NP Rank:
Security Tool Malware Removal: Kick Some Malware @$$
If your PC is prompting you with "virus alerts" from something called Security Tool, then your machine is infected with the Securtiy Tool malware, and you need to kill it. First, make sure that you do not delete anything that it tells you to delete, or you'll be removing legitimate files. There's a vetted free download called Malware Bytes Anti-Malware that will find and crush the Security Tool malware. Most people ended up with Security Tool by downloading a sketchy file, and Security Tool then ran amuck on their machine, prompting the user to "buy a full version" while throwing up fake virus alerts. Don't be fooled. Malware Bytes, by the way, is approved by CNET, so we know that it won't just be another rogue app terrorizing your already-shaken PC. Just to be sure, I recommend only downloading via CNET, so you know you're getting the right file.
Once installed, the Security Tool will start automatically each time you turn on your PC and log in to Windows. Then it will start scanning your computer and show you a list of fake infections. When you try to clean the infected files, you are prompted to buy the software.
Take control, and make your registry, in the words of Tha Dogg Pound, "a burial ground/for clowns".
Most Recommended Comment
Crowd Power
-
Jordan Yerman
Vancouver, British Columbia, Canada
Recommendations (34)

Anonymous users (8)
-
Hugh Askew
Omaha, Nebraska, United States -
albertacowpoke
Canada -
Roy C
Vancouver, Washington, United States -
Rhonda J Mangus
North Tonawanda, New York, United States -
smkovalinsky
New York, New York, United States




Most RecentMost Recommended Comments (25)
- reply
Dusty Cross (not verified)at 12:00 on October 9th, 2009
If you already have Norton 360, "Security Tools" will still get onto your PC. However in Norton 360 under "PC Tuneup" you can select "Run Start Up Manager" and select the "Security Tools" program, this allows you the option not to run "Security Tools" at start up. With the program not running it can be easily deleted, just as any other program.
- reply
vcponsardin1 (not verified)at 01:55 on November 15th, 2009
How can the program be easily removed? I did all that on Norton 360, but I still can't remove "Security Tools" from my computer. It doesn't appear on the list of programs in Add/Remove Programs. Now what?
- reply
Elsie (not verified)at 10:41 on November 16th, 2009
You guys are awesome!! I just got hit with Security Tool today and had a heck of a time getting in to fix it. Your tips made it possible and my machine seems to be working okay - wow! I searched online and found other vendors willing to do a scan and remove, but once you did the scan you had to buy the software to remove it...does this sound familiar??? Is Spyware Doctor legit? How can somebody find virus and spyware protection that works? I already have a Norton 360 antivirus subscription (which didn't stop Security Tool) but then Norton wanted to charge me $100-$140 to review/tune up my system. What am I paying for??
at 17:42 on October 9th, 2009
Thanks for this Jordan.
- reply
Pokemaster2028 (not verified)at 00:49 on October 11th, 2009
Malware bytes doesn't work for me but before start up I used task manager and found the .exe file which was am bunch of random letters then ended the process so it would leave me alone. then I searched for the file and opened the area where it's at and there was 3 files all named after random numbers and I looked in them all and they were all security tool, so I deleted them from the computer
- reply
olereaper (not verified)at 09:40 on October 11th, 2009
security tool is a bit of a pain to remove as stops anti-malware, task manager etc from starting up. so you can't stop the process running to delete the file directly and as it prevents installation of anti-malware software a work around is needed.Easy work around is to find the exe file which is hidden in the all users appl data folder, it's folder has a random number for the title, then with known extensions visible, rename to whatever.doc and save it, then reboot, while rebooting there may be access violations, just ok them.Once rebooted...no security tool, navigate back and delete folder.then install malware bytes and run, it'll clean out the rest...
- reply
grateful reader (not verified)at 09:07 on November 25th, 2009
Hey olereaper Thanx a million. I used your solution and it worked great for me. Thanks again, old geezer
- reply
Trique (not verified)at 00:18 on October 12th, 2009
@Pokemaster2028 and @olereaper:Thanks for those comments! Your suggestions seem to work for me!
- reply
Chris K (not verified)at 15:52 on October 15th, 2009
I'm on XP Second edition and use the free AVG anti-virus software. I got this Security Tool for first time a week ago and figure out how to successfully stop and removed it. I do it manually and don't use the Spyware Doctor application you're offering. Even it blocks my AVG, the Windows Task Manager etc., I found how to get the Windows Task Manager active in order to kill the Security Tool process. All I did is kept pressed for a while Ctl-Alt-Delete and the Windows Task Manager appears. Then it's easy to recognize the process that is always with different long number, something like 45344321.exeUnfortunately somehow this Security Tool comes back pretty much every day when I power-on my PC and I have to do everything from scratch. How the hell that happens I don't know but does anyone here knows how to stop its new installations once I've killed it?Every time its process runs under different long number, so I guess it generates it on a fly.Anybody to advise me how to stop it from future installing? Any help is appreciated.
- reply
fernando dar (not verified)at 12:14 on October 17th, 2009
hi umm... i bought the security tool and after i saw wat it was i delete it with malwarebytes.. all i want to know is that when i bought it they already stole my personal info and credit card info?
- reply
Thom Riley (not verified)at 03:24 on November 20th, 2009
Actually they technically did not steal it... you gave it to them. If they use it illegally that will be the crime, however at this point all they have done is sell you a program that does nothing but screw up your computer. CANCEL YOUR CREDIT CARD. Your information is most likely in Russia or somewhere similar.
- reply
DOH (not verified)at 17:14 on October 18th, 2009
Got past ZoneAlarm also - the manual removal steps outlined on this site and others seem to work, I am running full scan now to verify.
- reply
Michaelv (not verified)at 03:12 on October 22nd, 2009
Hey guys, I can't even open task manager ("administrator blocked this", it's ST ofc) any sugestions? My desktop is also but a blue screen without icons now. Luckily I still got the task bar.
- reply
renek62 (not verified)at 09:15 on October 31st, 2009
Start your computer in Safe mode (use F8 by boot windows)delete the 12345678.exe in documents and settings/all users/application data/12345678delete the shortcut on desktop and in programs (or use first to find the 12345678.exe by propery's)run regedit to delete the HKLM/software/microsoft/windows/currentversion/run 12345678and HKCU\Software\12345678check also runonce and runonceexLook for a strange files in your downloads or temp internet (I found a 12345678.jpg.exe file)RUN then your anti virus programsDone then restart your (i hope) clean computer .
- reply
Kirsten Sciulli (not verified)at 18:08 on November 15th, 2009
worked a wonder if you know where to look. ran taskmgr.exe and found the random number.exe file and stopped it processing. then used search function to find files of the same number in documents and settings, however the application folder had been hidden,not a problem as i just typed in the file destination in the toolbar. deleted the folder and files and all security tool shortcuts.All working fine.
- reply
lawliet` (not verified)at 12:24 on November 22nd, 2009
this worked for me. im running malware bytes right now after i got done removing the application files and i found a folder in program files named lx_cat that contained files relating to system tool and also deleted those.
- reply
oneheartylove (not verified)at 09:40 on November 7th, 2009
Hii ppl..a very interesting incident with me..my PC got infected with security tool 2-3 days back..i was very much troubled and as u all i cudnt open task manager or install any anti-malware software..but somehow i cariied on like this trying 2 find solutions and then i reached this site..And today..after i started the comp..it gave the same problem as before..false alarms n asking 2 update n so..but i ignored and cancelled and selected "continue unprotected" wenever it came..and after sometime..it somehow went away itself..i mean the whole computer is free of it itself without me doing anything..so maybe this malware has some life cycle of some days or something like that..i hope this post is useful 2 some of u..
- reply
ihatetrojans (not verified)at 01:02 on November 9th, 2009
Yeah..ok..so i did everything, everyone has said. I am not computer technician. So before I finally got it cleaned out with malwre bytes. Then I hit restore point to get wall paper back from a whiteout of pink. It worked but then i did restore again to do something I cant remember what but there was a reason for it. Now all that happens is the black screen comes up with choice of safe mode/start windows normally ect. And then goes black and comes back to it no matter what button I press. Its like crazy!runs all these stupid numbers really fast then shuts down on the screen goes blue in the background and the black and goes back to choose start windows safe or normally mode? This is a xp laptop, acer and its not my laptop its my buddies :)! I haven't had to deal with xp for a few years now and seem to have forgotten everything. Anyway, its seriously stuck on repeat ..like groundhog day but on this laptop. Has anyone else experienced this with the tool security virus? Maybe their jus making them better to totally screw up my life!I hate trojans, viruses ect. This is Day 2 and its allready infected the hell out of it. I seriously do not know what to do. I am a student and it looks like if someone doesnt help me out I am seriously into having to pay for a shitty laptop that got infected. She's gonna freak if I dont fix this! Please help!
- reply
Rupter (not verified)at 15:47 on November 9th, 2009
Yep..I've seen it. Doing a System Restore most likely has killed it. System Restore can do more harm than good when dealing with malware imo.. I would connect the hd to another computer as a slave (either inside the computer, or use an external enclosure that connects with usb) and get as much info off of it as you can. Then put it back into the infected computer and format the drive..which will erase everything..sorry. But that's the way it is. Good Luck!
- reply
Jamison (not verified)at 09:13 on November 17th, 2009
I got hit by Security Tool and it appeared to only reside on my profile as user of the computer. I have VISTA on the computer. It did not appear to reside in my wife's password protected profile or on the administrator password protected profile. I went into the administrator profile and was able to create a new password protected profile for myself and then deleted my old profile. It appears to have worked since all the profiles now work. Did I really get rid of Security Tool or do I need to download the malware detection and elimination software.
- reply
Rosty Caryk (not verified)at 08:46 on November 22nd, 2009
I also got hit by Security Tool malware. Did the search for the randon numbers file, renamed, rebooted deleted files and folders, then downloaded Malware Bytes anti-malware, ran that and hoped for the best. However, something else came up that is now preventing me from accessing internext, either via Internet explorer or Firefox. Both crash immediately after loading. and I seem to get random notes that Internet explorer cannot run, even though I am not accessing. Sounds like something is still trying. So far, no joy in fixing. I am checking with company IT for help.
- reply
Marta Johnson (not verified)at 19:45 on November 24th, 2009
Rosty Caryk I am having the same exact problem. I thought that i had the sucker fixed but then my internet stopped working. I have researched and researched and am still unable to access my internet....PLEASE let me know if you find a way to fix this! I desperatly need to use my computer for both work and school. Thank!!!
- reply
please help (not verified)at 15:16 on November 24th, 2009
where is the file with the random number located? please help me. i have tried everything, the malware thing, spyware doctor, rkillbox, etc.. and the security tool blocks it all. please help.
- reply
X210 (not verified)at 06:40 on November 25th, 2009
If you have windows vista just open start menu, click all programs, right click security tool, click open file location, delete security tool.bak, rename the number coded security tool, restart your computer, delete the renamed file and desktop icon, hope this helps :)
- reply
emily w123 (not verified)at 12:10 on November 26th, 2009
i downloaded the system tool thingy and gave it all my details, so is there any way i can get the money back? or because i handed the information over theres nothing i can do about it? just trying that anti-malware thingy now... thanks