Security Tool Removal

Security Tool

This threat seems to be from the same makers of Total Security 2009 and System Security.  In our Total Security 2009 video we showed you how hard this program can be to remove.  What makes this thing so hard to kill off is the program terminating every executable process right after you open the program.  The good news here is you simply need to stop this program from running then you can open other programs. In most cases we found that when we got infected it was from a trojan virus that was installed on our test computer.  That trojan then went out and downloaded this fake security product. 

Once installed users will find that most programs will not open and that their browser has been highjacked. PLEASE NOTE:  In all of our testings on this threat you will not be able to run executables.  This means you may not be able to run any security programs.  Watch the video below to learn how to get around this. Below is one of the warning messages people are getting " Security Tool Warning Your PC is still infected with dangerous viruses"  This is a warning message made to scare you into purchasing the program. "Security Tool Warning Spyware.IEMonster activity detected. This is spyware that attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other programs. Click here to remove it immediately with SecurityTool." This message is here to trick and scare you into purchasing a the program.  Like everything about this program it's all just lies.  Do not purchase this program because it's fake and your just throwing your money away.  Read the Security Tool removal guide below to learn more.

Some symptoms of Security Tool:

• Bogus Scan results
• Auto Scans on Start-up
• Warning coming out of a fake shield in the system tray
• pop-ups and re-directs to the fake software's website
• constant warnings of being infected as well as false statements of other trojans

Security Tool Removal Video to help you out

Manual removal instructions for Keyword Phrase ( Please read our disclaimer below )

Kill Keyword Phrase processes: ( Learn How to Kill a Process Here. Opens in new Window ) Also read the below section before terminating this process.

• 4745331717.exe

Please note that the above process will not be the same as yours.  This trace file will constantly change and be dynamic.  What you need to do is look for something very similar.  It should be a total of ten numbers long followed by the .exe . We do recommend you run a full scan using SpyHunter. Even if you do not intend on purchasing the product it will help to stop the virus from re-installing and re-activating while you manually remove it. Also it will inform you of any new changes to the file names. You will need this.  Also if no programs can run then attempt to boot into safe mode with networking and then install the SDA client and run a scan.  You will need to be in safe mode with networking to download and install this product.  This is because this threat blocks all executables in normal mode. In most cases with this threat you will need to browse to the %UserProfile%\Application Data\ folder and then look for a 8-10 digit number folder.  Should be the first one in that folder.  There you can re-name the file.  Watch the video above to show you the exact steps on doing this. It is a good idea to write down the process files name.  You will need this to remove the registry entry.

Delete Keyword Phrase registry values: ( Learn How to Edit Registry Here. Opens in new Window )

• HKEY_CURRENT_USER\Software\Security Tool HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "4745331717"

Delete files: ( Hint ) Most of these files will be in the %UserProfile%\Application Data\YOUR TEN DIGIT NUMBER PROCESS directory.

• 4745331717.bat
• 4745331717.cfg
• 4745331717.exe
• Security Tool.lnk

Delete directories: ( Please note that in most cases everything in this folder can be deleted. Just be sure it's the correct folder 😉

• %UserProfile%\Application Data\YOUR TEN DIGIT NUMBER PROCESS

Outside Resources:

http://www.bleepingcomputer.com/virus-removal/remove-security-tool

http://www.geekpolice.net/t14738-how-to-remove-security-tool-removal-guide