print version

Security Tool

For Information and Removal of Security Tool

Security Tool

When a normally fast computer begins operating slowly, it can be indicative of several issues.  But when the same computer begins receiving pop-up ad after pop-up ad as well, it is likely that there is a rogue antivirus program installed in the system.  These programs seek to appear legitimate in order to persuade computer users to purchase their software.  Those that do purchase programs like Security Tool know that the protection turns out to be nonexistent. 

What is Security Tool?

Security Tool is a rogue antivirus program from the same family as Total Security 2009 and System Security.  Like other rogue programs its goal is to persuade you to purchase the full version of its software.  In order to do this, it creates the appearance that you have multiple security threats present in your system. Pop-ups and false warning scans, typical fare of other rogue programs, are also used by Security Tool.  If a user does opt to buy the full version, it does nothing to resolve existing issues or prevent future ones.  In fact, it is probable that the only threat in the system is Security Tool itself. 

Signs that Security Tool Has Been Installed

You will notice several changes to your computer after a rogue program like Security Tool has been installed.  Filters normally block most pop-ups from appearing, but Security Tool can disable this filter, and it can also block other security measures in order to operate.  As a result, one of the changes you will notice is the endless pop-ups.  These come in two forms:  alert messages and scan results.  It is important to remember that these warnings are all false and you should not opt to remove any "threats" with Security Tool. Typical warnings might resemble these:

Security Tool Warning
Spyware.IEMonster activity detected. This is spyware that attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other programs. Click here to remove it immediately with SecurityTool.

Security Tool Warning
Some critical system files of your computer were modified by malicious program. It may cause system instability and data loss. Click here to block unathorised modification by removing threats (Recommened) (sic)

Security Tool Warning
mbam-setup.exe is infected with worm Lsas Blaster Keyloger. This worm is trying to send your credit card details using mbam-setup.exe to connect to remote host..

Security Tool fake warning - system tray balloon pop-up

When you start your computer, Security Tool launches itself automatically.  It simulates running a scan and will display the results with a pop-up window.  These look very much like those issued by real antivirus programs, so again, it is important to take the time to read it carefully. You will notice that "Security Tool" is written clearly across the top and beside a shield symbol.  Inside the shield are two cogs. Under the urging, "Protect your pc," is a list of "infected files."  You are given the option of saving the report or removing the infections with Security Tool.  Clicking on any component of the ad will bring you to the Security Tool website, where you will be urged to buy the software and provide your payment information.

Another example of their fake scan warning messages

Security Tool will also generate shortcuts on your desktop and icons on your system tray.  When you click on these, you are directed to the rogue website.  Likewise, Security Tool may hijack your homepage and replace it with its own or divert you to its website when you are trying to navigate to other sites. 

By itself, slow computer performance does not necessarily mean that a rogue program is installed in your system.  However, if slowdown is occurring in conjunction with these other signs, it is certainly indicative of such a program.  Security Tool runs constantly in the background.  While you can't see it, it is actually using up quite a bit of your CPU.  Opening programs, switching browser windows, and other simple tasks become slower.

How Does Security Tool Enter a Computer System?

This rogue program, like the rest of the bunch, does not require your permission to enter.  It can be carried in by Trojans, which are commonplace on certain sites.  These sites include adult, gaming, gambling, warez, and social networking sites, as well as those that offer free videos and instant messaging.  When you visit an affected site - even if the site itself is legitimate - it is possible to pick up a Trojan by clicking on an ad or downloading an image or video.  Sometimes simply being on the site is enough to allow a Trojan in. 

A common Trojan associated with rogue antivirus programs disguises itself as an update for Adobe Flash. Many people have Adobe Flash on their computers, and an update is certainly not out of the ordinary.  However, when you agree to it, the Trojan can enter.  (The Trojan is not associated with Adobe but only uses it as a disguise).  The Trojan in turn brings in malware. 

The Winwebsec family of Trojans has been associated with Security Tool. Winwebsec Trojans may download more malware and are known to download Swimnag and Koobface computer worms.

It is not uncommon for computer users to purchase the Security Tool software, believing they are buying something that will help protect their computers.  Doing so does give you the full version of the rogue program, but that is not saying much as it is the same as the trial version, which creates the pop-ups and false scan results.  The software does nothing to protect your computer or resolve any current risks. 

How Do You Remove Security Tool?

After noticing these signs, you should take steps to remove Security Tool from your system so you do not experience any instability or further problems caused by the program.  When it becomes installed, Security Tool disables certain security measures so it is very difficult to remove.  You cannot just use your delete option or run your current virus scan (rogue antivirus programs are not viruses).  Automatic removal is the fastest and safest method of removing a rogue program. Malwarebytes Anti-Malware (Malwarebytes has free malware removal) is specifically designed to deal with rogue antivirus programs and will allow you to quickly and easily remove all traces. The other option is to manually remove it.  This should only be done by computer techs because there are two risks:  that you may miss a file or two that needs to be deleted or you may accidentally delete a legitimate file. There is also the problem that some variants are using random file names to avoid detection and deletion. You may have to rename the random file in order to regain control of your system and unblock your legitimate security programs. We don't want you to damage your system, so please contact us (see below) for personal assistance if you are not confident about deleting hidden application files. If you have the experience and time necessary, the following filenames may help you remove Security Tool :

Delete Files:

%System Root%Samples

%User Profile%local settingstemp

%Program Files%SecurityTool

%Program Files%SecurityTool

%Documents and Settings%All UsersStart MenuProgramsSecurityTool

%Documents and Settings%All UsersApplication DataSecurityTool (or randomized filenames here)

Remove Registry Keys: 

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "SecurityTool"

HKEY_CURRENT_USERSoftwareVista Antivirus 2010 HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionNINSTALLSECURITYTOOL

HKEY_LOCAL_MACHINESOFTWARESecurityTool

HKEY_LOCAL_MACHINE..Run: [4946550101] %UserProfile%Application Data49465501014946550101.exe
HKEY_CURRENT_USER..Run: [Install] %UserProfile%Application Data49465501014946550101.bat

Removing Security Tool Automatically/Safely

For free automatic removal we recommend using Malwarebytes Anti-Malware. This program is widely recommended by reputable third-party sites, so you can be reasonably confident of its ability to safely get rid of Security Tool and any hidden Trojans. As a precaution we recommend double checking your system with Spyware Doctor. This program requires paid registration to enable deletions, however it has a money back guaranteed and is the top of the line in malware removal. It should catch malware that evades Malwarebytes and block anything that tries to reinstal itself.

Remove Security Tool Now:

1. Download and install Malwarebytes Anti-Malware and Spyware Doctor  
2. Run Reimage PC Repair Online to check for malware damage and repair if required.
3. Run a scan with Malwarebytes Anti-Malware.
4. Remove all the detected infections (free).
5. Run a scan with Spyware Doctor
6. Remove any remaining infections
7. Reboot and rescan with Spyware Doctor. Your computer should now be clean.

Important note: If Malwarebytes is blocked by malware then run Chameleon (Start Menu → All Programs → MalwareBytes' Anti-Malware → Tools → Malwarebytes' Anti-Malware Chameleon). If you need further help removing Security Tool please email us at info@removeadware.com.au or call for personal assistance on toll-free number 888-655-3453, within the USA and Canada.

 to top