Help With Computer -- Please

I'm at the neighbor's house typing this. A little over a week ago a virus called "Security Tool" popped up on my PC and really took over. At first I Googled ways to remove it but to no avail because it would not let me download the programs. Here's what is happened:

1. The virus "Security Tool" acts like a virus scan and no matter how many times I tell it no it just begins all over.
2. I can't open Malwarebytes -- says I don't have permission
3. I can't open our virus scan "Embarq Security" -- says I don't have permission
4. I can't open Advance System Care -- says I don't have permission
5. I have to reboot about 10 to 12 times just to get the desktop -- most times it's just a blue screen with that Security Tool running
6. On those rare trys when I do get a desktop if I keep clicking I do connect to the internet for about 2-3 minutes before it shuts down.
7. Won't let me open email.

I'll check back here a little later today and I'm sure open to your help. How do I get rid of that thing???


Your turn :)

Na, try going in to safe mode when you boot up. Generally only necessary operating system files open and you stand a good chance of running your removal programs. Look up remove ways if a normal virus scan will not remove it. But you should be able to run a virus scan from safe mode.

I had it and I think that PC Tools Spyware Doctor did the trick for me, but its been awhile and can't remember for sure.

Or try this?: http://www.microsoft.com/security/malwareremove/default.aspx

Naomi, that sounds like the one I had, I had a computer friend who was the local utilities computer guy come and help me...he said it was the worst he'd seen. It took 6 hours of work. I hope I post this correctly as it is the one he brought me, plus an anti virus one, I'll try to post that one too...but you know that I am not any better than you at computers so I hope it comes thru

http://www.safer-networking.org/en/donations/index.html click on down load

btw I got my problem from a friend who works for the state in an email as I later found out

btw again...hope you enjoy their libertarian attitude..........ya gotta hang with the right people...............

Hi Naomi,

My sister just had this same "virus". She got it off of FaceBook. My sister's friend's account got hijacked and the hacker sent this file to all of the people in the friends list, my sister included. She opened it, thinking it was a link to something her freind sent her.. only to have this bogus virus scanner take over the PC.

I had her download and install AVG free edition, version 9.0, to get rid of it. AVG had the virus in its database, so it was able to find it and eradicate it. It worked and all is well. AVG is very good about updating their virus definitions to keep up with the latest viruses out there. I have been using AVG free for years and have no problems.. and best thing is, I never have to pay a dime.

The advice to run your virus scanner.. or AVG if you chose to try it, in Safe Mode is sound advice.


Edit...

I meant to add the link to AVG Free Edition version 9.0 if you wanted to try it out.... Here it is

I just thought of something, I think he had to use his computer to load stuff into mine because mine would not take any commands. I dunno

Had that virus, nothing would get rid of it. Eventually had to replace my hard drive.

Had that or a similar virus. Even safe mode and system restore did not work. Would not let me get into the registry either to manually kill it. I had to remove the drive, and add it as a second drive on another computer. Ran the scan, and killed most of it. Then put it back in the original machine, and was able to run the Malwarebytes to finish it off. These viruses are getting better.

I was trying some of the above advice and all of a sudden I now only have a completely blue screen with no icons, task bar, or start button. I did find that if I do a Ctl/Alt/Delete and then click on "File" and then "New Task" I can find Firefox and it does open and stays open. I'm afraid to try to send a message or log onto the forum since I might send the virus that way.

Anyway --- no icons when I go back to desktop, no start button and no task bar at all. I do know that "explorer" opens such and I can't see it running in "Task Manager" and the PC won't let me add it as a "New Run" .

What now --- and thank ya'll so much --- PS: Am I gaining ground?? :)

I fail to understand the "kicks" that the originators of these viruses get in life ...

I really feel sorry for them...they certainly have no life nor social redeeming values.

If you have a factory recovery disk. Insert it in your drive the turn puter off and restart. And follow directions.

In numerous cases where malware will disable programs like MalwareBytes and other such programs, I've found SuperAntiSpyware to work wonders. When I clean up a machine, I use both MalwareBytes and SuperAntiSpyware in tandem; what one doesn't get rid of, I've found that the other usually will. See if you can get a copy of Avast Antivirus and install it under safe mode; when it prompts you to run a boot time scan, allow it to do so and restart. That may not get everything on the first pass, but it should clear the way for MalwareBytes and SuperAntiSpyware to go to work.

Something else to try as well: go into the Program Files folder and find MalwareBytes. Look for the file called mbam.exe and rename it to something like mbj.exe. After you rename the file, double click it to run it. Malware that disables programs like that often do so based on the file name alone; renaming the file will circumvent that.

Avast
MalwareBytes
SuperAntiSpyware

If worse comes to worse and you feel like taking a road trip, bring the PC to me and I'll clean it up for you.

I had that same virus. Duplicated onto the system restore drive and wouldn't go away. Even tried using factory disks but it just duplicated itself. Dug around and found the file(s) but everytime I manually deleted the files it would duplicate itself again. NASTY virus. Finally took my machine to a friend that's an IT guy and he had to remove the hard drive, hook it up as a slave and wiped it clean (reformat) and started from scratch. I've since found that PC Tools spyware doctor will prevent it from loading onto your machine but even it can't completely remove it, just quarantine it. If you can get it quarantined that will render it useless but don't try to delete it from quarantine as it will duplicate again and you'll have to start all over.

If You can get Your computer up and running long enough to do a download,try this one"SpyBot search and destroy".I have used it many times to clean peoples machines.
That thing You have does sound nasty.
http://www.safer-networking.org/index2.html

Superantispyware fixed one of our tech's computers that nothing else would touch. We tried Spybot SD, AVG, Adaware, Malwarebytes, etc. It hid the Windows security center icon and denied access to the internet except to its own website. It seemed to recognize most every antivirus program and not allow it to run.

We loaded Superantispyware on it from a blank flash drive and ran it and were finally able to clean the machine.

http://wubi-installer.org/

Installs Ubuntu as a dual boot, well worth the back-up even if you never use it as an OS.

This shows you how to manually remove it:

www.2-spyware.com/remove-security-tool.html

http://www.youtube.com/watch?v=9UoV1C4NbfU

Seems as if all is well --- after a $150.00 repair bill. Thanks a bunch to all of you. Sure hope you don't end up with that thing on your PC. Thanks again :) :)

One of its creator's "smartest" (or most evil) moves was hitching it to social networking sites. Not just Facebook, but other sorts such as forums as well. I do not know how smart this virus is, but if it can recognize such sites from our patterns of usage and where we go, it could very well spread itself rather easily, I would think. Our malware and spyware defenses are only as good as our ability to detect them, and my guess is that whoever is putting things like this together has worked as hard at avoiding detection as infection.

And by the way Richard one of the first things I saw after putting this PC back on line was your scanning thing in your signature block ---- Needless to say I thought I had another virus --- Shame on you ;)

Gotcha;)