Security Tool / SecurityTool Virus Removal Guide

Virus Type: Rogue Security Application
Threat Level: 8 / 10

Security Tool is a fake antivirus program. Security Tool is a clone of Total Security and System Security. Security Tool hopes to trick the user into thinking that it is a real program by using various methods. Security Tool hopes to also scare the user into purchasing the program by displaying fake virus scan results. Security Tool is fake and doesn’t work.

strogue

Below is our recommended removal tool for Security Tool. The removal tool has been rated 5 cows out of 5 by Tucows and was previously CNET’s Editor’s Choice. Feel free to download it below.

If you are unable to run the removal tool, or are unable to run any programs in general, you may need to stop the processes associated with Security Tool with task manager. If task manager has been blocked by Security Tool, try using Process Explorer. The process, [random numbers].exe, should be stopped. You can also try renaming the removal tool to make it run.

Security Tool will tell the user that their computer is infected and will use tactics to convince the user to purchase it. It has a website which it uses to advertise the fake program. It may also use pop ups to convince the user to purchase the program. SecurityTool is similar to its previous clones in that it uses randomized filenames to make it hard to find.

View Security Tool Files
View Security Tool Keys

Common symptoms and characteristics of Security Tool and other rogue security programs include:
1. Security Tool is generally installed without user permission through a trojan horse.
2. Security Tool uses pop ups and fake virus scans to scare the user.
3. Various antivirus and system programs on the user’s computer will stop functioning.

The comments posted by users below may provide insight into removing Security Tool.

Manual Security Tool Removal - In order to manually remove Security Tool, the processes associated with Security Tool must be stopped, the files associated with the processes must be removed, and the registry entries must be corrected to the previous state before Security Tool infected the computer.

Stop Security Tool Processes (Learn How To Do This)
[random numbers].exe

Remove Security Tool Files (Learn How To Do This)
C:\Documents and Settings\All Users\Application Data\[random numbers]\
C:\Documents and Settings\All Users\Application Data\[random numbers]\[random numbers].exe

Remove Security Tool Registry Keys (Learn How To Do This)
 HKEY_CURRENT_USER\Software\Security Tool
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Security Tool

Remove Security Tool Startup Entry (Learn How To Do This)
[random numbers].exe

Block Security Tool Related Websites (Learn How To Do This)
If you are receiving pop ups from specific websites related to SecurityTool, you can block these websites through your HOSTS file.

Common Questions -
1. What is a computer virus? (Click Here To View)
2. How did I get this computer virus? (Click Here To View)
3. What common symptoms show that my computer may be infected? (Click Here To View)
4. What is a rogue security application? (Click Here To View)
5. What are some antivirus and antispyware programs which I can use to remove viruses and spyware? (Click Here To View)

If you have any questions or comments, please don’t hesitate to comment below. If you need any help with any of the steps, please don’t hesitate to comment below. We recommend that you follow our safety tips so that you can keep your computer clean Please Click Here to View Our Safety Tips. It is also best to upgrade to Internet Explorer 8 for better web browsing security.

Your feedback is very highly valued by others so please feel free to comment. Please feel free to share a solution that you may have used to remove Security Tool.

Posted in: Malware Removal

This entry was posted on Friday, September 25th, 2023 at 11:01 pm and is filed under Malware Removal. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

25 Responses to “Security Tool / SecurityTool Virus Removal Guide”

luis October 7th, 2023 at 4:26 am

I found the virus was under a diffrent file name of 42434522.exe. Find it with C:\Documents and Settings\All Users\Application Data\42434522.exe hope this helps.

Colin October 19th, 2023 at 6:16 pm

Security Tool wasn’t on my registry, but found the random number and/or Security Tool in all the other locations…

Farkad October 20th, 2023 at 5:03 am

MAN!, i love u.

i was really scared because its the family computer, and usually the blame will be on me!!!!.

thank u very much!

Farkad October 20th, 2023 at 5:28 am

u didn’t mention that the background changes to black when the virus is infecting ur computer.

also i have a huge REMINDER: I LOVE U SOOO MUCH

u cant imagine how much i love u.

i love uuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu

i love u very muchhhhhhhhhhhhhhhhhhhhhhh

iAmSanders October 20th, 2023 at 10:16 pm

It is very simple to remove on your own.
1. Turn your computer on and press f8
2. At the advanced startup screen find Start Windows in safe mode
3. Press Enter
4. Once finished loading windows look for an icon that says security tools
5. Right Click it and find the location of the file
6. Give yourself privilages to view hidden folders
7. Go to the location of the Security Tools Folder usually xxxxxxx with x being any number 0-10
8. Delete the folder
9. Run a virus scan
10. You deserve a cookie ( a real one)

John Williams October 21st, 2023 at 1:49 am

I have security tool on my PC and have tried every thing to get it off, my PC will not start in safe mode, I cannot access task manager and can not download any anti virus, or malware programs. I am stuck, help!!!

Kevin October 22nd, 2023 at 12:53 pm

Here’s how I finally got rid of this thing. At times, it would go “dormant” where the desktop and many functions would return. I finally managed to download the free version of AVG after two unsuccessful attempts and ran a virus scan. Several items came up as “unhealed” (all of which had file names with eight random numbers) so I went into “Search”, entered the numbers and manually deleted the files through “Edit” and “Delete”. I still don’t have System Restore or Windows Updates capabilities, but everything else has returned to normal. Hope this helps

nanntess deepless October 22nd, 2023 at 11:39 pm

i scared to much…!!!

Barntha Lemen October 23rd, 2023 at 12:15 am

Same thing happened to my computer. the security tool will not go away for anything and safe mode won’t work. the computer itself won’t even turn on and i am soooo pissed about the whole virus. lsas.blaster is the worst thing that has ever happened to me. Itunes won’t work and my songs are being deleted.. Any help?

Patti Dever October 31st, 2023 at 3:10 pm

I have tried everything you have suggested above. The security tool will not allow me to run the process explorer or download the removal tool.

Sara November 14th, 2023 at 1:14 pm

Hei, jeg får ikke fjernet viruset. Når jeg prøver å åpne linkene hindrer programmet meg i å åpne dem… HJEEEEEEEEEEEEEEEEEEEEEEEEELP!

jeannine November 30th, 2023 at 4:02 am

hello. i need help. i have tried everything here. i found the file but it just says it can not delete it because it is in use. i can not open task manager or any other virus software because the security tool virus blocks it and says it has a worm detected. please help. i am desperate!

inge December 14th, 2023 at 8:10 pm

Jeg har forsøkt å laste ned et par forskjellige programmer som skal ta knekken på Security Tool. Går greit å få laste det ned, men når jeg skal kjøre det virker det som om det blir stoppet av virus-programmet… Prøvde også å laste det ned og lagre det med et annet navn, men ble stoppet da også. Har også prøvd å gå inn i “oppgavebehandling” for manuelt å stoppe prosessen som kjører Security Tool, men virusprogrammet har kontroll over det også… Noen som vet hva jeg kan gjøre???

Claus December 20th, 2023 at 12:11 am

Try to get a taskmanager up and running as fast as possible after reboot, if you succeed in doing this before the virus get started, you will stil have control over the taskmanager. Now stop the virus by means of the taskmanger and run msconfig and remove the virus from the startup tab in msconfig. You should now have gained control over your computer again, follow the instructions on this page to actually remove the virus from your system. Good luck !!

Christopher December 21st, 2023 at 10:23 pm

Hello.

You can’t do anything when the program is popping up on your window all the time.
And you can’t start your computer in safe mode because then you will get a blue screen.

How I solved the problem was to use; https://www.oo-software.com/home/en/products/oodiskimage/ and boot up on the cd which comes with the program. You can’t boot up on windows because then the virus will just be in charge.
What you have to do is to boot up on the oo cd disc media exactly when you start the computer. And use the rededit tool from oosoftware which is including in the product.
Then I just searched for the [random numbers].exe and deleted them.

Hope this helps, good luck!

vikram December 24th, 2023 at 5:49 am

i found 18864633.exe in c:\Documents and Settings\All Users\Application Data\18864633 folder.
i delete this… and more over in registry where i found 18864633 . i delete all the keys…
by find key option in registry…
it works and security tool has been removed….

MIHAELA January 3rd, 2024 at 9:04 am

AM REUSIT
MULTUMESC
E SIMPLU
UN NOU AN BUN

ilona January 4th, 2024 at 12:41 pm

hallo ik ben een vrouw
wie wil me helpen.
ik heb last van security tool die komt steeds in beeld.
die verteld dat ik heel veel virussen heb. terwijl dat niet zo is.
hoe krijg ik het weg.
groetjes ilona

Red January 7th, 2024 at 4:14 pm

That was a huge help. Thanks very much. It is nice to see a polite explanation of how to remove these things manually without being forced to download another file that could be a trojan.
The only part that I couldn’t complete was “Block Security Tool Related Websites” because I have no idea where I got it from. It would be great if people could post here the sites they got it from so we can all share and learn from the experience.

TJP February 21st, 2024 at 2:06 am

Thanks so much. I was able to take SecurityTool off a friend’s LT using your instructions. However, everyone attempting to do that should know that when you try to “end process” in Task Manager the confirmation dialog, which you must answer, will come up in the middle of the screen and may be immediately hidden by another Security Tool pop-up window, making you think that “End Process” isn’t working either. If it seems like “End Process” isn’t working, just try moving (not closing) the Security Tool windows aside and see if the confirmation dialog is there.

Jan February 24th, 2024 at 1:13 am

I am trying all suggestions to remove this virus, but nothing is working. Evertyhing I try is blocked. I have just started using Windows 7 instead of Windows XP and I can’t find Documents & Settings on the C:/. Can you lead me in the right direction?

Bjørn March 24th, 2024 at 5:08 pm

jeg har prøvd o fjerne det men får det ikke til! :( jeg har windows 7 og ingenting fungerer for å fjerne det, hjelp!! :)

HRademakers March 31st, 2024 at 7:35 pm

Ik heb op de laptop van mijn zoon het security tool virus zitten.
Heb Malwarebytes geinstalleerd, maar krijg dit programma niet open. Kunt u mij helpen?

riley April 9th, 2024 at 2:10 am

I recently dealt with this annoying, yet very defensive virus. Here’s how I accomplished removing it:
1. If you’re using a Windows Operating System, first go to the Start menu and click on ‘Shutdown’. (otherwise shut down your computer how you normally would)
2. Turn on your computer manually using the power button and boot the system in Safe Mode by repeatedly tapping the F8 key. You’ll reach a black screen with with text prompting you to choose the booting method. Use the arrow key to highlight “Safe Mode” then press Enter.
3. Once in Safe Mode, login as you normally would. The Security Tool virus configures itself to automatically run at startup. However, safe mode will only start system services, thus preventing this pesky virus from starting.
Follow this Uninstallation guide: https://www.bleepingcomputer.com/virus-removal/remove-security-tool

the dude March 8th, 2024 at 1:54 am

this is a real bummer for those of us that have no skill in virus control ! i had to let the geeks delete . and when i got up and running it returned :( just so you all know i opened this virus because it disguised itself as a email from UPS and i do a lot of business with UPS . this is a nasty and very intelligent virus good luck with removal and thanks for all the info.

Leave a Reply