Security Tool

View previous topic View next topic Go down

Security Tool

Post by ron rother on Sun Oct 17, 2010 5:17 am

I am infected with Security Tool..it will not allow certain aspects of the windows to delete it. I have seen several online "cures"..I'm not sure who to trust anymore. I am not a computer literate person, I need help to delete this so that I can continue to use this computer for my business..is there help here?

ron rother
Beginner
Beginner

Posts Posts : 1
Joined Joined : 2010-10-17
OS OS : xp
Points Points : 22413
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Security Tool

Post by TheAvatar on Sun Oct 17, 2010 7:15 am

Hi ron rother,

Welcome to GeekPolice.net

My name is TheAvatar and I will be tying to help you resolve your issues.

If you have already received help elsewhere please inform me so that this topic can be closed.

If you haven't, please keep reading.
Note Before we start the process you should:

  • POST your logs, don't attach them, as it makes it harder to read.
  • Each time I instruct you to download a file to use it, please do it even if I have told you before to download it again. This is because these tools are frequently updated to detect newer infections.
  • Please be patient, there is no quick fix for malware. Removal can take several attempts. Just because symptoms have gone away, does not mean the infection is gone.
  • Last, as most of the tools we use here need administrative rights in order to function properly, I expect that you will be running them from an administrator account.
  • If I have not replied to your thread within 2 days, please PM me.



Please do the following:

Step 1:

Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)
There are 3 different versions. If one of them won't run then download and try to run the other one.
Vista and Win7 users need to right click and choose Run as Admin
You only need to get one of them to run, not all of them.

[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]

Note:

You will likely see a message from this rogue telling you the file is infected. Ignore the message. Leave the message OPEN, do not close the message. Run rkill repeatedly until it's able to do it's job. This may take a few tries. You'll be able to tell rkill has done it's job when your desktop (explorer.exe) cycles off and then on again.

Once the tool has run, do NOT reboot the machine. Try immediately to run OTL (step 2)


Step 2:

Please download OTL from one of the following links
  • [You must be registered and logged in to see this link.]
  • [You must be registered and logged in to see this link.]

    • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
    • Under the Custom Scan box paste this in;

      netsvcs
      drivers32
      %SYSTEMDRIVE%\*.*
      %systemroot%\*. /mp /s
      CREATERESTOREPOINT
      %systemroot%\System32\config\*.sav
      HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

    • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them if you need to start a new topic.



Please post:
  • The RKill log.
  • The logs from OTL.


Thanks.


- The Avatar
If I have helped you, please consider donating to [You must be registered and logged in to see this link.]

GeekPolice.net [You must be registered and logged in to see this link.]    [You must be registered and logged in to see this link.]

Online: GMT 10+ 7:30pm to 8:30pm weekdays. On and off on weekends regularly.

TheAvatar
Intermediate
Intermediate

Posts Posts : 137
Joined Joined : 2010-10-02
Gender Gender : Male
OS OS : Windows XP SP3
Protection Protection : ESET NOD32, Comodo, Malwarebytes
Points Points : 24623
# Likes # Likes : 0

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum