System Check

System Check Description

Type: Rogue Defragmenter Program

ScreenshotSystem Check is a rogue PC defragmenter. System Check belongs to a family of rogue defragmenters known as FakeSysDef, which are typically disguised as system optimization tools or defragmenters. While System Check claims to be able to solve problems in your hard drive, System Check is actually designed to scam inexperienced users by convincing them to purchase a license for a useless 'full version' of this malicious scam. According to ESG security researchers, System Check is closely linked to various Trojan infections. Because of this, failure to remove System Check and its associated malware from your computer system will cause a number of severe problems with your computer's normal operation. This is because System Check makes dangerous changes to your computer's registry, as well as dropping various malicious executable files. Another reason why System Check is harmful to your computer is that the Trojan that brought System Check will typically exploit security vulnerabilities on your computer in order to install itself against your will, making your computer particularly vulnerable to further intrusions. ESG malware analysts strongly advise removing System Check immediately with the help of a reliable anti-virus program. Most importantly, do not pay heed to any of System Check's messages or alerts; these are all part of its scam.

Clones of System Check include System Defragmenter, Ultra Defragger, HDD Control, Win HDD, Win Defrag, Win Defragmenter, Disk Doctor, Hard Drive Diagnostic, HDD Diagnostic, HDD Plus, HDD Repair, HDD Rescue, Smart HDD, Defragmenter, HDD Tools, Disk Repair, Windows Optimization Center, Scanner, HDD Low, Hdd Fix.

How System Check Attempts to Make You Panic

System Check is designed to display a constant barrage of fake alert messages claiming that there are critical errors in the infected computer's hard drive. These messages may claim that your RAM usage is too high, and there has been a RAM memory failure or that your computer cannot read system files. These claims should be ignored, since they are designed to make you panic. The reason why System Check tries to make you panic is so that you will buy System Check in order to fix these imaginary problems. However, handing over your money to criminals behind System Check is practically the same as simply throwing your money into the garbage. Typical symptoms of a System Check infection include browser redirects, poor system performance, frequent crashes and the non-stop stream of alarming messages and bogus system alerts. If your computer system is exhibiting any of previously mentioned symptoms, it is a very clear sign that your PC has become infected with a rogue defragmenter. Take steps to protect yourself from this malware infection immediately.ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

Technical Information

Screenshots & Other Imagery

SpyHunter Detects & Remove System Check

System Check Video

Tip: Turn your sound ON and watch the video in Full Screen mode.

File System Details

System Check creates the following file(s):
# File Name MD5 Detection Count
1 cDdouyYokr9NKbE.exe 79734449cfb8415815378fb06b29d2cf 1
2 %Documents and Settings%\[User Name]\Local Settings\System Check\[RANDOM CHARACTERS].exe N/A
3 %Temp%\smtmp\2 N/A
4 %Documents and Settings%\[User Name]\Start Menu\\Programs\System Check\Uninstall System Check.lnk N/A
5 %Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\ N/A
6 %Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\2 N/A
7 %Documents and Settings%\[User Name]\Start Menu\\Programs\System Check\ N/A
8 %StartMenu%\Programs\System Check\System Check.lnk N/A
9 %Temp%\smtmp\1 N/A
10 %Temp%\smtmp\4 N/A
11 %Documents and Settings%\[User Name]\Local Settings\Application Data\~[RANDOM CHARACTERS] N/A
12 %Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\1 N/A
13 %Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\4 N/A
14 %StartMenu%\Programs\System Check\ N/A
15 %UserProfile%\Desktop\System Check.lnk N/A
16 %Temp%\smtmp\ N/A
17 %Temp%\smtmp\3 N/A
18 %Documents and Settings%\[User Name]\Desktop\System Check.lnk N/A
19 %Documents and Settings%\[User Name]\Local Settings\System Check\[RANDOM CHARACTERS] N/A
20 %Documents and Settings%\[User Name]\Local Settings\Temp\smtmp\3 N/A
21 %Documents and Settings%\[User Name]\Start Menu\\Programs\System Check\System Check.lnk N/A
22 %StartMenu%\Programs\System Check\Uninstall System Check.lnk N/A
23 zayz0qorhnhyGn.exe 2f49377701f33764160faacfe1698024 0
24 yhyz0qorihyGn.exe 9ae7080af36215007c50f440567e2bc3 0

Registry Details

System Check creates the following registry entry or registry entries:
Registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'

More Details on System Check

The following messages associated with System Check were found:
Activation Reminder
System Check Activation
Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features.
Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required.
Critical Error
Hard drive critical error. Run a system diagnostic utility to check your hard disk drive for errors. Windows can’t find hard disk space. Hard drive error.
Critical Error
RAM memory usage is critically high. RAM memory failure.
Critical Error!
Damaged hard drive clusters detected. Private data is at risk.
Hard Drive Failure
The system has detected a problem with one or more installed IDE / SATA hard disks. It is recommended that you restart the system.
Low Disk Space
You are running very low disk space on Local Disk (C:).

Do not fall for this blatant scam because this is fraud. Malware gains you to purchase illegal version of the program. System Check will hijack your browser to misleading web pages that market the program. Avoid believing in any information it shows because it may cause you serious trouble. Choose reputable anti-spyware application and terminate System Check as soon as possible.
System Check
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.
System Error
An error occurred while reading system files. Run a system diagnostic utility to check your hard disk drive for errors.

Related Posts

Site Disclaimer is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.