I use Kaspersky Internet Security 2010 and can tell you that it is far better than these free products. It’s not perfect, none of them are. And I’m sure that some people might have a story about how it failed to detect certain threats. However, for the most part, it is much better. You have to ask yourself, “do I go with something that is 85% – 90% effective, or would it be better to opt for the product that is 95% – 98% effective?” I’m just estimating here, but I think my numbers are good ball-park averages. Kaspersky is also very light, not really a resource hog (unlike Norton products).

    Every now and then Best Buy and Future Shop (here in Canada, where I live) have Kaspersky Internet Security on sale. The regular price is $80. However, the sale prices are either $20, $30 or $45. I picked up a few 2009 boxes last year for $20. The nice thing is that the 2009 license can be used on the 2010 version, therefore in essence the company doesn’t differentiate between the two versions. The license number can be used on 3 computers, and it is valid for 1 year.

  552. Young Kim
    April 10th, 2010 at 08:54 | #607

    I need to help to remove the system tool program.

    well, because my computer is being stupid that i can not get into safe mode.

    is there are any way that i can delete the program completely in the regular window mode???

  553. tompa
    April 10th, 2010 at 16:10 | #608

    I did what Paul Mx suggested, worked great (so far so good). Is it really true that security tool can start up even in safe mode?

  554. elise
    April 10th, 2010 at 22:49 | #609

    @Azz
    Nope AVG didnt do it for me… :(

  555. rich bennett
    April 11th, 2010 at 00:11 | #610

    i hope these people that created security tool die a very painfull death and rot in hell forever

  556. Karina
    April 11th, 2010 at 02:10 | #611

    @kody112
    Is there another place where I can find the “application data” floder ?

  557. aziz
    April 11th, 2010 at 13:08 | #612

    Ashley :
    I can’t run the doctor spyware. I need help. My desk top is now black and can’t se anything on it.

  558. aziz
    April 11th, 2010 at 13:11 | #613

    i can not run spyware.i need help.my desctop is now black and can not see any thing .i tryed to go to recovery manger i did not get it whene i press f11 i got the same screen as f1

  559. Dylan
    April 11th, 2010 at 15:56 | #614

    This got my computer but i did the rebbot one to disable and now im still happy but i know it is still here somewhere

  560. Tom
    April 11th, 2010 at 17:47 | #615

    @Chuck Eames
    Right click the security tool icon and then if you are on vista you should be able to select ‘location of file’ then delete the two numbered files (on my computer they were the same number not sure if this aplies to all cases) empty the recycle bin, next restart youre computer and delete shortcut, empty the recycle bin. Click start ~ all programs if you still see the security tool name ~ delete empty the recycle bin and restart. Keep repeating the last phew steps untill it has gone completely. I hope this works as it did in my case.

  561. pete
    April 11th, 2010 at 18:17 | #616

    It wont start up automatically but if you click on it it will start up in safe mode

  562. pete
    April 11th, 2010 at 18:39 | #617

    So whats the best most effective way? In a detailed step by step intruction. EVERY DETAIL PLEASE

  563. pete
    April 11th, 2010 at 18:45 | #618

    @JoBanana

    Didnt work for me. I dont even have an Open Folder button. I have an open File button which appears to be the same thing but when you delete the 8 digit number and empty the recycle bin it comes right back when I restart my computer

  564. pete
    April 11th, 2010 at 19:39 | #619

    Here is how I got rid of the virus

    1.restarted my computer
    2.log in. Immediately hold down ctrl+alt+delete while loading
    3.Click task manager.
    4.Processes tab. Find the 8 digit number.
    5. Click end processes
    6. This will only stop the processes for now but when you restart the computer it will come back
    7. so..I went to computer-local disk-users-my login name(pete.schultz)-desktop and there it was…the 8 number thingy again. so i deleted it..cleared all icons
    8. Restarted again.. this time it didnt come back..went to computer-local disk-users-my login name(pete.schultz- desktop and now there was an empty security tools icon still there..deleted it and restarted again.
    9.This time no traces of the bug. I dont know anything about computers and i was able to figure this out with help from people on these boards

  565. Tom
    April 11th, 2010 at 20:45 | #620

    I had it, i went into safe mode and stopped the first numeric process but i got a blue screen with white writing and then my pc just switched off. Then i opened it normally again it wasnt there. Is This Bad Or Good???

  566. niinjamasta
    April 11th, 2010 at 20:47 | #621

    @tompa
    you have to actually click on the security icon to start it. it wont start by itself

  567. Kill the V.I.R.U.S.
    April 11th, 2010 at 22:09 | #622

    Ok, heres how i got rid of it trust me its extremely simple heres what u do: Right click on security tool go to properties then go to shortcut tab look at the bottom then “Open file location” delete everything in the file including the file and go to recycle bin and empty good as gone so far! PS. This is for Windows Vista i dont know if it works on anything else

  568. Kill the V.I.R.U.S.
    April 11th, 2010 at 22:12 | #623

    I’m also 11 years old so yea its that easy

  569. FREDDY
    April 11th, 2010 at 22:24 | #624

    I CANNOT REMOVE THIS SECURITY TOOL TO INSTALL MY CHARTER SECURITY SUITE

  570. Nick
    April 12th, 2010 at 10:27 | #625

    i have no idea what i am doing with computers and am pretty pissed that i have this virus. Can someone please give me simple steps on how to remove it or are there not really any, cos im starting to worry. Thanks

  571. Tom
    April 12th, 2010 at 18:28 | #626

    hi, security tool has blocked me from using my antivirus software, or using any others. any help?

  572. Tom
    April 12th, 2010 at 20:27 | #627

    @Kill the V.I.R.U.S.
    hey, do u know how to access the recycle bin without clicking on the icon, cos security tool make my icons disappear. (im on vista to) and also im not brillieant with computers.

  573. JD
    April 12th, 2010 at 20:34 | #628

    I was going to “permanently” fix this problem, but fortunately for me my girlfriend explained to me how a .45 hollowpoint probably was not the answer I was looking for (that was the frustration level I had reached)….ok,ok,ok, I know it wouldn’t have fixed the problem, but I might have felt much better (until I had to buy another computer)

  574. mark
    April 12th, 2010 at 21:35 | #629

    Luckily I had Norton and even though I clicked ok and let the program run initially Norton detected it during a normal scan and quarantined it!

  575. InLoveWithAndySixx
    April 13th, 2010 at 02:41 | #630

    IKR, I can’t concentrate on ANYTHING with that stupid Security Tool @Kevin

  576. Crystal
    April 13th, 2010 at 04:48 | #631

    Thankyou kody112. it worked for me =) !

  577. Cactus Jane
    April 13th, 2010 at 06:55 | #632

    A huge kudos and centuries of positive karma to Philly Keith and other users who made 2 great recommendations which I combined to get rid of Security Tool malware for once and for all.
    1) shut down computer and have a beer
    2) curse and let the f bomb fly!
    3) then as your computer is rebooting, hit control/alt/delete- it’s important you do this just as your computer is re-booting before the malicious Security Tool program rears it’s ugly pop up again!
    4) go to the task manager tab
    5) now go to the processes tab
    6) find a file that will be 8 digits long (it will be the only file that is all digits for the file name)
    7) delete that number file
    8) this stops the annoying pop up messages from the malicious virus
    9) now go into your C drive and find a folder called “documents and settings” and open it up
    10) go to subfolder called “all users”
    11) now go into subfolder there called “application data”
    12) you may see one or two files there with 8 numbers- delete those freakers too!
    13) finally go to programs and delete Security Tool program and also from the trash folder if you still see the freaking thing there
    Works like a charm- thanks everyone saved me from throwing my PC out the window today!

  578. Jade
    April 13th, 2010 at 17:19 | #633

    I Dont Understand Any Of It And I Really Realllyy Bad Need Help

  579. ane
    April 13th, 2010 at 22:50 | #634

    Thanks ATL for the solution..this helped me..

  580. bak
    April 14th, 2010 at 07:23 | #635

    I just got rid of securitytool from a dell inspiron running vista. The initial removal instructions were simple and worked first time for me. Many thanks.

    I used 1a (safe mode) followed by 2a (looked at properties in the securitytool deskop shortcut to find the name of the offending .exe)
    and deleted c:\ProgramData\80081296\80081296.exe. After that I could reboot normally and securitytool didn’t start up, so i had my machine back.

    Then I could clean up with superantispyware and malwarebytes downloaded from download.cnet.com

  581. tim
    April 14th, 2010 at 21:13 | #636

    I have downloaded spyware doctor and it found security tool when i did a scan but and deleted it but my computer still has security tool on it. What do i do?

    • April 15th, 2010 at 10:11 | #637

      TIM: Reboot into safe mode with networking, update and do a full system scan. That should fix your PC. If it fails, contact PCTools support -they will update definitions.

  582. Nykitia
    April 14th, 2010 at 22:37 | #638

    Okay I really need help, because when i go to safe mode and look for the signs that they safe to look for i don’t see it anywhere on my processes i don’t even know how to get to my files and I am just confused if anyone can help please do.

  583. mrhoades172
    April 15th, 2010 at 02:02 | #639

    I actually got this virus on Saturday while I was visiting myspace in which I never do! And it completly took over my computer I had just got my labtop back from the shop so I thought maybe the computer guy ereased it so I fell for there scam and chose to buy this antivirus because it said I had 40+ viruses and I believed them, I was unable to do anything with my computer but after I put my credit card info in the computer it was back to normal and I thought that maybe it fixed the problem until I checked my bank account and they took 133.00 instead of the 45.00 they were suppose to. So I freaked out called my bank canceled my card and tried to call this so called company and every number was busy for 3 days the transaction was pending but never posted it just disappeared. I was very lucky but I did stress out about this for 4 days. It took me a couple hours to get the virus off my computer!!I called geek squad after this all was worked out becaus ei did not know if they could get into my perosnal bank info but they said this is a common virus but only last 5hours. I really hope no one has to go through what happened to me! Never Never ever put your info in with this FAKE product!!!!!!

  584. Rokas
    April 15th, 2010 at 04:03 | #640

    Hello,

    I have tried all of this, but I don’t see any process running with numbers and can’t find any folders with 8 digits. So can someone please explain me how to get rid of this? Cause obviously everything else failed..

  585. Gonzalo
    April 15th, 2010 at 04:06 | #641

    Phily, thank you for posting the solution to the security tool virus, I just like to mention that I found 4 directories under c:\documents and settings\all users5038965 09459884 87564873 84877377 I delete them all only one of them contains 2 files one is install.exe and the other is a ini file. (I am running windows 7).
    Best regards
    Gonzalo

  586. nice guy
    April 15th, 2010 at 07:38 | #642

    tnx to all the people who leave a comment to reboot..

    it really works tnx to cactus jane..pete and you guys

  587. loony
    April 15th, 2010 at 13:22 | #643

    @admin
    got stuck

  588. Harriby
    April 15th, 2010 at 14:24 | #644

    I think Jimmy Lim #282 is the most helpful ….. thank you
    SOME TIPS I THINK HAVENT BEEN WELL EXPLAINED …….
    When you ctrl alt del at start up be extra quick to click on the 8 digit file, then press Delete, if security tool pops up before you get to hit “yes”, then just press “Enter” a few times as “yes” is highlighted and then you have control!
    If you can’t see your desktop icons, hit the >> next to the start menu down on the left corner.
    To get to my computer go through desktop icon or start menu.
    The address bar tip for my computer is the most critical! ….. “open up my computer and in the address bar at the top type the following and hit enter
    C:\Documents and Settings\All Users\Application Data
    That will take you to the folder whether it is hidden or otherwise. There should be a file (sometimes more than one) that are also named with 8-digit numbers, Delete these then empty your recycle bin.”
    you may have to keep going back to >> to get the desktop icons!
    Also dont forget to get rid of the little bastards located on your desktop (icon) and in your start menu “all programs” – just highlight then delete.
    Follow Jimmy’s instructions post #282 closely!
    You can end this terrible affliction!
    PS I hope the inventors get a terrible malignancy and die a painful death.
    Best of luck,
    Harriby

  589. Harriby
    April 15th, 2010 at 14:30 | #645

    Also another poorly explained component.
    When you hit Ctrl Alt Del and the “Windows Task Manager” box appears, hit the “Processes” tab (mine opened on “applications”), then hit the 8 numbered program quick smart!
    Security tool inventors deserve more pain than most – constant pain is wished upon them,
    lotsa love Harriby!

  590. Dee
    April 16th, 2010 at 00:25 | #646

    hey,
    so I did the whole all users/ applications data and i deleted the 8 digit file.. so what do I do next?

  591. Bren
    April 16th, 2010 at 19:13 | #647

    Hi all, I have Vista. Please tell me precisely how I can access this file/folder from safe mode?

    Thanks

  592. Tish
    April 17th, 2010 at 00:10 | #648

    I fixed it!!!!! And I’m no computer expert!!!

    My 12 year old got this on her netbook – this is how I was able to fix it:

    1. Start in “Safe Mode” (press F8 right when PC is starting)
    2. There was a Security Tools shortcut on my desktop. Right click the shortcut and select “Properties” – the Target will have the name of the program that is running this thing (an 8-digit number followed by .exe)
    3. Go to Start and select “Search”
    4. Type in this 8 digit number. The .exe on my computer was in some random file called “Prefetch” (???) This might be different for you guys.
    5. I deleted the entire file and the shortcut. Then I emptied the Recycle Bin.
    6. Restarted and all was solved! Hooray!

    Hope this works for you guys!

  593. Kelsy
    April 17th, 2010 at 05:11 | #649

    empty your recycle bin delete theshoert cut on your desktop saying “security tool” and empty your recycle bin again.@Dee

  594. Kelsy
    April 17th, 2010 at 05:32 | #650

    Jade i’m retarded when it comes to computers and thats exactly how i felt. I had to go and google “how to start safe mode” lol. Anyways just Turn off your computer and turn it back on. as soon as you do that start pressing the F8 Key until you get the option to start in “safe mode”. Go into “my computer” double click “Local disk(c)” then click the folder that says “Documents and Settings” that will bring up more folders. Click on the folder that says “All Users” and then the folder that says “Application Data”. Find a folder that has an 8 digit number like (90108945) right click it select “Delete”. Exit out of the window and right click your “Recycle bin” icon and select “Empty Recycle Bin”. Then Find the little evil blue shield icon on your Desktop and right click it and select “Delete” and empty your recycle bin again.There you fo people its “Removing Security Tool For Dummies” hehe @Jade

  595. Kelsy
    April 17th, 2010 at 05:45 | #651

    Thank you to everyone who kept me laughing when i was about to cry!

  596. kellz
    April 17th, 2010 at 17:47 | #652

    i set to ‘safe mode’ then downloaded AVG anti virus – basic package for FREE and that then got rid of security tool for me :)

  597. satesh
    April 17th, 2010 at 19:36 | #653

    help me kill them so i dont have cops on me

  598. Gene
    April 18th, 2010 at 02:26 | #654

    i worked for two days and could not get this off my computer, i gave in and paid them the $49.00 and it automatically removed all the warning boxes and my computer is back to normal. i notified my bank to not pay the credit card charge due to it being a scam.

  599. Emma
    April 18th, 2010 at 11:25 | #655

    Please help, new laptop had it a week and this security tool has appeared, wont let me on anything, pop ups stop me from accessing anything, have no idea how to remove this thing. Please help as i am tempted to throw it out the window.

  600. Prince Asher
    April 18th, 2010 at 17:31 | #656

    I put keep keep SpyBot installed in a flash drive. boot in safe mode with networking plug in the flashdrive and run spybot from the flash drive and boom it works

  601. Marat
    April 18th, 2010 at 18:01 | #657

    why not use malwarebytes? download it free, run quick scan which is free again and it will allow you to remove threats for free!

  602. JF
    April 18th, 2010 at 19:36 | #658

    Please see “Tish’s” post above. This process worked for me!

    thanks!

  603. JC
    April 18th, 2010 at 20:19 | #659

    Keith your suggestion was genius!!! I struggled this for a better part of a day before I found you and your solution.

  604. dan
    April 18th, 2010 at 23:17 | #660

    this may sound weird but i am a 14 year old an i normally sign up for online game’s such as habbo,club penquin, or other stuff that doesn’t cost.. but then i found all these pop ups saying ” your credit card deatails are being hacked and that crap”.. i tried signing in on msn on my ipod touch and normal desktop version but it keeps on declining me.. is it hacking my facebook and windows messenger? is there any possible way to delete it without sounding to scientific? becuase if i delete the the spy tool program link i worry i won’t be able to uninstall it and disable it becuase i cannot find the un-install button.. help :)

  605. Sandra
    April 19th, 2010 at 02:54 | #661

    @Philly Keith

    Thanks you so much, you are amazing. It was driving me crazy! I’m not an experienced user yet your instructions allowed me to get rid of this very frustrating, sneaky program. Do you have any idea where we got it from?

  606. Emma
    April 19th, 2010 at 22:13 | #662

    Hi,

    I have read a few times that to get rid of this virus you can go into C:\Documents and settings\all users\application data… and delete the offending files.
    Well, I have Windows Vista on my computer so this doesn’t work, because the “all users” files doesn’t exist. Does anyone know a way of doing the same thing with Vista?
    Thank you,
    Emma

  607. Kurosh
    April 20th, 2010 at 00:43 | #663

    Help please. My HP laptop has been infected with Security Tool and Antimalware Doctor. It is driving me crazy. It locks my keys and disable most of the operations in my computer. Please only workable tested advice. Thanks a million.

  608. reeenz
    April 20th, 2010 at 17:05 | #664

    hey every1 first time usere here and i downloaded the spydoctor software and i cnt get new updates 4 sum reason , can any1 help me? ty

  609. abida Rahmani
    April 21st, 2010 at 06:17 | #665

    My norton internet security expired for some time. Two days ago all of a sudden

    Security tool popped up on my computer with lot of virus threa. It did not leave me until I paid with my credit card 49.99 for 2 years to give my computer a security against all threats.
    Now I found that it is another threat. They got my credit card information.
    How can I get secure now.

  610. Eelke
    April 21st, 2010 at 18:49 | #666

    Hi guys. Got the same problem obv. Thing is that I can’t see the 8 digit number anywhere when I open up the different options in task manager? I also can’t access the Documents and Settings folder in both normal and safe mode, so I can’t delete the files… :( Any tips would be greatly appreciated. Thanks.

  611. arieza
    April 21st, 2010 at 19:18 | #667

    @Tish
    but i dont see any Security Tools icon on my desktop.

  612. Nicole
    April 21st, 2010 at 22:25 | #668

    @Philly Keith
    I’m going to give this a try Keith, I’m going insane over this!!!

  613. rachael
    April 23rd, 2010 at 01:51 | #669

    this virus drove me nuts for 16 hrs it took over everything it took over administrator it wouldnt let me go in safe mode it refused to let me reboot it wouldnt even let me system restore. i found that when i deleted the short cut that it read the location of the file (the name) so i search it in the computer drive and actually found it and was able to removed it by deleting the program manually like that.

  614. erik
    April 23rd, 2010 at 18:22 | #670

    i removed the security tool easily off my computer by:
    1)Logged into normal mode
    2)Clicked Start brought up the all programs list
    3)Went to SecurityTool and right clicked it
    4)Highlighted what was in the Target box
    5)Clicked Find Target
    6)Deleted All Files That were it the folder
    7)Cleaned Recycle Bin
    8)SecurityTool Disseminated
    it might not work but its worth a try and it worked for me

  615. skaiste
    April 24th, 2010 at 16:47 | #671

    @Philly Keith
    nearly worked but then says in use :(

  616. April 24th, 2010 at 19:05 | #672

    @admin

    so, the list of things to manually remove is good, but cannot find them!
    what procedure should be used to locate them? The search tool in safe mode
    does not find them and cannot locate them manually…

    • April 24th, 2010 at 19:53 | #673

      Jeff: check where from security launches – it changes the location, also it might be a hidden/system directory which is not shown in lists.

  617. Daawee
    April 25th, 2010 at 00:09 | #674

    This site saved me $150. This was very helpful advice. thanks again

  618. catherine
    April 25th, 2010 at 03:35 | #675

    I REALLY need a easy and fast way to remove this stupid security tool!
    CAN SOMEONE PLEASE HELP ME?!?

  619. Ness
    April 25th, 2010 at 16:02 | #676

    I’ve got rid of this from 2 pc’s by rebooting in safe mode and then using system restore and restoring to a point before it became a problem! I’ve then downloaded the trial version of Kaspersky prior to purchasing cos AVG the free anti virus I was using didn’t stop this

  620. Jeff
    April 25th, 2010 at 18:30 | #677

    Here’s an easy solution. Boot into safemode and use System Restore to restore your system to a previously saved restore point prior to the infection. Wal-la!

  621. katbee
    April 25th, 2010 at 22:20 | #678

    @catherine
    look at the reply from philly keith on 10/9/09…just did it and it worked!!!didnt have to pay a dime!!good luck

  622. Steven
    April 26th, 2010 at 02:06 | #679

    Hello, I am a child of 12 years, but I know well mid informatique.jai had this virus, how to remove? please help me PS: Sorry for my English I’m french …

  623. popler0206
    April 26th, 2010 at 03:46 | #680

    HKEY_CURRENT_USER\Software\Vista Antivirus 2010
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SecurityTool
    HKEY_LOCAL_MACHINE\SOFTWARE\SecurityTool
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “4946550101″

  624. popler0206
    April 26th, 2010 at 03:49 | #681

    @Sandra
    how can i delete the stupid security tool

  625. Mika
    April 26th, 2010 at 16:51 | #682

    Okay look i got this stupid virus…
    1) i cant download this thing because it stops it
    2) i cant even load up task manager

    so what do i do… please urgent help coursework is locked because of this
    thanks!

  626. Brittany
    April 27th, 2010 at 01:30 | #683

    Hello, I have tried 3 different sites to get rid of this “Security Tool” and it doesnt even let me into the Task Manager then I press ctrl+Shift+esc I have tried to acess the Task Manager many different ways. None work. I am really tired of it I want it gone. I cannot acess anything, Internet, Word Documents, etc. I need to be able too. I have a laptop and I use it endlessly. Please ANYONE help.

  627. melissa
    April 28th, 2010 at 04:13 | #684

    i don’t know that much about computers but this stupid security tool is driving me nut. i have tried everything but those stupid pop up boxes will not allow me to run any programs to get rid of it!!!what can i do? does anyone know a easy way to remove this program for those of us who do not know that much about computers?

  628. anna
    April 28th, 2010 at 06:37 | #685

    what happens if yo have delted it from your progams but things still pop up for the security too?@erik

  629. Hector
    April 28th, 2010 at 18:35 | #686

    ok loggin to windows normally when appear tool security choose unprotected then in Windows start choose my PC open C:\Documents and Settings\All Users\Programs Data and rename the number file i.e if you find 43164422 changed this name to 43164422ab and restart the system. Then delete this file on all system.
    regards

  630. john sanderson
    April 29th, 2010 at 15:48 | #687

    Tried all these things didnt work
    Then tried plain old system restore and worked a treat
    HMMMMMMMMM bet you dont publish this

  631. Olivia
    April 30th, 2010 at 05:12 | #688

    After in safe mood,
    how do you get to
    C:\Documents and settings\all users\ application data
    ???

    ):

  632. Shannon
    April 30th, 2010 at 18:43 | #689

    Hello, I found your page just after being atacked by the secruity tool spyware.
    I removed it manually and ran a series of scans and cleanings with McAfee. i’m no longer have unwanted pop-ups, but on my PC wallpaper it’s black with my program icons. I tried changing it, but it won’t work. Any suggestions or leads?

  633. Rob
    April 30th, 2010 at 20:13 | #690

    I started my machine in safe mode as security tool stopped me opening anything or accessing the task manager etc. Once in safe mode, I right clicked the security tool shortcut on the desktop and clicked properties. I then clicked locate target and open file location which took me to the 8 number .exe file. Delete the file and then delete the shortcut, empty the recycle bin and restart windows normally.
    Job’s a good’n.

  634. cupez
    May 1st, 2010 at 01:41 | #691

    well..i guess olivia had same problem with me… try to deny his action first on it’s properties..then reboot…install the malwarebytes anti-malware..scan.then ??. i still on progress defeat this bas$%#^s….i hope GOD will punish who create this ….

  635. May 1st, 2010 at 06:10 | #692

    Hi it me again … i have delet security tolls i show step : 1-click droits (droits=->) of your mouse on security tool do find target after rename te virus for 43164422ab after restart your computer , and opp viruses Down KO ;) sorry so im so happy -__-
    Thx ++

  636. Aaron
    May 1st, 2010 at 08:02 | #693

    I got this on my computer tonight, after I read the post on here an hr later. I seen kody112′s post, and it worked like a charm. Thank you very much! All I did was put my computer in safe mode (Restart your computer and hit F8 then choose safe mode) I had the security tool on my desktop, so all I did was right click it, and hit open, and deleted the two digit files that it contained. (may be more then one) Then reset my computer out of safe mode and everything is working great!!! once again thank you very much, this helped me a lot.

  637. Paulette
    May 1st, 2010 at 16:55 | #694

    Thank you! Thank you! Thank you! My computer was infected with Security Tools. What an ugly experience. I recognized it as a fake but it throughly took over my system. It is self-protecting, so all of my attempts to get rid of it, including downloading anti-malware software, failed. Fortunately I could still get to the Internet and found your instructions for removing it in safe mode. It worked beautifully. Again, thanks!

  638. April S
    May 2nd, 2010 at 04:11 | #695

    @Joe

    That’s is how i delected this stupid virus

    make another account on you computer, and delected the old account that you had installed Security Tool

    I have two account on my Window VISTA computer, then my sister accidently installed Security Tool, i didn’t know what to do at the first place but then i decided to delect my sister’s account(obvouisly i back-up everything) then i used the new account. The virus didn’t exisit on my computer after i delected the infected account. I THINK you should try to do it too

  639. Tess
    May 2nd, 2010 at 05:34 | #696

    I’ll second that, please! This virus ate my PC about three hours ago, but luckily I had my laptop here, and found this site! Security Tools is now GONE from my other PC. Thankyou, all of you!!!

  640. Very Angry
    May 3rd, 2010 at 06:43 | #697

    Just turned on the computer and been hit with this fucking virus shite.

    Its 6.15am and I have a hangover,so if you think you`re pissed off,spare a thought for me. Great start to the day.

  641. asad munir
    May 3rd, 2010 at 18:10 | #698

    simply use settings and stop from running at start up

    after that right click on security icon ,go to location and del 8 digit virus and and also shortcut,works for me try it

  642. bikash
    May 7th, 2010 at 08:39 | #699

    it works really.. great job man

  643. japanese forms
    May 9th, 2010 at 21:23 | #700

    i just spent 8 hours trying to get rid off this virus…
    even using spyware doctor (which cost me 35 US$ today) wasn’t much help and i must have tried every method recommended about 10 ten times each…

    finally, by pressing ctrl+shift+esc right after logging in and stopping all numerical processes in task manager, then deleting the 8-digit security tool files, rebooting, re-scanning with spyware doctor, i managed to put an end to it… spyware doctor eventually worked but it took sooooooooooooooooooooooooooooo long…

    thanks for the tips…

  644. Dustin
    May 11th, 2010 at 23:06 | #701

    i get the same shyt@Joe

  645. Bobby
    May 12th, 2010 at 01:05 | #702

    Ok so I got this thing and found a fix on youtube which was-

    1)Go to the task manager(CTRL+ALT+DEL) (programs currently running)
    2) CLICK on the Security Tool(disable it by ENDING THE TASK)
    3)The program will stop. bcuz its ordered to do so by the OS.)
    4)Then go to Security Tool icon, properties.. click on find target..this will pop-up.
    5)Simply right click again the properties tab. then advance tab you will see:
    ->ALLOW INDEXING SERVICE TO INDEX THIS FILE (UNCHECK THE BOX)
    THEN DELETE THE FILE AND REBOOT..THATS ALL FOLKS..

    So after I did so and rebooted my user that didn’t have a password is now asking me for one.

    I’m running XP on a computer that was given to me so I don’t have any boot disk.

    Any advice on how to get back into my user?>

  646. Klarq
    May 12th, 2010 at 11:23 | #703

    Finally killed the virus, thanks to this page.
    THANK YOU SO MUCH! :) )

  647. john
    May 13th, 2010 at 15:45 | #704

    @japanese forms
    I had some success helping a friend with the following steps:
    1. Bring up computer in safe mode (reboot and hold F8 key)
    2. Select Programs->Accessories->SystemTools->SystemRestore
    – hopefully, your computer is saving registery backups
    – follow the wizard, select a registry backup date that pre-dates the virus
    – it will prompt for a reboot
    3. Do the reboot and go into safe mode again
    4. Try to run your antivirus tool
    – in our case, it didn’t work (the virus had disabled it so it was giving
    a strange message
    – had to uninstall it
    – then to be safe, I went to another computer and downloaded avast to
    a USB drive and loaded it on the sick computer
    5. Ran avast without internet connection (obviously since we are in safe mode)
    6. Then rebooted and came up in normal mode
    7. To be safe, I then got avast updates and reran the scan
    Everything appears to be ok now.

  648. Paul
    May 13th, 2010 at 19:09 | #705

    @Philly Keith
    Got it! Between you and ilona, It is gone. I have Windows 7 so many of the ideas didn’t work, found the 8 digit number from the ‘Security Tool’ Icon that was placed on the desktop… right click & properties revealed the number, then I had to go through DOS language to delete the files… So far it is gone… good ridence!

  649. danny huff
    May 31st, 2010 at 21:39 | #706

    how do i remove spyware soft off of my computer

  650. Shawn
    June 23rd, 2010 at 18:24 | #707

    This completely took over my computer allowing me to do nothing had no access to anything taskmanager cmd.exe system restore or any programs suggested to run scans to fix this problem all my program games ect wouldnt work was even locked out of system info user accounts ect. After much frusteration and reading about this problem i went to the folder in /Program Files/Live Security Suite and right clicked to properties and allowed the folder zero permissions and no user accounts were allowed to access it. Still thinking my computer was a complete write off i noticed one application it was letting through was my wife was putting pictures from our camera on to the computer without problems this basic windows function still worked…made me turn to microsoft for and answer and i quickly found one here

    http://onecare.live.com/site/en-us/default.htm

    “Full Service Scan” The only application i found amoung all the other scans that i was denied access to using. After completing and removing the 75 items or so this one virus had I took a System Restore to an earlier date before i became infected. even after the system restore i found a .dat file to the virus in my recycle bin so ill again be performing the scan to make sure it’s really gone now. Good luck I hope this helps the people who’ve lost access to thier tskmanager restore run

  651. Bob
    July 13th, 2010 at 23:29 | #708

    @Philly Keith
    just derailed my net book. fortunately I had this PC to find your fix. went into safe mode and found the 8 digit folder (had to do a search though to find the Application Data folder), deleted folder and shortcut, and no further problems … bob’s your uncle !!
    thanks

  652. diceman
    July 14th, 2010 at 17:06 | #709

    philly keith is that man! after 15 minutes i found this thread and tried his solution — so far working like charm!

  653. Jen
    July 24th, 2010 at 11:38 | #710

    Thank you Philly Keith – i am fingers crossed that this has work – i only had it 90 mins but it was driving me crazy!!

  654. ooal
    July 25th, 2010 at 17:32 | #711

    Philly Keith tq!

    (1) Reboot in safe mode (press F8 when starting pc)
    (2) Found Security Tool @ C:\Documents and Settings\User\Local Settings\Application Data
    (3) There will be a folder in there that has eight numbers as a name ~ eg. 91908431
    (4) Delete & empty recycle bin
    (5) Reboot normally, delete all left over shortcuts & empty recycle bin again

    So far so good.

  655. KK
    July 28th, 2010 at 02:42 | #712

    easiest way to remove security tool
    if all instructions failed you might want to try these steps:
    (When i tried to go to safemode, my laptop cant get to windows and and it auto reboots i tried to go to Safe mode, safe mode with networking, safe mode with command prompt.
    i also tried to use MBAM and pctools’ spyware doctor but those did not work for me either.)
    Only this one worked for me:
    1. locate the security tool by pointing your cursor to “Security Tool” as listed in your start menu
    2. go to that folder and RENAME the file
    (it did not allow me to delete the file directly from the folder. if it does not allow you to directly rename the file, create a copy of the security tool in the same folder then delete the original file)

    3. Create a new folder then MOVE (NOT copy) the security tool file into that new folder
    4. Move the folder to your desktop where it is easily accessible
    5. log off from your account then log back in (OR restart your pc)
    6. after logging back in/after restarting and AS SOON as you can access your desktop,and the security tool is still not active (not showing in your system tray) delete the whole folder and empty recycle bin.

    if you will delete it while security tool is showing as active in your system tray, you wont be able to delete the file.

    Hope this helps

  656. palm
    July 28th, 2010 at 12:35 | #713

    @KK
    KK we are trying to follow your instructions of 28/7 but stuck on how to create new file in which to move the renamed security tool. Can you help pls? Thx

  657. Some P****d off guy
    July 29th, 2010 at 05:45 | #714

    I just this virus today, flipping heck. Thanks for the advice. I hope the maker of that virus has his balls cut off and be forced to eat them.

  658. really P****d off guy
    July 29th, 2010 at 19:31 | #715

    how bad can it get to overnight?
    i woke up one morning and went on my moms computer to find that some idiot downloaded the **** up thing onto the computer.

  659. Bill
    July 30th, 2010 at 07:25 | #716

    I did KK’s procedure in safe mode and I was able to delete it all and then reboot.Seems to be ok

    • July 30th, 2010 at 08:06 | #717

      Bill: do a scan with any anti-malware tool, and maybe antivirus. Also, clean up temporary files from your browser cache to be 100% sure.

  660. Simon
    July 31st, 2010 at 14:52 | #718

    Ty Philly Keith… simple, straightforward and so far is working perfectly!!

  661. Killingmyhubby
    August 1st, 2010 at 20:01 | #719

    My hubby downloaded this on my new windows 7 pc. I have malware already installed. I am in safemode and running the malware scan, will this pick up the virus? or do I need to continue to do the other suggested file search?

    Thanks!

  662. jbot
    August 1st, 2010 at 21:34 | #720

    I could pull someone’s windpipe out over this BS. I found a good way to kill this thing. Many of the suggestions above did not work on my computer.

    Here is what I did. Do a search for exe in all files. Hidden too. It found 4658511.exe. That is the FM-er. It was in Documents&settings\compaq_owner\localsettings\application data

    I restarted the computer and hit start then run very fast and type in “taskmgr” hit enter. May take a couple of times, you have to beat the sysytem tool start up.

    Then go to processes and stop the 4658511.exe processes. Select then hit stop process.

    System tool should not start up. May have to reboot.

    Go to file (documents&settings………
    and delete that file, may have to rename it.
    empty recycle bin.

    Remove files above from registry.
    go to download.com and get Advanced System care. It’s free. Read reviews, it a great little program.
    Run it to clean system.
    Cross fingers it does’nt ever return.

    Hope this helps
    J

  663. KristenC
    August 2nd, 2010 at 04:31 | #721

    Alright, I batteled with this dumb thing all day and finally found something useful. I have Windows Vista so this will differ depending on your system.

    Reboot your computer and while it’s rebooting, press F8.

    Log on and after you log on quickly press ctrl+alt+del and it’ll bring up the Task Manager. Click on the ‘Processes’ tab and find the only 8 numeral name. For me, it was 77483874. End the process and this should stop the pop-ups temporarily and make it so you can access everything like you could before the virus infected your computer.

    Now open a new internet window. In the URL bar, type in C:\Users\(your User)\AppData\Local

    This shoul bring up a new window with many files. Find the only 8 numeral name and delete it. This will put the file into the recycle bin and from there, empty the recycle bin.

    Reboot your computer and this will get rid of the virus. Just have your security system scan for any more threats and delete any shortcuts related to Security Tool.

    Hope this helps! (:

  664. gouki
    August 2nd, 2010 at 17:14 | #722

    If i ever find out who created Security Tool and where they live at
    i will do to them what OJ did to Nicole and Ronald .

  665. Pfff
    August 3rd, 2010 at 01:21 | #723

    I did what Philly Keith suggested and removed it. I’m running several anti spyware programs now to see if any damage has been done. So far so good. Maybe some notes though for others:

    I am running Windows 7 (64 bit Professional) and found the file I needed by first:
    control panel -> file options -> view tab -> show hidden files

    Afterwards I went into C drive and it was in
    C:Users/ME*/AppData/Local

    ME*: the name of main user on the comp that you are on.. so could be Peter, Fred, Frank etc etc.

    removed 8 digit file, removed desktop icons, emptied recycle bin, reboot, and done. Somehow it did do something to my daemon tools though which now gives a strange error when I boot up each time but I am hoping a clean re install will fix that.

    BTW. The way I got this piece of crap was from a fake Mozilla firefox flash update. IF YOU GET A TAB THAT SAYS “FIREFOX HAS BEEN UPDATED BLABLA UPDATE FLASH TO PREVENT BLADIEBLA” DO NOT CLICK IT EVER!!!!!!!!! EVEN IF IT LOOKS LEGIT! There are examples of how the shit looks on the net, just google “firefox fake flash update secrity tool” or something and you will get images etc.

    As a final note I would like to thank: 1: the admins of this site for putting this up as a reference for people who need help. 2. everyone who commented here. AND to join other commentors I too would like the creators of this Security Tools BULLSHIT! to get cancer in the nuts and die a slow and painfull death.

  666. melody
    August 3rd, 2010 at 03:07 | #724

    @Philly Keith

    Hi Philly Keith – Finding your comment was god sent. Please try this remedy; it worked like a charm. Also, people with Vista and Win7 systems don’t have “documents and settings”. You will find that string of #s in your “users” folder.

  667. Lee
    August 4th, 2010 at 18:10 | #725

    Downloaded spyhunter 4 scanner,not the malware remover itself, on my laptop, which was infected, did the scan, only then was I able to restore my computer. to an earlier date. Go to control panel–System and Security–Back up your computer–(located at the bottom of page highlighted in blue) Recover system settings or your computer–Select OPEN SYSTEM RESTORE– Obviously select date before the infection. Worked for hope it can work for you. By the by, it took 5 mins. for the entire process.

    • August 4th, 2010 at 23:06 | #726

      Lee: Spyhunter is quite expensive ( 60 USD(or EUR) per year for software without virus protection). I would recommend Spyware Doctor instead for protection.
      Spybot S&D is updated not too often in respect of latest threats. This is my impression, though. Perhaps too little donations ?

  668. Lee
    August 4th, 2010 at 18:18 | #727

    Also, recommend Spybot-Search and Destroy and its free, it would be nice if you donate to the cause.

  669. Tisha
    August 4th, 2010 at 20:51 | #728

    I had this pop up from Facebook The way I got rid of it was Stopzilla and AVG a lot of digging into my control panel and removing files after files so I dont know about this doctor thing but with StopZilla it made it a lot easier and with AVG free anti virus I cant find a trace of it anywhere

  670. Borko
    August 4th, 2010 at 23:19 | #729

    I have problem with Security tool for 2 days please HELP!

  671. Weasel
    August 5th, 2010 at 16:12 | #730

    This is one of the most complex viruses ive ever come across. Stay calm, dont panic and follow this very slowly. Ok so here’s how to remove it:

    In the botom right hand corner of the screen there will be 2 new icons that look like shields(they’re next 2 the icons for the volume, internet, etc) … hover over one of the icons and an 8 or 9 digit number will appear, MAKE A NOTE OF THAT NUMBER! you will need it later on.

    Now shut down down computer immediatly, turn it back on again and tap F8 until the screen appears to run in safe mode. Now run the system in Safe Mode.
    Once opperating in safe mode click on the start menu, then programs, there should be a new program installed called “Security Tool”. Right click on the program and move down to properties and click on it. Once in the properties tab there should be a box which allows you to open folder location, do so.

    Delete all of the 8 or 9 digit numbers and any files that looks like the security tool program.

    Now go back to the start menu and click on run, run “regedit”. Now press Ctrl+F, this allows you to find anything that you type in. Put in that 8 or digit number that you copied down earlier, mine was 822020192. Delete the file that comes up for that number, now press F3 and it will look for it again in any other locations on the system, repeat the process until you have deleted all of those numbers.

    You should have the bulk on the virus removed now.
    Run any antivirus programs you may have, i used malwarebytes and that should clear up everything left over. All of this should be done in safe mode.

    Once the scan is finished turn of the computer and run in normal mode. Everything will be back to normal and fine again. Good luck.

  672. Rick
    August 5th, 2010 at 21:29 | #731

    After going through the whole safe mode, process kill, malware scan which did not solve the issue I found a very quick and painless way of removing it. F8 on boot for Win7 provides a repair my computer option. I done a sys restore form there and job done, got rid of that clever annoying little shit in 5 mins. Hope this helps someone.

  673. Tracy
    August 5th, 2010 at 22:00 | #732

    I am having the same problem. But I think i got it worst because by the time I was able to get to my computer it shut down and now I can’t get it to come back up does anyone have any ideas on this?

  674. kristen
    August 6th, 2010 at 03:22 | #733

    im am a computer retard i dontknow much all i know is i have this on my sisters lap top and she is going to kill me if i dont have this fixed tonight so when i shut the computer down how do i put it in safe mode remember i dont know much about computers so help please@Philly Keith

  675. Kate
    August 7th, 2010 at 18:35 | #734

    Ok im having serious problems. I re-booted in safe mode and then opened up task manager, there wasn’t any numerical processes running. Now the guides tell me to delete files but i cannot find the files to delete them

    • August 8th, 2010 at 22:38 | #735

      Kate: scan with Spyware Doctor to identify processes. You might want to stop all processes that look like garbage : iotuwettww like this. It might be a case that there are versions of security tool that fully randomizes its file name.

  676. Grateful Dad
    August 8th, 2010 at 05:28 | #736

    @Rick
    My daughter’s computer caught this horride thing today and was freaked. I was going to do the Philly Keith solution, but your solution seemed better, especially for a computer only a month old. It worked. So far so good. Thanks.

  677. charmz
    August 9th, 2010 at 00:41 | #737

    i cant do anything… i mean anything without a pop-up from security tool!
    my pop-ups tell me that “his worm is trying to send you credit card details using dllhost.exeto connect to a remote host” i can’t open anything and nothing works!

    Please help me get rid of it

  678. Alan
    August 9th, 2010 at 04:00 | #738

    @Alan
    O and adding on delete all the shortcuts from recycling bin and menu

  679. Anil
    August 10th, 2010 at 09:40 | #739

    Find the random name.exe file here

    C:\Documents and Settings\csd5182\Local Settings\Application Data

  680. David
    August 11th, 2010 at 00:13 | #740

    Ok i have the Security tool, but when i got into Safe Mode and Networking after i do Task… Theres no Numerical numbers?

    • August 11th, 2010 at 09:10 | #741

      David: Security tool might be inactive in safe mode with networking, also there were couple signs that they started using fully random names (not just numbers). Do a full scan with scanners, or right-click on security tool icon on desktop and check where the file it lauches is located.

  681. rob616
    August 11th, 2010 at 15:04 | #742

    alright guys, I tried malware bytes twice with full scans, should take about 2 hours for the scans, if that doesn’t work then log on normally and as soon as the welcome screen goes press ctrl-alt-del for task manager, time it right and it will open before security tool does, then once its opened, there should be a digit process running end that and that will stop security tool for this log on but however does not remove it completely, next go to your c-drive (C:/) next look in the folder called “users” next the folder which you are logged on to (after you are done you can check the rest to be sure if you want)next there should be a folder called “AppData”, there should be a few folders but you want to go in the folder called “local”, it is not called “LocalLow” thats a different folder, go in the local folder then you should find a application file which is blue with a darker blue ex through it you delete that application and that should get rid of it.
    and to be safe, look for any files or folder in the local folder and see when they were created and unless they are really essential, something crucial to you or your business I would delete those as well just in case they are an extension of the virus.

    this method worked for me I cant promise it will work for everyone but as long as you delete the right application (the size for mine was around 1200-1600 KB so it was quite small and you EMPTY YOUR RECYCLING BIN DO AND DOUBLE CHECK IT. then after you have done this restart your computer normally and press the ctrl-alt-del buttons before anything else just to check.

    I hope this works for you guys cause it worked for me. good luck
    and sorry for the long winded explanation but its better to be exact laters.
    btw it worked but I am 14 years old, so if you don’t feel comfortable then don’t try it.
    laters

  682. Karen
    August 12th, 2010 at 00:51 | #743

    I have spent all day trying to fix this problem with comments from other web-sites. The one that worked for me was to end the numerical processes. Worked immediately. Thank you

  683. Michelle
    August 12th, 2010 at 08:34 | #744

    I cant i just cant get rid or it. it doesnt let me play games watch videos or do anything

  684. Monique
    August 13th, 2010 at 05:49 | #745

    @Joe
    Yep I have this pain in my computer as well. I have malware, and PC tool spyware doctor, and i cannot run the Malware, I continualy get Error messages. I can run the Spyware doctor, which finds this “rogue” file, removes it but it is still there when I boot up again. I’m ata loss now, and ready to send the computer through the nearest window. Any other sugestions to get this thing out of my computer ??? !!!

    • August 13th, 2010 at 08:58 | #746

      Monique: Update Spyware Doctor and do a full system scan, preferably in safe mode with networking. You might have to kill Security tool processes prior doing the scan.

  685. Richard Scrivener
    August 15th, 2010 at 08:44 | #747

    Manual Removal Update:
    Security Tool seems to have altered slightly the directory and registry entry it uses (which isn’t surprising). Thus, an update to Philly Keith’s reply is needed.
    I was able to remove Security Tool manually with the following two actions:
    [NOTE: The OS version I am running is Windows XP SP2]
    1) delete file C:\Documents and Settings\%USERNAME%\Local Settings\Application Data\9977807.exe
    2) remove registry entry HKey_Current_User\Software\Microsoft\Windows\CurrentVersion\RunOnce\9977807.exe

    NOTE: I opened TaskManager using CTRL-ALT-DELETE immediately after login, as described by kodykid168 and in other replies.

    The exact name of the executable file may well be different for you.

  686. mobius
    August 15th, 2010 at 19:42 | #748

    After reviewing all the above I found a combo action that worked. First, I could not find the file, since there were no numbered files listed, I found it through the start menu to programs and found Security Toool, right clicked and properties to open file location. Can not delete it directly, so renamed it. Shut down and restarted, Security Tool did not start. I then found the file and deleted it. I was then able to run Malwarebytes app. All seems to working smoothly.

  687. Dinamocy
    August 19th, 2010 at 13:21 | #749

    I did all the above but nothing seem to work.

    What did work though is the following.

    1. Restart computer, click F8 and select safe mode with networking.
    2. Start run and type %temp%, delete everything in the folder that opens.
    3. Download malware bytes (free version), install and run a quick scan.
    4. When done click show results and click on remove selected.

    Now this will fix this specific problem but means that you are open to these kind of malicious software so I did the following also:

    5. Download and install Spyware doctor and register (yes register means pay).
    6. Run a full scann and remove all remains.
    7. Set scheduled daily runs at least for next few weeks.
    8. Run malware tool embeded with spyware doctor every so and then to make sure nothing is crawling back in.

    I hope that the bastard who create this malware go to hell with the rest of the bastards that pull similar crap.

  688. Nasz
    August 19th, 2010 at 14:48 | #750

    Oh my god, thank you so much, Philly Keith, you are a total life saver!! :D

  689. phaemon
    August 20th, 2010 at 11:44 | #751

    There seem to be a few different versions of this malware floating about, which is why the instructions work for some but not for others.

    I’ve just removed a version from a customer’s Windows 7 laptop by:

    Use F8 at start to get into Safe Mode (where Security Tool doesn’t start)
    Go to Start…Run and type “regedit” (to get the registry editor)
    Go to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Run
    You should see a couple of rundll entries either there, or in HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Run (if they’re not in either, you have a different version, try other instructions). Delete those.
    Now go to the Control Panel, Folder Options and enable viewing hidden files (so you can see Appdata in the next step) and disable hiding known file types.
    Next, start Windows Explorer and go to C:\Users\\Appdata\Local (where is whatever username you’re using)
    You should see a couple of dll files there (they will match the ones that rundll was starting). Delete them.

    If you now reboot normally and Security Tool should not start up. Do a complete scan with Malwarebytes (update to latest first) to make sure you got everything.

    Hope this helps someone!

  690. phaemon
    August 20th, 2010 at 11:48 | #752

    I didn’t realise this board would strip out the <username> bit. It should read:

    Next, start Windows Explorer and go to C:\Users\[username]\Appdata\Local (where [username] is whatever username you’re using)

  691. MtnGoat
    August 20th, 2010 at 21:54 | #753

    I can’t get rid of Security Tool – HOW TO KILL IT AND IT’S PRECURSOR ROOTKIT virus (hopefully GOOGLE can pick up this tag and help other folks find this site)

    Hi folks,
    picked up this peckerwood last nite when I was redirected during an image search for a horror movie actor (Rondo Hatten) for no apparent reason, and then saw a cmd/DOS window pop open and disappear for no apparent reason. I knew something bad was afoot, and sure enough, 1 minute later started getting the popups and redirects keeping me off the interweb, wouldn’t allow me to run task manager, etc. The bastards that write these things should be castrated and then drawn and quartered. All you good folks and me losing all this time just for those screwheads.

    So using a buddy’s machine found this page and the comments. I saved it as a .doc so I could get to it without being online.

    Anyway, read the comments and got a lot of good tips.
    a) how to find it
    b) how to kill it
    c) how to find the **#@!! rootkit virus that probably infected me with Security virus, which sure enough, was hiding in my machine.

    Here’s my story, hope it helps someone.

    … yesterday morning all was grand except when I logged on, my desktop went wonky and the pic I had put up the night before vanished. Went to redo it and found that the pic was still listed in desktop manager in the ‘desktop’ tab, but when I went to the file location, it was gone. Weird. I didn’t think about it but it turns out this is one of the clues you have a problem. I’m no expert but I think this was the rootkit manifesting itself.

    So I redid the picture and my desktop and proceeded whistling past the graveyard all day with no problems. Then, last night while looking up Rondo, I clicked on a photo of him, got a redirect, then the cmd/DOS window opened and closed and everything went to hell immediately as described in my intro.

    Tried Malwarebytes in Safe mode, it found 12 infections in two runs and then showed clean. Rebooted normally, still had it. Ran LanDesk (our corporate app) in Safe mode, it showed nothing, rebooted, still had it.

    Found this site. read comments.

    Started up in Safe Mode, tried digging around in all the folders with show all files and system files and hidden files turned on, still no joy. Went to DOS window and looked in the same places (sometimes viruses can hide in windows file manager views but not the DOS viewer), still didn’t see it.

    Re read the comments and found how to start up taskmanager *IMMEDIATELY* upon normal boot before the virus starts, and this worked. Then I could see the virus, sure enough, with a random number.exe process. WRITE DOWN THIS NUMBER! Mine was not the 8 or 10 digit number, it was 5 digits.

    Killed the process with taskman at that point. Then I went and found it in the Start/Programs folder and right clicked to get properties, and sure enough, it had been hiding in the docs and settings – users- my name – app data folder. clicked ‘take me to this location’ and zapped it. Emptied recycle bin.

    Then I went to safe mode again.

    then I opened ‘run’ and ‘regedit’. highlight the top level item ‘my computer’. Start the ‘find’ feature and enter the number you found. delete what it finds. Hit F3 to find the next instance. I found it in multiple places. Delete each location. When it said it was done searching, I closed regedit and restarted it, researched, and found three more. On the third run it found nothing.

    Then I again went to file manager and emptied the recycle bin.

    Now I thought about idea that a “rootkit virus probably is hiding or installing the virus” from this forum, so I went to my buddy’s machine and downloaded combofix and got the updated version, put it on a thumbdrive and ran it on my machine.

    It is slow but very effective…don’t despair, it IS running. It will ask to install MS’s restore toolkit, so I did that. That took a while too. Then it started going for real, and nearly immediately said I had a rootkit virus and said it wanted to reboot. Fine. it rebooted into normal mode and just when I was panicking again, the combofix DOS window popped up so I knew I was OK. Then it chugged along at it’s leisurely pace reporting step 1 complete, 2, 3, etc until step 50 finally came..then a lag of a couple more minutes and it started deleting files and folders, then wrote me a nice log file. Combofix appears old school and clunky and slow, but by god it works and it works well. It probably took 20 minutes to run.

    When it was done….my machine was clean, no *#&@@&&!! security tool and it’s running much faster too. I’d still like to rip the heads off the hackers who wrote this and *$$# down their neckholes, but at least I found a solution.

    SO…

    use another machine and get the latest combofix on a thumbdrive. rename it just in case!

    Now, on your machine, boot normally and Start pressing cntrl-alt-delete the instant your desktop shows during normal boot and you can beat the virus to the punch

    find the random number.exe process, write down the number, then kill the process

    find the process in your start – programs menu and right click for properties, then go there with ‘find target’ which opens file manager on the target

    zap it there

    empty recycle bin

    start in safe mode

    go to run, regedit, highlight my computer, and use edit/find for all instances of that number and delete them, hitting f3 to repeat your find.

    close regedit and repeat the search process until it returns nothing

    empty recycle bin

    start and run combofix and do what it tells you. it’s slow, be patient.

    and that’s what did it for me.

    Good luck folks, I hope this helps someone and may Karma place parasitic gangrenous gutrot starting in the ‘nether regions of the *%*#@!! hackers who write this crap.

  692. LaRoux
    August 23rd, 2010 at 16:44 | #754

    If you cannot open your task manager in time when your comp is booting, try the following:

    Click Start -> Run,
    Type taskkill /f /fi “username eq ”
    Your username should be what you log in to your computer as.
    E.g if your username is JoeBlogs then type taskkill /f /fi “username eq JoeBlogs”
    This should kill all of your processes, then press Ctrl+shift+esc and task manager should open.
    In run, type: explorer and you have re-use of your computer again. (of course don’t forget to kill the virus process too.)

    p.s this is not how to get rid of the virus, just read all the other entries, this is just how I managed to get task manager open to end the process.

  693. stephen
    August 24th, 2010 at 10:51 | #755

    @kody112

    grateful thanks kody112….followed your advice and it worked a treat !

  694. Judy Stephens
    August 26th, 2010 at 05:06 | #756

    Had a horrible time with Secutity Tool. I finally just right clicked on the icon, changed the name to something else (any name will do) & the viris could not replicate itself. It could not find the file anymore. I then sent it to the recycle bin & hit empty. Walah, Security Tool was gone.

  695. rockergawd
    August 27th, 2010 at 03:44 | #757

    ATL- i want to say u really helped me i just wanted to say thank you so much!!

  696. Leon
    August 28th, 2010 at 05:49 | #758

    Boot in using the f8 safe boot option. Then, use your system restore. Worked for me.

  697. NewBoy
    August 28th, 2010 at 08:12 | #759

    @Keith Philly and kody112.

    Thanks a bunch. Your advice worked a treat. Thanks

  698. ~B~
    August 30th, 2010 at 09:01 | #760

    I think I may have a newer version of Security tool & it seems to be getting more vicious. It regenerated itself after I removed with malwarebytes, and also after I removed it myself by deleting the file & did the regedit. I also restored my netbook to factory settings 3 times doing the malwarebytes scan after each & also scanned with McAfee trial version. What finally worked for me (I hope) is this, I had to use a separate computer to fix it.

    First I downloaded Combofix (for free) onto a memory stick with the safe computer. On the infected computer I went into safe mode w/network, then insert memory stick. Install & run combofix, follow prompts. It may ask you to reboot during the scan, and also will tell you to shut down any anti-virus programs etc. Also I briefly read to not pay for Combofix or download it from websites like combofix.org, or .com, etc. The website I used was bleepingcomputer, and the download link they supply is only good for 10 mins then you have to refresh the screen to get a new one if you need it.

    Good luck to you all, I was using AVG free version when I caught the virus and received the McAfee free trial after the first time I restored to factory settings but neither of those seemed to help fight this nasty virus. Also for me everything had to be done in safe mode, I tried loading Combo fix saved under the name iexplorer.exe while not in safe mode & not only was it blocked but my computer actually erased the program from my memory stick!

  699. gooner
    August 30th, 2010 at 10:56 | #761

    Big thanks to keith philly
    Also Angel your are an angel. Could not find folder but right clicking on security tool on safe mode and looking at file path to find it worked great.

  700. Chris
    September 1st, 2010 at 03:11 | #762

    Security Tool took over my daughter’s laptop. I have tried many different sites to try and remove it. I used MY laptop (a Mac which seems immune to such atrocities so far) to download Malwarebytes on a CD (I need to invest in a flash drive). I was unable to run that program in normal mode even after running rkill (security tool would not allow either to run). I ran Malwarebytes in safe mode. It took 50 minutes and found 204 (give or take) infected objects. I removed them. Rebooted in normal mode (per instructions) and the security tool was still popping up with all of the warnings. I came to this site and have been reading user comments for hours. I did what was suggested – I right clicked “Security Tool” in the start menu task bar whatever it is called and went to file location. Deleted the file with the numbers and was able to restart in normal mode. Of course I didn’t write down the number and I guess my next project is to find any other files with number-names. For the past 30 minutes I have been running a scan with Windows Defender. Then I plan on running the Malwarebytes scan again. Then I am going to check her firewall settings. And then I am going to prohibit her from ever using her computer again!

  701. Dane
    September 1st, 2010 at 07:22 | #763

    Thank you Combofix! I would post more but it would be an echo of what ~B~ above me, has said.

    So far, so good.

  702. Missie
    September 2nd, 2010 at 01:14 | #764

    This virus was on my hubbys laptop…we had one hell of a time trying to get rid of it. It destroyed Norton, and prevented us from downloading it again.
    I looked through c documents in safe mode and we found a file that had a bunch of numbers but under that file was an error report so we deleted the numbered one…then deleted what was in the recyle bin.
    when I rebooted normally, the second it rebooted I got task manager up and went to proccesses and there was the virus. I clicked “end process”
    I have not had the virus since. :D and I was able to download antivirus and all of that. my windows defender started working again and found a few trojans and destroyed them.

  703. SweetMan
    September 2nd, 2010 at 18:03 | #765

    The person who created this virus must be the Dr. Fu ManChu of the software world. It took me two days to bring my computer back to working status. I was able to locate a file called “Prefetch.” In this file was every trojan, virus and you name it!!! I tried to delete it, however, it wouldn’t let me delete it. It was running in conjunction with other files “rstrui.exe” and “rstrui.dat.” I kept trying to rename them and eventually succeeded. Then I rebooted and deleted them. I’m up and running with no problems. I still must locate and delete all the numbered files that are dormant.

  704. chish
    September 4th, 2010 at 05:17 | #766

    This Security Tool is back with a vengence! I tried safe mode..ran mbam..deleted and it wouldn’t move it there. Wouldn’t let me boot in Safe Mode..F8 just didn’t work!.

    So if you get this as of today..you need to boot and immediately ctrl/alt/delete to get task manager up..scroll and find the 958223 exe and stop it!

    After this..download/update antivirus and mbam..run both…be sure to check your quarantine box to make sure it went in there, then delete. Best of Luck to all!

    • September 4th, 2010 at 09:09 | #767

      If mbam can not detect it at first time (if updated), it is unlikely it will detect another. I recommend trying out spyware doctor as well – it has bigger database than mbam, and it shows filenames it detects for free.

  705. rain
    September 7th, 2010 at 06:08 | #768

    I got this security tool from somewhere and I had problems trying to remove it. So, here is the thing you have to do – run the pc on safe mode, open the containing directory and first rename the file which is some row of numbers (I put a name on cyrrilic) to anything else and then cut it and paste it to some other directory (the thing is you have to remove it from its original place, I put it into C:/Downloads). After that start windows normally and simply delete security tool from the new directory it’s been placed before, then delete the shortcut too, delete both files from recycle bin. It worked for me. Good luck!

  706. Sassy C
    September 7th, 2010 at 08:04 | #769

    I got hit with the wrenched piece of trash like two days ago and thought all was lost until I happened upon this website with suggestions from other victims! Thank God because it restored my sanity and potential damage to my wallet! Big ups to Angel by way of Philly Keith for the suggestions. After getting my blood pressure to stroke level, I tried your suggestions and they worked! Funny thing, I did it before but was not in safe mode so it didn’t work the 1st time around. It’s working now so let’s hope it stays that way!

  707. Vtactical
    September 7th, 2010 at 17:44 | #770

    I dont think this will help all of you but try it you got nothing to lose.Open your PC at safe mode then hit start. Security tool will be somewhere at the left above start button. Right click on it and then hit open folder location. there will be some files with only numbers for name-delete them all. It was six numbers for me but i dont think thats the only case. I have a toshiba satellite laptop and it worked for me.

  708. Vinay
    September 8th, 2010 at 19:31 | #771

    Thanks a lot Philly Keith sir.It worked for my computer when I tried all stuff like rkill,mbam in vain.God be with you for your good and easy-working advice.

  709. Lauren
    September 12th, 2010 at 04:31 | #772

    I GOT THE VIRUS OFF WITH AN EASIER WAY.
    1)Boot the computer up in safe mode
    2)Do a system restore a day before you got Security Tool
    3)Restart computer

    My computer is working fine! Try this if you can’t get a malaware program to run. Good luck!

  710. Lyle J. Meece
    September 12th, 2010 at 17:20 | #773

    My brother recently was infected with the badder version of this. We spent approx. 5 days trying to get rid of it. First we tried Safe Mode. It would not allow that. Then we tried control alt delete to manual halt the process, it would not allow that. We tried reg-edit, it would not allow that. It also kept taking us to a porn website. We then download R-kill. It worked if you hit it about 50 times in a row. Now we had some breathing room. We tried Malwarebytes anti malware. It wouldn’t allow it to run. We changed the name and manually installed it through a jump drive, it would start to open up and then be shut down. A very tricky virus/malware. Since it was not on my computer, it was a challenge, to my brother it was a pain in the butt. I ordered a popular anti virus for 29.95 that claimed it could cure it. (They billed me twice). After downloading the update to a jumpdrive, using R-kill we finally got it to load. It scanned the computer and found nothing. Finally I downloaded HitmanPro and Rkilled again, and low and behold Hitman found it and quarinteened it. My brother immediately bought Hitman Pro. So, this was the only solution we could find to eliminate this nasty super version of Security tools.

    • September 13th, 2010 at 09:07 | #774

      Lyle: I have heard some good about Hitman Pro. Though we had quite a success deleting Security Tool both manually and with Spyware Doctor, Malwarebytes, etc. However, it gets a bit more difficult because there are more than a single version of Security Tool

  711. David L
    September 14th, 2010 at 03:42 | #775

    Ok, so I got this Security Tool virus/spyware (whatever you want to call it) twice now. Twice in 3 weeks. I’ve noticed that the spyware seem to upgrade itself somehow or like other say, have different versions. I’ve successfully got rid of it twice now (one of them 1 hr ago). It was frustrating but at least I got rid of it. Mind you that I already have Malware Anti… and Spyware Doctor even before I got the very first Security Tool. So the first time, I ran the Malware and spyware Doctor, it found some but didn’t find all. Therefore, it didn’t get rid of it. So I downloaded SuperAntiSpyware and ran that. THAT got rid of it in one tried (ran it in safemode by pressing F8). Now the second one, its a little more difficult. Pressing F8 didn’t work, so I held the power button for 5 secs until it turns off. Since you didn’t turn it off properly, your comp will ask you to load in save mode. Mind you that I’ve already ran my Malware, Spyware Doc, and SuperAnti at least 5 times each and everytime they delete security tool, security tool seem to regenerate. So, while in Safemode, delete the old Malware Anti… and go download the latest free version for installation (select updating after installation). Run that and Security Tool will be gone. I’ve also deleted the shortcuts from the start menu, but after reading the results from Malware, it seems like Malware would have gotten rid of the shortcut for me anyways.

    So that’s how I got rid of it twice. I hope it helps.

  712. Martin
    September 14th, 2010 at 08:32 | #776

    Well this is fun, isn’t it?

    We’ve been trying to fix our laptop for the past 2 days.

    Rkill didn’t work

    MBAM ran in safe mode and found some infections, cleared them, then we restarted in normal mode to find lovely Security Tool still sitting pretty as well as all the other pop-ups

    Spyware Doctor couldn’t run in normal or safe modes

    System Restore comes up with a quick dialog box which disappears too fast to read, but says something about being disabled by group policy, so can’t do that either

    Task Manager will open if we ctrl-alt-del fast enough on rebooting, and we can delete the numerical process which stops the main Security Tool window appearing, but we still get all the other bogus security pop-ups and it still won’t let us run exe files such as Hitmanpro, even if we rename them

    We also went through the process of showing hidden folders and unhiding system files so that we could see the folder for Security Tool in Program Files (we were looking for a random numerical sequence like the name of the process we disabled with Task Manager). We found the folder and deleted it, but after a reboot the pop-up warnings and Security Tool windows still come up as before. We have looked for the folder to re-delete it as we read that the virus re-creates itself and all its files and folders every time you reboot, but now we can’t find it anymore

    So…we’re thinking this may be an even newer version of the virus? Has anyone had any experiences with the virus more recently? Any tips on other methods we can try? Any help would be so very greatly appreciated!

    • September 14th, 2010 at 09:09 | #777

      Martin : There are 2 versions of SD available (older and newer) They both install a bit differently, so you can try both.
      I recommend running TDSS Killer now for all infected with modern rogues, as that rootkit is often the cause of the problems that can not be detected.

  713. karone
    September 15th, 2010 at 11:26 | #778

    FLASHBACK Note:
    Dear Admin,
    This is the first time I have to deal with Security Tool thing. Then I searched online how to remove this security tool. I went across this site and it’s great. I have read all the comments above. Have so many advises and different methods on removing the security tool. I decided to use Philly Keith’s method since it seemed to be quickest and easiest. I located the 8-digit folder and deleted from Application Data folder. But Security Tool(ST) won’t let me deleted it. In face ST regenerated everytime I restarted the computer.

  714. Zhee
    September 16th, 2010 at 17:41 | #779

    I’ve got my solution for this virus. Thanks to my old laptop (with minimum memory and slow speed. Hehehehehehe)

    First i overloaded/floaded my memory by opening many software/program at the same time, than in the taskbar (bottom), right click this “security tool” than pick “close” . Try it in many time until you see “End task now”. just push space immediately. Its push that software to suicide. Try it as many time as possible until you success to kill this virus.

    After that happen (Security tools closed). click start–>program/all progam, right click security tool–> properties. Select find taget. You’ll see 12345678.exe (or another 6-8 digit number. Write it down! DON’T TRY TO EXECUTE THIS .exe FILE!)

    Now go to start menu –> run. Type “regedit”
    Find (Ctrl+F) string named with 12345678.exe (or another 6-8 digit number you’ve wrote) Delete it all!

    than use malwarebyte’s Antimalware to finish the curing process.

    Note : I dont think this work on hi-speed CPU.

  715. whateva
    September 17th, 2010 at 15:16 | #780

    Same thing happened to be it can be very frustrating. I went into safe mode and had webroot sweep my computer. They detected the virus and removed it. After that, haven’t had a pop up since.

  716. Nick
    September 19th, 2010 at 00:50 | #781

    Can’t figure out how to eliminate manually. Can’t afford to buy fulol versions of any antivirus. What can I do?!?!?!

  717. kim
    September 19th, 2010 at 23:24 | #782

    This morning my boyfriends Toshiba Satelite started up with a blue screen, then went to it’s normal screen with a “Security Tool” notification that the computer was full of viruses. I knew it was a virus since I couldn’t open the AVG and check it out. I looked it up to verify that it was a virus.

    My first thought was to do a system restore. So I restored it to about 4 days prior. It restored fine… however, now the keyboard and mouse pad of the laptop will not respond at all.

    I got into AVG with my USB mouse and was able to remove the viruses and a trojan. The keyboard and mouse are still not responding. Now the USB mouse will not work either.

    So perhaps the way I removed the virus was wrong.
    I am experienced but not a pro with computers. Any info, preferably step by step, would be greatly appreciated.

    Thank you.

    • September 20th, 2010 at 09:21 | #783

      Kim : borrow non-USB keyboard and reinstall USB/Motherboard drivers to your bf laptop. I would guess Security Tool disables usb stack to prevent users installing antivirus using USB disks.

  718. sars
    September 20th, 2010 at 10:47 | #784

    hi im 12 and my computer was infected with security tool today and i cant fix it i tried what you said but its cofusing

  719. amaan
    September 20th, 2010 at 17:36 | #785

    hi my laptop is infected with security tool i have tried what you said but i cant fix it even through the safe mode ..
    plz help me to sort out the problem

  720. pp
    September 21st, 2010 at 03:46 | #786

    THANKS A LOT PHIL

    I find it at
    C:\Documents and Settings\Administrator\Local Settings\Application Data

    There will be a folder in there that has eight numbers as a name (ex 91908431)

    Rename, Delete this bad boy, empty recycle bin

    Restart

    It’s Work!

  721. Jerome
    September 22nd, 2010 at 15:46 | #787

    @Philly Keith
    Hello Philly Keith,
    It Works, thanks so much. I had spent the whole day yesterday trying everything I could or thought and now today 15 minutes and my security tool problem seems disappeared…

    Thanks again for your insight, may God bless you.

  722. simon
    September 22nd, 2010 at 23:28 | #788

    Thanks! Managed to start in safemode and did a system restore to last week. seems to have worked

  723. brian
    September 23rd, 2010 at 18:20 | #789

    @Joe
    down load crap cleaner free–settings—delete easy mate

  724. Chris
    September 24th, 2010 at 02:49 | #790

    @JoBanana
    for the longest time i couldnt find the location of this bastard, so i opened up the start menue and put the mouse over the shorcut and it told me where to find it. Thanks a bunch…hope it works! Also the nerd who created this abomination needs to die in a pit with mutant man eating babies!

  725. Md.Alauddin
    September 24th, 2010 at 19:30 | #791

    Thank you Mr.Philly Keith.Your formula excellent.Thanks a lot.

  726. brian
    September 24th, 2010 at 20:11 | #792

    @Nick nick
    1) restart in safe mode and networking
    2) down load crap cleaner
    3) go in crap cleaners settings
    4) programs to start on windows
    5) say no to 54675686 (or what ever number it is)
    6 now delete the bugger
    7) restart in normal mode
    BINGO

  727. Chris J
    September 25th, 2010 at 23:35 | #793

    Hello Ladies and Gents,
    I was looking to remove this bad boy on a customer’s PC…I found a little trick to it actually, you can boot into normal mode and remove this, but you have to be sneaky :)

    The basis of removing this on normal mode:
    Like the Author says, it’s a number process. After you terminate it, it’s easy…But the problem is, it won’t let you…So what you have to do (in normal mode, because for some reason I couldn’t find it in safe mode, and spyware doctor wouldn’t run in safe mode because it required an update…Although I guess I could have ran it with networking…Just thought about that…Lol)
    Anyway:
    HOLD DOWN CTRL+SHIFT ESCAPE UNTIL YOU SEE ATLEAST ONE OF THEM POP UP!!!!
    Once you have a valid task manager up, you can terminate the named ‘number’ process, and proceed with windows like it was never on there…KEEP IN MIND you MUST leave your finger on the CTRL key, and you must use your mouse to click the process to terminate it.

    That thing was annoying, to say the least…Just a bit of wisdom for my suffering friends.

    Thanks for reading

    -Chris J.

  728. ADP
    September 26th, 2010 at 00:55 | #794

    @Philly Keith
    Keith, thank you so much. you are a lifesaver and it didn’t cost me an arm and a leg.

  729. Genesis
    September 26th, 2010 at 15:05 | #795

    safemode
    and delete security tools in what folder it save

    i do it
    and it works

  730. Phyllis
    September 27th, 2010 at 00:31 | #796

    @ KK I spent over an hour reading through the entire blog. It was your method that worked for me. Thank you so much!

  731. Nathan
    September 27th, 2010 at 02:15 | #797

    Man Kodykid”s comment saved me because im not much of a computer person haha

  732. Paully
    September 27th, 2010 at 07:39 | #798

    THANK YOU SO MUCH!!!! IT WORKED :)

  733. MarkoxDD
    September 27th, 2010 at 14:45 | #799

    Juct run in safe mode, start, find in programs vhere is security tool, right click on it, properties find target, and delete.

  734. MarkoxDD
    September 27th, 2010 at 14:47 | #800

    (safe mode) while you starting your computer pres f8

  735. Rose
    September 29th, 2010 at 09:45 | #801

    Unfortunately, i paid for the program but called my credit card company and filled a claimed and blocked them from collecting any payments because its fradulent. Norton antivirus software scanned my system and took it off. I added the software immediately after. It also protects your computer from this stuff altogether.I suggest u get antivirus software asap.

  736. Pete
    September 29th, 2010 at 15:57 | #802

    @Weasel
    After hours of trying different things This worked for me (on VISTA).
    Thank you so much for posting this method.
    Pete

  737. Ashley
    September 30th, 2010 at 14:54 | #803

    Welp i guess ive been living under a network rock but I just had my first encounter with security tool. Holy f. I googled how to get rid of it over and over and read tons of threads..Spent prob 40 hours messing with it GAH! Anwho I fixed it and if anyone cares heres how: Ok so mixing and matching stuff I went to that rkill page and downloaded that…after having to shut my computer on and off 10,000 x’s until security tool didnt immediately pop up and i could actually get online and run a program. Patience is a virtue however and finally I got it to do its magic, (that inventor should be knighted) it killed S.T temporarily and allowed regular access to computer land as before. Then i tired to download that suggested antimalware software that was supposed to lasso it up and whatever else buuuut fter it scanned for an hour, didnt find a damn thing. Great. Not really. Heres the deepest secret nobody knows now though MICROSOFT SECURITY ESSENTIALS, which i downloaded off their site (i have a pc btw and deeply regret not getting a virus-ninja mac in the first place)this thing scanned my shit and found tons of stuff, including the specific files rkill told me it destroyed. Can I get an AMEN! I told it to remove em. Emptied out the recycle bin just in case and not a single hit on S.T yet.DAMN THE DUTCH!

  738. Ed the Net
    October 1st, 2010 at 14:29 | #804

    Genius,

    Removed within 5 mins and not returned. Can’t believe this worked so quickly.

    Any who has issues, use this remove method.!!!!

    Thanks

    Ed the Net

  739. Brian Demeter
    October 2nd, 2010 at 00:30 | #805

    This thing must be ever changing. I tried to get task mgr up and this darn thing kept closing up on me. Here is what I did;
    First I went into programs and found the shortcut, I then right clicked and opened up properties. I opened that up and clicked on find thread. This was the only way I was able to find the main program files. I single clicked on the files in this folder that I did not know of to see the orrigination date. After this I shut my machine down and re-booted. As soon as windows came up I opened task mgr before security tool had a chance to load and close me out. I then shut the two files down and went back and removed them. Good luck, this ones no fun!!!

  740. Gayle W.
    October 2nd, 2010 at 18:30 | #806

    Hmm, Brian, I did what you suggested and it’s gone for now. I only found one file containing the string of numbers. I ended it on task mgr. and then removed the file and dumped recycle. Is there another file I missed? I haven’t rebooted yet to see if it’s gone permanently.

  741. Gayle W.
    October 2nd, 2010 at 20:21 | #807

    I downloaded Microsoft Essentials and it’s clean now. I rebooted and nothing came back. I checked my task mgr. and nothing was running for this. whew….this is one nasty bug. It gave the date and time it was installed and I wasn’t home but the computer was open for a teen-age visitor. I don’t know where it came from. Thanks Brian….you solution took about five minutes. I think those who have multiple files may have clicked on this thing numerous times.

  742. Sheila Cunningham
    October 3rd, 2010 at 00:05 | #808

    Hey, Sorry to hear about all ur problems…I felt your pain today after the virus Security Tool appeared on my laptop when I tried (for old times sake) to log onto my Bebo account!
    Anyway after a full days scan and every attempt! I was told by a computer genius what to do!!
    1. Turn off Computer
    2. Turn on computer and press F8.
    3. Choose the Safe Mode option
    4. Once loaded it will look like a really old windows setting.
    5. Go to Start and in the search bar type in ‘System Restore’
    6. It should take u back to when ur computer was working fine e.g. the date and time. Press Restore
    7. It restarts ur computer into normal mode and vola!! it should be fixed!
    8. I hope this works for you guys:)
    BEST OF LUCK…

  743. chris s
    October 3rd, 2010 at 01:15 | #809

    @blue carbuncle
    yo guys create a new acc and delete the account u had security tool simple but my sisters are going to be pissed god speed

  744. Dick
    October 4th, 2010 at 15:01 | #810

    This fix worked great – the only difference was that it was a six number file name and there were two of them – thanks for the help

  745. fergdude
    October 6th, 2010 at 20:39 | #811

    had this today, blocked every attempt at everything i tried, eventually rebooted and hit escape to enter system setup, then system restored from there, alls good now

  746. lar
    October 6th, 2010 at 22:02 | #812

    lar :The easy wayI had to make changes to the comments of PP (#786) to get it to get rid of the bad boy. I have learned more about the computer because of this, who has the time, now I will learn about safe (note needed here.First make sure there is no hidden files:( all done in normal mode) click the Start button,go to my computer, go to tools at the top, then click folder options, then click View, then check the box “show hidden files and folders”, then click OK. Because he was hidding from me.
    While still in my computer do the following:clicking at each location.
    C:\Documents and Settings\Administrator’s name\Local Settings\Application Data
    There will be a folder/icon in there that has eight numbers or so as a name (ex 91908431)
    Rename it( any name), Delete this bad boy( in my case it would not let me delete it so I restarted the computer with the new name on that bad boy and it did not come up and then I went back in to my computer and repeated steps above starting from C: and the bad boy was there with the new name then I could delete it), empty recycle bin
    Restart
    Hope this helps some one.

  747. david
    October 9th, 2010 at 02:51 | #813

    Thanks lar, I’m a computer dinosaur but I was able to follow your steps and it worked, but there were three files Ihad to delete.

  748. jacqueline
    October 9th, 2010 at 05:07 | #814

    I would like to get my hands on the perv that did came up with system tool. I can’t get microsoft windows live onecare safety scanner to work. It just keeps bringing up the contract agreement page and I enter accept, it goes right back to the ageement page. Who are these people that delight in the destruction of another’s income and entertainment? I hope our national security isn’t infected. I’ve tried all the remedies without success. HELP!

  749. james55
    October 10th, 2010 at 11:44 | #815

    thanks a lot, chris 793
    i already try every which way i could find in the web, either been blocked or forced my computer to shut down, even try to ” regedie ” does not accessible.
    finally, follow chris’s way and manually removed this fxxx spyware successfully.

  750. MD
    October 10th, 2010 at 23:52 | #816

    Brian thanks a lot!!!!!
    Crap cleaner rules!

  751. Mahmoud
    October 13th, 2010 at 17:19 | #817

    Ok guys, i had the SAME! problem 3 hours ago, when they showed me that fake scanning and asked me to download i actually found the answer!!! I swear it made me bored to death and i even made a new account, but then i said let me try again, the answer is when you start your computer, dont go all open task manager and all, all what you have to do is Press F8 on the start and go to safe mode only, open start menu and click all programs, you will see the damn program there, Right-Click on it and Click the last option, propereties or whatever its called (Sorry I Forgot the name) Then it will open a little page and it says in the end of it find the location of this file or something like that, go there and delete it, its going to be a 7-digit number, with the symbol of the Program, delete it, go to recycle bin, delete the program completley, Shut Down your computer, Turn it on again, And be happy with your old buddy! I Hope this helped, because i only went to this website, and im telling you people its a big annoying pain in the ass to delete this program, but once you do what i told it wont take 30 seconds, i wish you guys luck and i hope people who made this bullshit go to jail. Thank you, have a great time.

  752. Terry
    October 13th, 2010 at 21:16 | #818

    Security tool is blocking any downloads I try to remove this nasty bug. Help!

  753. RALPH
    October 14th, 2010 at 00:34 | #820

    as soon as you log on and windows pops up hold down crtl-alt-del then click on security tool and en task it will stop it and you could put anti-spyware on computer without security tool stopping you

  754. Andrew
    October 15th, 2010 at 06:00 | #821

    Click on the icon of security tolos located in programs, with the right button and mess with the properties of this application, selecting hidden, do not read, run as administrator, basically preventing it from running by itself.

  755. SoAnnoyed
    October 15th, 2010 at 09:47 | #822

    ok ive heard about philly keith’s famous method, and im about to delete this crap, but wat do u mean by delete any leftover shortcuts?

  756. Savio
    October 15th, 2010 at 13:15 | #823

    My computer got this shit today. Trying my best to do everything to remove it. Hope its out by the evening.

  757. Stijn
    October 15th, 2010 at 13:52 | #824

    I also had this annoying virus, this is what i did to remove it:

    - Write down the 8-digit code, can be found in processes or when you hoover over the security tool icon
    - Start up in safe mode (F8)
    - Search for code in windows search (make sure to click, search hidden folders)
    - It will probably in some application data folder, just remove it
    - Profit $$$

  758. Pickledoctapus
    October 17th, 2010 at 15:31 | #825

    Tried most things. Nothing worked.
    Finally found a % 100 fix.
    Start computer in safe mode
    Switch off system restore(switch back on afterwards)
    Delete all Temp folders C:Documents and settings\Administrator\Local Settings\Temp
    Open up internet explorer>Internet options>Delete browsing history(cookies ect) and delete everything.
    Delete all referance to this bug in ‘application data’(look posts before for nav instructions)
    Runrkill
    Run Malwarebytes
    Restart
    clean

  759. simonscatmeow
    October 17th, 2010 at 18:32 | #826

    this crap seems to be circulating from a fake UPS delivery service email too.
    hope it doesn’t come back.

  760. mauro
    October 18th, 2010 at 01:00 | #827

    Perfect description and help! Best thanks, Phil.
    Itzi

  761. mauro
    October 18th, 2010 at 01:04 | #828

    @SoAnnoyed

    Leftover shortcuts are shortcuts, icons, etc. eventually left on your desktop even after deleting the malware.
    If you see them, delete them. If you do not see them, it simply means that your system has already removed all malware crap and is functioning again. Ciao.

  762. Adam
    October 18th, 2010 at 02:40 | #829

    i tried but whenever i try ctrl shift and esc a security tool message pops up and says that it wont let me browse please people help me

  763. pickledoctapus
    October 18th, 2010 at 13:13 | #830

    I was looking up some info on what looked like a legitimate medical website and I got this quick flash of “java loading application”. After that this cr-p appeared.
    Install latest version of Java software and delete old versions.
    Also the world’s biggest porn site is down (XNXX). Is there a connection ???

  764. rlock
    October 19th, 2010 at 03:22 | #831

    KK comments really worked!!!

  765. Kristina Gajita
    October 19th, 2010 at 10:46 | #832

    @admin
    i restored my laptop to an earlier date..will it still come back? if so what do i use to prevent it from coming back? thanks!

  766. Jim Hupe
    October 20th, 2010 at 03:11 | #833

    This nasty thing comes from a false request to update Adobe Acrobat Reader, we found out the hard way

  767. abhishek
    October 20th, 2010 at 21:46 | #834

    restart the computer in safe mode and delete the file in appdata…..

  768. Pete Rat
    October 21st, 2010 at 13:28 | #835

    I got infected with this yesterday and have tried various ways of removing it. The problem is I can’t now find the location of the Security Tool folder. I start in Safe Mode and go to All Programms and right click on Security Tool, go to Properties and it tells me that is in in the Application Data Folder. However, when I search for it (the torch thing) it says it has been changed or moved – the name of the file is 74143.exe. If I go manually to the Application Data folder, it is not there. I have asked the computer to show all hidden files, etc. and still I can’t find it. Has anyone got any ideas. Whoever did this needs their balls chopping off!

    • October 21st, 2010 at 14:12 | #836

      Pete : Set your PC to show system files as well. Typically, files with attribute System are not shown even when hidden files are. Also, download and install process explorer and launch it instead task manager. It will show the location of each of the processes.

  769. Pete Rat
    October 21st, 2010 at 17:19 | #837

    Thanks Admin but I still can’t find any folder with it in! I can’t install process explorer because I can’t get on line to do it (I’m using another computer now). My computer is completely useless as it freezes every time I open an application. I’m going to try and salvage what I can from it and start again!

  770. Rach
    October 21st, 2010 at 22:47 | #838

    I had some trouble finding the folder that the program was in.

    Here’s the file name: cDgCp000902

    It was located under:
    My Computer> OS (C:)> ProgramData> cDgCp…

    You might try searching for a similar file name. KK’s solution really helped! (If you want to find KK’s solution press “CTRL” and “F” at the same time. then enter “KK”.

    P.S. If you’re having trouble with rebooting in Safe Mode, (safemode) *while* the computer is rebooting, press “F8″ (located near the top of your keyboard, and hold it down until the option for safe mode apears. :)

    Thank you all so much- I sucessfully deleted this awful virus! YES!!!!!!!!!

  771. Le Beret Gascon
    October 22nd, 2010 at 01:31 | #839

    When your system’s OS has been nobbled like this the easiest way to repair a Security Tool infection is not to use your system’s OS. Remove this thing by downloading the free and excellent Hiren’s Boot Disk iso (http://www.hirensbootcd.net/download.html) and burn it to a CD using the free CDBurnerXP (http://cdburnerxp.se/download).

    Once you have created your boot CD, boot the infected computer from the CD, not the Hard drive (you may have to make a boot priority change in your BIOS – hit Del or F2 when your PC boots up, depending on your BIOS). But many PC’s will look at the CD/DVD drive first before trying the hard drive. If there is a bootable CD in the drive (like the one you created above) it will run off it.

    On the first menu you will find Mini Windows XP which is a small version of XP that boots directly off the CD, not your hard drive. Select it. Once you have got Mini Windows XP running you can explore the infected hard drive (normally C:\) using Windows Explorer and find the folders hiding the Security Tool executables. These normally hide here (the files and folders for Security Tool and Security Tool have random names consisting of a string of numbers, here represented by 123456789):

    %AppData%\123456789
    %AppData%\123456789\123456789.bat
    %AppData%\123456789\123456789.cfg
    %AppData%\123456789\123456789.exe
    %UserProfile%\Desktop\Security Tool.lnk
    %UserProfile%\Start Menu\Programs\Security Tool.lnk

    On Win2K/XP %AppData% can be found here: C:\Documents and Settings\Application Data
    On Vista/Win7 %AppData% can be found here: C:\Users\AppData\Roaming or C:\Users\AppData\Local

    On Win2K/XP %UserProfile% can be found here: C:\Documents and Settings\
    On Vista/Win7 %UserProfile% can be found here: C:\Users\

    Once you have deleted the Security Tool executables remove the CD from the drive and reboot the PC. Now (download and) run Malwarebytes, SpybotS&D and HijackThis to locate and kill off the stragglers.

    I’ve been removing Security Tool for a couple of years now from customers’ computers without any problems using this method, I hope it works for you. Wherever possible, please donate to the providers of the free software that allows you to regain control of your PC. But I know most people won’t bother once their PC is up and running again. Which is a shame.

    • October 22nd, 2010 at 09:32 | #840

      Le Beret Gascon: Your way is way to complex. Usually you can easily kill security tool process with either task manager right after reboot, or process explorer. It is not THAT bad :) I would prefer people to invest in good internet security suites and anti-malwares with real time protection first. Would be far less work for me :)

  772. Cole
    October 23rd, 2010 at 16:34 | #841

    As an update, the newest version appears to be located in the Appdata/local folder as well and now goes by the name “028263.exe”. To locate where it is installed on your computer, just right click on the “Security Tool” icon (while your computer is booted in safe mode) and click “properties”. Under properties you should get the full path of the executable which you can then just navigate to and delete. Afterwards I recommend running something like Ccleaner to clear out registry values created by the malware.

  773. Lynn
    October 25th, 2010 at 00:53 | #842

    Is there any way to file a class action lawsuit against these folks? I would like to see someone in jail for fraud.

    • October 25th, 2010 at 08:21 | #843

      Lynn: Poor chances. They are not a real company, but just a bunch of international scammers.

  774. Jordan L.
    October 27th, 2010 at 01:21 | #844

    Alright this system tool is p****** me off. Not too familiar with all this technical jargon, and would like the simplest the way to remove this. I have been running in safe mode with networking all day and would like to return to Windows normally. I have Windows Vista and would like the simplest way to remove this please.

    • October 27th, 2010 at 10:06 | #845

      Jordan L: Simplest way is to run couple of anti-malware tools after stopping security tool processes. The executables can be launched if you rename them to iexplore.exe . For tools, I recommend Spyware Doctor, Hitman Pro and MBAM.

  775. Ike
    October 27th, 2010 at 02:24 | #846

    @Joe
    try rebooting your computor. that, before Security Tool kicks in, launch Task Manager and when Security Tool does kick in, you can stop it. Task Manager is found if you press control delete alt simultaneously.

  776. Jordan L.
    October 27th, 2010 at 16:38 | #847

    Real quick here, I rebooted my lazptop and brought up the task manager the instatnt Windows started up and the System Tools did not even try to start up. What will i need to do after this to make sure it is deleted or removed(in plain English please, cuz i have no idea what some of these comments are talking saying)?

    • October 27th, 2010 at 17:20 | #848

      Scan with Spyware Doctor. Install or upgrade your antivirus software.

  777. Jordan L.
    October 27th, 2010 at 17:37 | #849

    I am running a full scan with both Windows Defender and with my Trend Micro Internet Security. Is there another way, other than manually removing and without buying SpyDoctor, to remove this?/

    • October 27th, 2010 at 23:13 | #850

      Jordan: You can try other tools as well. We had seen some versions of security Tool that were very resistant, and only Hitman Pro together with Spyware Doctor solved the problem (Hitman pro fixed some of rootkits, Spyware Doctor took out the rest).

  778. zyzacks
    October 29th, 2010 at 05:40 | #851

    Here’s how I just got rid of it:
    1. Restart your computer. Hit control-alt-delete while it is going through start up. Look at the processes that are running, find the one that is 8-10 numbers followed by .exe; Write down the number, then click on it and terminate it.
    2. Go to Windows Search. Use Search Companion and make sure that the “search hidden files” option is selected. Search “all files and folders” for the 8-10 digit number that you wrote down.
    3. My search found two entries. Delete all of them (remove to recycle bin).
    4. Restart your computer. Repeat the process until Security Tool no longer starts up. For me, two cycles of this did the trick. I restarted my computer a few more times to make sure it didn’t return. So far, so good.

  779. philly keith is a legend
    October 29th, 2010 at 16:04 | #852

    Follow Philly Keith’s instructions to get rid of security tool. Works like a charm. Cheers Philly Keith!

  780. Keith
    October 29th, 2010 at 22:51 | #853

    Thanks zyzacks for that. It put me in the right direction. I’m running Win 7 and when I control-alt-delete’d I immediately was taken to system restore and recovery. Ran the wizard, rebooted and the application was gone.

  781. adam
    October 30th, 2010 at 03:32 | #854

    i cant open task manager. i have tried akll of the workarounds, including copying it from the system files and renameg it “mozilla firefox” but i can only open it for a split secod before it gets shut off. plus i canniot enter safe mode. how can i work around this?

  782. adam
    October 30th, 2010 at 04:04 | #855

    well, i finally got rid of it. i searched for “system tool”, then copied the shortcut i found onto the desktop. then i checked under properties, and found an 8-digit number. i then searched for that number, and when i foubnd the 8-digit files, i renamed them to “windows defender” . then, when i rebooted, the program blocked its own critical files, and failed to start up. the i could remove it! hope this helps.

  783. prasahnth
    October 30th, 2010 at 13:28 | #856

    in my C:\Documents and Settings\All Users\Application Data there are no 8 digit number..pls help me…. pls pls pls pls pls……

  784. philly keith’s fan (prashanth)
    October 30th, 2010 at 14:38 | #857

    @Philly Keith

    thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx thanx …very much!!!! ur trick is 100% working!!!!!!!!!!!

  785. Norm2683NZ
    November 1st, 2010 at 03:19 | #858

    Also check c:\windows\prefetch Folder (providing C:\Windows is your installation location) for filenames similar too 73661202.exe-06EE1F55.