- Block exe files from running
- Installs itself without permissions
- Connects to the internet without permission
- Normal system programs crash immediatelly
- Slow internet connection
- System crashes
- Annoying Pop-up's
- Slow Computer
FakeHDD family of rogues is notorious for its onslaught of fake security warnings and ability to turn the user’s computer experience into hell. System Check is the newest spawn from this nest, and it is a new version of the infamous System Fix fake computer optimization application. Just like its forerunner System Check pretends that it can fix various errors your computer is experiencing, but it is more than obvious that as a rogue antispyware it is very far from being a legitimate program.
System Check will enter your computer via fake online scanner. For example, when you browse the web, you might notice a flashing advertisement that informs you about possible system vulnerabilities and urges you to perform a quick system scan online. If you go to the infected page, you automatically initiate the download of System Check, and then this rogue will install itself into your system without your knowledge or consent. Once that happens, you will sure notice when this computer threat springs into action, because your files will disappear.
The thing you mustn’t do in this kind of situation is panic. Even though it seems like your files have gone for good and System Check is the only one that can bring them back, it is not true. Your files are not removed. They are only hidden. Just like some of the system files that are hidden by default. System Check only performed certain changes in the registry that hid your files, as this rogue has no ability to forcefully delete various files. You also mustn’t delete the Temp folder files, because System Check removes your shortcuts, and they are backed up in the Temp folder. Thus it means that you can get your files back, but before you do that, you need to terminate System Check.
The rogue will surely keep on claiming that there are multiple errors in your computer, and its claims will be accompanied by various fake security notifications, for example:
Windows - Delayed Write Failed
Windows detected a hard disk problem
Windows detected a hard disk problem
These fake error messages are not the only thing that you receive from System Check. It also performs a fake system scan after which it announces that your Computer, System Registry, System Drive and RAM Memory are all full of errors. After the scan it finds various problems such as:
Requested registry access is not allowed. Registry defragmentation required
Hard Drive rotational speed decreased by 20%
Disk drive C:\ is unreadable.
System files are damaged. System is unstable.
The problem may cause errors while loading operating system.
Ram memory speed decreased significantly and may cause system failure.
Read time of hard drive clusters less than 500 ms
32% of HDD space is unreadable
Bad sectors on hard drive or damaged file allocation table
GPU RAM temperature is critically high. Urgent RAM memory optimization is required to prevent system crash
Drive C initializing error
Ram Temperature is 83 C. Optimization is required for normal operation.
Of course, System Check promises to fix these problems if you pay for its license, but that is the only reason why this rogue is in your computer. System Check only wants your money, and it will continue to bombard you with these fake and absolutely senseless (if most of the notifications were true, you would not be able to operate your computer AT ALL) messages, slowing down your computer. Thus, you have to remove System Check from your machine immediately.
Since this rogue hides your files it makes the manual removal harder especially if you are not experienced in dealing with computer issues. Thus, it is recommended to acquire a legitimate security tool that will delete System Check for you automatically, and your computer will be restored to its previous state.
The removal of the rogue will be a lot easier if you trick it by "activating" System Check with this activation code:
With System Check "registered", you will avoid pop-up messages, and removing the rogue will not cause any problem.
If you have used the activation key, you should be able to remove System Check with ease, but sometimes it is not as simple as it seems. Especially when you have to remove it automatically and you cannot acquire a reliable computer safeguard program. It happens, because System Check hides all shortcuts and desktop icons, as well as the Start Menu, which renders you unable to access the Internet. In such case, you can either download a security program from a clean computer and transfer it to your machine via USB flash drive, or run Internet Explorer without using the Start Menu. In order to do that, press the Windows Key together with R key and the Run prompt will show up. There type in “iexplore.exe” and hit Enter – Internet Explorer will load immediately.
From there you can get yourself a powerful security tool and remove System Check for good.
If you decide to register with System Check, which is highly recommended for easier infection’s removal, together with the activation code, you will be asked to disclose an email address. It is important not to type in a legitimate email address, because you are likely to be bombarded with various spam emails! To avoid such occurrence, simply use a fictitious email address like email@example.com, or firstname.lastname@example.org.
Also, see a few newly discovered System Check notifications:
How to manually remove System Check
Files associated with System Check infection:
%StartMenu%\Programs\System Check\Uninstall System Check.lnk
%StartMenu%\Programs\System Check\System Check.lnk
System Check processes to kill:
Remove System Check registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '.zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;.scr;'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'