System Tool 2011
System Tool 2011 Description
System Tool 2011 is a rogue anti-virus program that alters the user’s desktop, creates fake infection warnings and alters your Registry to run without your permission whenever Windows starts. You should never purchase System Tool 2011, since the rogue anti-virus application has no accurate information to give and no positive aspects to being kept on your computer. Removing System Tool 2011 by using an actual anti-malware program is the recommended solution and will stop the display of baseless warnings and alerts that are disconnected from your PC’s real state of integrity.System Tool 2011 is Not a Product Worth Paying Even a Penny For
System Tool 2011 infects PCs through the use of Trojans that falsely advertise infection removal features, malicious website that utilize drive-by download techniques and other dishonest methods. The unusual pink interface theme is identical to that of the original System Tool rogue anti-virus program, and System Tool 2011 also has strong ties to Security Tool, Live Security Platinum, System Security, Security Shield 2012, System Tool 2.20 and similar minor rogue anti-virus application permutations.
A fairly large array of error messages may be seen whenever System Tool 2011 is active, but these errors don’t indicate actual system problems – instead, System Tool 2011 is just trying to make you think that your PC is infected. Here are some of the disingenuous possibilities:
System Tool 2011 Warning
Your PC is infected with dangerous viruses. Activate anti-virus protection to prevent data loss and avoid the theft of your credit card details.
Click here to activate protection.
Warning: Your computer is infected
Windows has detected spyware infection!
Click this message to install the last update of Windows security software…
System Tool 2011 Warning
Intercepting programs that may compromise your private and harm your system have been detected on your PC.
Click here to remove them immediately with System Tool.
As frightening as all these desktop alerts are, the alteration System Tool 2011 makes to your wallpaper is even more terrifying – or amusing, depending on your viewpoint.
Protect Your PC from System Tool 2011!
The most significant danger in System Tool 2011 lies in its potential to shut down programs without your permission. System Tool 2011 may do this by using an error similar to this one as a semi-plausible excuse:
Warning!
Application cannot be executed. The file cmd.exe is infected.
Please activate your anti-virus software.
The only infection you need to be concerned about, though, is System Tool 2011 itself, as well as any Trojans and related infections that may have come with System Tool 2011. Proper control over your PC and full access to programs can’t be reattained until you’ve deleted System Tool 2011. Since lack of access to security and basic Windows software runs a notable risk of harming your computer over time, you should make removing System Tool 2011 your highest priority.
The removal of complex threats like System Tool 2011 is better off not attempted manually except as a final resort, since many kinds of malware will create unpleasant side effects if only partially deleted. The use of an updated anti-malware scanner will make it easier to delete System Tool 2011 without any unusual problems arising.
System Tool 2011 Automatic Detection Tool (Recommended)
Is your PC infected with System Tool 2011? To safely & quickly detect System Tool 2011, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect System Tool 2011
What happens if System Tool 2011 does not let you open SpyHunter or blocks the Internet?
Technical Details
Visual & GUI Characteristics
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read
the tutorials on how to find malware,
kill unwanted processes,
remove malicious DLLs and
delete other harmful files. Always be
sure to back up your PC before making any changes.
- The following files were created in the system:
More files
Additional Information
- The following messages's were detected:
# Message 1 WARNING!
YOUR'RE IN DANGER!
YOUR COMPUTER IS INFECTED WITH SPYWARE!
ALL YOU DO WITH COMPUTER IS STORED FOREVER IN YOUR HARD DISK.
WHEN YOU VISIT SITES, SEND EMAILS??? ALL YOUR ACTIONS ARE LOGGED. AND IT IS IMPOSSIBLE TO REMOVE THEM WITH STANDARD TOOLS. YOUR DATA IS STILL AVAILABLE FOR FORENSICS. AND IN SOME CASES
FOR YOUR BOSS, YOUR FRIENDS, YOUR WIFE, YOUR CHILDREN
Every site you or somebody or even something, like spyware, opened in your browsers,
will all the images and all the downloaded and maybe later removed movies or mp3 songs -
ARE STILL THERE and could break your life!
Posted: November 5, 2010 | By SpywareRemove
MoreThreat Level: 10/10
(No Ratings Yet)
Loading ...Rate this article:
Detection Count: 1,529
I’m not saying how I did it (we don’t want them writing a better program!), but I tried many of the funtions on here, and one of them worked! You can beat it! Curse all those men/women who write evil code. I manually did it myself by the way. No paying Best Buy $200
This download was great, instructions were very clear – just go to safe mode right away and save yourself some time… worked like a charm. Thanks gang!!
thank you guy…..run safe mode and restore system….100% work…..free
Thanks guys…..you safe my life..!
I just infected System Tool 2011 an hour ago and they ask for some money….
I run safe mode and restore my system, it’s 100% work…… and free…
Guys, safe mode and system restore worked. Thanks to all the helpful ppl above. Was in a bit of a panic!
Hello there
I got system 2011 on a family member’s pc. I removed the files associated, but now I can’t get an ip address on my network card.
I removed the windows networking components and rebooted, still with the same problems.
Any ideas?
You guys are so bright! I took the easy route and down loaded SpyHunter and let it do the search it found SystemTool 2011 and several other spywares. Yes you have to buy the full version, but for some one like me (10 thumbs and an old brain) very worth it. It cleaned out a total of 35 unwanted intrusive spywares. I have used Spybot and malwarebytes on a regular basis but these files were not picked up, my PC is now working at full steam.
As I bought the full copy I also down loadeded into my laptop, it cleaned that up it is now ultra quick.
Remember if you buy the full version and do not want to renew every 6 months cancel the auto subscription there is a link on the confirmation email!!
You guys saved my life! I now know a new way to get rid of a computer virus. I used to just download free AVG software, but now I don’t have to restart the computer a thousand times just for it to let me onto the internet. Thank you again!
I solved it!!! And I will NOT be putting it out here on the blogs. Too many prying eyes from the malware miscreants. Suffice it to say I used a combination of solutions from this blog and others and learned more about the internal workings of computers than a professional photographer needs to know.
Dell Win XP SP3
All great solutions, but I believe the malware beasts are reading all the blogs! My recent (2/21/11 and later) exposure to System Tools removal is the following:
System Restore is disabled
F8 gets into the Safe Mode screens, but starting in safe mode has been disabled. Blue screen comes up stating that the computer has stopped in order to protect itself.
Cannot start any program with an .exe extension, get a message saying *.exe is infected, use our anti virus software.
Cannot create a new owner to trick the machine. User accounts will not open.
The inability of using any program prevents the use of anti virus programs / scanners
An attempt to salvage the Outlook Express address book on the infected computer could not be accomplished, because OE could not be started.
I was going to try Fallon W.’s REGEDIT solution, but REGEDIT will not run because it’s an .exe application. It ran a day or so ago, so not sure what’s up. I have disconnected the computer from the ‘net to prevent further intrusions.
Got the documents off this computer and scanned the drive they went onto.
On and on — I’m about a heart beat away of the reformat.
This is the best solution. Please note, I did not any programs named “System Tools”, However,there were other various non-descript names and file names which I deleted.
I tried downloading your program, but everytime it said my admin prevents me from loading this type of software. Well, I this is a personal PC and, therefore, I am the admin. Unfortunately, I have no idea why it would prevent me from running your software. Any ideas?
Thanks,
JM
Got this sh**tty virus on hubby\’s laptop, he uses it for work and it would have been a nightmare to lose his data, thanks to all who posted, have hopfully restored to a safe date using Bill\’s advice and others, have run cc cleaner and microsoft security and can find no trace left so fingers crossed. Thanks again to all who posted from both of us
and the wind cried Moriah! worked like a charm.
Couldn\’t work out to get rid of the virus and decided that as I would have to pay a computer expert to fix it for me I just as well buy the System Tool!! I thought my daughters boyfriend had checked it out on his computer and found nothing about it! But after I had paid System Tool I googled it and warnings about it everywhere and how to get rid of it – the boyfriend is not in my good books!! So yes they now have my credit card details and name and address but not date of birth. Do I still need to delete stuff from my computer or now that I have downloaded System Tool am I safe! Should I change my credit card details – which would be a pain but…..
Did anyone actually \\\”pay and downloaded this virus.\\\” I am trying to remember what info they asked for…..obviously credit card number, name, adress, but did they ask for DOB and/or SS# ? anyone know this info please let me know
Awesome “victim” community on this site. I was able to figure out “same mode” (never heard of it until today) and followed someone’s advice who said a system restore might do the trick. Restored back to 2/7/11, a week before the System Tool hit and all seems to be OK.
hi guys bill is right repeat his act
THANX BILL I REPEATED YOU TRIK I M SUCCESSFUL NOW TO REMOVE THIX BASTERED SOFTWARE
I definatly deleted my myspace account and the next thing i kno is i have system tool popping up telling me i had a virus. I instantly knew it was a virus and googled it. My virus system tool was called kbncpl106511. This is how i removed it.. i started my computer in safemode with networking (altho i didnt have to network) then i went to start then clicked run.. in the field i typed regedit and clicked ok. the program popped up and i clicked CURRENT USER then SOFTWARE then MICROSOFT WINDOWS then CURRENT VERSION the RUN ONCE and there it was!!! i deleted it! again my was called kbncpl106511.. i was unsure at first because it had more than five letters like everyone was saying theirs had but i knew it had to be the virus. HOPE I HELPED!!! and thank u guys for helping me!
Safe mode and System Restore to a month back did it for me. Lets hope it does not come back! Thank you all!
I am far from being a computer expert but I was able to get this crappy virus off myself. I tried to do a restore but the virus wiped out all restore dates prior to when it got in. Next I did a restart in safe mode –> Start –> Search (enter .exe) –> Advanced Search –>next I searched all files that ran prior to the night it was infected (make sure to check the hidden files box) –>BAM!!! The POS virus popped up. It had the blue & yellow “X” icon and stuck out like a sore thumb. I deleted it, plus all other files run since then and then emptied the Trash Bin. Did a Restart and I’m good to go! Thank you so much for this forum!
Geek Squad wanted to charge me $200 to clean it up!
Safe start, system restore worked for me! Thanks heaps. Hope they get the bums!!!
System Restore Worked Thanks so much!!!!!
Quickest and easiest fix is to do a system restore in safe mode back before the issue appeared. Other methods I have had for this problem are to get into safe mode and run something like Malwarebytes to get rid of it and I have also had to try to kill it by killing the service on startup to make sure it doesn’t start to begin with, then go through and manually delete the files associated with it.
Thanks so much!!! was almost in tears lol
Ok, Im not real sure on what to do here. I have a feeling I’m screwed. I have tried all of the above. Im running XP and everytime i try something it says it can not execute what ever im trying to do because its infected….it even said that for microsoft word. HELP!!!!!!
I used system restore and, based on some comments datred Dec 2010 about it coming back, I have my fingers crosses.
Thanks to this forum.
Went into safe mode-networking and started up my malware program…quarantine and deleted!
Thank You.
F8/System Restore to a erlier configuration. This procedure fixes a lot of problems.
Tried everything and eventually downloaded Spyhunter4. Worth every cent !! Bashed the bastard “System Tool” to death, lol
My solution was to boot to safe mode,
My trick to identify the random name was to right click on the system tools icon and go to properties, volia, here is the random name.
Then followed instructions for files and registry key removal. Followed up with scan with multiple anti-malware tools.
Have XP pro…steps outlined by Bill in above posted on 12-14-2010 worked great in my case….ctl-alt/del at start up, look for exe file hogging most of the memory (in my case the file name was not the same as the one Bill mentioned) but it was obvious which one it was. Hit end process. Rebooted, system tool no longer appeared. Still had to do a search for all files with \”.exe\” that were modified within the last week, under advanced options I also checked search for hidden files. One file did appear with the system tool icon next to it. I right clicked and hit delete. Did another search and everything is working normally. Thanks Bill!
Thanks Alex!! (first post)
To the first post, THANK YOU.
To deny you access to the Internet these type of viruses play with you internet connection settings. Give this a try.
1) Open the Control Panel
2) Open Internet Options.
3) Now click on the Connections tab.
4) Click the Advanced button.
5) Uncheck the checkbox in the Proxy Server area.
I booted up PC holding f8 button went into safe mode waited for prompts found system restore, read what it says I clicked no then went into restore, went back a month and continued. System tool 2011 is now gone thanks for the help the I was stuck and tried lots of things, but this worked.
I actually had the same version of this spamware as RK42. I was able to remove it by deleting the files, and system tools no longer boots up. Unfortunately my wifi is unable to connect, it detects my network but ends up giving me a connection error after a while. Please help.
THANKS FOR THAT, I WAS IN A COMPLETE PANIC, NOW SORTED.
This page has a selection of registration numbers. I clicked on the register button on the system tool 2011 screen, entered one of the numbers and it went away.
Then I ran virus and malware checkers to make sure it was really gone. Finished off with a registry checker as well.
okay so i have tried all of the above and still need help i can\’t find the source of this, and to top it off a report of this got saved on to my computer i found that and was able to get rid of it but i cannot seem to fix this can any one help please. Please break it down in very simple terms for someone like me to even understand, thanks, i have tried going in safe mode and trying to find it ive ran my spybot and nothing comes up. But everytime i reboot this system tools comes back up again
please please help!
I’ve found that you also need to check the Hosts file and the DNS Server settings. Disable System Restore, reboot and re-enable
thanks alex. It works
My system was totally highjacked. Couldnt do a thing. I booted off a Ubuntu live CD and browsed the program file folders, found nothing unusual. Then I browsed the program data folders and found an exe. file dated the day I got the virus and it being a exe file in a data folder was suspicious . I deleted it booted into windows and everything is fine. But thankyou all for the info.
rk42 has the easiest solution – thanks
I did the restore and it came back. called around to some computer repair shops. they are telling me the only way to get rid of this system tool thing is to reload the operating system.
I have total protection from Mac Afee. that didn\’t catch it. even after I did the restore. still didn\’t catch it. and today I got on the computer and it was back.
Any suggestions?
Thanks for all the suggestions. Safe mode and system restore worked for me too. My teenage son also got it on the computer at his school. This virus is really malicious!
NEED TO FIND A WAY TO REMOVE THIS SYSTEM TOOL
guys dont know how i did it but the system tool 2011 icon was there but there was no record of it in my entire pc i rebooted and the icon was gone so all i did was shut down and i opened safe mode i restored to about 5 days erlier from today and i cant find it anywere and i pretty sure its gone because before it would let me open the ALT CTRL DEL menu so im pretty sure its gone
HI PPL I’M HAVING DIFFICULTY DELETING THE FILES THAT I DONT WANT….MY LAPTOP IS INFECTED BY SYSTEM TOOL WARNING! PLEASE ADVISE AND HELP