Has anyone got hit with System Tool malware? This is one that starts running and tells you that you have all these viruses on your computer. Usually when they come in you can cancel out and go on, but this one didn’t. I have Zone Alarm, and ran a scan, didn’t find it, went online and ran three different scans to finally get rid of it. It changed the desktop and really messed things up. I was able to get things back to normal, but this one was tough. I haven’t heard anything about this particular one and I don’t know what it rode in on or why Zone Alarm missed it. :confused:
![]() |
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it. |
SIGN IN | Not a member? | REGISTER | PLUS MEMBERSHIP |
-
System Tool
Home » Forums » Cyber Security Information and Advisories » Code Red – Security/Privacy advisories » System Tool
- This topic has 15 replies, 9 voices, and was last updated 14 years, 2 months ago.
AuthorTopicWSoldgeezer75
AskWoody LoungerFebruary 19, 2011 at 2:34 pm #474921Viewing 8 reply threadsAuthorReplies-
WSDeadeye81
AskWoody LoungerFebruary 19, 2011 at 3:19 pm #1268258Usually when they come in you can cancel out and go on, but this one didn’t. I have Zone Alarm, and ran a scan, didn’t find it, went online and ran . :confused:
Hi oldgeezer75,
What exactly do you mean by “Usually when they come in you can cancel out and go on”? Are you referring to clicking on cancel or the red close button on the popup?
I’ve not heard of this particular version, but the best way to get rid of them is to avoid clicking anywhere in the popup or on the browser page, but rather right click the Taskbar and select Task Manager. Then right click on the browser executable (i.e. iexplore.exe) on the Processes page to select End process. This will shut down the affected browser and anything that has appeared within it.
Normally, when clicking anything on the popup or trying to close it within the browser will cause infection.
-
WSruirib
AskWoody Lounger -
WSoldgeezer75
AskWoody LoungerFebruary 19, 2011 at 4:45 pm #1268264I didn’t click on anything directly in that app. Task Manager wouldn’t open either and I did a forced shutdown but on restart it was still there. So that is when I started running anti-virus programs until I found one that worked. I will remember Malwarebytes app.
Thanks for the info from both of you.:^_^:
-
-
WSruirib
AskWoody Lounger -
WSJust Plain Fred
AskWoody LoungerMarch 6, 2011 at 12:16 pm #1270545Malwarebytes is a good app to keep at hand, even running it once a week, just to add an additional security layer. It’s light, unobtrusive and quite effective removing malware.[/quote]
rui, et-al,
Hello… You can Purchase “Malwarebytes PRO” and then it will always run in the background, and then you don’t have to worry about running “scans”:cheers: Regards Fred
-
-
vtmountainman
AskWoody LoungerFebruary 25, 2011 at 8:12 am #1268992This kind of junk is scareware. Malwarebytes should remove it. If it doesn’t just do a search for removal results. Like this: http://www.google.com/search?q=System+Tool+malware&sourceid=ie7&rls=com.microsoft:en-us:IE-SearchBox&ie=&oe=&rlz=
-
WSoldgeezer75
AskWoody Lounger -
WSrcranin
AskWoody LoungerFebruary 26, 2011 at 3:23 pm #1269457Malwarebytes is the kind of program worth paying for. It costs $25USD for a lifetime subscription. The Pro version offers automatic updates and scans, to keep the system clean without trying to remember whether you updated it lately.
Disclaimer: I am a reseller (and tech support company owner) but am not trying to sell you a license. I do suggest you look at their website/forums and consider a small purchase (from their web site directly) to keep your system running better. I think it is better to keep the baddies out of your machine to begin with, rather than reacting afterwards.
Randy
-
-
-
WSJDB1984
AskWoody LoungerMarch 4, 2011 at 5:45 am #1270263If you still have unexplained issues with the system I would recommend you visit the forums as has been suggested already and ask for help there. There may be other malware at work, fingers crossed there is not.
-
WSRadio Wales
AskWoody PlusMarch 5, 2011 at 11:05 pm #1270493System Tool has hit big time in the UK. I have been run off my feet since last Sunday coping with panicking people who have found all their normal systems locked. You are unable to run Explorer or Task Manager, unable to load web pages or download, cmd, msconfig etc also fail to open.A lot of mainstream anti-virus programs were disabled too.
In most cases opening in safe mode and returning to an earlier – before last Sunday – system restore point works fine.
It is contracted from undisclosed compromised click advertising on the net. A lot of folk say it was from facebook. -
WSBanyarola
AskWoody Lounger -
WSBanyarola
AskWoody Lounger -
WSJust Plain Fred
AskWoody LoungerMarch 6, 2011 at 3:01 pm #1270551Well Fred, I have been thinking of buying it for the very reason you say.
It’s only 25.00… Not a bad price to pay for constant protection….I’m wondering how it will co-exist with Microsoft Security Essentials though…
Banyarola,
Hello… As i use only Norton Internet Security 2011 and Malwarebytes PRO ( no MSE or any MS updates or patches) …The only thing i can say is that this “combo ” works:cheers: Regards Fred -
WSrcranin
AskWoody LoungerMarch 6, 2011 at 3:11 pm #1270553I’m glad that my advice on this same thread back on 26 February is the same as Fred’s advice today.
Malwarebytes.Org has a special place in their forum with instructions on how to take care of possible interference with other anti-malware programs, including MSE. Please look at: http://forums.malwarebytes.org/index.php?showtopic=10138 and you will see a list of special instructions regarding some of the AV programs out there, including Microsoft System Essentials (Section I).
Randy
-
-
-
WSBanyarola
AskWoody Lounger
Viewing 8 reply threads -

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Search Newsletters
Search Forums
View the Forum
Search for Topics
Recent Topics
-
GeForce RTX 5060 in certain motherboards could experience blank screens
by
Alex5723
1 hour, 46 minutes ago -
MS Office 365 Home on MAC
by
MickIver
3 hours, 46 minutes ago -
Google’s Veo3 video generator. Before you ask: yes, everything is AI here
by
Alex5723
15 hours, 49 minutes ago -
Flash Drive Eject Error for Still In Use
by
J9438
17 hours, 22 minutes ago -
Windows 11 Insider Preview build 27863 released to Canary
by
joep517
1 day, 10 hours ago -
Windows 11 Insider Preview build 26120.4161 (24H2) released to BETA
by
joep517
1 day, 10 hours ago -
AI model turns to blackmail when engineers try to take it offline
by
Cybertooth
14 hours, 21 minutes ago -
Migrate off MS365 to Apple Products
by
dmt_3904
15 hours, 10 minutes ago -
Login screen icon
by
CWBillow
5 hours, 32 minutes ago -
AI coming to everything
by
Susan Bradley
1 hour, 31 minutes ago -
Mozilla : Pocket shuts down July 8, 2025, Fakespot shuts down on July 1, 2025
by
Alex5723
2 days, 2 hours ago -
No Screen TurnOff???
by
CWBillow
2 days, 2 hours ago -
Identify a dynamic range to then be used in another formula
by
BigDaddy07
2 days, 3 hours ago -
InfoStealer Malware Data Breach Exposed 184 Million Logins and Passwords
by
Alex5723
2 days, 14 hours ago -
How well does your browser block trackers?
by
n0ads
2 days, 1 hour ago -
You can’t handle me
by
Susan Bradley
1 day, 1 hour ago -
Chrome Can Now Change Your Weak Passwords for You
by
Alex5723
1 day, 17 hours ago -
Microsoft: Over 394,000 Windows PCs infected by Lumma malware, affects Chrome..
by
Alex5723
3 days, 2 hours ago -
Signal vs Microsoft’s Recall ; By Default, Signal Doesn’t Recall
by
Alex5723
2 days, 5 hours ago -
Internet Archive : This is where all of The Internet is stored
by
Alex5723
3 days, 2 hours ago -
iPhone 7 Plus and the iPhone 8 on Vantage list
by
Alex5723
3 days, 2 hours ago -
Lumma malware takedown
by
EyesOnWindows
2 days, 14 hours ago -
“kill switches” found in Chinese made power inverters
by
Alex5723
3 days, 11 hours ago -
Windows 11 – InControl vs pausing Windows updates
by
Kathy Stevens
3 days, 11 hours ago -
Meet Gemini in Chrome
by
Alex5723
3 days, 15 hours ago -
DuckDuckGo’s Duck.ai added GPT-4o mini
by
Alex5723
3 days, 15 hours ago -
Trump signs Take It Down Act
by
Alex5723
3 days, 23 hours ago -
Do you have a maintenance window?
by
Susan Bradley
2 days, 4 hours ago -
Freshly discovered bug in OpenPGP.js undermines whole point of encrypted comms
by
Nibbled To Death By Ducks
3 days, 1 hour ago -
Cox Communications and Charter Communications to merge
by
not so anon
4 days, 2 hours ago
Recent blog posts
Key Links
Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.
Mastodon profile for DefConPatch
Mastodon profile for AskWoody
Home • About • FAQ • Posts & Privacy • Forums • My Account
Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts
Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.