Remove Security Tool (Removal Instructions)
April 9th, 2010 | by Alex |Security Tool Descriptions:
Security Tool is the rogue anti-spyware program, created to look like a real parasite remover. However, only its name sounds impressive but there is nothing like that in the application itself. The parasite gets into your computer through different Trojans and you aren’t even able to notice that. One more way for Security Tool to enter your system is download it through the browser hijacker S i t e s e c u r i t y t e s t.c o m.
As soon as you install Security Tool on your machine, the following annoying and nerve-racking things start to flood it. Users start getting popups as well as fake system notifications which claim that there are a list of threats found on your machine. In addition, Security Tool pretends to scan your computer. But the simulated threats can be removed only if you purchase the program.
All in all, these are not the only features that make Internet users infected by Security Tool start worrying. The application will also decrease the performance of your system, block certain websites, and won’t let some applications to run. Therefore, we advise you not to install Security Tool on you computers. If it has already sneaked in, remove it as soon as possible. If you want to remove Security Tool manually, we provide the instructions below. You can also do it automatically bu downloading spyware detection utility. Good luck!
Remove the rogueware as soon as possible.
Manual Security Tool Removal Instructions:
Stop These Security Tool Processes:
(Learn how to do this)
Security Tool.exe
uninstall.exe
4946550101.exe
Find and Delete These Security Tool Files:
(Learn how to do this)
%System Root%\Samples
%User Profile%\Local Settings\Temp
%Documents and Settings%\All Users\Start Menu\Programs\SecurityTool
%Documents and Settings%\All Users\Application Data\SecurityTool
%UserProfile%\Start Menu\Programs\Security Tool.lnk
%UserProfile%\Application Data\4946550101\4946550101.bat
%UserProfile%\Application Data\4946550101\4946550101.cfg
%UserProfile%\Application Data\4946550101\4946550101.exe
%UserProfile%\Application Data\4946550101
%UserProfile%\Desktop\Security Tool.lnk
%Program Files%\SecurityTool
Remove These Security Tool Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “SecurityToolâ€
HKEY_CURRENT_USER\Software\Vista Antivirus 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SecurityTool
HKEY_LOCAL_MACHINE\SOFTWARE\SecurityTool
77DC0B63-ff35-4ba9-8BE8-aa9EB676FA02
7897A556-0E82-49F4-8C80-D0983CBF0352
7F23592B-8F2C-4C08-83A8-BBE01BF9CC64
a791a998-ae9a-42cb-b833-45279b64dd30
AF4DA69B-E1D6-469A-855B-6445294857D4
184 Responses to “Remove Security Tool (Removal Instructions)”
By neha on Sep 25, 2009 | Reply
i like xp vista is slow
By Mai on Oct 7, 2009 | Reply
I tried manually removing this virus but it kept coming back. I also couldn’t go in some of the folders (access was denied).
I purchased Webroot with Spy Sweeper. I did a full system scan and it said there were no infections.
So I waited til the virus came back, and took security’s tool DIRECTLY to my Anti-Virus system so it can scan it. It said the file was fine! I am going nuts.
By Killa on Oct 12, 2009 | Reply
I removed “Security Tool” by booting into safemode, the tool was not in program files\security tool. It was in %user profile%\application data\*A RANDOM NUMBER*\randomnumber.exe
it was in hkcu\software\microsoft\run\
and it had an install .bat(batch) file that ran at startup to re-initiate the infection.
By Dave on Oct 12, 2009 | Reply
How I got rid of SecurityTool. …
Download SuperAntiSpyware free version.
If you can get it to run on your infected machine do so and click Full Scan.
If SecurityTool shuts down your machine during scan then reboot and hold down CTRL ALT DEL to boot into safe mode where you can stop the SecurityTool program in Windows Task Manager (this may need a few attempts).
Once SecurityTool has stopped then click New Task.
You are now looking for SuperAntiSpyware program. To find it click Browse and locate the program.
Run the program to scan your machine and delete the Malware. One done you can reboot normally.
By Nice try. on Oct 16, 2009 | Reply
However, I am completely annoyed with anti-virus software trying to get me to pay money.
My computer’s safety should not be something I have to pay for.
Forget it.
By Chris on Oct 20, 2009 | Reply
I can’t even open some programs. I have tried downloading Spyware Doctor and some other free anti-virus programs and it won’t work. I think my only option at this point is to reboot but I have a lot of data on my computer I don’t want to lose. This is frustrating.
By Mary on Oct 20, 2009 | Reply
I followed Killa’s suggestion on a friends ‘puter that had been infected and it worked. Boot up in safe mode, right click on the Security Tool icon to locate the file location, then delete the file. I shut her ‘puter down completely, waited 15-20 seconds then fired it back up. I restarted 2-3 times to ensure the virus didn’t regenerate. I didn’t find a .bat file…
By Michi on Oct 21, 2009 | Reply
Downloaded Spyware Doctor but it won’t run. No more Security Tool popups but I can’t open Control Panel to get to Add/Remove Programs or others under CP. Also lost my desktop icons completely. Thank goodness I can still open Start menu. I have to shut down Zonealarm’s firewall in order to get into Internet Exp. that was how I downloaded SpyWare Doc….like I said it won’t run. I’ll keep trying.
By George on Oct 21, 2009 | Reply
When I go into Safe Mode, I do not see anything that shows Security Tool. When in regular mode, I can not get my CA Security Center to open. Any other ideas. Please help
By hdave on Oct 23, 2009 | Reply
This malware seems to prevent the installation of other security programs I have tried to install. I was able to install windows sysinternals process explorer and kill most of the security tools processes but have been unable to manually remove the virus. Now I get no ui/gui at all only a blue background (it’s not the win blue background of a lockup). trying to start up in safe mode or any other mode than normal just results in an endless reboot loop. Hope someone has some new suggestions.
By JWalker on Oct 23, 2009 | Reply
After following the manual removal instructions in safe mode, I rebooted my computer and it ran fine. After another reboot the virus regenerated. Apparently the install.bat file was not removed, and caused the virus to come back. This problem was solved by disabling the ms-dos command prompt, since .bat files run ms-dos commands.
By Amy on Oct 24, 2009 | Reply
I got rid of Security Tool twice by booting in safe mode and right clicking on Security Tool, then going to properties and clicked Find Target File then deleted. The third time it came back, I was unable to boot in safe mood. I booted in debug mode and was able to download the free version of MalwareBot. It immediately picked out the file and put it in the vault. Have not had anymore problems. This has been the worst headache. This locks you out any place on your computer that you might would be able to get rid of it at. Even would let me on the internet, just not on any sites or downloads that had to do with removing it.
By Lynn on Oct 26, 2009 | Reply
hello this ssecurity tool wont allow me to remove it anything i down loaad to remove it it stops it and i cant open my taassk bar or control panel add /remove prograams it has taaken over my icons on desk top someone help pleasse
By Aaron on Oct 26, 2009 | Reply
This virus blocks all .exe files from loading, with a few exceptions. One of them is firefox.exe so rename hijackthis to firefox.exe and open it. Kill the randomly numbered process and proceed to run your virus scanner to clean it.
By mak on Oct 29, 2009 | Reply
contra Amy above — my understanding is that MalwareBot is another malware scam.
By Andrew C on Nov 8, 2009 | Reply
Hey all I just finally dealt with Security Tools, which I think came up while watching a movie online. My anti-virus and firewall were off to test other things.
Well I noticed all these links to downloading SpyDoctor, and with all the amazing comments, I was about to pay for it (even though a cost was not advertised).
SpyDoctor also seemed to know lots about this Security Tools ;S
It even showed the name SecurityTools as a problem found!
Well I kept looking and found SpyBot Search and Destroy, a very civilized program that asked you to donate what you thought the program was worth. It did find errors, but it did not work for removing SecurityTools.
I checked around my computer and found that I also had MalwareByte’s Anti-Malware and THAT WORKED! Boom a quick scan and ST is gone. THAT is the one to get. Its free.
By Marty W on Nov 13, 2009 | Reply
The best way to remove it… simple… boot up in safe mode, goto run and type ‘restore’ click the system restore icon and drop back 2 days… Security Tool all gone!!!
By Carlos T on Nov 15, 2009 | Reply
1. I used Hijack This and found two very suspisious keys in HKLM and HKU.
6706429.exe in both places.
2. I would seem that the software is using some sort of seed from the system clock to install itself, because the number may be different with each install.
3. Olny after I removed these keys and rebooted the system was I able to remove the executables.
4. Even though the files still existed, the KEY removal from HKLM and HKU caused the software not to load and allowed me to remove the files from “C:\ProgramData” (A hidden directory)
By Chris on Nov 26, 2009 | Reply
On Vista, this “fake-anti-virus” application started, guessing from a running bt download, and before rebooting I found this page.
I waited for the app to open a window, killed the process (#####.exe). I noticed a shortcut in my menu pointing at C:\programdata\#######.exe, so i deleted that file.
The desktop still hid all the icons if i focused on a window, so I started a McAffee scan. Somewhere through the scan Vista rebooted to finish some updates and the computer has been normal since.
I am running another scan now, but the only reg key I have found is HKLM – Software – 29631122 with a FirstRun entry (binary).
I need a good registry cleaner as it is chock full of uninstalled program entries.
By Carlo Schots on Dec 2, 2009 | Reply
A friend asked me to help him remove the Security Tool malware that locked up the applications on his computer. The removal instructions I found on the internet did not work, maybe because it was a Vista OS.
I solved the problem in 3 steps after booting in the safe mode (F8 while booting). In this mode Security Tool does not come up.
1/ Find: Security Tool. The two lnk files where found. Delete them and note the random number exe file they point to and the locations.
2/ Find: random number: delete the files with this random number name. Empty recycle bin.
3/ regedit: (to edit the registry) Edit Find: the same random number. Delete all the corresponding entries. Repeat Edit Find until you reach the end of the registry.
Reboot and start up normally.
By jenie on Dec 4, 2009 | Reply
you have to download malrebytes’anti-malware after downloading it just unplugged the internet connection so that security tool will not appear in your screen then restart your computer. Open malware then click run and follow the instruction.
By Jewell on Dec 5, 2009 | Reply
Thanks to Carlo Schots!! Security Tool was driving me to tears!! I’m not a computer wiz by any means and most of the instructions to get rid of this “computer held hostage/extortion scheme” were way over my head. Carlo Schots- You Rock!! Easy to follow; easy to do!! Thanks!!
By Steve on Dec 8, 2009 | Reply
I tried the same method as Mary,identically and
it worked.My computer has also speeded up considerably.Thank you Mary for your plain advice.
I found the path C:\Documents & Settings|All Users then had to type \Application Data\28864230 to reveal the icon to delete.
By stacey on Dec 9, 2009 | Reply
i have tried everything. Downloading virus remover, malware remover etc
all the ones i have gone on people have said it worked but it hasnt for me i download them and then security tool blocks them from opening.
I am going to go mad someone please help
By Stephen on Dec 10, 2009 | Reply
A friends computer had this in it and McAfee AntiVirus, but McAfee did not see it as a virus or malicious in any way. In a normal startup it would not allow a McAfee virus scan, nor would it allow task manager to be opened, or even the registry editor.
In order to remove it from the computer:
Search many many times and delete the specific matches to your search until you get the message “Finished searching through the registry.”
1) Boot windows into Safe Mode (Tap F8 repeatedly before windows boots to get a list of options, use arow keys to select Safe Mode and press enter).
2) After getting into safe mode find a shortcut to the program, right click and go to properties, in the properties window click on “Open File Location”, take a note of the name of the program for later.
3) Go “up” one level so you are looking at the folder the program is in, right click on the folder and click delete.
4) Search your computer for the name of the program without the .exe (usually a random set of numbers, in my case 26440218).
5) Delete anything matching that string of numbers exactly.
6) Open the registry editor by going to run (Start>Run in XP, Start>All Programs>Acessories>Run in Vista) and type regedit.
7) Click Edit>Find and search the registry for the name of the program without the .exe (the string of random numbers), ONLY delete entries specifically matching the name of the program, once an entry is deleted there is no undo.
9) Close the Registry Editor and restart your computer and let it boot normally and make sure that the program is no longer there. If it is still there follow these steps again until it goes away.
If that still doesn’t work then download one of the removal programs.
NOTE: Editing your registry incorrectly can lead to your computer not working, if your computer does not work the same as it did before you had the “Security Tool” then tap F8 repeatedly before windows boots until you get to the options screen and use the arrow keys to select “Restore Last Known Good Configuration” which will restore your registry to its last known working configuration.
By Slither on Dec 12, 2009 | Reply
It work. ST is gone. I boot windows into safe mode, then i went to C:\Documents and Settings\All Users\Application Data then i found there the folder of ST(80910321), delete it then run the regedit then i click edit>find randomnumber then delete all the files that pop then reboot.. but the helpctr.exe wont run plz help me on that
By matt on Dec 13, 2009 | Reply
Just a quick note to everyone having trouble with “security tool”
FOLLOW STEPHEN’S INSTRUCTIONS!
THANK YOU THANK YOU THANK YOU STEPHEN, YOU ARE A SAINT!!!
By Julia on Dec 14, 2009 | Reply
Following Stephen’s instructions was the perfect end to a very frustrating day. They work and are dead easy to follow. Thank you.
By Anita on Dec 15, 2009 | Reply
Follow Stephen’s advice! I have been working on deleting this thing for over 2 hours and Stephen’s instructions worked first time…thanks Stephen!!
By Ryan on Dec 15, 2009 | Reply
Step 1 – Restart Your Computer
Step 2 – Before the security tools actually runs hit cntrl alt delete then start the task manager.
step 3 – end the process of the security tools the name is usually a number.
step 4 – once you stopped that from working go to the shortcut, right click open file location
step 5 – go to that file location and delete everything.
step 6 – empty your recycle bin
step 7 – restart your computer and should be fine
hope that helps
By Chuck on Dec 18, 2009 | Reply
Thanks Ryan…it worked like a charm.
I only had one file in the shortcut location. It was in a folder with a similar name…I deleted both. This also seems to be the most simple method.
By Erik on Dec 19, 2009 | Reply
Easy removal of this crap program… get the Task Manager up quickly when you boot up. End any program that is listed as numbers, this is the security tools.
Right click on the shortcut for the Security Tools and select ‘properties’. Open the file location, it was Program Data for me. Select and Delete all files that are listed as numbers.
I did this and the Security Tools program is gone. Quite the pain in the butt…
By dustwolf on Dec 21, 2009 | Reply
I just got hit with this nasty virus on my laptop (XP Pro). A screen came up saying that “Security tools has successfully downloaded, although I didn’t download anything. I was just shopping for Christmas (some Christmas present I got!).
I figured it was one of those viruses, so I didn’t click on anything except I tried to bring up task manager so I could close the window. That didn’t work, it only brought up the full screen of this “security tools” and it started doing the fake scan.
I didn’t click anything, but just rebooted in hopes that I could get to either task manager soon enough to close down the program, or to explorer and get to a virus remover such as malwarebytes. That didn’t work either, the screen came up as soon as I rebooted, so I shut down again and tried going into safe mode. When doing that, the drivers only go halfway down and stop, then nothing.
I tried just rebooting normally, thinking if I signed up for that security tools with false info, at least I could get rid of the opening screen and access the net. Now when I try to reboot, I get nothing at all, just a black screen. Did I kill my computer by doing this the wrong way? Please help! Thank you in advance.
P.S. This is on my laptop and I do have my desktop that I’m using now. How can I safeguard (with strong preventative measures!) that something like this doesn’t happen on this one too?
By Dennis L on Dec 21, 2009 | Reply
Marty W rules!!! This piece of shit virus is finally off my computer. Simple instructions to follow. thx
By mattsimmo on Dec 24, 2009 | Reply
Having read everything here I did the following that – touch wood – has worked with Vista and the computer has been rebooted three times:
1. restarted my computer in safe mode by repatedly hitting F8
2. I then followed Stephen’s advice: “After getting into safe mode find a shortcut to the program, right click and go to properties, in the properties window click on “Open File Locationâ€, take a note of the name of the program for later.”
3. Once I had found the location, I went to it and deleted that .exe file.
4. Since I now knew what the programme was called, I then followed the advice at the beginning of this website:
“Remove These Security Tool Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “SecurityToolâ€
HKEY_CURRENT_USER\Software\Vista Antivirus 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SecurityTool
HKEY_LOCAL_MACHINE\SOFTWARE\SecurityTool”
5. Having found the files in the registry, I deleted them.
6. I then deleted the shortcuts and emptied the recycle bin.
7. I restarted my computer and downloaded SuperAntiSpyware (thanks Killa) which discovered another 2 files related to Security Tool and which are now eliminated.
I think finally the nightmare is over.
By ashley on Dec 24, 2009 | Reply
thank you stephen!!!
By Sam on Dec 25, 2009 | Reply
Blasted Security Tools tried to ruin my Christmas Day! I took the advice to start up in safe mode and just restore my laptop to the day before…worked! Hallelujah!
By Sam on Dec 25, 2009 | Reply
Yep Marty W saved the day!
By aimee on Dec 25, 2009 | Reply
dude, u r a god!!! xx
By JR L on Dec 27, 2009 | Reply
My mother-in-law had the same thing on her Vista machine.
I’m in St. Louis, but was able to remote in and take control of her machine. 2 weeks ago I installed Microsoft Forefront, as I get it free from work. Guess what? That worked! I was really surprised, as I couldn’t access the task manager, regedit, nothing.
Forefront did the trick!
By Darrin on Dec 27, 2009 | Reply
Thanks, it worked great and it is now gone.
By Darrin on Dec 28, 2009 | Reply
Guess I should have said thanks Ryan. Great info. Easy to follow and complete. Shitty ass virus is gone……….
By Mark on Dec 28, 2009 | Reply
On a vista system “security tool” blocked all access to booting into safe mode, or the task manager, and any access to do really anything. I put spyhunters detection tool to detect “security tool”, then Microsoft security Essentials. I seem to have fixed it without paying any money, I hope. both programs were loaded on to a zip drive.
By Raphael on Dec 30, 2009 | Reply
I did a similar thing like Ryan and it worked:
1) boot your infected laptop/pc;
2) click straight right mouse on the securitytool icon, copy the location path of the file into your explorer;
3) you won’t be able to delete the file, but you should be able to rename-it, in whatsoever;
4) reboot the machine, securitytool wont start, then go to explorer, delete the file;
5) double check with regedit if everything is gone;
thats it for now…
By James Best on Dec 30, 2009 | Reply
Stephen, you are a genius, i followed your tips step by step and got rid of the most annoying thing in my life lol! The security tool malware had spread itself twice onto my hard drive and with these instructions i wiped it off the face of the earth, FOLLOW THESE INSTRUCTIONS TO GET RID ONCE AND FOR ALL!!!
By Stephen on Dec 10, 2009 | Reply
A friends computer had this in it and McAfee AntiVirus, but McAfee did not see it as a virus or malicious in any way. In a normal startup it would not allow a McAfee virus scan, nor would it allow task manager to be opened, or even the registry editor.
In order to remove it from the computer:
1) Boot windows into Safe Mode (Tap F8 repeatedly before windows boots to get a list of options, use arow keys to select Safe Mode and press enter).
2) After getting into safe mode find a shortcut to the program, right click and go to properties, in the properties window click on “Open File Locationâ€, take a note of the name of the program for later.
3) Go “up†one level so you are looking at the folder the program is in, right click on the folder and click delete.
4) Search your computer for the name of the program without the .exe (usually a random set of numbers, in my case 26440218).
5) Delete anything matching that string of numbers exactly.
6) Open the registry editor by going to run (Start>Run in XP, Start>All Programs>Acessories>Run in Vista) and type regedit.
7) Click Edit>Find and search the registry for the name of the program without the .exe (the string of random numbers), ONLY delete entries specifically matching the name of the program, once an entry is deleted there is no undo.
Search many many times and delete the specific matches to your search until you get the message “Finished searching through the registry.â€
9) Close the Registry Editor and restart your computer and let it boot normally and make sure that the program is no longer there. If it is still there follow these steps again until it goes away.
If that still doesn’t work then download one of the removal programs.
NOTE: Editing your registry incorrectly can lead to your computer not working, if your computer does not work the same as it did before you had the “Security Tool†then tap F8 repeatedly before windows boots until you get to the options screen and use the arrow keys to select “Restore Last Known Good Configuration†which will restore your registry to its last known working configuration.
By Arlene on Jan 5, 2010 | Reply
Wow – this has now just costed me a whole morning’s fees, trying to get rid of this ‘virus’. What site to trust for a removal tool? I followed Steven’s tips, but “registry editing has been disabled by your administrator”. So I rebooted and it’s gone, but I think it’s just hiding, waiting, cause my antivirus (NOD32) just picked it up again, although I did another search and couldn’t find it. Holding thumbs. If it does appear again, I’ll just buy the an removal tool, but which one?
By Roza on Jan 6, 2010 | Reply
I got this earlier today, however as I am using vista, I kept getting prompted if I wanted to let it run cmd. Denied it, then it popped back up, shortly after I hit my “reset” button (shuts down computer at once) then I restartet in safemode, and the only file I can find is the lotsofnumbershere.exe
However, I got this true a website… Did not download anything. It simply spawned on my desktop and firefox crashed several times… Ima try to start normaly now, wish me luck
By Onetrakmindz on Jan 7, 2010 | Reply
Dude you rock!!
By Beth on Jan 8, 2010 | Reply
Thank you so much Stephen. YOU ROCK!!!! I spent countless hours trying to rid my computer of Security Tool. EVERYONE SHOULD TRY THESE INSTRUCTIONS. THEY WORK AND THEY ARE FREE. Thank you once again for being selfless and sharing your knowledge with the less skilled. You saved me a great deal of money.
By Walt on Jan 12, 2010 | Reply
Have Vista. Just removed “Security Tool” by: 1) Boot in safe mode 2)Use “system restore from Accesssories/System Tools/System Restore. Worked like a charm.
By Carol on Jan 15, 2010 | Reply
Followed Carlos’ instructions and that seems to have done it! thank you so much… i’ve been working on this for hours!
By melanie on Jan 17, 2010 | Reply
Thanks for your directions to remove Security Tool. It worked the first time. Thank you so much
By Jim on Jan 18, 2010 | Reply
Stephen, your directions worked perfectly on my wife’s XP machine. Thanks very much for sharing!
By Ann on Jan 20, 2010 | Reply
hi…my daughters gutted ..bought her computer for christmas an tonight found security tool.. been trying to follow stephens advice but once in safe mode the arrow keys are not working..
any advice plz xxxxx
By Ann on Jan 20, 2010 | Reply
its okies sorted now
BIG thankyou to RYAN XX
i now have a happy daughter ..
By Chris on Jan 21, 2010 | Reply
So what do you do when you cant get into safe mode? cant start any program in windows, everything is a “virus” according to Security Tools.
Is there some tool from which you can boot into and remove this annoying thing?
By King Kurt on Jan 21, 2010 | Reply
Thank you so much Carlo Schots and anyone else who has helped remove this terrible software… I have had a $2000 laptop out of avction for months but could not format it due to the important personal data I stand to loose so THANK YOU ALL for your advice. I would be happy to contribute money towards bringing the terrorists who make these programs to justice!!! They are “INTERNET TERRORISTS” that cause both personal and financial distress…
By Ann on Jan 22, 2010 | Reply
mine was the same ryan has given some very good advice..worked for me
By Taylor Elder on Jan 26, 2010 | Reply
Thank you Stephen, your advice helped me rid a friend’s computer of the virus.
You and everyone here ROCK!
By thorm on Jan 31, 2010 | Reply
GUYS
this is a lot easier!
just turn on your computer.
Look at ur desktop background. Smile
hold down ctrl+shift+esc in a while.
you are then able to navigate to the programs tab and close security tool.exe
Go to the bad files location and delete it.
Finally run ur antivirus app
Am I a fuckin’ genius or what?:p
By Ricky on Feb 2, 2010 | Reply
The solution can be much simpler than I have seen here although I’m no computer expert.
On Start up press and hold F11 key to access system restore. follow instructions BUT SET THE DATE OF RESTORE prior to the invasion of the Security Tool malware.
Problem solved.
By eric on Feb 6, 2010 | Reply
I just did this my own way…. i shutdown my computer then tured it back on… when its turning on use startup repair… i think its f11 …. it worked for me i gues cuz it restores ur computer to a time when it worked right. well try it if it works keep trying… i did it and im 17 lol
By JB on Feb 7, 2010 | Reply
Thank you to everyone who posted methods to fix this issue. .. It was a great help.
By Pippin on Feb 10, 2010 | Reply
Many thanks Stephen for your help. I got rid of it slightly differently because I couldn’t boot into Safe Mode. In XP I did Start Programs, found the name and, holding the cursor next to it, I got the file name and the number. Then all as you said.
Thank you again.
By eryn and shannon on Feb 13, 2010 | Reply
STEPHEN- YOU ARE THE BEST PERSON ALIVE!
By Laurie on Feb 13, 2010 | Reply
I wanted to thank Mary…I’m REALLY computer illiterate and was able to clearly understand what to do from her instructions and…it worked!!! I spent hours before finding her advice, then a few minutes later…completely cleared up. I’ll keep my fingers crossed that it’s out for the next few thousand times I log in!
By PJ on Feb 14, 2010 | Reply
I have Windows XP and yesterday Security Tool would not let me access anything and I mean anything!
Turned it off and then today, when I turned it on I pressed F8 for Safe Mode.
This then gave me the option of running the computer in safe mode or restoring to an earlier date. I chose restore and was able to go back to a previous date before the problem and this took care of. It’s completely gone.
Thank God…and good luck!
By Tiara on Feb 16, 2010 | Reply
Used Ricky’s advice, worked like a charm.
Thanks!:)
By Michael on Feb 18, 2010 | Reply
Dont know who said it first but just do what Ryan says!!! Fixed in minutes. Thought I was going to have spend money tomorrow on a pro!!!
Here it is again so you dont have to look-
Step 1 – Restart Your Computer
Step 2 – Before the security tools actually runs hit cntrl alt delete then start the task manager.
step 3 – end the process of the security tools the name is usually a number.
step 4 – once you stopped that from working go to the shortcut, right click open file location
step 5 – go to that file location and delete everything.
step 6 – empty your recycle bin
step 7 – restart your computer and should be fine
By Chadwick on Feb 20, 2010 | Reply
Thanks Marty W – your suggestion of using Restore worked and it was so easy!I have spent hours trying to delete this and following your instructions it was gone in 5 minutes.Brilliant!
By DaveNix on Feb 20, 2010 | Reply
A friend gave me his Vista os laptop 2hrs ago and said “have a go at that will you” what a nightmare loads of sites saying run this or that but it just wouldnt let me do anything in the end i did the following.
Downloaded a tiny programme called rkill to the desktop and rebooted, the second the desktop appeared ran rkill which stopped security tool before it could get going then ran malware bytes which removed it, after looking on here i could have renamed rkill as firefox or iexplorer and then it would have probably run.
By Eric on Feb 22, 2010 | Reply
Hey, I can not even start my computer, what should I do
By Josef on Feb 24, 2010 | Reply
Thank you all for the great advise. However, while there seem to be no signs anyware on my Vista system of this malware I still cannot open iexplorer, google chrome or any other browser. I tried doing a system restore and tried several points in the past but it always comes back with an error message. Has anyone else experienced this after removing everything and running scans (three different anti-spyware programs [incidently Norton will not execute either]) Any advise is appriciated!
By Kathy on Feb 26, 2010 | Reply
a big THANK YOU stephen!!! worked like a charm.
By Romain on Feb 27, 2010 | Reply
Thanks ryan it worked………..
By Pascal on Feb 27, 2010 | Reply
Thanks all! I followed instructions from Stephen on Dec 10, 2009 it worked perfectly on Windows 7.
Now I wish I can meet whoever programmed that SecurityTool garbage…
By rita on Feb 28, 2010 | Reply
Got windows message implying that Security Tool was one of their prods so downloaded, dumb fool, realised what i had done immediately but too late, so found which file it was stored in, dont know how i did it really i’m a bit numb when it comes to programmes but i think i went to propertys and into the security box which gives the option of allow on 4 processes or deny, got the edit and one by one edit each process to deny, when you come out all popups have gone the file pic on desctop has changed and the 2 icons on taskbar have gone. All i get now is my Bullguard telling me Security Tool has been stopped from entering malaware on my pc and i am still clean. I will find a good removal tool without paying but until then i appear to be ok. Hope this helps in the short term, quite proud of myself being a granny novice, need a slp round the head for getting conned into downloading it in the first place should have known better. Oh and I also did the ctrl-alt- delete to stop process running. Pig of a programme bring back hanging
By Ed on Mar 1, 2010 | Reply
I opened my computer in safe mode (F8 key), then went to System Restore. Restored it to a point before Security Tool infected my computer. Got rid of it. Seems too simple, but it worked for me.
By deji on Mar 2, 2010 | Reply
i had the same problem with security tool, now i have it removed thanks to stephen’s method.
By Steven.SA on Mar 4, 2010 | Reply
The system restore seemed to have worked for me.
My mom was on a forum where it said she had spyware and had to download security tool to remove it or our isp would be notified,She panicked and downloaded it
Start in safe mode, restore to a few days before you got it and all is good
By Bint Hasheem on Mar 4, 2010 | Reply
HOW TO REALLY TOTALY REMOVE IT FOR WINDOWS XP
PRINT THIS TO REMEMBER WHAT YOU NEED TO DO IF YOUR NEW TO PC WORLD.
1 Start in safe mode,THIS YOU DO BY PRESSING F8 SEVERAL TIMES WHILE RESTARTING YOUR PC.Then
2Restore to a few days before the security tool was there.
and after restore,
restart your pc and
ALHAMDULILLAAH IT works perfectos
By naty on Mar 5, 2010 | Reply
im in theprocess of deleting this virus im very computer illiterate so SOME ONE CHECK THIS AND TEL ME IF IM MISSING SOMETHING.
1.I WAS ON SAFE MODE
2.DELETED SECURITY TOOL SHORTCUTS
3.C;/PROG DATA;#######-COULD NOT BE DELETED THE ACTUAL FILE SO I DENIED ALL USERS FROM BEIN ABLE TO USE IT OR DO ANYTHING WITH IT
4.WENT BACK TO REGULAR WINDOWS AND DOWNLOADED HOUSECALL-IT WOULDNT LET ME B4 I WENT ON SAFEMODE AND CHANGED PROPERTIES
5.HOUSECALL FOUND 2 AND THEY WERE CLEANED
6.I REBOOTED MY COMPUTER AND ST WAS GONEBUT MY DESKTOP WAS STILL BLACK
7.I DOWNLOADED MALWAREBYTES.ORG AND FOUND 85 VIRUS OR BAD FILES I REMOVE SELECTED
NOW WHAT DO I DO TO CHECK IM NOT UNDERSTANDING REGISTERY EDIT THING PLEASE HELP I DONT WANT THIS TO COMEBACK…
By april on Mar 10, 2010 | Reply
Marty W…You are brilliant..thank you for the input! I downloaded so many stupid spyware helps, etc and then restored my computer and bam!…my desktop popped up!
By Dave on Mar 12, 2010 | Reply
Thank you to Stephen from December 10th!
By Doug T. on Mar 13, 2010 | Reply
I’ve just spent my Saturday morning going through the ST nightmare. Looked up several complicated solutions on the internet and finally tried Steven.SA’s solution. Just did a SYSTEM RESTORE to 300AM in this past morning and it worked. I’ve never done this before but it’s easy: just restart your computer on Safe Mode by pushing down the F8 key. The screen will prompt you to System Restore which you open. Be sure to set it far enough back. I was downloading a Safari update when the nasty pest popped up on my screen. I though it was the MS Windows security checking on the download. Unfortunately, it was Security Tool which ground my whole computer to a halt. Forget trying to uninstall or downloading Spyware Doctor. The System Restore is the best solution. Thanks again for the advice.
By Muhammad on Mar 13, 2010 | Reply
after reboosting my computer and setting up as safe mode, and deleting the file worked!!!!
By Henry on Mar 14, 2010 | Reply
I did what Walt did. My girlfriend’s computer had Security Tool on it. What I did was put the computer into Safe Mode. While on Safe Mode, I type in Systems Restore. It came on it show do you want to activate it? I press it and their box came on. Systems Restore was working and it shut the machine off. The machine came back on and everything was normal. Security Tool was gone.
By Henry on Mar 14, 2010 | Reply
I forgot to mention Ed did the same thing. I like to thank you guys.
By Amy on Mar 16, 2010 | Reply
I just used Stephens (12/10/2009) directions and it worked!!!! OMG I AM SO HAPPY!!! Stephen your amazing!! Thank you so so so much!!!!
By JeanClaude on Mar 17, 2010 | Reply
vista security tools ,safe mode and systeme restore OK
Thank everybody
By Chad on Mar 18, 2010 | Reply
I have XP and i have found nothing with numbers in it or a shortcut to ST (except for one in the task bar, which i right click and nothing happens). In task manager i am able to stop the program and it is an ave.exe file, and the sytem restore was not turned on so that wont work. Now with ending the process, i can work on the net. No idea, it has me so frustrated, that i dont think that i can even turn it back on. HELP PLEASE!
By Chad on Mar 18, 2010 | Reply
i have XP and i have found nothing with numbers in it or a shortcut on my desktop to ST (except for the one in the taskbar). In task manager i am able to end the process which is named ave.exe and it closes out all the windows and the icon in the dektop and i am able to surf the net. any ideas this is frustrating!
By Scott Brandon on Mar 22, 2010 | Reply
I had previously installed Microsoft Security Essentials when this virus hit me.I wonder if it had been dormant since it started last December?I rebooted in safe mode and let Microsoft S.E. do it’s thing.( it took about three hours for me)but so far… so good.
By Scott Brandon on Mar 22, 2010 | Reply
by the way,the program is free.
By Cabana Boy on Mar 23, 2010 | Reply
System Restore, Vista – Brilliant!
By Erika on Mar 23, 2010 | Reply
If you’re using Vista, it might be hiding itself in the task manager process “ave”. The description is also just ave.
By dazzler on Mar 23, 2010 | Reply
restoring your computer is soooooooo easy don’t know why everyone hasn’t done it that way it takes like 2 minutes and you dont have to search for files and numders and stuff. simples
thanks marty w
By Kyler on Mar 23, 2010 | Reply
This is what worked for me, go to Task Manager, Processes, right click ave.exe and End Process Tree.
By leo fuellas on Mar 29, 2010 | Reply
after one week of nerve wracking experience with this virus, i finally have it removed…i tried everything based on the instructions of different people having this sort of problem but to no avail, probably i have the worst case here, thanks to my spanish journalist friend! she told me to create another user account, because vst virus is usually attached to the user account, so i did, when open the new user account, i didn’t encounter the virus, but just to make sure, i scanned my hard drives using malwarebytes and avast and found several viruses, after deleting the virus i reboot to my previous user account just to check if the virus is still there, thank GOD….finally, VST IS ALL GONE! hope this will work for you also….. thank you TERESA! HEAVEN SENT ANGEL.
By Jason on Mar 30, 2010 | Reply
To the people saying system restore is the best one, blah blah, etc etc. DO NOT try to use system restore, this may get rid of the immediate problem but as system restore does not remove files then the virus is still in your system and can be activated even easier than it did previously as the components of it are still on your system.
Use the manual method or a proper removal tool…I may create a simple VB removal tool…if I do I’ll post the link here.
By Stephanie on Mar 31, 2010 | Reply
Security Tool is a bitch to get off your computer! For about 3 days, I couldn’t access the internet without annoying pop-ups, e-mail entirely, and it would shut down my computer at random times. Using advice from many of these commenters (thank you by the way!) I think I have gotten rid of it for good. If you look at Stephen’s advice above, it says to find the open location of the virus and delete it along with any other files with the same number. I did that. But then instead of going to task manager and using “regedit”, I just followed the other advice to use system restore at a date before you got the virus. I think it worked! Thank you to everyone who commented, you saved me from getting my ass kicked by my parents!
And to the creator of Security Tool: Go to hell.
By candy on Mar 31, 2010 | Reply
Thankyou Mary that actually worked!!..everyone try this
By Mandy on Mar 31, 2010 | Reply
In addition to what Jason said about System Restore, if you have made any changes to your computer before then, they will be gone too. And when you spent a lot of time to get those kind of changes, it’s a pain to redo them.
By Asheen on Apr 1, 2010 | Reply
ryan you are a genius
thanks a million 
By Oliver on Apr 1, 2010 | Reply
I followed Killa’s instructions to get rid of this pain in the arse.
Restart your computer in safe mode (F8 when you start up).
Then you need to locate the file. Type in ’security tool’ in your find icon and right click on the icon. Then select the ‘open file location’. This should take you to a security tool icon. Note you have to find the .exe file (i.e the full file and not a short cut). You can keep right clicking and choosing open file location on the short cuts until you find the full file (i.e. the .exe one). When you locate it simply delete it.
Then you can restart normally and the fecking horribke thing should have buggered off
By compign on Apr 3, 2010 | Reply
I got rid of it in much more easier way thn the video showed:(i use vista)
1. right click on the security tool shortcut icon as soon as u start the pc and see the desktop(do not delay)
2. go to properties and trace out the file location. for me it was
c:\ProgramData\10884728\10884728.exe
3. copy c:\ProgramData\10884728\ (do not copy the part 10884728.exe and note that for u the 8 digit number 10884728 can be different)
4. go to searh. then click on computer or my computer. thn paste the copied part and search to find the location of the file.
5.u will see the file usually 8 digit no(for me it was 10884728)and rename it w8evr u wish (u should rename).thn delete it. thn go to desktop and delete the shortcut icon. thn empty the recycle bin. the virus was vanished!!(thanks Allah)
p.s: do the process as quick as u can. if u fail to do so. restart pc and try again.
6.Thn i clicked on the “start” tab…typed “run”….in run box i typed “msconfig” and found out the file 10884728….unchecked the box beside it to disable the program.
5. u may restore ur pc or go to regedit to disable this file.(i restored but did not regedit) the video i posted in the previous comment will help u in this regard.
by the way i should thank Stephen and also the person who posted the video. good luck to u all!!
By denia on Apr 3, 2010 | Reply
OMG I NEEED HELP I DNT UNDERSTAND NOTHING ABOUT COMPUTERS WHATS REBOOT or boot i dont know omg this is driving me crazy this security tool it just installed itself no idea how or why please help this computer isnt mine my bro is gonnnna fucking kille me eeeeee
(((((
By Mike on Apr 5, 2010 | Reply
This piece of software (XP Security tool) Comes from a company that NEEDS to be shutdown. It is a vicious and malicious piece of crapware that needs to go away permanently. If anyone is willing to donate funds to a vigilante,…I can tell you where this crap originates from. Apparently this software gets bounced by a LOT of different servers. It’s parent company hosts its site on ALBATRON BLTD based in Turkey. Their website constantly changes, but this time we’ve found the culprit. Just need someone to go and shut them down. When you attempt to register the software, it takes you to a site with a hosted image. The images is hosted on bestpathsecurity.com and it’s main registar is ALANTRON BLTD. If anyone speaks Turkish, perhaps we can find out where these people operate out of before they close up shop and move again. They just re-registered their site, so we might get lucky.
By Malia on Apr 7, 2010 | Reply
I’ve been struggling with ST for days and I have a project due soon,I’m 11, si do is restoring it before ST showed up gonna work? PS I have an windows XP
my mom is gonna freakn’ kill me if she finds out.
O and to the creator of this virus: I hope you rot in hell and let ur soul stay there for all eternety. Or at least give him the death penalty.
By Dan on Apr 8, 2010 | Reply
Thx a million all of this help payed off, thought my PC was screwed for o moment ^^
By Steve on Apr 11, 2010 | Reply
This Piece of S**t won’t even let me open Firefox!! HAHA writing this with my orginally opened browser whilst figuring out how to get rid of it..
By Byron on Apr 11, 2010 | Reply
alright, apparently all the stuff you people have posted has totally screwed the process. Apparently the SOB that created this virus has not only read your comments and gone back to adjust the settings of his virus so that he could resubmit it almost completely unstoppable and detectable, he obviously has some connection with some of these companies that make this malware or knows how to circumvent them.
1) Malwarebytes now is blocked from setup/installation AND from running properly on infected computers (from personal experience). if it can’t run, it can’t work. Malware is trash….
2) apparently, even with the hidden files viewing option activated on a computer that runs vista (home version I believe), NONE of the files or file folders of which you speak even exist… FROM MY EXPERIENCE….
3) the only programs that SAY they can find and remove the virus and that actually RUN well enough to find it while infected all cost money…. HMMM, seems like quite the coincidence….
In other words, what you think is solving the problem really isn’t doing crap, OR the trojan/worm is mutating and now has the ability to avoid detection almost completely. I haven’t been able to even OPEN my regedit since the damn thing took hold of my crap old laptop… Can someone PLEASE find me a real solution that is free that actually KILLS this thing. Im not about to pay some stupid company 30+ bucks for something and then have it turn around and not be removed….
By Jay on Apr 11, 2010 | Reply
I tried the do it yourself methods mentioned above. No help after 2 hours of working on it. I did a system restore to last midnight and now it’s gone. Whichever method you choose, don’t pay for any software. This problem is quite fixable on your own.
By jack on Apr 11, 2010 | Reply
THANK YOU TO ALL WHO DOWNLOADED SECURITY TOOL AND IT STILL COMES ADD THIS TO FAVOURITES AND KEEP DELETING IT
By Install bat file on Apr 11, 2010 | Reply
How do I get rid of the install.bat file?
By Chris on Apr 11, 2010 | Reply
Awesome information from Stephen on December 10th. Easy to follow and worked flawlessly the first time. Make sure that you search ALL folders including hidden!
Thanks again Stephen!
By Stins on Apr 11, 2010 | Reply
How can I locate the file if I don’t have a shortcut? I am stuck trying to resolve this pain in the behind of virus…HELP!!!!!!!!!!!!1
By Stins on Apr 11, 2010 | Reply
As Chad stated from March 18th, it won’t let me on to do anything. Very frustrating! I also have XP, all out of ideas…
By jack on Apr 12, 2010 | Reply
OMG IT CAME BACK HELP!!!!!!!!
By Piero on Apr 13, 2010 | Reply
Ryan 15 December worked like a treat thanks
By lijabrty on Apr 13, 2010 | Reply
Thanks a lot Stephen (10 December 2009) it worked a treat!!!!!
By Court Q. on Apr 13, 2010 | Reply
Just a heads up and warning. Fixing as we speak, but this virus is now circulating omegle’s video chat. If omegle can spread it so can chat-roulette, etc. Again, just an FYI.
By Ken on Apr 14, 2010 | Reply
Follow Stephen’s (10 December 2009) directions and you will not have any more problems with ST. Very good instructions and they work!! Take note: A system restore will only resolve your problem temporarily. It will eventually come back to haunt you.
By KennyD on Apr 14, 2010 | Reply
I couldn’t do ANYTHING when this hit my computer. After 2hours of dealing with it, I submitted and paid for the software. Is my computer screwed now?? I’m unemployed and need my laptop to find new jobs!
Please, someone tell my that my laptop won’t be fried and that all I will be out is the $50 I paid.
Thanks,
KJ
By wtf on Apr 14, 2010 | Reply
are you even english? none of what you said even makes any sence? Did u try and fine the files in safe mode?
no malware is undetectable. Kaspersky just found it for me without even updating it to the latest vir def. Stupidly for me i was swapping from avg to kaspersky yesterday and earlier, I rightlicked/exit on kaspersky in the system tray and forgot to turn it back on before visiting ninja video and b
boom its there without any installation…crazy my girlfriend also got it from ninja video too without any protection. So if you visit ninja video make sure ur careful or it will come back onto ya comp again.
By wtf on Apr 14, 2010 | Reply
@ byron btw
By rob on Apr 15, 2010 | Reply
stepehen you god thankyou sooo much for your easy to follow instructions worked a treat first time. just in the nick of time for a presentation phew!!!
By Michelle on Apr 16, 2010 | Reply
Thank you Thank you Thank you! Your step by step instructions were spot on and worked perfectly to get rid of this! Had to go through the steps twice as it had loaded more than once but even for someone like me who is not a computer whiz, I was even able to do this! So thanks again!
By Michelle on Apr 16, 2010 | Reply
BTW..my thanks are to Stephen…..forgot to mention it was his instructions that worked so well.
By Mike on Apr 16, 2010 | Reply
god damnm it.. i have this security tool shit on my computer, but am unable to remove it even though i’ve reda through all the comments. why? ‘cus im not even allowed to go into safe mode! whenever i try to start the computer, be it normally or in safe mode, it reboots itself before i get to the log in screen. what the f am i supposed to do? i have vista.
By awareness on Apr 16, 2010 | Reply
guys regarding Stephens steps, i can’t find the icon or the shortcut of if anywr , how can i see the ST shourtcut?
By awareness on Apr 17, 2010 | Reply
can any one help me to get rid of this crap VST please? the problem is i can’t find the icon or the short cut of it, so that i get to the properties or to locate it? so any tips guys?
By russ on Apr 17, 2010 | Reply
i cant open the shortcut and navigate to the containing folder..
coz there is no shortcut
help
By Erik on Apr 18, 2010 | Reply
Best advice – boot in safe mode with f8, then do system restore to a prior date that you know you didn’t have the virus problems – you’ll be good to go! This is by far the best way to deal with this sh*t, and is basically painless. I spent 3 hours screwing with other methods to no avail. THANKS TO MARTY W!
By Greg on Apr 18, 2010 | Reply
What worked for me was to start Task Manager as soon as possible on startup. Delete the process that is all numbers, but take note of the value as you will use that to search your registry and program files. Then follow the instructions as listed on many of the websites for manual removal of this trojan.
Good Luck!
By awaerness on Apr 19, 2010 | Reply
Eric i was having the same problem just like strugling to locate the shortcut , till i manage to open my firefox then i’ve got soft ware call Reove Fake Antivirus , it should remove it for you after that go to your restore point and set it off then the virus is gone ,,,,,, and good luck
By Carly on Apr 19, 2010 | Reply
I just went into safe mode to stop it popping up and restored my laptop, easy took less than 10mins to get rid of from the time it appeared, no need to look for anti-virus/anti-spyware etc etc, a simple restore works wonders
By Danno on Apr 19, 2010 | Reply
I read and Read and read and re-read everything to do here above^ but the Rkill caught my attention i didnt wanna reboot my cpu who wants wait those few seconds wondering will it boot up or not , ill pass, i installed rkill.scr killed it in 2 seconds . done no more annoying pop ups great advice loves it . ty 4 the great Rkill advice. good luck to all other infected parties
By Biz on Apr 21, 2010 | Reply
What if you can’t find a shortcut to the file?? There is no random set of numbers on my desktop. The only place the XP Security tool is showed is the bottom right toolbar. When I right click on the icon it won’t respond with properties or anything.
Please help. I want to punch my computer.
By Eswar on Apr 22, 2010 | Reply
I have Vista Home Basic. This afternoon got infected with the Security tool scareware. To get rid of this fake program.
shutdown or power off your computer.
Power on
As the initial splash screen comes up keep hitting F8 repeatedly. This will bring up boot option screen
Choose run windows in Safe Mode using the arrow keys and hit enter.
Windows will start up in Safe Mode
Security Tool should not be starting up now in Safe mode.
Go to Programs>accessories>system restore
Restore windows to a date prior to the infection
Windows will be restored to an earlier date and will reboot itself up in normal mode without the stupid Security Tool scareware.
Took me 3 minutes to fix mine. Hope it helps.
By Pius on Apr 22, 2010 | Reply
Marty W. You are great! It’s quite simple and easy to fix the big problem….thanks bunch!!
By Moto 11 on Apr 23, 2010 | Reply
I got windows 7 ultimate and removed it using safe mode or safe mode with networking.
By Amid on Apr 27, 2010 | Reply
Hi, how can I remove Security tool fro my computer, this programm bloked my desktop and I can’t see anything
By LST on Apr 28, 2010 | Reply
Marty W. Thanks for the tip because it worked great. What a simple solution.
By CLJ on Apr 28, 2010 | Reply
Thank you Ryan….do exactly what he says and sorted in minutes! So simple when you know how!
By scstep on May 1, 2010 | Reply
I did the same as Eswar and had it fixed in no time. Rather than fighting it just restore your computer to a time before it attacked. Also, I know very little about computers. Peace
By Mike R. on May 1, 2010 | Reply
When starting your computer , keep tapping f-8 start in safe-mode . Go to explorer and down-load REVO-UNINSTALLER free , use hunter mode ,target Security tool delete all files , restart and done !! Your welcome . P.S. Someone should have the authority to smash these a-holes !!
By S. Lowe on May 5, 2010 | Reply
I removed security tool by following Stephen’s advice and it worked! Thanks Stephen.
By rich d on May 6, 2010 | Reply
i love you will you marry me! this worked a charm althoe i didnt go into safe mode,the best way is to get task manager running before security tool starts find the 8 digit number and end task then follow Killas advice
By Kamilah on May 6, 2010 | Reply
Scroll back up to Stephen’s post from Dec. 10, 2009. Awesome. It Worked!!
By Jedo on May 9, 2010 | Reply
After hrs of trying to get this f’n virus off, I used Eswar info posted above. Worked in no time. Thanks!!
By GM on May 9, 2010 | Reply
The easiest way I found to get this problem solved was to open the Windows Task Manager (ctrl+alt+del)
Then click on processes. The thing you want to look for is an 8 digit number followed by .exe
Then Right click that and go to ‘open file location’
When the file location pops up it should have that shield from the security tool logo. (if you don’t see that you didn’t select the right process….go back to the task manager and search for the correct one)
If you see that shield go to the task manager and end that 8 digit #.exe process.
Once you did that simply go back to that open file location and right click the shield and select delete. Also delete the folder that was in.
Then your computer should go back to normal.
By Gordon on May 12, 2010 | Reply
Stephen’s method for the win. This thing reared its ugly head on my sons laptop, and following Stephan’s method, it was removed in about 15 mins. Thanks alot, buddy!
By Hackulop on May 15, 2010 | Reply
To remove all you have to do is log in under guest or create another account malware is stored under user profile settings. Changing your user profile setting will allow you to run your software and do a full scan also before doing this delete windows temp file there is most likely a bad file in the folder windows will automatically create another clean temp folder
By Ed on Jun 27, 2010 | Reply
Please could someone kindly give me the instructions (simply) on how to restore the speed on my pc; it is very slow since I got rid of Security Tool…..
ALSO, PJ on 14 Feb, said he has XP, and pressed F8 for Safe mode. This “then gave (him) the option of running the computer in safe mode or restoring to an earlier date”. I have XP and this option does not appear for me, but only ‘Restore Last Known Good Configuration’, which does not help; how do I enter a specific date please?
By chilenet on Jul 19, 2010 | Reply
Just used Stephen’s instructions from Dec 10, 2009 and they worked perfectly to get rid of Security Tool. I never did this before and it worked great. Thank you.
By chilenet on Jul 19, 2010 | Reply
These instructions worked to a T. You took me to places in my computer I have never visited ! Thank you, Stephen.
By John on Jul 24, 2010 | Reply
I have followed the video online to remove this however once I get to the part where you open Application Data, the number is NOT in this folder, any ideas as to where else it may be?
By Faz on Jul 26, 2010 | Reply
I have Vista Business Sp2. Got this malware a few hours back. Couldn’t do anything, can’t find and of the files/ keys mentioned at the top of the page.
So I simply followed Eswar’s method and within minutes, it is gone.
Quote Eswar:
I have Vista Home Basic. This afternoon got infected with the Security tool scareware. To get rid of this fake program.
shutdown or power off your computer.
Power on
As the initial splash screen comes up keep hitting F8 repeatedly. This will bring up boot option screen
Choose run windows in Safe Mode using the arrow keys and hit enter.
Windows will start up in Safe Mode
Security Tool should not be starting up now in Safe mode.
Go to Programs>accessories>system restore
Restore windows to a date prior to the infection
Windows will be restored to an earlier date and will reboot itself up in normal mode without the stupid Security Tool scareware.
Took me 3 minutes to fix mine. Hope it helps.
By D on Jul 26, 2010 | Reply
On Windows XP, I was able to use Windows Defender to remove Security Tool program. I was unable to use any of the other programs that I downloaded because Security Tool prevented me from using any other .exe file. Windows defender was able to remove all traces of the program.
By Cordley on Jul 27, 2010 | Reply
I could not open anything when I was infected by Security Tool. I had to go to the library to print out instructions. Luckily I found this site. I copied some of the comments here. I used a hybrid method and it worked. I did not have to go into safe mode.
1. Power on computer
2. Get Task Manager running ASAP so it’s running before Security Tool starts.
3. Find the 8 digit number with exe at the end. It was at the top of my list of processes on Task Manager.
4. End the process
5. Go to All Programs > Accessories > System tools >
By Cordley on Jul 27, 2010 | Reply
Sorry. To finish my comment…
5. Go to All Programs > Accessories > System tools > System Restore.
6. Restore to a date and time before infected.
Some of us are intimidated to go into safe mode. This method worked without needing to. My pc was virtually useless before I found this site, so thank you!
By YYx on Jul 28, 2010 | Reply
Finally this piece of trash called Security Tool these advice really worked andthank you to this website for exsisting
By YYx on Jul 28, 2010 | Reply
everytime when I open my laptop it appears when I thought I destroyed it and guess what Too much advice makes me confused and I don’t know what to choose
By Rachel on Jul 28, 2010 | Reply
I just wanted to spread the knowledge of how I got rid of it! Press F8 when computer is booting up to enter “safe mode with networking”. I searched all files including hidden for security tool. Once the results where up I deleted them then emptied the recycling bin. I hope this works for someone! That virus was ridiculous!
By Jerry J on Jul 28, 2010 | Reply
This just worked for me after I stupidly let it in when link scanner was turned off and it pretended to be a firefox update:
REBOOT
PRESS F8 and get into SAFE MODE
GET TO SYSTEM RESTORE and GO BACK TO BEFORE YOU GOT THE DANG THING. Luckily I knew just when and it was only 12 hours ago.
RESTORE only holds 4 days unless you pick out dates, so do it ASAP.
By Cordley on Jul 28, 2010 | Reply
I have Vista Home Premium. Here is simple method without the need to go into safe mode derived from reading posts here. It’s a combination of Ryan’s Dec 15 (and others) suggestion to launch Task Manager and Eswar’s Apr 22 post.
Launch Task Manager ASAP upon startup so it is launched before Security Tool starts. End the Security Tool process. It’s a series of 8 numbers followed by exe. Now you can work in peace.
Go to All Programs > Accessories > System Tools > System Restore. Launch System Restore. Just follow the prompts. It automatically sets periodic restore points. I chose the day before my pc was infected and clicked on it. Rebooted infection free!
My infection was so severe I could do nothing. I went to my library and luckily found this site. I copy and pasted several suggestions to Word and printed them out. Some of us are intimidated when asked to work in Safe Mode, so hopefully this additional method helps. Thanks everyone!
By Alan Constant on Aug 3, 2010 | Reply
Last night Security Tool attacked my computer. I tried a variety of suggestions (both manual and malware removal software), but nothing was working. Then I figured I would have to reformat my hard drive. But I decided to go into safe mode one more time to see if there was anything else i could try. So I rebooted and hit F8. One of the options I had was to open Windows with “Last Known Good Configuration”, so I tried that. And my computer rebooted without Security Tool popping up. It looks like that did the trick. Everything seems like it’s back to normal.
By Mary on Aug 5, 2010 | Reply
I tried to follow Stephen’s instructions but I am computer ignorant so I got lost in computer world. So I went to safe mode with networking then went to taskmaster and deleted the file to the recycle bin then downloaded super anti spymaster and let it do its thing. But security tool was still there. So I repeated taskmaster and downloaded windows defender and logged off. So far it seems to be working but I am worried that it will come back. Thanks to all the wonderful comments it really helped.
By Bry on Aug 5, 2010 | Reply
SYSTEM RESTORE SYSTEM RESTORE SYSTEM RESTORE!!!!!!!! YOU HAVE TO RESTART YOUR COMPUTER AND HIT F11 SYSTEM RESTORE RIGHT BEFORE IT BOOTS UP AND RESTORE THE SYSTEM TO A FEW DAYS PRIOR. I RESTORED MINE WITHIN 30 MIN OF GETTING THE VIRUS AND IT WORKED! THANK GOD FOR SYSTEM RESTORE
By Robbie on Aug 6, 2010 | Reply
I just had a version where fixes were not working. Had same idea. Did a F8 boot and went to Sys Rest. Solved.
By Leo on Aug 8, 2010 | Reply
Thanks Mary. I did the same in safe mode. Restore back 2 days. Laptop back up and running no Security toll.
By Arlandra on Aug 9, 2010 | Reply
I found the file, deleted it, and restarted my computer. It wasn’t in the folder that you said it would be in.
By Dave R on Aug 11, 2010 | Reply
does anyone know where the batch file (and name of it ) is so i can delete that as well?
By abdul on Aug 12, 2010 | Reply
yo guys…when i went into safemode i didnt know what to do..then i got an idea, i restored my comp. to five days earlier, it works perfect for me..(unless you have installed/downloaded any programs within that period of time) hope i was able to help
By Pud on Aug 12, 2010 | Reply
thanks Stephen
By mark on Aug 12, 2010 | Reply
Ricky on the 2nd Feb nailed it. Well done sir.
By Kevin on Aug 16, 2010 | Reply
if the processes have numbers like what you said like 6706429.exe that is the process which is security tool, that has happened to me and i got rid of ST by actually putting the ST file in my Avira Quarintine
By Lici on Aug 17, 2010 | Reply
A few other people have mentioned this and it works. I have fixed two laptops this way.
-Restart
-Press F8 before it boots up
-Open in safe mode
-Go to back up and restore
-Restore to a point before Security tool took over
-Once you get back in be sure you go re-install any security and windows updates.
By Marci on Aug 17, 2010 | Reply
So I too have been hit with this Nasty POS! Now, my mouse is completely disabled!! Even when I enter safe mode, my mouse is completely frozen! I can’t even log in!!! Can someone PLEASE help?!?!?? This is awful! I want to hurl my laptop at the wall! I have xp.
By randy kauer on Aug 17, 2010 | Reply
this really works good
By Tom on Aug 18, 2010 | Reply
think you mean… hkcu\software\microsoft\windows\currentversion\run\
By swami on Aug 21, 2010 | Reply
it is not a security tool it is a *** tool….this tool have damaged my entire sys…the entire team of this tool should stop this type *** to sale…it is a criminal offence….
By lawn care cumming on Sep 2, 2010 | Reply
Hey, I knew there was a reason why I visited your website. Its because of great stuff like this. Thank you for the info. Look forward to more. See ya!