System Check

System Check - How to remove?

System Check is a misleading program that hides desktop icons and start menu items to scare computer users in thinking that their computer's hardware had malfunctioned. This program differs from a typical fake antivirus software because it uses different tactics to scare computer users. While a typical rogue anti-spyware program scans your computer for security threats and then displays fake detection list, System Check pretends to scan your HDD and then generates fake warning messages stating that your computer's hardware has malfunctioned and that you could loose all of your data.System Check is a fake computer program. This rogue scanner is a copy of it's previous versions System Fix, Data Restore, System Recovery and many other.

When installed on your computer "System Check" will generate such fake security warning messages:

"Critical Error Hard drive clusters are partly damaged. Segment load failure"

"System Check will scan the system to identify performance problems. Start or Cancel"

"Critical Error RAM memory usage is critically high. RAM memory failure"

"Critical Error Windows can't find hard disk space. Hard drive error"

"Activation Reminder System Check Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features"

As it's previous versions System Check is spread using various misleading methods. Internet criminals distributes such bogus scanners using Trojans. When infected with System Check you will notice many system warning pop-up which will state that your computer's hardware has malfunctioned. The main window of this program will appear on your desktop every time you boot your PC. This fake computer scanner modified the registry of infected computers operating system - this enables System Check to disable various Windows functions. To further scare you into thinking that your computers HDD has serious problems System Check will hide your desktop icons, you shouldn't panic this bogus scanner doesn't remove anything it only hides them. All of these processes are performed with only one intention - selling you a licence key for a totally useless program. All the computer scans are fake - there's probably nothing wrong with the hardware of your PC, this fake computer optimizer is only trying to scare you into thinking that you could loose all your data. Needless to say that you shouldn't buy the licence for System Check, it's a fake program which should be removed from your computer. System Check doesn't have anything in common with a real computer registry fixer, you won't find any legitimate functions needed to provide such services. Don't be scared by the warning message pop-ups displayed by System Check - all the statements about serious hardware failures are false. All the defragmenting and other features displayed by this bogus program are also fake, if you have already bought a licence for this fake program you shouldn't hesitate and contact your credit card company for a charge back. Follow this removal guide to completely remove System Check from your computer and regain control of your hidden data.

Screenshots of a fake system optimizer "System Check":

System Check removal:

Before downloading, enter System Check registration key in the registration window. Click on "Click here to activate full-functional version" which is located on the bottom-left of the main window and enter this key:

E-mail: This e-mail address is being protected from spambots. You need JavaScript enabled to view it Key: 1203978628012489708290478989147

When the registration key is entered, System Check will think, that you've purchased it and will stop generating fake warnings. It will also enable some disabled windows features. Note, that registering this program will not remove it from your PC. It will just disable fake warnings and will let you to install spyware removers. After you entered this key, you can now download Remover (use the button below) and get rid of this fake software.

Remover for System Check

NOTE: If installation fails, you can try downloading customized installer which was built by our technicians to bypass System Check spyware infection. Your browser may report that this file is unsafe. Please ignore these warnings. Download customized installer

Complete these steps if after removal of System Check your Desktop icons or files are hidden:

Step 1
This Infection Hides almost all user files. If You can't see your files don't panic. The files are not missing. They are just hidden, but still here. Please download and run this tool to unhide your files (Link below). It is important to run this tool only when infection is already removed from your computer. This unhide files tool will be useless running it on infected computer.

When unhide files tool finishes, your windows desktop icons may still be gone. To fix missing desktop items after spyware infection download this .REG file. Double click when downloaded, click yes and then click ok. Reboot your computer, your desktop items now should be visible.

Step 2
Reboot your computer to check if everything is OK and System Check rogue scanner/optimizer is gone. Check if you can find all your files. If some files are still missing, open My Computer, Click Tools, then select Folder Options... and under View tab select radio button "Show hidden files and folders", press OK. Now you will see all hidden files and folders. To unhide them Right click on the file or folder, then select Properties and uncheck "Hidden" Check box.

That's it! You're done.

Manual Step-by-step removal instructions for System Check.

If you are unable to remove System Check, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)

E-mail: fake@email.com
Key: 1203978628012489708290478989147

If it works, this bogus program will be disabled and you will be able to remove it without constant interventions. Note, that this infection constantly mutates and keys may be changed. After this procedure you will be able to see your files and install legitimate spyware remover to remove this infection. If registration key doesn't work, proceed to Step 2.

Warning! Entering activation key will not remove this infection! It will only disable fake warnings. This spyware will run in background and will keep collecting your data!

Step 2
Load your computer in safe mode with networking. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

Step 3
Open Internet explorer, click Tools and select Internet Options. Select "Connections".

Step 4
Click LAN settings, if a "Use a proxy server for your LAN" is checked, uncheck it and press OK.

Step 5
Download HijackThis and save it on your desktop. Some malicious programs are able to block HijackThis so when you click the download link, in the Save dialog rename HijackThis.exe to iexplorer.exe and only then click the Save button. After saving the file on your desktop, double click it. In the main HijackThis window click “Do a system scan only” button. Select these entries (place a tick at the left of the entry):

O4 - HKCU\..\Run: [.exe] %LocalAppData%\.exe
O4 - HKCU\..\Run: [] %LocalAppData%\.exe

After selecting required entries, click "Fix Checked". After this procedure you can close HijackThis and proceed to the next removal step.

Perform these actions:

End these System Check processes:

[random.exe]

Remove these System Check registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'

Delete these System Check files:

%Temp%\smtmp\
%Temp%\smtmp\1
%Temp%\smtmp\1
%Temp%\smtmp\2
%Temp%\smtmp\3
%Temp%\smtmp\4
%LocalAppData%\
%LocalAppData%\.exe
%LocalAppData%\~
%LocalAppData%\~
%StartMenu%\Programs\System Check\
%StartMenu%\Programs\System Check\System Check.lnk
%StartMenu%\Programs\System Check\Uninstall System Check.lnk

Step 6
Download and install antispyware software to completely remove the infection. We recommend Spyware Doctor. If you can't run or installation fails, try downloading our Customized installer. After removal completes, perform these steps to unhide files and desktop icons

Other tools, known to remove System Check:

• iS3 STOPzilla
• Malwarebytes Anti-Malware

General tips on removing System Check:

*If you can't download anti-spyware software: Click on the download link, when the save dialog opens change the file name (example: when downloading mbam-setup.exe rename it to iexplore.exe).
*If you have installed anti-spyware program but you can't run it: Click Run, type %ProgramFiles% and press Enter. Open folder of your anti-spyware program, search for executable file and rename it. (example: Open Malwarebytes’ Anti-Malware folder, right-click on the main executable file (mbam.exe) then click rename. Rename the mbam.exe file to iexplore.exe, winlogon.exe firefox.exe ...
*If you can't access your anti-spyware software, try creating a new user account:
Click Start -> Settings -> Control panel.
Click User Accounts and create a new account.
Reboot your computer and login using a newly created user account.
*After this procedure you should be able to access your anti-spyware programs. Update and run a full system scan.

Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.

If you can't access Internet:

Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.

Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.

After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program. Then run a full system scan.

Adittional information:

System Check is a misleading program that uses nasty methods to sell it's fake licence key. Computer users usually stores very sensitive data on their computers and they don't want to loose it. Cybercriminals created this program in such way that when installed it would hide all desktop icons etc. Usually computer user panics after sensing that they could loose their information, you shouldn't be scared - your information is only hidden it's not gone. Use the removal guide of System Check above to completely remove it from your PC and regain your hidden data.