Technology

Security Tool is a so called rogue anti virus software that is distributed by various means including malicious software like trojans but also pop ups on the Internet which will display a fake message that the computer is infected and needs to be secured by downloading the rogue security program. Security Tool will perform a series of tasks once it is running on a computer system. This includes blocking legit software from being executed and displaying false security warnings to promote a “full” version of the program that the PC user should buy to protect the computer system. The files that it displays as malicious or infected are not in fact which can be proven by testing them with a legit anti virus software.

Security Tool will add itself to the list of auto start programs in Windows. It will automatically perform a scan upon start up that will display the fake infections in the end. The “make money” part comes into play when the user tries to remove the infections with the rogue program. The rogue AV will notify the user that a license needs to be purchased before the infections can be removed.

Some of the fake security warnings that Security Tool will display to the user include the following:

Security Tool Warning
Spyware.IEMonster activity detected. This is spyware that attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other programs.
Click here to remove it immediately with SecurityTool.

Security Tool Warning
Some critical system files of your computer were modified by malicious program. It may cause system instability and data loss.
Click here to block unauthorised modification by removing threats (Recommended)

To make matters worse Security Tool will also manipulate installed web browsers and block them from accessing websites. This usually is implemented by rogue software to make it harder for the computer user to download legit security software that can be used to remove the rogue software.

Manual Removal of Security Tool:

Security Tool uses random numbers to make the identification and removal instructions complicated.

• Step 1: Remove the Security Tool startup entry which is listed as number.exe where number is a random number.
• Step 2: Identify and stop the Security Tool process by pressing [Windows Alt Del] to bring up the Windows Task Manager. The process is listed as number.exe where number is a random number
• Step 3: Remove Security Tool related files. These are stored in two locations
  C:\Documents and Settings\All Users\Application Data\number\
  C:\Documents and Settings\All Users\Application Data\number\number.exe
  where number is again a random number.
• Step 4: Remove Security Tool Registry entries. Those again are stored in two different Registry keys.
  HKEY_CURRENT_USER\Software\Security Tool
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Security Tool

Automatic Removal:

Most legit antivirus software, like Malwarebytes’ Anti-Malware is able to detect and remove Security Tool automatically. This process is usually faster and the better choice especially for inexperienced computer users.