Security Tool
Page 1 of 1
- ron rotherBeginner
-
OS : xp
Posts : 1
Rubies : 2749
Likes : 0
I am infected with Security Tool..it will not allow certain aspects of the windows to delete it. I have seen several online "cures"..I'm not sure who to trust anymore. I am not a computer literate person, I need help to delete this so that I can continue to use this computer for my business..is there help here?
- TheAvatarSecurity Colleague
-
OS : Windows XP SP3
Anti-Malware : ESET NOD32, Comodo, Malwarebytes
Posts : 137
Rubies : 4824
Likes : 0
Hi ron rother,
Welcome to GeekPolice.net
My name is TheAvatar and I will be tying to help you resolve your issues.
If you have already received help elsewhere please inform me so that this topic can be closed.
If you haven't, please keep reading.
Note Before we start the process you should:
Please do the following:
Step 1:
Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)
There are 3 different versions. If one of them won't run then download and try to run the other one.
Vista and Win7 users need to right click and choose Run as Admin
You only need to get one of them to run, not all of them.
http://download.bleepingcomputer.com/grinler/rkill.exe
http://download.bleepingcomputer.com/grinler/rkill.com
http://download.bleepingcomputer.com/grinler/rkill.scr
Note:
You will likely see a message from this rogue telling you the file is infected. Ignore the message. Leave the message OPEN, do not close the message. Run rkill repeatedly until it's able to do it's job. This may take a few tries. You'll be able to tell rkill has done it's job when your desktop (explorer.exe) cycles off and then on again.
Once the tool has run, do NOT reboot the machine. Try immediately to run OTL (step 2)
Step 2:
Please download OTL from one of the following links
Please post:
Thanks.
Welcome to GeekPolice.net

My name is TheAvatar and I will be tying to help you resolve your issues.
If you have already received help elsewhere please inform me so that this topic can be closed.
If you haven't, please keep reading.
Note Before we start the process you should:
- POST your logs, don't attach them, as it makes it harder to read.
- Each time I instruct you to download a file to use it, please do it even if I have told you before to download it again. This is because these tools are frequently updated to detect newer infections.
- Please be patient, there is no quick fix for malware. Removal can take several attempts. Just because symptoms have gone away, does not mean the infection is gone.
- Last, as most of the tools we use here need administrative rights in order to function properly, I expect that you will be running them from an administrator account.
- If I have not replied to your thread within 2 days, please PM me.
Please do the following:
Step 1:
Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)
There are 3 different versions. If one of them won't run then download and try to run the other one.
Vista and Win7 users need to right click and choose Run as Admin
You only need to get one of them to run, not all of them.
http://download.bleepingcomputer.com/grinler/rkill.exe
http://download.bleepingcomputer.com/grinler/rkill.com
http://download.bleepingcomputer.com/grinler/rkill.scr
Note:
You will likely see a message from this rogue telling you the file is infected. Ignore the message. Leave the message OPEN, do not close the message. Run rkill repeatedly until it's able to do it's job. This may take a few tries. You'll be able to tell rkill has done it's job when your desktop (explorer.exe) cycles off and then on again.
Once the tool has run, do NOT reboot the machine. Try immediately to run OTL (step 2)
Step 2:
Please download OTL from one of the following links
- LINK 1
- LINK 2
- Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
- Under the Custom Scan box paste this in;netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\System32\config\*.sav
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs - Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
- When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
- Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them if you need to start a new topic.
Please post:
- The RKill log.
- The logs from OTL.
Thanks.
- The Avatar
If I have helped you, please consider donating to GeekPolice.net
GeekPolice.net



Online: GMT 10+ 7:30pm to 8:30pm weekdays. On and off on weekends regularly.
Similar topics
Create an account or log in to leave a reply
You need to be a member in order to leave a reply.
Page 1 of 1
Permissions in this forum:
You cannot reply to topics in this forum