Removal guides
Remove System Fix - uninstall instructions
Remove System Fix - uninstall instructions
System Fix removal guide
System Fix is a fake computer optimizer that tries to scare computer users into purchasing it's fake licence. As it's previous versions (System Restore, Data Restore, Data Repair) this fake computer optimizer uses various ways to scare computer users into thinking that their computer hardware components has serious issues and that they could loose their stored information.
System Fix is spread through misleading websites that are able to install this rogue program on users computer using security vulnerabilities. When System Fix installs itself on your computer it will flood your desktop with various warning messages stating that there are critical errors in your computers Ram memory, System drive, System registry.
Furthermore System Fix will hide your desktop icons stating that there are bad blocks on your HDD surface. If you click "Fix Errors" button after the scan you will be asked to purchase a full version of System Fix in order to eliminate the found hardware issues. You shouldn't buy System Fix - it's a fake computer optimizer, a totally useless program created by Internet criminals to trick unsuspecting computer users. All the computer scans and security messages stating about hardware malfunctions are fake. When analyzing this software we couldn't find any of features that are required for a real system optimizer - this clearly states that System Fix is fake and there's no way this bogus program could know of any hardware errors that it identifies on your PC. You shoudn't panic about your disapeared desktop icons and start menu items, System Fix only hides them. Follow this step-by-step instructions to eliminate this rogue program from your computer and regain control of your hidden files.
System Fix rogue program will display such fake pop-up messages:
"System Error An error occurred while reading system files. Run a system diagnostic utility to check your hard disk drive for errors"
"Critical Error Hard drive clusters are partly damaged. Segment load failure"
"Hard Drive Failure The system has detected a problem with one or more installed IDE / SATA hard disks. It is recommended that you restart the system"
"Activation Reminder System Fix Activation Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features"
Screenshot of "System Fix" fake optimizer:
Automatic System Fix spyware removal:
Step 1
Before downloading spyware remover, enter System Fix registration key in the registration window. Click on "Click here to activate full-functional version" which is located on the bottom-left of the main window and enter this key:
E-mail: This e-mail address is being protected from spambots. You need JavaScript enabled to view it Key: 1203978628012489708290478989147
Step 2
When the registration key is entered, System Fix will think, that you've purchased it and will stop generating fake warnings. It will also enable some disabled windows features. Note, that registering this program will not remove it from your PC. It will just disable fake warnings and will let you to install spyware removers. After you entered this key, you can now download Remover (use the button below) and get rid of this fake security software.
If you can't download or run default installation file, you can try to download alternate installer (It is renamed to iexplore.exe, because most of spyware doesn't block execution of files with this name)
NOTE: If installation fails, you can try downloading customized installer which was built by our technicians to bypass System Fix spyware infection. Your browser may report that this file is unsafe. Please ignore these warnings. Download customized installer
Complete these steps if after removal of System Fix your Desktop icons or files are hidden:
Step 1
This Infection Hides almost all user files. If You can't see your files don't panic. The files are not missing. They are just hidden, but still here. When downloaded spyware remover removes the infection, please download and run this tool to unhide your files (Link below). It is important to run this tool only when infection is already removed from your computer. This unhide files tool will be useless running it on infected computer.
When unhide files tool finishes, your windows desktop icons may still be gone. To fix missing desktop items after spyware infection download this .REG file. Double click when downloaded, click yes and then click ok. Reboot your computer, your desktop items now should be visible.
Step 2
Reboot your computer to check if everything is OK and System Fix rogue spyware is gone. Check if you can find all your files. If some files are still missing, open My Computer, Click Tools, then select Folder Options... and under View tab select radio button "Show hidden files and folders", press OK. Now you will see all hidden files and folders. To unhide them Right click on the file or folder, then select Properties and uncheck "Hidden" Check box.
That's it! You're done.
Manual Step-by-step removal instructions of System Fix
If you are unable to remove System Fix, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)
E-mail: fake@email.com
Key: 1203978628012489708290478989147
If it works, this bogus program will be disabled and you will be able to remove it without constant interventions. Note, that this infection constantly mutates and keys may be changed. After this procedure you will be able to see your files and install legitimate spyware remover to remove this infection. If registration key doesn't work, proceed to Step 2.
Warning! Entering activation key will not remove this infection! It will only disable fake warnings. This spyware will run in background and will keep collecting your data!
Step 2
Load your computer in safe mode with networking. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

Step 3
Open Internet explorer, click Tools and select Internet Options. Select "Connections".


Step 4
Click LAN settings, if a "Use a proxy server for your LAN" is checked, uncheck it and press OK.


Step 5
Download HijackThis and save it on your desktop. Some malicious programs are able to block HijackThis so when you click the download link, in the Save dialog rename HijackThis.exe to iexplorer.exe and only then click the Save button. After saving the file on your desktop, double click it. In the main HijackThis window click “Do a system scan only” button. Select these entries (place a tick at the left of the entry):
O4 - HKCU\..\Run: [.exe] %LocalAppData%\.exe
O4 - HKCU\..\Run: [] %LocalAppData%\.exe
After selecting required entries, click "Fix Checked". After this procedure you can close HijackThis and proceed to the next removal step.
Step 6
Download and scan your computer with Kaspersky's TDSS Killer. Download TDSS Killer. (System Fix infects your computer along with a rootkit infection, for smooth removal you will have to remove this rootkit infection).
Perform these actions:
End these System Fix processes:
[random.exe]
Remove these System Fix registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '.zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;.scr;'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
Delete these System Fix files:
%Temp%\smtmp\
%Temp%\smtmp\1
%Temp%\smtmp\1
%Temp%\smtmp\2
%Temp%\smtmp\3
%Temp%\smtmp\4
%AllUsersProfile%\[random].exe
%AppData%\Microsoft\Internet Explorer\Quick Launch\System Fix.lnk
%Desktop%\System Fix.lnk
%StartMenu%\Programs\System Fix\
%StartMenu%\Programs\System Fix\System Fix.lnk
%StartMenu%\Programs\System Fix\Uninstall System Fix.lnk
Step 6
Download and install antispyware software to completely remove the infection. We recommend Spyware Doctor. If you can't run or installation fails, try downloading our Customized installer. After removal completes, perform these steps to unhide files and desktop icons
Other tools, known to remove System Fix:
General tips on removing System Fix:
*If you can't download anti-spyware software: Click on the download link, when the save dialog opens change the file name (example: when downloading mbam-setup.exe rename it to iexplore.exe).
*If you have installed anti-spyware program but you can't run it: Click Run, type %ProgramFiles% and press Enter. Open folder of your anti-spyware program, search for executable file and rename it. (example: Open Malwarebytes’ Anti-Malware folder, right-click on the main executable file (mbam.exe) then click rename. Rename the mbam.exe file to iexplore.exe, winlogon.exe firefox.exe ...
*If you can't access your anti-spyware software, try creating a new user account:
Click Start -> Settings -> Control panel.
Click User Accounts and create a new account.
Reboot your computer and login using a newly created user account.
*After this procedure you should be able to access your anti-spyware programs. Update and run a full system scan.
Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.
If you can't access Internet:
Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.
Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.
Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.
After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program. Then run a full system scan.
Adittional information:

Was this helpful to you? Recommend it!
- Remove Windows Safeguard Upgrade
- Instructions to remove Windows Secure Surfer
- Instructions to remove Windows Be-on-Guard Edition
- Remove Windows Abnormality Checker
- Instructions to remove Windows Pro Solutions
- Instructions to remove Windows Sleek Performance
- Instructions to remove Windows ProSecurity Scanner
- Best Antivirus Software





Comments
O4 - HKCU\..\Run: [.exe] %LocalAppData%\.exe
O4 - HKCU\..\Run: [] %LocalAppData%\.exe. I also did a scan with TDSS Killer and came up with nothing infected, so my question is...is my computer free of the Syetem Fix virus or am I missing something, and that's why nothing is showing up? I do have Avira Antivirus on my computer and thought I was protected. Thank you so much for posting a fix to this.
What about your program items? are they missing too? You can try to restore windows start menu after system fix infection to default settings.
Open Taskbar and Start Menu Properties by clicking the Start button Picture of the Start button, clicking Control Panel, clicking Appearance and Personalization , and then clicking Taskbar and Start Menu.
Click the Start Menu tab, and then click Customize.
In the Customize Start Menu dialog box, click Use Default Settings, and then click OK.
Hope this helps. If your program items are missing, usually system fix spyware moves them to temporary folder. you can try to search for your icons in windows default temporary folders, like c:\windows\temp or c:\windows\syst em32\temp
To Krista:
Seems like you didn't run full scan with spyware removal software. You can just delete these items from your desktop and start menu. Or you can run a full computer scan and these icons should be removed.
It's just shortcuts left to the System fix program file. You can just delete them by clicking right mouse button and choosing "delete" option.
Just in case do a full scan with STOPzilla or Malwarebytes Anti-malware.
I tried removing the virus, and it seems to have stopped it, I have all my icons back and background, however, I still see the system fix icon on the desktop, and in the start menu.
How can i get rid of these?