Security Tool

[Comprev]

Why is Security Tool so infamous? I have never had it, but it seems more infamous than similar rogues like Antivirus Soft, and it is older.

Is it the ultimate challenge if an expert can remove Security Tool ?

Thanks,

Comprev

[IDKWatMNShouldBe]

No it's not extremely hard to remove Security Tool, and Security Tool being unfamous?

Psshh, you don't know how many users it has infected?

Anyways, in my opinion it is famous since it's been out for a long time.

Even on Google search suggestions it shows how many people want to remove it!

[Wide_Glide]

Security Tool and SecurityTool is actually part of the same family as Winweb Security rogues, first seen on or about November 27, 2008.

No it's not extremely hard to remove Security Tool,

That totally depends on the severity of the infection. If rootkits were installed, then it can be a difficult task to remove.

[DarkSnakeKobra]

Not hard at all to remove. I have it locked on a flash drive.

[byte_king]

@Buttons

Love your new pic. Great penguin

[Wide_Glide]

@Buttons

Sorry, but when it takes 2 to 3 days to clean a pc infected with Security Tool, I consider that "Difficult"

[Comprev]

It just seems like a very notorious rogue to me.

Thanks anyway,

Comprev

[LDTate]

Security Tool and SecurityTool is actually part of the same family as Winweb Security rogues, first seen on or about November 27, 2008.

That totally depends on the severity of the infection. If rootkits were installed, then it can be a difficult task to remove.

I've worked a few where a RootKit was part of the infection. Not sure if it came along with Security Tool but with the added RootKit, it's not easy to remove. Once a RootKit or a BackDoor is involved you can never be 100% sure the pc is clean. IMO.

[Comprev]

I know rootkits can come with rogues, and they make a formidable combination.

Rootkits make it less likely for an AV software to detect a piece of malware, right?

Trojans that contain both rootkits and rogues must be pretty big, unless rootkits take up little space.

Can MBAM detect rootkits?

[LDTate]

Rootkits make it less likely for an AV software to detect a piece of malware, right? It usually disables all protection to install itself. Once installed, you can't run your protection programs.

Can MBAM detect rootkits? As to show file XYZ is a RootKit, Not that I know of. It can however tag the file that caused the infection. It can also prevent the infection from happening.

[nosirrah]

Cloaked and locked files are seen by our scanner, our driver reads the disk directly.

[DarkSnakeKobra]

@Buttons

Love your new pic. Great penguin

Heh, thanks. Thought I'd be a bit festive.

@Wide Glide

Several things have to be taken into acount though. Processor, memory, what else it may haved dropped and how long it's had it's roots. Could take several hours or a day or to fully scan the system with multiple products. This was nuked shortly after receiving about 15 minutes.

[Guest remixed]

What made Security Tool (it has now been replaced by Security Shield) was not the 'quality' of the rogue itself, but how prevalent it was. It was very aggressively promoted through just about every means of delivery. I'll give you an example,

http://www.enshipack.com/book.asp?ToPage=1&shou=

This is a site containing 100's of pages with 100's of html links on every page all redirecting to fake porntubes which serve a fake Adobe flash upgrade which is in reality the installer for ' Security Shield '. There are 100's of these sites containg 1000's of links each and that's just one method of delivery. Then there's the fake online scanners, the driveby's the exploits and so on. It's everywhere and that's the key to it's notoriety.

[DarkSnakeKobra]

Didn't know why it was so well known. Thanks for the explanation. And the link.

[Serj96o]

Well,security tool was for about 1 year and 2 months active on the web and it infected lot of computer users.Security Tool is easy to remove with safe mode.

[Conor55]

I was helping a friend who got it from the famous facebook page "OMG THIS GIRL DIED BECAUSE HER FATHER'S STATUS UPDATE!!!!!1!" bs.

Took 45 minutes, he found like 22 infections.

[RyesenGrear]

Well,security tool was for about 1 year and 2 months active on the web and it infected lot of computer users.Security Tool is easy to remove with safe mode.

It's back though, with a 2011 "version." On facebook unfortunately. So why do virus writers make updates? Is it because they find new exploits, or are they working off of the same old ones that once the virus is removed doesn't get fixed?

[DarkSnakeKobra]

Well,security tool was for about 1 year and 2 months active on the web and it infected lot of computer users.Security Tool is easy to remove with safe mode.

That's what I did.

[Guest name cool]

This caused the closure of everything from my files and could not open any programs, especially Malwarebytes' Anti-Malware and Kaspersky as well. and even Kaspersky tools blocked' all applications Stopped working. . and even a tool "HijackThis been blocked him.

.......................................

M' Anti-M Free use. XP SP 3

:::::::::::::::::::::::::::::::

[DarkSnakeKobra]

This caused the closure of everything from my files and could not open any programs, especially Malwarebytes' Anti-Malware and Kaspersky as well. and even Kaspersky tools blocked' all applications Stopped working. . and even a tool "HijackThis been blocked him.

.......................................

M' Anti-M Free use. XP SP 3

:::::::::::::::::::::::::::::::

You're not infected are you?

They block everything. Even WinPatrol setup was blocked. Installed through a php script and rooted itself within seconds.

[Serj96o]

It's back though, with a 2011 "version." On facebook unfortunately. So why do virus writers make updates? Is it because they find new exploits, or are they working off of the same old ones that once the virus is removed doesn't get fixed?

2011 version?You mean System Tool 2011?

[Guest name cool]

You're not infected are you?

They block everything. Even WinPatrol setup was blocked. Installed through a php script and rooted itself within seconds.

This was a few days ago. I had to shut down the system and run it again, and before the start of any programs in the startup. then I've .. clicking fast on "Malwarebytes' Anti-Malware, and have opened. have been deceived Rogue , and then

[OmnibusIT]

I've been seeing a lot of that rogue in the last few weeks. None that I've found had rootkits along-side them, but it sure does freak out my customers.