How to remove Security Tool or SecurityTool (Uninstall instructions)

Security Tool also known as SecurityTool is a rogue antispyware program. It is a clone of widely spread rogue antispyware application called Total Security 2009. Security Tool is distributed through the use of malware and trojans that masquerade as an Adobe Flash Player update.

Once installed, Security Tool configures itself to run automatically every time, when you start your computer. Once running, the software starts scanning the computer and found a lot of adware, trojans and spyware. All these infections are fake, so you can safely ignore them.

Security Tool blocks the ability to run any programs, including Malwarebytes Anti-Malware. The following warning will be shown when you try to run any program:

Security Tool Warning
mbam-setup.exe is infected with worm Lsas.Blaster.Keyloger.
This worm is trying to send your credit card details using
mbam-setup.exe to connect to remote hosts.

While Security Tool is running your computer will display a lot of false security alerts and nag screens. Some of the alerts:

Security Tool Warning
Intercepting program that may compromise your privacy and
harm your system have been detected on your PC.
Click here to remove them immediately with Security Tool

Security Tool
WARNING 23 infections found!!!

Security Tool Warning
Some critical system files of your computer were modified by
malicious program. It may cause system instability and data
loss.
Click here to block unauthorized modification by removing
threats (Recommended)

All of these warnings are a fake and like scan false results should be ignored! Use the following Security Tool removal instructions below in order to remove this infection and any associated malware from your computer for free.

More screen shoots of Security Tool

Symptoms in a HijackThis Log

O4 – HKLM\..\Run: [96015930] C:\Documents and Settings\All Users\Application Data\96015930\96015930.exe
O4 – HKLM\..\Run: [{RANDOM}] C:\Documents and Settings\All Users\Application Data\{RANDOM}\{RANDOM}.exe

Use the following instructions to remove Security Tool (Uninstall instructions)

Step 1

Download HijackThis from here, but before saving HijackThis.exe, rename it first to explorer.exe and click Save button to save it to desktop.

Doubleclick on the explorer.exe icon on your desktop for run HijackThis. If Security Tool hides your desktop icons, then right click to Windows task bar, then click Show Desktop.

HijackThis main menu opens.

Click “Do a system scan only” button. Look for lines that looks like:

O4 – HKLM\..\Run: [96015930] C:\Documents and Settings\All Users\Application Data\96015930\96015930.exe

Place a checkmark against each of them. Once you have selected all entries, close all running programs then click once on the “fix checked” button. Close HijackThis.

Note: list of infected items may be different. Template of the malicious entry: O4 – HKLM\..\Run: [{RANDOM}] C:\Documents and Settings\All Users\Application Data\{RANDOM}\{RANDOM}.exe. Please be very careful, do NOT check any other boxes!

Step 2

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

Malwarebytes Anti-Malware Window

Select Perform Quick Scan, then click Scan, it will start scanning your computer for Security Tool infection. This procedure can take some time, so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.

Malwarebytes Anti-malware, list of infected items

Make sure that everything is checked, and click Remove Selected for start Security Tool removal process. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

Note 1: if you can not download, install, run or update Malwarebytes Anti-malware, then follow the steps: Malwarebytes won`t install, run or update – How to fix it.

Note 2: if you need help with the instructions, then post your questions in our Spyware Removal forum.

Note 3: your current antispyware and antivirus software let the infection through ? Then you may want to consider purchasing the FULL version of MalwareBytes Anti-malware to protect your computer in the future.

Security Tool creates the following files and folders

C:\Documents and Settings\All Users\Application Data\{RANDOM}
C:\Documents and Settings\All Users\Application Data\{RANDOM}\{RANDOM}.exe.
C:\Documents and Settings\Administrator\Desktop\Security Tool.LNK
C:\Documents and Settings\Administrator\Start Menu\Programs\Security Tool.LNK

Security Tool creates the following registry keys and values

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{RANDOM}