Windows Vista Blog

Belonging to the same family of malware as the well-known rogue security programs Total Security 2009 and System Security, Security Tool uses scare tactics to trick users into paying for its software license. This malware affects computers running Windows Vista and creates an annoying atmosphere which renders Windows Vista practically useless. Security Tool gets installed on the user’s system via Trojans that get downloaded from malicious websites which advertise fake online security scanners. Once installed, Security Tool proceeds to perform a large number of fake security scans on the system, generating false reports which state that the computer is under threat from malware. It also generates numerous fake security warning pop-ups from the Windows Taskbar. The aim of all this activity is to convince the user to pay for the license of the ‘full’ version of Security Tool by claiming that the currently installed ‘trial’ version is not sufficient to remove the detected ‘threats’.

However, it is important to note that this is fake software therefore none of its versions are capable of properly scanning or cleaning any system.

In order to remove Security Tool, it is necessary to stop its processes, unregister its DLLs, delete its files and folders and remove its registry entries. The process of Security Tool removal is outlined below. However, you should first restart Windows Vista in Safe Mode to ensure that Security Tool cannot interfere with your attempts to remove it. In order to accomplish this, restart Windows Vista and keep pressing F8 until you get an Advanced Boot Menu. Here choose the ‘Safe Mode’ option. Now Windows Vista will boot up with the bare essentials, allowing you to continue with Windows Vista Security Tool removal unhindered.

Windows Vista File Removal Procedures

The first step in Security Tool removal is to stop the following process:

• 4946550101.exe

Next, it is necessary to unregister the following DLL file:

• doguzeri.dll

The final step in file removal is to delete the following files and folders:

• %System Root%\Samples
• %User Profile%\Local Settings\Temp
• %Program Files%\SecurityTool
• %Program Files%\SecurityTool
• C:\ProgramData\[random numbers]\
• %Documents and Settings%\All Users\Start Menu\Programs\SecurityTool
• %Documents and Settings%\All Users\Application Data\SecurityTool
• doguzeri.dll
• 4946550101.exe
• 4946550101.cfg

Once these steps have been completed, Security Tool no longer resides on your hard disk.

Windows Vista Registry Removal Procedures

To complete the process of Security Tool removal, the following registry entries should be deleted from the Windows registry. In order to remove these entries, hold the Windows key + “R” and type ‘regedit’ in the dialog box that comes up, and hit OK. You will see a list of registry entries. Find the following entries from this list and delete them:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “SecurityTool”
• HKEY_CURRENT_USER\Software\Vista Antivirus 2010
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SecurityTool
• HKEY_LOCAL_MACHINE\SOFTWARE\SecurityTool
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “4946550101″

After you complete this step, your computer is safe from Security Tool.

Conclusion

Manual Security Tool removal is not recommended for inexperienced users, as any mistake made during removal could cause damage to the operating system. Inexperienced users are advised to make use of a web-based repair service such as www.onlinecomputerrepair.org or legitimate antivirus software such as Spyware Doctor with Antivirus to ensure safe and complete Security Tool removal. This will make your installation of Windows Vista safe to use again.