Description
Security Tool is a false computer application (also known as a .
Removal instructions
To remove this Spyware infection, download Spyware Doctor, install it and run full computer scan. At the end of the scan choose Fix Checked to start computer cleaning process.
Behavior
· Annoying pop-ups. Alerts and warnings appearring frequently and stating that the computer has been infected. It also can be promotional message asking to register or buy some rogue program.
· Blue Screen of Death (BSOD). Officially known as a Stop Error, displayed by the Microsoft Windows upon encountering a critical error, that causes the system to "crash." Usually it can be recognized by a message in on a blue background, which is displayed in a full screen mode.
· Corrupt online scanner. Online scanner is a tool that has an ability to scan computer system without installing a program on computer. The use of corrupt online scanner noticed, which shows user that threats have been detected on his machine.
· Desktop changes. Desktop background (wallpaper) is changed with advertising or warning message promoting fake anti-spyware software. Taskbar together with desktop icons might disapear as well.
· Disabled Task Manager. Blocked from opening either displaying some alert message or without it.
· Exaggerated PC scan reports. Even if the computer is clean scan report stating that the system is infected is generated.
· Fake security warnings. Warnings stating that the computer system is not secure.
· Heavy rogue program advertising. Notices about fake anti-spyware software that are displayed frequently and are disturbing from work.
· Slow computer. Slower computer performance noticed.
· The risk of fraudulent payment. Frequent user persuading to buy rogue program license.
Files
2090413546.exe
Symptoms in Hijackthis
O2 - BHO: IETimbar - {1163E531-B58E-4BB9-B877-0906A0A22AEC} - C:\Program Files\Internet Explorer\IETimbar\IETimbar.dll |
O2 - BHO: AdPopup - {11F09AFD-75AD-4E51-AB43-E09E9351CE16} - C:\Program Files\Common Files\PushWare\cpush.dll |
O2 - BHO: google cache - {296AB1C7-FB22-4D17-8834-064E2BA0A6F0} - C:\WINDOWS\MICROSOFT\winsys.dll |
O4 - HKLM\..\RunOnce: [CPushSetup] "C:\WINDOWS\system32\regsvr32.exe" /s "C:\Program Files\Common Files\PushWare\cpush.dll" |
O4 - HKLM\..\Run: [2090413546] C:\Documents and Settings\999\Application Data\2090413546\2090413546.exe |
O4 - HKCU\..\Run: [Install] C:\Documents and Settings\999\Application Data\2090413546\2090413546.bat |