System Check

By ZulaZuza in Rogue Anti-Spyware Program

Translate To:

Threat Scorecard

Threat Level:	100 % (High)
Infected Computers:	16

First Seen:	December 30, 2011
Last Seen:	April 18, 2018
OS(es) Affected:	Windows

System Check Image

System Check is a rogue PC defragmenter. System Check belongs to a family of rogue defragmenters known as FakeSysDef, which are typically disguised as system optimization tools or defragmenters. While System Check claims to be able to solve problems in your hard drive, System Check is actually designed to scam inexperienced users by convincing them to purchase a license for a useless 'full version' of this malicious scam. According to ESG security researchers, System Check is closely linked to various Trojan infections. Because of this, failure to remove System Check and its associated malware from your computer system will cause a number of severe problems with your computer's normal operation. This is because System Check makes dangerous changes to your computer's registry, as well as dropping various malicious executable files. Another reason why System Check is harmful to your computer is that the Trojan that brought System Check will typically exploit security vulnerabilities on your computer in order to install itself against your will, making your computer particularly vulnerable to further intrusions. ESG malware analysts strongly advise removing System Check immediately with the help of a reliable anti-virus program. Most importantly, do not pay heed to any of System Check's messages or alerts; these are all part of its scam.

Clones of System Check include System Defragmenter, Ultra Defragger, HDD Control, Win HDD, Win Defrag, Win Defragmenter, Disk Doctor, Hard Drive Diagnostic, HDD Diagnostic, HDD Plus, HDD Repair, HDD Rescue, Smart HDD, Defragmenter, HDD Tools, Disk Repair, Windows Optimization Center, Scanner, HDD Low, Hdd Fix.

Table of Contents

How System Check Attempts to Make You Panic

System Check is designed to display a constant barrage of fake alert messages claiming that there are critical errors in the infected computer's hard drive. These messages may claim that your RAM usage is too high, and there has been a RAM memory failure or that your computer cannot read system files. These claims should be ignored, since they are designed to make you panic. The reason why System Check tries to make you panic is so that you will buy System Check in order to fix these imaginary problems. However, handing over your money to criminals behind System Check is practically the same as simply throwing your money into the garbage. Typical symptoms of a System Check infection include browser redirects, poor system performance, frequent crashes and the non-stop stream of alarming messages and bogus system alerts. If your computer system is exhibiting any of previously mentioned symptoms, it is a very clear sign that your PC has become infected with a rogue defragmenter. Take steps to protect yourself from this malware infection immediately.

SpyHunter Detects & Remove System Check

System Check Video

Tip: Turn your sound ON and watch the video in Full Screen mode.

File System Details

System Check may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	cDdouyYokr9NKbE.exe	79734449cfb8415815378fb06b29d2cf	1
Name: cDdouyYokr9NKbE.exe MD5: 79734449cfb8415815378fb06b29d2cf Size: 355.57 KB (355576 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data Group: Malware file Last Updated: January 2, 2012
2.	%Documents and Settings%\[User Name]\Local Settings\System Check\[RANDOM CHARACTERS].exe
Name: %Documents and Settings%\[User Name]\Local Settings\System Check\[RANDOM CHARACTERS].exe Type: Executable File Group: Malware file
3.	%Temp%\smtmp\2
Name: %Temp%\smtmp\2 Group: Malware file
4.	%Documents and Settings%\[User Name]\Start Menu\\Programs\System Check\Uninstall System Check.lnk
Name: %Documents and Settings%\[User Name]\Start Menu\\Programs\System Check\Uninstall System Check.lnk Type: Shortcut Group: Malware file
5.	%Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\
Name: %Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\ Group: Malware file
6.	%Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\2
Name: %Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\2 Group: Malware file
7.	%Documents and Settings%\[User Name]\Start Menu\\Programs\System Check\
Name: %Documents and Settings%\[User Name]\Start Menu\\Programs\System Check\ Group: Malware file
8.	%StartMenu%\Programs\System Check\System Check.lnk
Name: %StartMenu%\Programs\System Check\System Check.lnk Type: Shortcut Group: Malware file
9.	%Temp%\smtmp\1
Name: %Temp%\smtmp\1 Group: Malware file
10.	%Temp%\smtmp\4
Name: %Temp%\smtmp\4 Group: Malware file
11.	%Documents and Settings%\[User Name]\Local Settings\Application Data\~[RANDOM CHARACTERS]
Name: %Documents and Settings%\[User Name]\Local Settings\Application Data\~[RANDOM CHARACTERS] Group: Malware file
12.	%Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\1
Name: %Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\1 Group: Malware file
13.	%Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\4
Name: %Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\4 Group: Malware file
14.	%StartMenu%\Programs\System Check\
Name: %StartMenu%\Programs\System Check\ Group: Malware file
15.	%UserProfile%\Desktop\System Check.lnk
Name: %UserProfile%\Desktop\System Check.lnk Type: Shortcut Group: Malware file
16.	%Temp%\smtmp\
Name: %Temp%\smtmp\ Group: Malware file
17.	%Temp%\smtmp\3
Name: %Temp%\smtmp\3 Group: Malware file
18.	%Documents and Settings%\[User Name]\Desktop\System Check.lnk
Name: %Documents and Settings%\[User Name]\Desktop\System Check.lnk Type: Shortcut Group: Malware file
19.	%Documents and Settings%\[User Name]\Local Settings\System Check\[RANDOM CHARACTERS]
Name: %Documents and Settings%\[User Name]\Local Settings\System Check\[RANDOM CHARACTERS] Group: Malware file
20.	%Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\3
Name: %Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\3 Group: Malware file
21.	%Documents and Settings%\[User Name]\Start Menu\\Programs\System Check\System Check.lnk
Name: %Documents and Settings%\[User Name]\Start Menu\\Programs\System Check\System Check.lnk Type: Shortcut Group: Malware file
22.	%StartMenu%\Programs\System Check\Uninstall System Check.lnk
Name: %StartMenu%\Programs\System Check\Uninstall System Check.lnk Type: Shortcut Group: Malware file
23.	zayz0qorhnhyGn.exe	2f49377701f33764160faacfe1698024	0
Name: zayz0qorhnhyGn.exe MD5: 2f49377701f33764160faacfe1698024 Size: 450.8 KB (450808 bytes) Detections: 0 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data Group: Malware file Last Updated: January 2, 2012
24.	yhyz0qorihyGn.exe	9ae7080af36215007c50f440567e2bc3	0
Name: yhyz0qorihyGn.exe MD5: 9ae7080af36215007c50f440567e2bc3 Size: 651.77 KB (651776 bytes) Detections: 0 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data Group: Malware file Last Updated: January 2, 2012

Registry Details

System Check may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS].exe"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'

Messages

The following messages associated with System Check were found:

Activation Reminder
System Check Activation
Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features.

Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required.

Critical Error
Hard drive critical error. Run a system diagnostic utility to check your hard disk drive for errors. Windows can’t find hard disk space. Hard drive error.

Critical Error
RAM memory usage is critically high. RAM memory failure.

Critical Error!
Damaged hard drive clusters detected. Private data is at risk.

Hard Drive Failure
The system has detected a problem with one or more installed IDE / SATA hard disks. It is recommended that you restart the system.

Low Disk Space
You are running very low disk space on Local Disk (C:).

Do not fall for this blatant scam because this is fraud. Malware gains you to purchase illegal version of the program. System Check will hijack your browser to misleading web pages that market the program. Avoid believing in any information it shows because it may cause you serious trouble. Choose reputable anti-spyware application and terminate System Check as soon as possible.

System Check
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.

System Error
An error occurred while reading system files. Run a system diagnostic utility to check your hard disk drive for errors.

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

System Check

Threat Scorecard

EnigmaSoft Threat Scorecard

How System Check Attempts to Make You Panic

SpyHunter Detects & Remove System Check

System Check Video

File System Details

Registry Details

Messages

Submit Comment

Related Posts

PUP.System Checkup

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen