PC infected - Please Help

Post Reply New Topic

My (very basic netbook) PC has become infected recently. Something called Security Tool is now on my start-up menu, my toolbar and my hard drive and I can't get rid of it. I've had viruses before but I managed to get rid of them using Spybot. When I try running Spybot on this sucker, my PC shuts down.
Oh, and theres the delightful side effect of a window popping up on my screen every 20 seconds or so urging me to use Security Tool.

Any recommendations about what to would be much appreciated.

Try this: Remove Security Tool

^^^How? What does that entail?

Download Malwarebytes from download.com. It helped me with a similar problem.

In Jadog's post, move your mouse cursor over the words Remove Security Tool. It's a clickable link that takes you to a website with removal instructions of the said malware.

I got one yesterday: started running, flashed up warning messages of virus infection, left things in the registry to restart itself, thoroughly nasty little bugger.

Restart Windows in Safe Mode with Networking - hold the power key down for ten seconds or so to turn it off, then bounce on F8 while its restarting and proceed from there. There are web pages that'll give you clues - or let you download tools - to cleaning up from there. Don't be fooled though, it's not a real virus and its messages about infection are just to scare you into obeying its commands.

Thanks for the suggestions, guys. Much appreciated!

10 seconds? That's exactly 2.5 times longer than is required. Many computers based on the ATX format will power off when the power switch is held in position for 4 seconds.

In the terms of viruses, it is better to power off, remove the battery - wait 30 seconds; longer does no harm, and start the computer up, but I would avoid safe mode with networking as this could encourage the active use of an internet connection and therefore re-instate itself. I would recommend pure safe mode if you should want to do so. But Safe mode is only for those "hard to reach spots" that can't be got at without conventional ways.

In the terms of a laptop/netbook, you should get a logo of the device you get, once that disappears, start pressing the F8 (fate dunno why I like to call it that) if you select nothing, it will resume normal start up in 30 seconds by default. This can be adjusted.

In the terms of powering off a full desktop PC, it would be best to power off, switch off (some computers have rocker switches) and unplug. Then hold the power button on for a few seconds to drain the capacitors which WILL still have a charge in them.

I myself use safe mode rarely as there aren't many instances that call for it

What I would recommend you to do, to get Spyware Doctor from Google Packs and then install Spyware Doctor.... Once that is installed, update it immediately.

Once finished updating.... Restart your computer...

When this part of your computer starts up.... Image may vary depending on computer models.


Hold f8 or rapidly press it till the the menu should come up and it should look something like this....


Select Safe mode.....


Now you are at safe mode, all you need to do is run spyware doctor full scan, hopefully it should find all the results... hopefully it should be able to remove the virus which it is most likely to do.

Good luck, superboyian

---------
Extra information incase no luck... (this part of the information is from 2-spyware.com website)

Kill processes:
4946550101.exe

Delete registry values:
HKEY_CURRENT_USER\Software\Security Tool
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "4946550101"

Delete files:
4946550101.bat
4946550101.cfg
4946550101.exe
Security Tool.lnk
Security Tool.lnk

Delete directories:
%UserProfile%\Application Data\4946550101

Hopefully should help