Has anyone got hit with System Tool malware? This is one that starts running and tells you that you have all these viruses on your computer. Usually when they come in you can cancel out and go on, but this one didn’t. I have Zone Alarm, and ran a scan, didn’t find it, went online and ran three different scans to finally get rid of it. It changed the desktop and really messed things up. I was able to get things back to normal, but this one was tough. I haven’t heard anything about this particular one and I don’t know what it rode in on or why Zone Alarm missed it. :confused:
![]() |
Patch reliability is unclear, but widespread attacks make patching prudent. Go ahead and patch, but watch out for potential problems. |
SIGN IN | Not a member? | REGISTER | PLUS MEMBERSHIP |
-
System Tool
Home » Forums » Cyber Security Information and Advisories » Code Red – Security/Privacy advisories » System Tool
- This topic has 15 replies, 9 voices, and was last updated 14 years, 2 months ago.
AuthorTopicWSoldgeezer75
AskWoody LoungerFebruary 19, 2011 at 2:34 pm #474921Viewing 8 reply threadsAuthorReplies-
WSDeadeye81
AskWoody LoungerFebruary 19, 2011 at 3:19 pm #1268258Usually when they come in you can cancel out and go on, but this one didn’t. I have Zone Alarm, and ran a scan, didn’t find it, went online and ran . :confused:
Hi oldgeezer75,
What exactly do you mean by “Usually when they come in you can cancel out and go on”? Are you referring to clicking on cancel or the red close button on the popup?
I’ve not heard of this particular version, but the best way to get rid of them is to avoid clicking anywhere in the popup or on the browser page, but rather right click the Taskbar and select Task Manager. Then right click on the browser executable (i.e. iexplore.exe) on the Processes page to select End process. This will shut down the affected browser and anything that has appeared within it.
Normally, when clicking anything on the popup or trying to close it within the browser will cause infection.
-
WSruirib
AskWoody Lounger -
WSoldgeezer75
AskWoody LoungerFebruary 19, 2011 at 4:45 pm #1268264I didn’t click on anything directly in that app. Task Manager wouldn’t open either and I did a forced shutdown but on restart it was still there. So that is when I started running anti-virus programs until I found one that worked. I will remember Malwarebytes app.
Thanks for the info from both of you.:^_^:
-
-
WSruirib
AskWoody Lounger -
WSJust Plain Fred
AskWoody LoungerMarch 6, 2011 at 12:16 pm #1270545Malwarebytes is a good app to keep at hand, even running it once a week, just to add an additional security layer. It’s light, unobtrusive and quite effective removing malware.[/quote]
rui, et-al,
Hello… You can Purchase “Malwarebytes PRO” and then it will always run in the background, and then you don’t have to worry about running “scans”:cheers: Regards Fred
-
-
vtmountainman
AskWoody LoungerFebruary 25, 2011 at 8:12 am #1268992This kind of junk is scareware. Malwarebytes should remove it. If it doesn’t just do a search for removal results. Like this: http://www.google.com/search?q=System+Tool+malware&sourceid=ie7&rls=com.microsoft:en-us:IE-SearchBox&ie=&oe=&rlz=
-
WSoldgeezer75
AskWoody Lounger -
WSrcranin
AskWoody LoungerFebruary 26, 2011 at 3:23 pm #1269457Malwarebytes is the kind of program worth paying for. It costs $25USD for a lifetime subscription. The Pro version offers automatic updates and scans, to keep the system clean without trying to remember whether you updated it lately.
Disclaimer: I am a reseller (and tech support company owner) but am not trying to sell you a license. I do suggest you look at their website/forums and consider a small purchase (from their web site directly) to keep your system running better. I think it is better to keep the baddies out of your machine to begin with, rather than reacting afterwards.
Randy
-
-
-
WSJDB1984
AskWoody LoungerMarch 4, 2011 at 5:45 am #1270263If you still have unexplained issues with the system I would recommend you visit the forums as has been suggested already and ask for help there. There may be other malware at work, fingers crossed there is not.
-
WSRadio Wales
AskWoody PlusMarch 5, 2011 at 11:05 pm #1270493System Tool has hit big time in the UK. I have been run off my feet since last Sunday coping with panicking people who have found all their normal systems locked. You are unable to run Explorer or Task Manager, unable to load web pages or download, cmd, msconfig etc also fail to open.A lot of mainstream anti-virus programs were disabled too.
In most cases opening in safe mode and returning to an earlier – before last Sunday – system restore point works fine.
It is contracted from undisclosed compromised click advertising on the net. A lot of folk say it was from facebook. -
WSBanyarola
AskWoody Lounger -
WSBanyarola
AskWoody Lounger -
WSJust Plain Fred
AskWoody LoungerMarch 6, 2011 at 3:01 pm #1270551Well Fred, I have been thinking of buying it for the very reason you say.
It’s only 25.00… Not a bad price to pay for constant protection….I’m wondering how it will co-exist with Microsoft Security Essentials though…
Banyarola,
Hello… As i use only Norton Internet Security 2011 and Malwarebytes PRO ( no MSE or any MS updates or patches) …The only thing i can say is that this “combo ” works:cheers: Regards Fred -
WSrcranin
AskWoody LoungerMarch 6, 2011 at 3:11 pm #1270553I’m glad that my advice on this same thread back on 26 February is the same as Fred’s advice today.
Malwarebytes.Org has a special place in their forum with instructions on how to take care of possible interference with other anti-malware programs, including MSE. Please look at: http://forums.malwarebytes.org/index.php?showtopic=10138 and you will see a list of special instructions regarding some of the AV programs out there, including Microsoft System Essentials (Section I).
Randy
-
-
-
WSBanyarola
AskWoody Lounger
Viewing 8 reply threads -

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Search Newsletters
Search Forums
View the Forum
Search for Topics
Recent Topics
-
Is it a bug or is it expected?
by
Susan Bradley
1 hour, 15 minutes ago -
Microsoft Speech Recognition Service Error Code 1002 (Awaiting moderation)
by
stanhutchings
2 hours, 20 minutes ago -
Image for Windows TBwinRE image not enough space on target location
by
bobolink
6 hours, 9 minutes ago -
Start menu jump lists for some apps might not work as expected on Windows 10
by
Susan Bradley
6 hours, 53 minutes ago -
Malicious Go Modules disk-wiping malware
by
Alex5723
5 hours, 46 minutes ago -
Multiple Partitions?
by
CWBillow
2 hours, 56 minutes ago -
World Passkey Day 2025
by
Alex5723
14 hours, 29 minutes ago -
Add serial device in Windows 11
by
Theodore Dawson
1 day, 5 hours ago -
Windows 11 users reportedly losing data due forced BitLocker encryption
by
Alex5723
2 hours, 23 minutes ago -
Cached credentials is not a new bug
by
Susan Bradley
1 day, 10 hours ago -
Win11 24H4 Slow!
by
Bob Bible
1 day, 10 hours ago -
Microsoft hiking XBox prices starting today due to Trump’s tariffs
by
Alex5723
1 day, 7 hours ago -
Asus adds “movement sensor” to their Graphics cards
by
n0ads
1 day, 12 hours ago -
‘Minority Report’ coming to NYC
by
Alex5723
1 day, 8 hours ago -
Apple notifies new victims of spyware attacks across the world
by
Alex5723
1 day, 21 hours ago -
Tracking content block list GONE in Firefox 138
by
Bob99
1 day, 20 hours ago -
How do I migrate Password Managers
by
Rush2112
1 day, 4 hours ago -
Orb : how fast is my Internet connection
by
Alex5723
1 day, 6 hours ago -
Solid color background slows Windows 7 login
by
Alex5723
2 days, 9 hours ago -
Windows 11, version 24H2 might not download via Windows Server Updates Services
by
Alex5723
2 days, 7 hours ago -
Security fixes for Firefox
by
Susan Bradley
1 day, 7 hours ago -
Notice on termination of services of LG Mobile Phone Software Updates
by
Alex5723
2 days, 19 hours ago -
Update your Apple Devices Wormable Zero-Click Remote Code Execution in AirPlay..
by
Alex5723
3 days, 4 hours ago -
Amazon denies it had plans to be clear about consumer tariff costs
by
Alex5723
2 days, 19 hours ago -
Return of the brain dead FF sidebar
by
EricB
2 days, 6 hours ago -
Windows Settings Managed by your Organization
by
WSDavidO61
1 day, 10 hours ago -
Securing Laptop for Trustee Administrattor
by
PeachesP
12 hours ago -
The local account tax
by
Susan Bradley
2 days, 8 hours ago -
Recall is back with KB5055627(OS Build 26100.3915) Preview
by
Alex5723
3 days, 17 hours ago -
Digital TV Antenna Recommendation
by
Win7and10
3 days, 10 hours ago
Recent blog posts
Key Links
Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.
Mastodon profile for DefConPatch
Mastodon profile for AskWoody
Home • About • FAQ • Posts & Privacy • Forums • My Account
Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts
Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.