Remove Security Tool | Latest Rouge Client

QUICK UPDATE:  We already have created an XP removal Video for Security Tool.  Now we have a Windows 7 and Vista one as well.  Read Below for both Videos.

Security Tool is a clone of System Security and Total security 2009. You may want to look at those removal guides as well to help you gain a full grasp on exactly what this client is and what it does. Basically it follows in it's predecessors foot steps and runs the same type of scam. this program blocks most other traces from running on your computer. Removal can be very very hard for this one so read the full guide before attempting it.

Security Tool Snap Shots. Click the image to view other snap shots.

Remove Security Tool How to remove Security Tool delete Security Tool Security Tool removal Securitytool

» Download Security Tool Removal Software

( We tested it and it works to fully remove this threat.  Please note you will need to install it and update it in safe mode with networking ) Special thanks to www.onlinecomputerrepair.org for letting us know about this threat.  They told us it's one of the hardest strains they have had to remove from computers so far this year.  There is no shame in needing a professional to remove something like this for you.  If you find the below removal guide too hard to follow then we recommend you pay the 89.99 to have www.onlinecomputerepair.org remove the threat for you.

Security Tool if you could not already tell is a bogus security client.  This threat seems to be from the same makers of Total Security 2009 and System Security.  In our Total Security 2009 video we showed you how hard this program can be to remove.  What makes this thing so hard to kill off is the program terminating every executable process right after you open the program. 

The good news here is you simply need to stop this program from running then you can open other programs. In most cases we found that when we got infected it was from a trojan virus that was installed on our test computer.  That trojan then went out and downloaded this fake security product. 

Once installed users will find that most programs will not open and that their browser has been highjacked.

PLEASE NOTE:  In all of our testings on this threat you will not be able to run executables.  This means you may not be able to run any security programs.  Watch the video below to learn how to get around this.

Below is one of the warning messages people are getting

" Security Tool Warning Your PC is still infected with dangerous viruses" 

This is a warning message made to scare you into purchasing the program.

"Security Tool Warning Spyware.IEMonster activity detected. This is spyware that attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other programs. Click here to remove it immediately with SecurityTool."

This message is here to trick and scare you into purchasing a the program.  Like everything about this program it's all just lies.  Do not purchase this program because it's fake and your just throwing your money away.  Read the Security Tool removal guide below to learn more.

Some symptoms of Security Tool:

• Bogus Scan results
• Auto Scans on Start-up
• Warning coming out of a fake shield in the system tray
• pop-ups and re-directs to the fake software's website
• constant warnings of being infected as well as false statements of other trojans

XP Security Tool Removal Video to help you out

Vista and Windows 7 Security Tool Removal Video

» Download Spyware Doctor with Antivirus

We do recommend you scan your computer with the free trial of Spyware Doctor with Antivirus to see how infected you really are. If it is just this fake security product then follow the manual directions below. If you have other trojans and spyware applications then consider making a purchase of Spyware Doctor with Antivirus Here to remove all other threats and to keep your PC secure. If you follow the link above and use coupon code removevirus10 you will get 10% off. This is an exclusive coupon we got just for our readers. As well we do recommend this remote computer repair company. They are the leaders in remote computer repair and can have you up and going in no time at all. This option is more for people who don't feel comfortable removing viruses by themselves and just want an expert to do it for them.

Manual removal instructions for Keyword Phrase ( Please read our disclaimer below )

Kill Keyword Phrase processes: ( Learn How to Kill a Process Here. Opens in new Window ) Also read the below section before terminating this process.

• 4745331717.exe

Please note that the above process will not be the same as yours.  This trace file will constantly change and be dynamic.  What you need to do is look for something very similar.  It should be a total of ten numbers long followed by the .exe . We do recommend you run a full scan using Spyware Doctor with Antivirus » download. Even if you do not intend on purchasing the product it will help to stop the virus from re-installing and re-activating while you manually remove it.

Also it will inform you of any new changes to the file names. You will need this.  If no programs can run then attempt to boot into safe mode with networking and then install the SDA client and run a scan.

You will need to be in safe mode with networking to download and install this product.  This is because this threat blocks all executables in normal mode. In most cases with this threat you will need to browse to the %UserProfile%\Application Data\ folder and then look for a 8-10 digit number folder.  Should be the first one in that folder.  There you can re-name the file.  Watch the video above to show you the exact steps on doing this. It is a good idea to write down the process files name.  You will need this to remove the registry entry.

Delete Security Tool registry values: ( Learn How to Edit Registry Here. Opens in new Window )

• HKEY_CURRENT_USER\Software\Security Tool HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "4745331717"

Delete files: ( Hint ) Most of these files will be in the %UserProfile%\Application Data\YOUR TEN DIGIT NUMBER PROCESS directory.

• 4745331717.bat
• 4745331717.cfg
• 4745331717.exe
• Security Tool.lnk

Delete directories: ( Please note that in most cases everything in this folder can be deleted. Just be sure it's the correct folder ;)

• C:>Documents and Settings>YOUR USER NAME>Local Settings>Application Data\Random Number Proccess .exe

  For Vista Win 7 Users the path should be

  C:\Users\%YOUR USER ACCOUNT NAME%\AppData\Local

  The file is no long in a folder from my last testing 8-01-10. It is just a 7 digit number and .exe after it. In the past it was 8 digits so just look for something like 6586290.exe . If you can not delete it then re-name the file and re-boot. then delete it. If you are in safe mode you should be able to delete it with out having to re-name and re-boot.

Please keep in mind that viruses mutate and change all the time. Do expect the above to change around a little. However this guide should work well for you and any experienced pro will be able to follow it and figure out the traces if they mutate. If you do not feel comfortable deleting files and the like then consider purchasing Spyware Doctor with Antivirus or have www.onlinecomputerrepair.org remove this and all other threats for you. Just to let you know.  because security tool has become such a dangerous and popular threat we have made a dedicated site.  Check out the Security Tool site. Leading Security Clients for you to consider ( Click the Links Below to Learn More )

• Spyware Doctor with Antivirus
• Norton
• Trend Micro
• Kaspersky
• AVG
• MalwareBytes