📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Simple System Tools malware removal

aerostar
aerostar Posts: 1,738 Forumite
Part of the Furniture 1,000 Posts Name Dropper Combo Breaker
edited 6 March 2011 at 8:06AM in Techie Stuff
1. Click the "Registration" link in System Tool.

2. Enter the following registration code: WNDS-S0DF5-GS5E0-FG14S-2DF8G
Note: If that code does not work, try one of these
WNDS-JUYH3-24GHJ-HGKSH-FKLSD
WNDS-89OF7-7324R-5SAD4-TG68U
WNDS-HFVDR-9844O-U54DA-5TBSC
WNDS-G8FB6-1V87S-DRT1S-63SRG
WNDS-4BGY2-JY4KO-IT98Y-7HJ43
WNDS-5D1V2-XB0D5-JT1TY-97DS3
WNDS-F40SA-1ER5H-4FG5D-F8412
WNDS-SERFH-2642S-F04SD-64FG1
WNDS-S0DF5-GS5E0-FG14S-2DF8G
WNDS-452S3-ER00F-TSE35-S8FSD
WNDS-FGS5D-649RG-4S53D-412SF
WNDS-4TS8R-D6F5D-4JH8T-U4JK5
WNDS-2AE32-1VFC2-B6894-G67YU
WNDS-P9685-4H41A-DSW3A-2R64T
WNDS-5SRTS-AEHUF-YA54S-D6F35
WNDS-A1SDF-RY4E8-7U98D-F1GB2

3. Click OK to allow System Tool to scan.

4. When it prompts you, reboot.

5. Download MBAM from here: http://www.bleepingcomputer.com/download/anti-virus/malwarebytes-anti-malware

6. Install. Leave "Update" and "Launch" checked.

7. After updating, run a Full Scan. This is because Security Tool files have been found in old System Restore archives.

Video of the above here

http://www.youtube.com/watch?v=w7f48-Ky9ow

An Alternative way

Actually you can get rid of this in 2 steps. Just click on my computer, then on local disk, then documents and settings, then all users, then application data. You will look for a folder with random letters, like hvbcgdsfh. Open it and you will see 2 files. One of those files is the executable or .exe. rename that file with a new extension like.bmp and delete the other file. Now reboot and go back to that folder and delete it.

Then continue from 5. above

Note dependent on the variant of the malware you may have to go the longer route as here

http://www.bleepingcomputer.com/virus-removal/remove-system-tool


The above has been found from information on the net.

Comments

  • RussJK
    RussJK Posts: 2,359 Forumite
    Interesting that it actually accepts registration codes! I would have assumed something like this would just take your money.
  • aerostar
    aerostar Posts: 1,738 Forumite
    Part of the Furniture 1,000 Posts Name Dropper Combo Breaker
    Yes, I have used the first code a couple of times sorting out customers computers, but for safety a MalwareBytes scan is essential afterwards.
  • froggy27_2
    froggy27_2 Posts: 953 Forumite
    thanks a lot aerostar.... i was getting panicky about that virus.. couldn't do anything.. had to get my old laptop out to come on here and see what trustry MSEs had to say... one thing though i did the full scan as said took one hour and 55 minutes BUT it didn't find any infections/virus etc... do I need to do another kind of scan? download? etc. thanks in advance.
    A friend is a present which you give yourself (R.Stevenson)
    Happiness seems made to be shared (Jean Racine)
  • Browntoa
    Browntoa Posts: 49,611 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    did you update malwarebytes before scanning (if you already had it installed ??)

    start a new thread if you are having problems , there are other tools that can help
    Ex forum ambassador

    Long term forum member
  • froggy27_2
    froggy27_2 Posts: 953 Forumite
    thanks. I followed exactly the steps in the YouTube video. System tool seems to have gone now...and laptop seems to run smoothly but i was just wondering if it was 'normal' that there were no infected files?
    A friend is a present which you give yourself (R.Stevenson)
    Happiness seems made to be shared (Jean Racine)
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 351.7K Banking & Borrowing
  • 253.4K Reduce Debt & Boost Income
  • 454K Spending & Discounts
  • 244.6K Work, Benefits & Business
  • 600K Mortgages, Homes & Bills
  • 177.3K Life & Family
  • 258.3K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.2K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.