Thursday, April 22, 2010

How To Remove SecurityTool Scareware

SecurityTool is extremely defensive scareware that can be near impossible to remove automatically. That's because SecurityTool blocks access to Task Manager, the Registry Editor, the Deskop, Safe Mode, and many executable files. You have to somehow disable the main process before any of the traditional scanners are going to work. Fortunately, a free tool from Microsoft can do the trick. Here's how.

Here's How:

1. Visit the Microsoft Process Explorer website. On the right side of the page is a link that says Run Process Explorer.

2. Click Run Process Explorer. In the ensuing dialog box, choose Save File.

3. Browse to a folder that will be easy to access from a command prompt. However, do not choose the Desktop, as SecurityTool can block access to files in the Desktop folder. Likewise, do not save the file to the Windows folder nor to any of the Windows subfolders.

4. After selecting the destination, rename procexp.exe to explorer.exe. Click Save.

5. Using command prompt, browse to the location of the saved file and run it. Once you have Process Explorer running, disable any processes that have randomnumber.exe as the name. For example, 63814426.exe or 26540522.exe or 4946550101.exe, etc.

6. You should now be able to run an up-to-date reputable antivirus or antispyware utility to remove SecurityTool. Do not reboot the system prior to full removal, otherwise the process will load again. If that should happen, repeat step 5 to disable the process.

Source: by Mary Landersman

No comments:

Post a Comment