Computer Fix

Also Known As: Computer Fix Rogue
Distribution: Low
Damage level: High

Computer Fix removal instructions

What is Computer Fix?

Computer Fix is a fake computer optimizer derived from the same family of misleading programs as System Fix, System Restore, Data Restore, and others. This rogue computer program differs from most fake anti-spyware, since it attempts to convince computer users into believing that their computer hardware has serious malfunctions. Usually, bogus anti-spyware employs a different method - performing security scans and attempting to trick PC users into purchasing fake licenses. When your computer is infected with Computer Fix, multiple warning messages reports that your computer's hard drive has failed, your RAM memory has malfunctioned, or other similar problems.

Computer Fix rogue program

Furthermore, to reinforce the false warning messages, Computer Fix hides your desktop icons and start menu items. These actions are performed to scare you into purchasing a non existent license for the useless Computer Fix optimizer. Do not panic about the missing desktop icons and other data. This bogus computer scanner simply hides them, and by following this removal guide, you will be able to remove Computer Fix and regain control of your data. If you have already bought a license for Computer Fix, contact your credit card company and dispute the charges, explaining that you have been tricked into purchasing a fake computer optimization program. Remove Computer Fix as soon as you notice its presence on your computer.

The Computer Fix fake optimizer displays the following fake pop-up messages:

"Hard Drive Failure. The system has detected a problem with one or more installed IDE / SATA hard disks. It is recommended that you restart the system."

"Activation Reminder. Computer Fix Activation. Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features."

"System Error. An error occurred while reading system files. Run a system diagnostic utility to check your hard disk drive for errors."

"Critical Error. Hard drive clusters are partly damaged. Segment load failure."

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced computer skills. Malwarebytes is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Malwarebytes By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Malwarebytes. 14 days free trial available.

Quick menu:

"Computer Fix" virus removal:

Step 1
Before downloading the spyware remover, enter the Computer Fix registration key in the registration window. Click 'Click here to activate full-functional version' located on the bottom-left of the main window and enter this key:

E-mail: fake (at) email.com Key: 1203978628012489708290478989147

Step 2
When the registration key is entered, Computer Fix will behave as if you have purchased it and will stop generating fake warnings. It will also enable some previously disabled Windows features. Note that registering this program will not remove it from your PC. It will simply disable the fake warnings and allow you to install the spyware removers. After you enter the key, you can download the remover (use the button below) and remove this fake security software.

Manual removal instructions of Computer Fix virus

If you are unable to remove Computer fix, you can use these manual removal instructions. Use them at your own risk, since if you do not have strong computer knowledge, you could harm your operating system. Use them only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)

E-mail: fake (at) email.com
Key: 1203978628012489708290478989147

If it works, this bogus program will be disabled and you will be able to remove it without constant interventions. Note, that this infection constantly mutates and the keys may be changed. After this procedure, you will be able to see your files and install legitimate spyware remover software in order to remove this infection. If the registration key does not work, proceed to Step 2.

Warning! Entering the activation key will not remove this infection! It will simply disable the fake warnings. This spyware will run in the background and will keep collecting your data!

Step 2
Start your computer in Safe Mode. Click Start, click Shut Down, click Restart, click OK. During your computer starting process press the F8 key on your keyboard multiple times until you see the Windows Advanced Option menu, then select Safe Mode with Networking from the list.

safe mode with networking screenshot

Here is a video demonstrating how to start Windows in "Safe Mode with Networking":

Windows XP users:

Windows Vista / 7 users:

Windows 8 users:

Step 3
Open Internet Explorer, click Tools and select Internet Options. Select "Connections".

internet options

 

internet options connections

 

Step 4
Click LAN settings, if 'Use a proxy server for your LAN' is checked, uncheck it and press OK.

lan settings

proxy settings

 

 

 

 

Step 5
Download HijackThis and save it to your desktop. Some malicious programs are able to block HijackThis, so when you click the download link, in the Save dialog, rename HijackThis.exe to iexplore.exe and only then click the Save button. After saving the file to your desktop, double click it. In the main HijackThis window click the “Do a system scan only” button. Select the following entries (place a tick at the left of the entries):

O4 - HKCU\..\Run: [.exe] %LocalAppData%\.exe
O4 - HKCU\..\Run: [] %LocalAppData%\.exe

After selecting the required entries, click "Fix Checked". After this procedure you can close HijackThis and proceed to the next removal step.

Step 6
Download and scan your computer with Kaspersky's TDSS Killer. Download TDSS Killer. (Computer Fix infects your computer along with a rootkit infection - for smooth removal, you need to remove this rootkit infection).

Perform these actions:

End these Computer Fix processes:

[random.exe]

Remove these Computer Fix registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '.zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;.scr;'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'

Delete these Computer Fix files:

%Temp%\smtmp\
%Temp%\smtmp\1
%Temp%\smtmp\1
%Temp%\smtmp\2
%Temp%\smtmp\3
%Temp%\smtmp\4
%AllUsersProfile%\[random].exe
%AppData%\Microsoft\Internet Explorer\Quick Launch\Computer Fix.lnk
%Desktop%\Computer Fix.lnk
%StartMenu%\Programs\Computer Fix\
%StartMenu%\Programs\Computer Fix\Computer Fix.lnk
%StartMenu%\Programs\Computer Fix\Uninstall Computer Fix.lnk

Step 6
Download and install the anti-spyware software to completely remove the infection. After removal completes, perform these steps to 'unhide' files and desktop icons

Complete these steps if after removal of Computer Fix your Desktop icons or files are hidden: 

Step 1
This Infection Hides most user files. If you cannot see your files, do not panic. The files are not deleted, but merely hidden. When downloaded, the spyware remover removes the infection. Please download and run this tool to unhide your files (Link below). It is important to run this tool only when the infection has been removed from your computer. The 'unhide files' tool is useless when run on an infected computer.

When the 'unhide files' tool finishes, your Windows desktop icons may still be gone. To fix missing desktop items after spyware infection, download this .REG file. Double click when downloaded, click yes and then click ok. Reboot your computer, your desktop items now should be visible.

Step 2
Reboot your computer to check if everything is OK and that the Computer Fix rogue spyware is gone. Check if you can find all your files, and if some are still missing, open My Computer, Click Tools, then select Folder Options... and under the View tab, select radio button 'Show hidden files and folders', press OK. Now you will see the hidden files and folders. To unhide them, right click on the file or folder, then select Properties and uncheck the 'Hidden' Check box.

That's it! You're done.

Other tools, known to remove Computer Fix:

Summary:

The fake antivirus programs (also known as "rogue antivirus programs" or "scareware") are applications that tries to lure computer users into paying for their non-existent full versions to remove the supposedly detected security infections (although the computer is actually clean). These bogus programs are created by cyber criminals who design them to look as legitimate antivirus software. Most commonly rogue antivirus programs infiltrate user's computer using poop-up windows or alerts which appear when users surf the Internet. These deceptive messages trick users into downloading a rogue antivirus program on their computers. Other known tactics used to spread scareware include exploit kits, infected email messages, online ad networks, drive-by downloads, or even direct calls to user's offering free support.

A computer that is infected with a fake antivirus program might also have other malware installed on it as rogue antivirus programs often are bundled with Trojans and exploit kits. Noteworthy that additional malware that infiltrates user's operating system remains on victim's computer regardless of whether a payment for a non-existent full version of a fake antivirus program is made. Here are some examples of fake security warning messages that are used in fake antivirus distribution:

Fake pop-up used in rogue antivirus distribution example 1

Fake pop-up used in rogue antivirus distribution example 2

Computer users who are dealing with a rogue security software shouldn't buy it's full version. By paying for a license key of a fake antivirus program users would send their money and banking information to cyber criminals. Users who have already entered their credit card number (or other sensitive information) when asked by such bogus software should inform their credit card company that they have been tricked into buying a rogue security software. Screenshot of a web page used to lure computer users into paying for a non-existent full version of computer fix rogue and other rogue antivirus programs:

example of a webpage used to collect payments for fake antivirus programs

To protect your computer from computer fix rogue and other rogue antivirus programs users should:

  • Keep their operating system and all of the installed programs up-to-date.
  • Use legitimate antivirus and anti-spyware programs.
  • Use caution when clicking on links in social networking websites and email messages.
  • Don't trust online pop-up messages which state that your computer is infected and offers you to download security software.

Symptoms indicating that your operating system is infected with a fake antivirus program:

  • Intrusive security warning pop-up messages.
  • Alerts asking to upgrade to a paid version of a program to remove the supposedly detected malware.
  • Slow computer performance.
  • Disabled Windows updates.
  • Blocked Task Manager.
  • Blocked Internet browsers or inability to visit legitimate antivirus vendor websites.

If you are experiencing problems while trying to remove computer fix rogue from your computer, please ask for assistance in our malware removal forum.

If you have additional information on computer fix rogue or it's removal please share your knowledge in the comments section below.

Click to post a comment

About the author:

Tomas Meskauskas

Tomas Meskauskas - expert security researcher, professional malware analyst.

I am passionate about computer security and technology. I have an experience of over 10 years working in various companies related to computer technical issue solving and Internet security. I have been working as an author and editor for pcrisk.com since 2010. Follow me on Twitter and LinkedIn to stay informed about the latest online security threats. Contact Tomas Meskauskas.

PCrisk security portal is brought by a company RCS LT. Joined forces of security researchers help educate computer users about the latest online security threats. More information about the company RCS LT.

Our malware removal guides are free. However, if you want to support us you can send us a donation.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.

QR Code
Computer Fix Rogue QR code
A QR code (Quick Response Code) is a machine-readable code which stores URLs and other information. This code can be read using a camera on a smartphone or a tablet. Scan this QR code to have an easy access removal guide of Computer Fix Rogue on your mobile device.
We Recommend:

Get rid of Windows malware infections today:

▼ REMOVE IT NOW
Download Malwarebytes

Platform: Windows

Editors' Rating for Malwarebytes:
Editors ratingOutstanding!

[Back to Top]

To use full-featured product, you have to purchase a license for Malwarebytes. 14 days free trial available.