Remove System Check– Fake Antivirus/Spyware Program
System Check is a fake anti spyware program that is designed to make you pay for what you think is a piece of software that will rid your computer of viruses/spyware and or fix problems with your harddrive. it is a rogue peice of software and you should not pay to get rid of hi. What the software is actually doing is the following:
- Stops you from running any executable files on your computer including programs like office, antivirus installers and even programs like Microsoft paint!
- It shows false error messages to make you think your system is broken
- Constantly pops up with its fake messages
- Hides all your files and folders.
- Deletes your shortcuts from the startmenu
- There is no uninstallation process, so cannot be uninstalled.
Here are some of the warning message you may encounter :
- Hard Drive rotaional speed decreased by 20%
- Driver C initializing error
- Disk Drive c:\ is unreadable
- System files are damaged. System is unstable
- GPU Ram temperature critically high, Urgent Ram memory optimization is required to fix the problem
- The problem may cause errors while loading your operating system
- Ram memory speed decreased significantly and may cause a system failure.
- Failed to save all the components for the file \\system32\XXXXXXXXX. The file is corrupted or Unreadable. This error may be caused by pc hardware problems. (see image below)
- Ram memory reliability extrmemly low. This problem may cause system failure (see image below)
System Check Removal guide
The System Check program manifests itself in a random form. This means that the executable it uses will be made up of random characters
The program can be found in the following directories and will contain random characters and may contain 1 or more executables:
- C:\Documents and Settings\All Users\Application Data\<randomcharacters>]\<randomcharacters>.exe
- C:\Documents and Settings\<user name>\Local Settings\Application Data\<randomcharacters>.exe
- C:\Documents and Settings\all users\Local Settings\Application Data\<randomcharacters>.exe
Windows Vista and 7
- C:\Users\<user name>\AppData\Local\<randomcharacters>.exe
- C:\Users\all users\\AppData\Local\<randomcharacters>.exe
So bearing in this in mind we can do the following to remove it (if at any time the program restricts you from one of these steps. Boot your computer into safe mode by pressing f8 when the computer just starts loading windows):
- Click the Windows button and open up my computer.
- Because the folders will have been hidden by the spyware you need to start by unhiding them. use this page to help or you can use the folder options to show hidden files. Then right click each folder and untick the check box saying hidden. It will ask you to do if for subfolders which you put the radio button next to. You need to unhide all the folders.
- Once you have unhidden every folder. Navigate and check each of the locations listed above to find where the program is running from.
- Locate the set of random characters which will be the fake program. Note : There maybe more than one.
- Important - Make a note of its name - then Rename the file to Deletesoon (at this stage we rename just in case you havent identified the correct program. that way you can rename it back if there is any problems)
- Once renamed restart the computer. This will essentially stop the program from loading when the computer loads. if you have not renamed the correct item it will still load.
- Once the computer has loaded Click the Window button
- in the search box type regedit and press enter (we will be editing the registry. Any mistakes can cause irreversible damage, we take no responisibilty for any issue that may arise by following this).
- A new window will appear. Click on the menu edit and then click find.
- Type in the "random" characters you wrote down earlier with .exe on the end. In the case above i had i searched for gLgGdDk08400.exe. It found the file in the runonce section of a user profile. It may also appear in the run section on the local machine or any user profile. See image below.
- Once you have found the entry. Highlight the item in the right hand windows. Then press delete.
- Close the windows and restart
- navigate back to folder where the file was originally found and delete the file that you renamed earlier to deletesoon.
- Once you have done this reboot the computer. Boot it back into safe mode. At the beginning of safe mode it asks you if you wish to use system restore. Use system restore now to take the computer back to a point before the attack. This will then reinstate all the missing program menu shortcuts. If you dont have a restore point you could try using a program like recuva to undelete the program menu icons. Last case scenario you may have to recreate the shortcuts yourself.
- To Finish off run a full spyware using malwarebytes and a virus scans using something like avg anti virus protection.
Tags: Remove system check help, get rid of system check, uninstall system check, delete system check protect your pc.