Stuck with "Security Tool" [Archive]

View Full Version : Stuck with "Security Tool"

4 Oct 2009, 6:53pm

I've got a trojan horse on my system called "Security Tool". I'm not sure where it came from, as 'm a safe browser, but it's here, and most of my normal cleaning tools are not working.

It wont let me run most programs. This browser seems to be one of the few programs that it lets through. I tried using Unlocker to just delete the program files, but it even stopped Unlocker from running.

I googled the problem, and fount this page (http://74.125.93.132/search?q=cache:LIkuRCugkaYJ:www.bleepingcomputer.com/virus-removal/remove-security-tool+remove+%22security+tool%22&cd=1&hl=en&ct=clnk&gl=us&client=firefox-a), which suggests using malwarebytes, but this must be a new version of "Security Tool, as it wont allow me to run the setup EXE for MalwareBytes either.

Any help?

4 Oct 2009, 7:03pm

Nevermind, I got it. If anyone else has a problem with this program, it's as easy as deleting the program files from safemode.

TechnoTard

4 Oct 2009, 9:35pm

Nevermind, I got it. If anyone else has a problem with this program, it's as easy as deleting the program files from safemode.
I have the same problem now!
How do I go into safe mode and what do I do to take this thing off my computer?

4 Oct 2009, 10:48pm

Go into safe-mode by restarting, and holding down F2 as windows starts to load.

Once in safe-mode look at the short-cut that Securty Tool created (right-click, properties) to figure out what directory it created for itself (it's random).

Then go to that directory and delete all the files.

On a side note: Do you know which website you got it from? I had just opened about ten new tabs at once when it showed up, but they were all sites that I visit everyday, and I didn't give permission to anything. One of my regularly visited sites has some bad banner ads, but I have no way of knowing which one now.

TechnoTard

5 Oct 2009, 2:52am

The last thing I downloaded before I got the "security tool" was this download,
http://www.mediafire.com/?sharekey=22ec8067c51c9542b64026cfc061123694ad33d74f146289c95965eaa7bc68bc

I don't know for sure if that is what gave it to me but I think it is

TechnoTard

5 Oct 2009, 2:56am

I right clicked the "Security Tool" Icon and I selected "Open File Locations" then I deleted the 3 files that it were in that file, then I proceeded to delete the file itself as well, which was labeled 935345435 or something along those numbers. but I did it after I got out of safe mode. does it matter which mode I deleted it in?

5 Oct 2009, 4:47am

If that fixed it, then no.

TechnoTard

5 Oct 2009, 9:16am

Well it's still a bit slower than before i got the virus.
I mean, it wouldn't hurt to have someone look over it to see if anything is wrong right?

5 Oct 2009, 3:27pm

Certainly not. If you start a new thread here, with a hijackthis log, the guys can help you see if anything else is wrong.

5 Oct 2009, 4:33pm

You know what? Something is definitely still wrong with my system as well. It doesn't seem slow, but it's not letting me install Malwarebytes, which is very suspicious.

TechnoTard

6 Oct 2009, 12:23am

You know what? Something is definitely still wrong with my system as well. It doesn't seem slow, but it's not letting me install Malwarebytes, which is very suspicious.
YEAH! ya see!? O_o
something suspicious is going on...⌐_⌐

6 Oct 2009, 5:47am

I'm having a bunch of other issues now to with pop-ups and slow-downs and other fishy stuff. It may be time for a reformat.

TechnoTard

6 Oct 2009, 6:15am

What is reformatting exactly? o.o
I never quite understood it.
Is it basically resetting your computer to the way it was when you first bought it, which in turn, deletes everything you've saved, downloaded, and installed?

and is it simple enough for me to learn how to do it also?

6 Oct 2009, 2:34pm

Yeah, that's basically it. Get everything irreplaceable off of your system, then put in your windows install disk, and tell it to delete your Windows partition before installing fresh.