System Tools 2011

danfloun

I'm a systems engineer working for many home clients.

This week alone I have had 12 jobs removing system tools malware / Trojan from computers.

The client OS are anything from Windows XP, Vista or 7.

System Tools, although not difficult to remove, is basically rogue software which attempts to defraud the user.

For some reason, in the last couple of weeks, the computers getting infected has increased dramatically overnight.

Even the local computer repair shop has told me that they have had many systems in for repair this week, all have been infested with System Tools 2011.

I cleaned a computer of this infection last week, the infection has returned today.

Sadly, BitDefender does nothing to prevent installation of this software.

It is detected by *A Certain Anti Malware Software* as a Trojan.Fake-

Once I have cleaned a clients machine, I have no way to prevent it from installing again at present.

I have increased BitDefenders AntiVirus, Firewall and Privacy Control levels to high in the hope it will now stop reinfection.

I live in doubt that BitDefender will be of any use against System Tools 2011.

What on earth am I supposed to tell clients!

Sorry, I can't do anymore?

Cristi Raducu

Hello danfloun,

System Tool 2011 is a polimorphic virus meaning that it changes its shape every day with new variants.

We've also noticed an increase of these attacks and our lab constantly adds new detections.The systems can get infected mainly because there is a time gap between when the virus was created and we added the signature(this rule applies in general to antivirus programs) OR the antivirus is not up to date at that time.

In BitDefender v2011 the Active Virus Control has the ability to block these attacks when no signature is available.

Regarding the infected PC please send me by PM a set of logs for further investigation.

http://kb.bitdefender.com/site/article/490/