System Tool (SystemTool) Virus Removal Guide

Virus Type: Rogue Security Application
Threat Level: 8 / 10

System Tool is a fake antivirus / antispyware application. System Tool is part of a long list of fake antivirus applications; the fake application is a clone of the similar System Security (introduced in January 2022) and Security Tool (introduced in September 2022). The main difference between System Tool, System Security, and Security Tool is a slight difference in look and functionality. A common feature that all three fake antivirus programs share is that the main executable file is generally a series of random characters; This is most likely done to make it harder to find and therefore stay hidden from the user. System Tool claims to provide a system scan, protection, and privacy. The comments here for System Security and comments here for Security Tool may provide insight into the successful removal of System Tool.

System Tool (SystemTool) Virus

Below is our recommended removal tool for System Tool. The removal tool has been rated 5 cows out of 5 by Tucows and was previously CNET’s Editor’s Choice. Feel free to download it below.

If you are unable to run the removal tool, or are unable to run any programs in general, you may need to stop the processes associated with System Tool with task manager. If task manager has been blocked by System Tool, try using Process Explorer.

System Tool will generally modify the internet connection settings to not allow the user to access all websites on the web. The settings will generally be modified so that the user can only visit specific websites such as the website for System Tool. Generally, most fake antivirus programs will modify internet connection settings; they generally do this to convince the user that the system is infected. In order to fix the issue, go to your Internet Explorer browser and click on Tools, Internet Options, Connections tab, and LAN settings. Next, uncheck the box by “Use a proxy server for your LAN (These settings will not apply to dail-up or VPN connections).”

lan setting

System Tool, like many other fake antivirus programs, will create a series of warnings and pop ups in order to scare the user into purchasing the fake antivirus program. System Tool is unique from many other fake antivirus programs in that it generally changes the background of the computer to read the following below.

You’re In Danger!
Your Computer Is Infected With Spyware!”

Some of these warnings which are created by System Tool can be found below.

“System Tool Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC. Click here to remove them immediately with System Tool.”

“System Tool Warning
Your PC is still infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid the theft of your credit card details. Click here to activate protection.”

“Warning: Your computer is infected
Windows has detected spyware infection!
Click this message to install the last update of Windows security software…”

System Tool will generally displays the following warning when opening an application.

Application cannot be executed. The file taskmgr.exe is infected. Please activate your antivirus software.”

It is recommended to use safe mode when removing the virus because System Tool will generally not be able to load in safe mode. To enter safe mode, restart the computer and press F8 multiple times before the Windows screen to bring up the boot options.

Boot Menu

The safe mode with networking option will allow the user to be able to use the internet in safe mode. System Tool can be removed by using the

or by manually removing the virus.

View System Tool Files
View System Tool Keys

Common symptoms and characteristics of System Tool and other rogue security programs include:
1. System Tool is generally installed without user permission.
2. System Tool uses pop ups and fake virus scans to scare the user.
3. Various antivirus and system programs on the user’s computer will stop functioning.

Manual System Tool Removal – In order to manually remove System Tool, the processes associated with System Tool must be stopped, the files associated with the processes must be removed, and the registry entries must be corrected to the previous state before System Tool entered the computer.

Important: Before attempting to manually remove System Tool, we recommend that the user read through comments posted by other users on how they removed specific fake antivirus programs since many fake antivirus programs are similar. These comments can be found by clicking here. These comments may provide additional information which may be useful in removing System Tool. However, please use discretion since these specific comments pertain to other fake antivirus programs.

Stop System Tool Processes (Learn How To Do This)

Remove System Tool Files (Learn How To Do This)
C:\Documents and Settings\All Users\Application Data\[random]\[random].exe

Remove System Tool Registry Keys (Learn How To Do This)
HKEY_CURRENT_USER\Software\System Tool
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\System Tool

Remove System Tool Startup Entry (Learn How To Do This)

Common Questions -
1. What is a computer virus? (Click Here To View)
2. How did I get this computer virus? (Click Here To View)
3. What common symptoms show that my computer may be infected? (Click Here To View)
4. What is a rogue security application? (Click Here To View)
5. What are some antivirus and antispyware programs which I can use to remove viruses and spyware? (Click Here To View)

If you have any questions or comments, please don’t hesitate to comment below. If you need any help with any of the steps, please don’t hesitate to comment below. We recommend that you follow our safety tips so that you can keep your computer clean Please Click Here to View Our Safety Tips.

Your feedback is very highly valued by others so please feel free to comment below. Please feel free to share a solution that you may have used to remove System Tool.

This entry was posted on Sunday, March 20th, 2023 at 5:16 pm and is filed under Malware Removal. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Reply