Remove Security Tool
Having Trouble removing Security Tool? Try Spyware Doctor With Antivirus from PCTools. > DownloadFor around 89 bucks www.OnlineComputerRepair.org can remove this threat for you right now.
How to Remove Security Tool
If you have not already done so we do recommend you watch our security tool removal video. It has been watched over 250,000 times and does a great job showing you the steps needed to remove this threat.
To start I should mention that this is not an easy virus to remove. Here are the two best removal options.
Option 1
Spyware Doctor with Antivirus . This software is great at fully removing the Security Tool virus software and all other viruses on your system.
Option 2.
www.OnlineComputerRepair.org offers removal of all viruses online and they charge 89.99 to remove everything. While the SDA client above is the cheap way to go and does work, many people find this to be a great option. You do not do a thing but head over to www.onlinecomputerrepair.org, register an account and then pick the virus removal service. From there one of their certified technicians in California log-in and they begin working.
Onto the Manual Removal of this threat.
I am also including the video we created from www.removevirus.org. This video is a must watch for everyone looking to manually remove Security Tool.
To start I would like to say that you most likely got infected because you did not have a good security client installed on your computer. We do recommend Spyware Doctor with Antivirus. It is some great stuff. If you are looking for solid protection and you can still download and install programs on your computer you might as well do this first and just register the product and run a scan. If you can go this route it’s for the best.
Here is the Video you can follow along with this and the manual guide below
The first thing you will need to do is to terminate the currently running process of this threat. This can be done in several ways.
For those who can still use the Task Manager I recommend you simply hold down Ctrl+Alt+del. Vista and Windows Seven users will need to then select the Task Manager. If you are able to open it then you are looking for an 8 or 10 digit number follow by a .exe that is running.
Example of Security Tool Process running
3467542487.exe This is the file you need to terminate.
If you can not bring up the Task Manger then you have several other ways at getting to this threat still.
We are going to now look for the location of the 10 digit file. First thing to try is simply going to the run command. Hit the Windows Start button and in the “Start Search” or run command area type in “msconfig” with out the quotes. Now select the start-up tab. Browse though the start-up menu and look for a 10 digit number, 8 digit number or a file that says Total Security, TS.exe or TSC.exe. Once you find the trace you need to un-check the box and then hit OK.
You will then be asked to re-boot. Before you re-boot make sure you book mark this page so you can find it again after you boot up your computer.
ANOTHER OPTION
In many cases this file will be located at:
XP: C:\Users\%YOUR USER ACCOUNT NAME%\AppData\Local or in another folder like C:\Users\%YOUR USER ACCOUNT NAME%\AppData\Local\RANDOM NUMBER FOLDER NAME\random number.exe
For Vista Win 7 Users the path should be
C:\Users\%YOUR USER ACCOUNT NAME%\AppData\Local\Random Number .exe or C:\Users\%YOUR USER ACCOUNT NAME%\AppData\Local\Random Number\Random Number .exe
If the above methods have not worked for you we still have several option left. If you were able to stop Security Tool from running then move on to Stage 2.
If nothing has worked so far for you then we recommend bookmarking this page and booting into safe mode with networking. Then just move on to stage 2. To boot into safe mode you need to re-start your computer then start pressing the F8 key every other second. When you see a DOS like screen with several options, use the up and down arrows on the keyboard to highlight the “Safe Mode with Networking” option and then hit enter to select. Then log into safe mode under your normal user account or the admin account. Then bring up this website again. remember only safe mode with networking will allow you to go online. If you are in just Safe Mode you will not have Internet access
Stage 2
At this time the Security Tool program should not be running. If it is then you need to again follow the above instructions till you have terminated the Security Tool program.
We are now going to search and locate the folder that is hiding this program. Before we can do this you will need to un-hide system files and folders. This is because Security tool is a hidden program and the folder is hidden as well
XP Users: Open up “My Computer“ Also known as Windows Explorer ( THIS IS NOT INTERNET EXPLORER ) Then select Folder Options then View Tab, under view check the box that says “Show hidden files and folders” now we need to also Uncheck the box next to “Hide Protected Operating System File”. When we are all done you should set these setting back to default.
Vista and Windows 7 Users: go to Windows Start button > Control Panel >Folder Options > Select the View tab and then check the box next to “Show hidden files and folders” then uncheck the box next to “Hide Protected Operating System files” remember to re-set these settings once we are done.
Now you need to browse down to the correct directory and delete the folder and files of Security Tool.
XP users: The location of this program is going to be C:\Documents and Settings\All Users\Application Data\Tendigitfolder. You will now see a folder that it 8 - 10 digits in length. You need to delete this folder and the files in it. Normally it is the first folder under Application data. If you are getting errors trying to delete this then bookmark the page and re-boot into safe mode as an Administrator as described above.
Vista and Windows 7 users: the location of this program is going to be C:\ProgramData. You will now see a folder that it 8 - 10 digits in length. You need to delete this folder and the files in it. Normally it is the first folder under Application data. If you are getting errors trying to delete this then bookmark the page and re-boot into safe mode as an Administrator as described above.
Keep in mind that the C:\ location is the default Windows folder location.
Now you should attempt to download Spyware Doctor with Antivirus if you could not do it before. Register the product, update the scanner and run a full scan. This is the best way to remove the rest of the Security Tool virus and all the remaining traces. If your a cheap A$$ or can’t get the client to install then read on for the next steps.
The good news here is we are about half way done. The bad news is you still have a bit of work ahead of you.
Now we need to re-set the Windows host’s file and Internet Explorer. This is to ensure your computers browser settings are not highjacked. You may need to re-install pluggins and the like for Internet Explorer when this is done.
Step 1. Download both of these programs. Windows Host’s re-set tool and IE reset tool. Just click the links to download. Download both programs and run both programs. Just follow the onscreen prompts. Once done you may be asked to re-boot. If asked to re-boot do so and come back to this guide.
If you were blocked from downloading or installing Spyware Doctor before then try it again. Here are two different links to try to download the program from
As stated before you should really just rgister the product to remove the rest of this virus and the others still on your computer.
Security Tool Registry Settings
We are now going to be editing the Windows Registry. Please note the editing the registry is very dangerous and one wrong slip and your computer can become unstable. No we do not recommend doing it unless you are a computer expert. We have already told you the correct solution to use. However this is a complete guide so we are going to show you how to edit the registry to remove the rest of Total Security.
Click the Windows start button and type “regedit” in the run box or search box. With out the quotes.
The registry editor will now open for you. You need to locate and delete the following strings.
HKEY_CURRENT_USER\Software\Security Tool
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Your10digitnumber”
That is it. You have just removed Security tool from your computer manually.
You will now need to run a full scan using your favorite antivirus program. You already know the program I use. This is a must that can not be skipped. In most cases those infected with Security tool have several other viruses installed on the system. You need to protect your computer and remove all those viruses so this threat does not get re-installed again.
For everyone out there who can’t seem to get this thing removed we recommend either using Spyware Doctor with Antivirus or www.onlinecomputerrepair.org
Ask your questions or post your comments.
You can watch our removal video on the Security Tool Removal Video page
very detailed guide. Had a bit of trouble killing of the Security Tool process but your steps worked great. Thanks
Talk about helpful. I don’t think I would of been able to remove this if it wasn’t for your video and removal guide.
There was no way I could open the Task Manager, but I came up with a solution.. Make a shortcut to taskmgr.exe in the “startup folder”, so that it starts before Security Tool start..
Thanks for the tip RBN. You can also try to open up the task manager in safe mode or open it before you login in or the very second after you log in. These methods have worked for us when the Task Manager was being hidden by the Security Tool threat.
Hey thanks for these instructions. Everything worked great up till the point where I had to edit the reg files. Did everything you said but could not located these files to delete in the reg:
HKEY_CURRENT_USER\Software\Security Tool
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Your10digitnumber”
What should I do now?
Thanks
check the startup section under “msconfig” there you should be able to see the exact locations for you. I would also do what the video says and run a full scan with the SDA client. It will also let you know what the exact traces are
thanks for the video! found files on Vista at c:\program data\ rather than where the bubble said to look
Thank you so much. I had a really hard time trying to remove Security Tool and nothing seemed to work. After following through with your video, it worked! Thank you again.
Kay, You are correct in the location. The manual removal guides shows the right location. The video was already made and changing it because of a one little error was not going to happen. Thanks for mentioning it however. We love to hear accurate feedback like that.
I’m on the same boat as Joni, I can’t seem to find the files in the registry editor. I’m wondering if these files were deleted when I deleted the Security Tools from C:\programdata?
Excellent video. Thanks. A tip: be quick after the re-boot to delete the .exe and its folder. If you are too slow Security Tool installs another copy, making a new .exe in a new folder. Or perhaps it was the original virus, which by that point I hadn’t yet eliminated, that re-created Security Tool.
Thanks for the tip Robert, It is sure to help others out
Thanks for the video and detailed instructions. Task manager, c prompt, explorer, nothing worked. I actually had to go to run>msconfig>startup services> and unselect the asshole files. After rebooting, security tool was inactive and it was much easier to manipulate the files from there. But if it wasnt for this website, i wouldnt have known where to start. Thanks.
Caleb,
That is why this site is here. This site is ran by removevirus.org. whenever we detect a really bad threat that has infected millions we like to build a separate dedicated site to that threat to help others find our guides better.
The real thanks goes to all the hard working individuals and experts over at removevirus.org.
in vista i found file in C:program data\60170216 just like you said i renamed it rebooted pc deleted everything found path from shortcut properties
oh yeah i skip folder changes because i cut path and paste path in address bar minus exe file which puts you in the folder
Thanks so much! It worked great, and it’s finally gone!
I am down to the last step. With the regedit steps.
I get so far but cannot seem to find last steps.
Like on one, after I get to software I do not see security tool and with the other I get to currentversion but do not see run number.
What do I do? I do not want to cause more frustration by doing something wrong.
K10,
Just run a virus scan to ensure all traces are gone. We like the SDA client mentioned above. This will tell you if you have registry keys infected.
Thank you, Thank you, Thank you….I have been trying to remove this for 3 days. This was so easy. I just followed the video and wallah…no more security tool….Once again, Thank you so much..
Thanks, you saved me a lot of time and money taking my computer to someone else to fix it. It was such a great Easter surprise to have Security Tool install on my computer, but with your instructions, it’s GONE!
I CANNOT Thank you enough for sharing on how to do this. I was almost afraid, though, that any instructions or downloads might be bogus, too!
Your instructions were clear and I am grateful!
Praise God!
Wow, this site was the most helpful! Thank you so much for an excellent and clear and concise tutorial on removing this nasty little bastad….it worked a treat. Top class!
You guys are great !!!! My daughter picked up this virus on her laptop two days before she had a school project due so we were under the gun to find a way to get rid of this Security tool. The information and video provided was Very helpful and I was able to get rid of the file just as you stated. It was a file of numbers in my case it was C:program data/68207528. Can’t say thanks enough it really worked !!!!
When i saw this “progrm” i thought it was going to help me out but it didnt. As soon as i watched your video i knew exacly what to do ! thank you so much for creating this to help everyone out. THe video was very descriptive and understading. Thanks agian for your help !!
Thank you. These were excellent instructions. I was able to complete the fix in no time.
The documents and settings file says it’s not avaliable to be accessed when I try to follow your steps.
Thank you so much. My pc is 3 days old and was completely disabled. I couldn’t however find these files in my reg:
HKEY_CURRENT_USER\Software\Security Tool
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Your10digitnumber”
You are most likely using the XP removal paths. We list the Vista and Windows 7. They are different file paths and the issue you have seems to reflect that.
Run a full scan using Spyware Doctor with Antivirus. If it does not pick anything up you are good to go. If it does find traces then from there you can decide to either manually delete the traces it finds or register the client.
Thank you so much…it worked for me..now my computer is safe..no more security tool..Thanks for the help
Many thanks for the video which helped me remove this nasty infection. Just a heads-up though… in your instructions you suggest that the tool tends to install itself in All Users/Application Data. Well it appears to have evolved as I found it in Username/Local Settings/Application Data. Figured I’d pass on this info in case it helps others.
Jim Bliss is right. The infection has evolved, at least in the XP OS, to the point where it can hide itself in either Username/Local Settings….or the file path named by securitytoolremoval.net
hello,
thanks for the help so far, but i think i may have made mine worse. i found the 8 digit number located under c:\users\name\appData\local. i then changed the name and deleted it. however i feel now maybe that was not the right thing to do as the pop ups keep occuring and now i have no way of locating the file as i have deleted it. any thoughts???
ron
You most likely did remove the correct trace. However another trojan / rootkit re-installed the client on boot.
You may want to boot into safe mode with Networking and install the Spyware Doctor with Antivirus client and run a scan. While the program will scan and pickup the traces you would have to pay for the product in order to have it remove anything. However running the scan will show you the exact file and folder paths. I also strongly recommend people run a scan with Malwarebytes as well. They have a free version that does remove threats but I need to stress you still should run the SDA scan because that security client tends to find more threats.