System Check Removal – How To Video

System Check is a bogus security software which does fictitious scans of your computer and tells you that your hard disk is about to die. It will also report that your computer’s registry is corrupted as well as severe problems with RAM on your computer. System Check is the new variant of fake disk defragmentation products and its earlier successors are  Data Recovery, HDD Repair, Windows Recovery , System Repair and System Restore.  All these products are bogus and just designed to scam money. System Check virus is spreading very fast and lots of people have bought this fake software and lost their money. If you also did that, promptly contact your credit card company and file a dispute on the transaction.

This rogue software is probably the most stubborn rogue software as of today. As soon as It makes its way into your computer, It will hide all desktop icons, all files on your computer as well as all programs from Start Menu. This is to ensure that you are not able to run any application and once you are frustrated, you buy System Check and pay money to these scammers. Here is what happens when System Check takes over your computer :

1. Desktop  wallpaper will get changed automatically and replaced by a completely black wallpaper.
2. All desktop icons and programs from start menu will suddenly disappear.
3. The attribute of all files on your computer will be changed to “Hidden”.
4. Your computer’s performance will be slow like never before.

You’ll get these fake alerts in system tray in every few seconds :

Critical Error
Hard drive critical error. Run a system diagnostic utility to check your hard disk drive for errors. Windows can’t find hard disk space. Hard drive error.

Hard Drive Failure
The system has detected a problem with one or more installed IDE / SATA hard disks. It is recommended that you restart the system.

We suggest that you simply ignore above errors and they are manufactured by System Check Virus. There is no problem on your computer but the virus is trying to convince you that your system is seriously infected. Here is a screenshot of System Check. More screenshots are just below this image. There are a total of 12 images which we’ve taken in our research lab.

If you don’t want to read the complete research report, you can remove System Check virus in two easy steps :-

1. Boot up your computer in “Safe Mode With Networking” mode so that System Check can’t run itself.
2. Download Spy Hunter and do a full scan of your computer. Once the scan is done, remove all the infections and that’s it.

Infection Video From Research Lab

This video shows System Check virus taking over the computer and doing forced scans :

How To Remove System Check

Removing System Check is not easy since It blocks everything on your computer and won’t let you run any genuine spyware products. However, you don’t need to worry as we’ll suggest you the best and safest way for System Check Removal.

A) Automatic Removal

This method is the best one to remove this rogue software from your computer. We also use this method as results are guaranteed. Here is how were removed this software using this method .

1. First of all, you need to stop System Check from running because If It is running in your computer, you can’t run anything else. For that, you need to download Process Explorer and save it as “explorer.exe” on your computer. As System Check blocks Task Manager, we’ll use Process Explorer to terminate the rogue application. After downloading, run Process Explorer and end System Check virus forcefully. Here is a video showing how we did that :

After ending System Check, now you can run applications on your computer. Click the button below to download Spy Hunter and install it on your computer.

If you face any problems while removing this rogue software in Normal Mode, simply reboot your computer and press “F8” key continuously. This will show Advanced Options of Windows startup. Select “Safe Mode with Networking” and press Enter key.  Once your computer boots up, do a complete scan of your computer in Safe Mode and remove the infections. That’s it!

After removing this virus, now you need to unhide all files and desktop icons. For this, you need to download this Unhide program and run it in your computer. This program is from Bleeping Computer and once you run this software, It will unhide everything and everything will be back to normal once again. Now System Check is out and your computer is back to its previous glory.

B) Manual Removal

Manual removal is the hard and risky way to get rid of System Check virus. If you decide to use this method, you must be aware that you need to do everything manually using your knowledge and skills. Small mistakes during manual removal can be fatal and we suggest that you follow these steps at your own risk :

1. Try To Do a System Restore

To do a System Restore, please boot up your computer in “Safe Mode with Networking” mode (Keep pressing F8 button at startup and select this mode) and then click on Start—>Programs—>Accessories—>System Tools—>System Restore and follow the instructions thereon to complete the process. (More Help on How To Do System Restore)

If you restore your computer to an earlier date when your computer was alright, you don’t need to follow any other steps.

2. Correct Startup Registry Entry of Rogue Software

Run Registry editor by clicking on Start—>Run, type “regedit” and click OK button. Now you need to remove this registry entries so that malware can’t load at startup. (Learn How To Edit Registry)

You need to correct some registry entries while remove others. Don’t mess up with registry editor If you are not sure how to do that.

KEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = ‘Yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" =
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = ’1′

3. Remove System Check Files From Your Computer

After correcting the registry, please remove files associated with this rogue. Find these files and delete them. (Learn How To Search and Delete Files)

%LocalAppData%\.exe
%LocalAppData%\~
%LocalAppData%\~
%StartMenu%\Programs\System Check\
%StartMenu%\Programs\System Check\System Check.lnk
%StartMenu%\Programs\System Check\Uninstall System Check.lnk
%Temp%\smtmp\
%Temp%\smtmp\1
%Temp%\smtmp\1
%Temp%\smtmp\2
%Temp%\smtmp\3
%Temp%\smtmp\4
%UserProfile%\Desktop\System Check.lnk

For Windows XP : C:\Documents and Settings\<username>\Application Data\
For Windows Vista/7 : C:\Users\<username>\AppData\Roaming.

%System% means System folder of Windows operating System. I.E. C:\Windows\System\

Please be aware that If you follow automatic removal steps as suggested above, you don’t  need to do anything yourself. Everything will be done automatically by the software and removal is guaranteed. If manual removal steps overwhelm, we suggest you to follow automatic removal method.