Forum Home
Press F1
 
Thread ID: 106289 2010-01-03 20:56:00 Security Tool Virus B.M. (505) Press F1
Post ID Timestamp Content User
845306 2010-01-03 20:56:00 Guys I’ve just been hit by this Security Tool Virus. :mad:

Don’t know where it came from but it just marched past all security, installed itself, and went about telling me about all the infections it had found on my computer. :crying

Great, I suppose there’s a first for everything.

Anyway, it completely took over and refused to let me do anything until I’d agreed to tidy up my act. I picked it wanted to run another executable so I refused but I couldn’t close it down. It didn’t appear in Task Manager so I couldn’t kill it from there. I then moved the windows around until I could open MalwareBytes and that got up to 5 infections before the computer crashed and restarted.

Back to square one.

So I restarted the computer in Safe Mode and ran MalwareBytes from there. Fortunately, Security Tool didn’t start in Safe Mode. MalwareBytes found 14 infections which it says it’s fixed and so far that appears to be the case because we appear to be back to normal.

However, reading about this pest via Google it appears it is a sod to completely eradicate and is likely to reappear. :groan:

Anyone had first had experience with this sod and a trusted fix? :thanks
B.M. (505)
845307 2010-01-03 21:00:00 Run and update trojan remover as well. Then select all options under the utilities menu Speedy Gonzales (78)
845308 2010-01-03 21:30:00 Run Super Antyispyware (full scan mode) & Spybot S&D as well, they sometimes pick up more infections that malwarebytes misses. wainuitech (129)
845309 2010-01-04 03:31:00 :badpc:

Startup in safe made
goto Start, then run, type "msconfig"
goto the start tab and disable all, only click your AV program

restart
google "combofix.exe" and download, and run - takes a bit of time :sleep
google "hijackthis.exe" and download, and run
remove anything that looks bad or copy and paste the info into this website to tell which is bad www.hijackthis.de

run Malwarebytes and SuperAntiSpyware - basic scan at the same time
If issues, run the full scan too for both

run CCleaner
run Spybot

goto www.eset.com and click on the right "online Scanner"

all this will remove all possible isures

Richard Scott
scottwww (15334)
845310 2010-01-04 07:41:00 Jeeeez,, she’s a beauty this one.

12 f’n hours and I’ve finally got rid of all visible signs and get a clean bill of health from MalwareBytes, SuperAntiSpyware, HijackThis and AVG.

However, the Lan light on my modem is blinking flat out continuously.

So, something is still hidden that is trying to call home or somewhere.

Any suggestions how to trace the culprit?:thanks

I’m on my laptop at the moment.
B.M. (505)
845311 2010-01-04 07:45:00 So did you run trojan remover. To see if that'll pick anything up as well? Something could updating why its flashing Speedy Gonzales (78)
845312 2010-01-04 07:59:00 So did you run trojan remover. To see if that'll pick anything up as well? Something could updating why its flashing

Sorry Speedy meant to say for a start it wouldn't let me install Trojan Remover, Then after I'd tidied up some of the mess with the other programmes, it installed, but advised that my trial period or whatever had expired. I seem to remember trying it years ago with a completely different version so it may not have been the Virus, but one of its own registry entries from yesteryear.

Pretty sure it's nothing updating as I've never seen it flash continuously without interruption ever before.
B.M. (505)
845313 2010-01-04 08:22:00 Boot into safe mode / networking and post a log Speedy Gonzales (78)
845314 2010-01-04 08:27:00 Do I type something in the RUN box? B.M. (505)
845315 2010-01-04 08:28:00 With hijackthis Speedy Gonzales (78)
1 2 3