System Tool Virus

Every Time I boot a Dell Optiplex 320 Windows XP box it launches System Tool and scans the computer. I can boot in safe mode and run SpyBot and Malwarebytes but it has been unable to find and remove the virus. I have tried a system restore but none of the restore points have been succesfully restored.

Do you have any suggestions to rid myslef of this virus?
pbelang11Asked:
Who is Participating?
 
younghvConnect With a Mentor Commented:
Sorry - the link in my first post is for a different variant.
This is the post for "System Tool" malware:

This variant of malware is one of the few that require a "Safe Mode" boot (with networking) to clean with Malwarebytes.

Please review the detailed instructions here:
http://www.bleepingcomputer.com/virus-removal/remove-system-tool 
0
 
younghvCommented:
I just worked through this with another EE member a couple of days ago.
The detailed instructions - read them carefully and follow - are here:

http://www.bleepingcomputer.com/virus-removal/remove-internet-security-2011 
0
 
younghvCommented:
Here is a link to the actual question posted on EE:
http://www.experts-exchange.com/Virus_and_Spyware/HijackThis/Q_26833850.html
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
pbelang11Author Commented:
I followed the instructions and unchecked the proxy server box under the lan settings but I still cannot access the internet or ping a website
0
 
younghvCommented:
Did you re-boot to 'Safe Mode with Networking' first?
Do you have access to another computer?
You can just download the file (using the Save As function), then copy the file from USB stick or CD.
0
 
pbelang11Author Commented:
I have done that but how do I get the latest update for Malwarebytes loaded on the infected computer without internet access. I can get it installed on the infected computer but without internet access it is not the most current version
0
 
pbelang11Author Commented:
ok Thank you that gives me a much more current build to run. Once this has completed and I reboot in normal mode I should be able to access the Internet?
0
 
younghvCommented:
Please let me know if you need more than this, but I think it is pretty well covered in the instructions:

"4.This infection changes your Windows settings to use a proxy server that will not allow you to browse any pages on the Internet with Internet Explorer or update security software. Regardless of the web browser you use, for these instructions we will first need need to fix this problem so that we can download the utilities we need to remove this infection.

Please start Internet Explorer, and when the program is open, click on the Tools menu and then select Internet Options as shown in the image below...."



0
 
pbelang11Author Commented:
I hope I am not being thick or missing something very obvious. I seemed to have removed the virus, however, I still cannot access the internet or ping a website from a command prompt. All the settings with internet explorer and in network connections (Local Area connection) appear to be fine. I am logging into a domain and the settings look the same as another workstation on the network that can access the internet. That is the unit I am using to correspond with you. Do you have any suggestions or other things I can check? I did an ipconfig /all and I don't see anything that looks out of sorts.
0
 
younghvCommented:
To confirm - in your "Local Area Networ (LAN) Settings" tab - all of the boxes are unchecked?
0
 
pbelang11Author Commented:
Thanks for all your help. I resolved the internet access issue by setting up the network connection from scratch.
0
 
younghvCommented:
That is terrific - good for you!
Glad everything worked out.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.