Spyware, viruses, & security forum: difficulty in removing "System Tool Virus" , how

1. In system tool, click registration and enter this: WNDS-S0DF5-GS5E0-FG14S-2DF8G
2. Click OK, then OK again when prompted to "clean your PC right now"
3. Reboot when prompted
4. Run a FULL scan with malwareytes'
5. Reboot

Moreover, why would you then wish to run a scan with a program that is designed to detect false positives? It seems like an unnecessary and counterproductive action when your ultimate goal is to remove the infection from your computer.

auto78900: Did you reboot your computer into Safe Mode before performing those removal attempts? You can follow the instructions found here to successfully remove System Tool. My only note is that I generally recommend downloading the latest tools/security software and then using Safe Mode (without networking) so that you do not connect to the internet while all of your security software is disabled, which can put yourself at further risk.

Hope this helps,
John

I got if from youtube user rogueamp.
he seems legit, as the system tool removal is one of his most popular videos.
It worked when my family was infected

The bleeping computer guide that John posted will also work, but is more complicated and longer for the same effect. Either way will work to equal effectiveness

My recommendation is to remove the malicious application; yours is to essentially ignore it by quieting the alerts.

An analogy would be discovering you have rats in your attic, chewing the wood, insulation, et cetera. You could feed the rats, which would minimize the negative effects, but that doesn't actually resolve the problem; you would still have rats. The true solution would be to call an exterminator to eliminate the infestation.

The same applies here; you could feed the rats by entering a pirated product key (ironic, since you're stealing from thieves), but the rogue software would still be present, with absolutely no guarantees that harmful effects would not still be encountered. Anything recommendation short of proper malware removal continues to place the user at risk, and is in no way to be considered equally effective.

In short, you can choose to take your approach with your own computers, but please do not make that recommendation to others here as it is considered potentially dangerous advice.

Thanks.
John

Also, after putting in the key, all the programs it blocks will be relinquished

auto..

I'm going to copy a recent response to a post, where a member was having issues with RKill and Security Shield. Security Shield is from the same family as Security Tool.

"Did you try ALL versions of RKill? If not, go to the RKill Download Page and (continue to) try a different file name.

See RKill - What it does and What it Doesn't - A brief introduction to the program.

Scroll down to where you see "Depending on the malware that is installed on the computer, when you run RKill you may see a message from the malware stating that the program could not be run because it is a virus or is infected". See this screenshot. ⇐ The fact that it's for Security Tool (instead of Security Shield) shouldn't matter.

It's noted the warnings are fake alerts by the malware that has hijacked your computer trying to protect itself. Two methods you can try to get past this and allow RKill to run are:

• When you receive the warning message, leave the message on the screen and try running RKill again.
&bull: If that doesn't work, keep launching RKill until it catches and stays up long enough to kill the malware.

Were you following all the steps in the below uninstall guide? To include step #2 which states:

It is possible that the infection you are trying to remove will not allow you to download files on the infected computer. If this is the case, then you will need to download the files requested in this guide on another computer and then transfer them to the infected computer. You can transfer the files via a CD/DVD, external drive, or USB flash drive."

_____

Give the two above methods a try. If you continue to have problems with RKill, try exeHelper. It's based on the same premise:

http://www.raktor.net/exeHelper/exeHelper.com
http://www.raktor.net/exeHelper/exeHelper.scr

Read the instructions (John provided) carefully. Especially about running Malwarebytes's Anti-Malware immediately after sucessfully running RKill.. And NOT rebooting in between.

Uninstall either AVG or Avira. Temporarily disable whichever you keep, prior to running the tools.

I noticed you posted at a few forums. Instead of picking and choosing which advice to follow, you might best be served by posting at a HijackThis forum. The helpers utilize tools, which will enable them to SEE what's going on.

In case you decide to take that route, you can find a list of forums on the left-hand side of this page.

Best of luck..
Carol