I have my parent's laptop which is infected with Security Tool. It was infected just over a week ago and I used the guide from this website which managed to get rid of the programme. However only a week later and they have it again, and this time it appears to be sticking around.
In short I download the rkill (tried with all 4 versions) program onto my own computer and transfer via USB to theirs as I cannot install my own internet connection to their laptop whilst Security Tool is active. Rkill starts working but disappears after around 2 seconds and that's all you hear from it, and it's the same every time I double click it. I have tried running rkill as soon as the computer has loaded in an attempt to catch it before Security Tool has a chance to load but in this scenario the program runs and completes and then security tool starts up immediately after. Malwarebytes' AntiMalware is still installed on the laptop from the last time I removed Security Tool, but of course I am unable to run it until I can stop Security tool from running.
The desktop is accessible from the start but many programs cannot be loaded, but things like My Computer and Recycle Bin and various other folders are also accessible.
Whilst on this, are there any hotspots from where they can be getting this from? Or anyway to tell where they have gotten the malicious software from? So I can tell them to stay away from it in the future!
Thanks in advance to any help offered!
Edited by hamluis, 30 July 2010 - 06:38 PM.
Moved from XP to Am I Infected ~ Hamluis.