Pls help to remove Security Tool Virus

My system has be caught with virus Security Tool virus spyware. Have anybody
experience with Security Tool removal from the system. I am looking for best
advice.

Please help
With many thanks

Pol

"pol" wrote:

My system has be caught with virus Security Tool virus spyware. Have anybody
experience with Security Tool removal from the system. I am looking for best
advice.

Please help
With many thanks

Pol


Try to disable the running processes for this trojan by using the Task
manager or using the registry editor and locate these entries:
[-] HKEY_CURRENT_USER\Software\Security Tool - remove this entry if exist
[-] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run =
"4946550101" ,- remove this entry if exist and other suspicious ones


Scan for malware and viruses and let us know your findings:

http://www.superantispyware.com/supe...freevspro.html
Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

BlackLight

http://www.f-secure.com/en_EMEA/secu...es/blacklight/
BlackLight
ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe

Easy Clean
http://www.f-secure.com/en_EMEA/secu...er/easy-clean/


Run a scan from here on-line:
http://security.symantec.com/sscv6/d...d=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from he
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html

If the above doesn't help or you denied to download such utilities try to
download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting or you can send it to me on my email
provided at the bottom:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en...hijackthis.php)

Can you please send me a copy at ,
remove the obvious to email me.

HTH
nass
---
http://www.nasstec.co.uk



..

From: "pol"

| My system has be caught with virus Security Tool virus spyware. Have anybody
| experience with Security Tool removal from the system. I am looking for best
| advice.

| Please help
| With many thanks

It is not a virus nor is Security Tool spyware. Security Tool is a fake anti malware type
tool that is a con for your money.

It isn't a "virus" because it doesn't self replicate.

It isn't spyware because it is spying on your computer.


Download, install, update and then execute, Malwarebytes' Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

how I can locate HKEY_CURRENT_USER\Software . Please advice me the steps

With thanks


"nass" wrote:



"pol" wrote:

My system has be caught with virus Security Tool virus spyware. Have anybody
experience with Security Tool removal from the system. I am looking for best
advice.

Please help
With many thanks

Pol


Try to disable the running processes for this trojan by using the Task
manager or using the registry editor and locate these entries:
[-] HKEY_CURRENT_USER\Software\Security Tool - remove this entry if exist
[-] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run =
"4946550101" ,- remove this entry if exist and other suspicious ones


Scan for malware and viruses and let us know your findings:

http://www.superantispyware.com/supe...freevspro.html
Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

BlackLight

http://www.f-secure.com/en_EMEA/secu...es/blacklight/
BlackLight
ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe

Easy Clean
http://www.f-secure.com/en_EMEA/secu...er/easy-clean/


Run a scan from here on-line:
http://security.symantec.com/sscv6/d...d=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from he
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html

If the above doesn't help or you denied to download such utilities try to
download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting or you can send it to me on my email
provided at the bottom:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en...hijackthis.php)

Can you please send me a copy at ,
remove the obvious to email me.

HTH
nass
---
http://www.nasstec.co.uk



.

"pol" wrote:

how I can locate HKEY_CURRENT_USER\Software . Please advice me the steps

With thanks


Try this:
Click Start Run Type in the text box:
regedit click [OK] or Hit [Enter] on your keyboard then locate these Keys:

[-] HKEY_CURRENT_URSE\Software

and
[-] HKEY_LOCAL_MACHINE\Software\\Microsoft\Windows\Cur rentVersion\Run =
delete the entry for this viral application to help you gain control and run
scans from these apps I mentioned.
Let us know your progress or need further help!
HTH
nass
---
http://www.nasstec.co.uk




..

On Apr 6, 6:21*am, pol wrote:
My system has be caught with virus Security Tool virus spyware. Have anybody
experience with Security Tool removal from the system. I am looking for best
advice.

Please help
With many thanks

Pol

Here is what you should NOT do:

You should not use Task Manager to remove running processes, and if
you did what processes would you remove?

You should not start editing the registry and removing things that
might exist. (How's that working out for you?)

You should not try things that might work.


The correct way to remove the Security Tool is to use the process that
has already been figured out, is well documented and does not involve
any guessing.

There are specific, well written and easy to follow instructions he

http://www.bleepingcomputer.com/viru...-security-tool

Please report your results.

Instructions on how to remove it

http://forums.malwarebytes.org/index...howtopic=45798

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"pol" wrote in message
news
My system has be caught with virus Security Tool virus spyware. Have anybody
experience with Security Tool removal from the system. I am looking for best
advice.

Please help
With many thanks

Pol

There is a very good chance that you are seeing the effects of a hijackware
infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/de...prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP = Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7= Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here. DO NOT SKIP THIS STEP!!

Checking for/Help with Hijackwa
• http://mvps.org/winhelp2002/unwanted.htm
• http://inetexplorer.mvps.org/tshoot.html
• http://www.mvps.org/sramesh2k/Malware_Defence.htm
• http://www.elephantboycomputers.com/...moving_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachi...php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.


pol wrote:
My system has be caught with virus Security Tool virus spyware. Have
anybody
experience with Security Tool removal from the system. I am looking for
best
advice.

Please help
With many thanks

Pol

If you're not familiar with the registry, STAY AWAY FROM IT! Running
Malwarebytes and Superantispyware usually fixes this, if you run both of
them in safe mode and do full scans.

--


"Don't pick a fight with an old man.
If he is too old to fight, he'll just kill you."


"pol" wrote in message
...
how I can locate HKEY_CURRENT_USER\Software . Please advice me the steps

With thanks


"nass" wrote:



"pol" wrote:

My system has be caught with virus Security Tool virus spyware. Have
anybody
experience with Security Tool removal from the system. I am looking for
best
advice.

Please help
With many thanks

Pol


Try to disable the running processes for this trojan by using the Task
manager or using the registry editor and locate these entries:
[-] HKEY_CURRENT_USER\Software\Security Tool - remove this entry if
exist
[-] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run =
"4946550101" ,- remove this entry if exist and other suspicious ones


Scan for malware and viruses and let us know your findings:

http://www.superantispyware.com/supe...freevspro.html
Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

BlackLight

http://www.f-secure.com/en_EMEA/secu...es/blacklight/
BlackLight
ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe

Easy Clean
http://www.f-secure.com/en_EMEA/secu...er/easy-clean/


Run a scan from here on-line:
http://security.symantec.com/sscv6/d...d=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from he
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html

If the above doesn't help or you denied to download such utilities try to
download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting or you can send it to me on my
email
provided at the bottom:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en...hijackthis.php)

Can you please send me a copy at ,
remove the obvious to email me.

HTH
nass
---
http://www.nasstec.co.uk



.

On Apr 6, 6:39*am, "David H. Lipman"
wrote:
From: "pol"

| My system has be caught with virusSecurityToolvirus spyware. Have anybody
| experience withSecurityToolremoval from the system. I am looking for best
| advice.

| Please help
| With many thanks

It is not a virus nor isSecurityToolspyware. *SecurityToolis a fake anti malware typetoolthat is a con for your money.

It isn't a "virus" because it doesn't self replicate.

It isn't spyware because it is spying on your computer.

More accurately, because it ISN'T spying. [I've had that malware on
my computer more than once too.AND the infamous Goggle.com. After all,
how many of us HAVEN'T accidentally typed that?]

To get rid of security tool virus, you can go for manual deletion of all its associated processes, files and invalid registry keys existing on the affected system. This will help you to get rid of its serious infections.

The same solution applies when you go to remove Windows Interactive Safety fake security program.

http://www.spywareremoval-programs.c...am-a-quick-way

From:

To get rid of security tool virus, you can go for manual deletion of all
its associated
processes, files and invalid registry keys existing on the affected
system. This will help
you to get rid of its serious infections.

The same solution applies when you go to remove Windows Interactive Safety
fake security
program.


Once again, This post is nothing more than spam for a product that is
unknown and whose website has been up for only 3 months (May 7, 2012) for an
article by "James Scott" written Today and I wouldn't be surprised if the
true persona behind the 'nym "James Scott" is behind the
poster and poster boith
posting from; 59.90.198.246



--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp

Getting infected with rogue anti-spyware programs that are actually aimed at targeting innocent users for ripping their money off is most threating and this is what i realized day before when Windows Interactive Safety program started showing me numerous fake alerts. I looked for the solution and to my wonders i found this post - http://www.malwareremovals.net/remov...ram-completely really informative & helpful, that helped me know all about the threat & way out for its removal. if any of you people are having problem with the same, you look for the help here.

From:


Getting infected with rogue anti-spyware programs that are actually aimed
at targeting
innocent users for ripping their money off is most threating and this is
what i realized
day before when Windows Interactive Safety program started showing me
numerous fake
alerts. I looked for the solution and to my wonders i found this post -
hxxp://www.malwareremovals.net/remove-windows-interactive-safety-how-to-get-rid-of-rogue-security-program-completely
really
informative & helpful, that helped me know all about the threat & way out
for its removal.
if any of you people are having problem with the same, you look for the
help here.


Isn't that nice how "www malwareremovals.net" and "www
spywareremoval-programs.com"

Are both created by,

piyush jain
K-802,AWHO Appartment,Sector-49,
Near South City II,Sohna Road
gurgaon
Haryana
122018
IN
Phone: +91.9507036101
Email Address:

And all these spam posts are posted from India's BSNL; 59.90.198.246


--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp