Ask Experts Questions for FREE Help !
Ask
    speedball1's Avatar
    speedball1 Posts: 29,301, Reputation: 1939
    Eternal Plumber
     
    #1

    Mar 22, 2010, 07:54 AM
    Computer Takeover by SYSTEM TOOLS
    HELP!! Last night my companion picked up a application called "SYSTEM TOOLS" This has taken over my computer. It won't let me delete it, It won't let me restore the system, It took me 15 minutes to get this far. It wants 45$ and I'm dammed if I'll be blackmailed into buying it. Every few minutes there's pop-ups asking me to putchase.
    I can't work the plumbing page or pay bills. How do I get this application off my computer? Thanks, Tom
    NeedKarma's Avatar
    NeedKarma Posts: 10,635, Reputation: 1706
    Uber Member
     
    #2

    Mar 22, 2010, 07:58 AM
    Is it this?
    Stratmando's Avatar
    Stratmando Posts: 11,188, Reputation: 508
    Uber Member
     
    #3

    Mar 22, 2010, 08:55 AM

    Security Tool as mentioned above I have seen and dealt with.
    Can be a real Pain, won't let you restore, no control Panel, no internet explorer, and bad process keep starting up.
    You don't want to pay them, they want your Credit Card Number, not $45.
    If it is Security Tool, I have fixed the last 9 out of 9. It is Tricky, may be able to help.
    Did it also eleminate your Run Command?
    speedball1's Avatar
    speedball1 Posts: 29,301, Reputation: 1939
    Eternal Plumber
     
    #4

    Mar 22, 2010, 09:04 AM
    Quote Originally Posted by NeedKarma View Post
    Is it this?
    Yes! That's the unwanted application.
    NeedKarma's Avatar
    NeedKarma Posts: 10,635, Reputation: 1706
    Uber Member
     
    #5

    Mar 22, 2010, 09:11 AM
    If you can get the Malware Bytes tool from another computer (on a USB key) and boot into Safe Mode and install and run it you might get lucky.
    Stratmando's Avatar
    Stratmando Posts: 11,188, Reputation: 508
    Uber Member
     
    #6

    Mar 22, 2010, 09:13 AM

    Need the answers to the above questions, At the Run Command, does msconfig work?
    speedball1's Avatar
    speedball1 Posts: 29,301, Reputation: 1939
    Eternal Plumber
     
    #7

    Mar 22, 2010, 09:13 AM
    Quote Originally Posted by Stratmando View Post
    Security Tool as mentioned above I have seen and dealt with.
    Can be a real Pain, wont let you restore, no control Panel, no internet explorer, and bad process keep starting up.
    You don't want to pay them, they want your Credit Card Number, not $45.
    If it is Security Tool, I have fixed the last 9 out of 9. It is Tricky, may be able to help.
    Did it also eleminate your Run Command?
    I don't know how to access run command. It's SYSTEM TOOLS all right.
    How can I get it gone? Thanks for any assistance, Tom
    Stratmando's Avatar
    Stratmando Posts: 11,188, Reputation: 508
    Uber Member
     
    #8

    Mar 22, 2010, 09:15 AM

    What happens when you press the windows and R button?
    Or Start, All Programs, Accessories, then Run, then in the run box type msconfig, turn off all start programs that are not Microsoft, then I would Download MBAM from www.malwarebytes.org , get updates and try installing in safe mode. You may have to download on a disc from another computer, and boot from CD in BIOS.
    After all damage has been removed, you will likely have to go to Tools, Internet options, LAN, the select Automatically detect settings, Disable the proxy settings it setup.
    Stratmando's Avatar
    Stratmando Posts: 11,188, Reputation: 508
    Uber Member
     
    #9

    Mar 22, 2010, 09:22 AM

    Tom, I hate to go right now, will be back later, good luck for now.
    speedball1's Avatar
    speedball1 Posts: 29,301, Reputation: 1939
    Eternal Plumber
     
    #10

    Mar 22, 2010, 10:03 AM

    It will allow me to access MSConfig.
    I have Malwarebytes installed but it won't let me open it.
    Stratmando's Avatar
    Stratmando Posts: 11,188, Reputation: 508
    Uber Member
     
    #11

    Mar 22, 2010, 12:06 PM

    In msconfig did you select startup programs and uncheck all that are NOT Microsoft?
    Did you try in safe mode?
    NeedKarma's Avatar
    NeedKarma Posts: 10,635, Reputation: 1706
    Uber Member
     
    #12

    Mar 22, 2010, 12:42 PM
    Doing all the work in Safe Mode is important. Not all startup processes appear in msconfig and that nasty bit of malware, if running, will block access to a lot of areas you would use to remove it.
    speedball1's Avatar
    speedball1 Posts: 29,301, Reputation: 1939
    Eternal Plumber
     
    #13

    Mar 22, 2010, 04:04 PM

    It seems to have left as fast as it appeared. Is this normsl or is it hiding somewhere only to pop up again? Cheers, Tom
    Stratmando's Avatar
    Stratmando Posts: 11,188, Reputation: 508
    Uber Member
     
    #14

    Mar 22, 2010, 05:28 PM

    I would now open MBAM and Update, then scan again, then go to do Microsofts Security Essientials, then update, then scan. If those 2 are clean, I feel you are pretty good to go. Did you do anything before it just started working again?
    speedball1's Avatar
    speedball1 Posts: 29,301, Reputation: 1939
    Eternal Plumber
     
    #15

    Mar 22, 2010, 09:54 PM

    Did you do anything before it just started working again?
    No! I just clicked on a application and it came up. That's when I clicked on the Security Tool File in my C drive. Before it wouldn't let me delete it. When I clicked on the folder it was empty.
    Security Tool had evidently deleted itself. I scanned the hell out of the system after that and it came up clean.
    Very strange! And your thoughts? Thanks for your help. Tom
    Stratmando's Avatar
    Stratmando Posts: 11,188, Reputation: 508
    Uber Member
     
    #16

    Mar 23, 2010, 04:55 AM

    Good Deal, Its odd they didn't find anything. There is usually some registry changes. Keep your fingers crossed.
    Did you have to check the box "Automatically detect Settings"
    Did you also install Microsoft Security Essentials? It seems like this from Microsoft works.
    speedball1's Avatar
    speedball1 Posts: 29,301, Reputation: 1939
    Eternal Plumber
     
    #17

    Mar 23, 2010, 11:53 AM

    Did you have to check the box "Automatically detect Settings"
    No! It just deleted itself.
    Did you also install Microsoft Security Essentials?
    I already have it installed. Thanks again, Tom
    Stratmando's Avatar
    Stratmando Posts: 11,188, Reputation: 508
    Uber Member
     
    #18

    Mar 23, 2010, 03:17 PM

    Strange, you could scan your hard drive including hidden files and foldes and look for securitytool ?
    Or don't even worry about it.
    Glad your back going.
    Stratmando's Avatar
    Stratmando Posts: 11,188, Reputation: 508
    Uber Member
     
    #19

    Mar 24, 2010, 06:59 AM

    Here is some info if you want to understand what it does a little better:
    Remove Security Tool and SecurityTool (Uninstall Guide)
    You will notice 10 digit number in the regestry files as well.
    AskME4's Avatar
    AskME4 Posts: 16, Reputation: 2
    New Member
     
    #20

    Jan 12, 2012, 06:14 AM
    Hello, this is what I did when I got System tools rogue.
    • Reboot your computer in Safe mode with networking
    • Stop SYSTEM TOOLS through Task Manager
    • Remove all the files associated with SYSTEM TOOLS in the directory of Temp in Local Settings.
    • Search all the files associated with it and delete them.
    • Remove the registry entries generated by SYSTEM TOOLS


    If you have problems finding the files or registry entries which have to be deleted read this Removal Guide.

Not your question? Ask your question View similar questions

 

Question Tools Search this Question
Search this Question:

Advanced Search

Add your answer here.


Check out some similar questions!

Democrats and healthcare takeover [ 25 Answers ]

I'm always ready for a laugh: "'The president is a strong persuader, as they say, and I think it makes an awful lot of difference, and I think he will bring everybody together,' said Rep. John Larson, D-Conn." These guys live in a bubble. Dems vow to resurrect health care bill - Yahoo! News

Computer system clocks? [ 1 Answers ]

Hi, I am having problems with my computer. Whenever I take the plug out and put it back in, it turns on automatically and tells me there has been an error and that my system clock needs to be reset. So I go through all the set up and change the date and time so it is correct. And its fine... until...

What is the difference between takeover and merger? [ 2 Answers ]

What are the differences between a takeover and a merger? What are the possible impacts of a takeover for the company involved? What are the possible impacts of a takeover on the company's shareholders?

Tenant Takeover [ 4 Answers ]

First of all,glad I found your site, maybe you can help. I live in Missouri. The apt I live in has 4 units and a basement (used to be empty). I have lived here for six years and am on a month to month lease (we pay extra for that)and am on disabled. The neighbor downstairs, also on disability,...


View more questions Search