Barb’s Blog

When my friends and family have computer issues, they often come to be for advice or help. I like to help. Often their issues are challenging, but none more challenging than the spyware I had to deal with this week. I thought to share it as someone could be looking for help.

It’s called Security Tool.

It’s a rogue antivirus application that deliberately gives reports of false system security threats on your computer and displays fake security alerts or notifications to make you think your PC is infected with malware.

Once running, the bogus program will block legit programs and especially anti-virus software. Another interesting thing is that if you click on Updates button, you will see “Updating”, but actually there is no network activity.

One such warning it gives is: “Security Tool Warning spyware.IEMonster activity detected. This is spyware that attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other programs. Click here to remove it immediately with SecurityTool.”

SecurityTool will hijack web browsers and block certain security websites obviously to protect itself from being deleted.

None of my usual methods worked to get rid of the program. I tried control alt delete to see if I could stop programs running. It wouldn’t open the task manager. I tried run-msconfig to see if I could stop programs running in the background, it wouldn’t let me. I tried starting up in safe mode, it wouldn’t let me. NONE of the usual things worked. I then installed SuperAntiSpyware, one of my favorite programs, it wouldn’t let it run. I tried HijackThis, another program I had success with in the past. Nothing. It wouldn’t even open the registry editor, and I usually stay away from that, but was desperate enough to go there this time. My last typical thing to try to run was to go to DOS, yet another thing that wasn’t allowed to run.

Since I finally realized that I wasn’t dealing with spyware.IEMonster like the program suggested, but Security Tool, I did a search to learn more about it. Much of what they directed to do I had already tried with no ability to do it.

If you find that you have this issue, the first thing you will need is KILLBOX, to delete all the malicious programs running. As soon as I did that, her icons appeared on her desktop.

Next, you will need Malwarebytes. This program found 319 infected files and cleaned the laptop right up.

I am glad I was finally able to help, but there were a few times I was ready to give up and tell her to seek a professional.

Nasty business that Spyware.