How to Remove Malware Rogue System Check by Britec

System Check is malicious rogue fake software. It may look real but is really a fake bit of software that uses scareware tactics to con you out of your hard earned money its drops the latest TDL rootkit as well. Once installed, this fake system utility starts popping up lots of bogus error messages, blocks Task Manager and other programs (including antivirus software), hides all icons and program shortcuts. It does the same thing in safe mode too. As you can tell already, it's a nasty virus.

For those of you who no longer have the %Temp%\Smtmp folder, you will not be able to use Unhide to restore your Start Menu items. With this in mind, I have created some scripts to restore the default Start Menu for specific versions of Windows that I have access to. You can view the available versions below. I will be adding more as time goes on.

Windows 2000 US English
http://download.bleepingcomputer.com/grinler/fakehdd/win-2000-sm-reset.exe

Windows XP Pro 32-bit US English - This should also work in other 32 bit version of Windows XP but I have nothing to compare against.
http://download.bleepingcomputer.com/grinler/fakehdd/winxp-pro-32bit-sm-reset...

Windows Vista 32-bit US English
http://download.bleepingcomputer.com/grinler/fakehdd/vista-32-sm-reset.exe

Windows Vista 64-bit US English
http://download.bleepingcomputer.com/grinler/fakehdd/vista-64-sm-reset.exe

Windows 7 32-bit US English
http://download.bleepingcomputer.com/grinler/fakehdd/win7-32-sm-reset.exe

Windows 7 64-bit US English
http://download.bleepingcomputer.com/grinler/fakehdd/win7-x64-sm-reset.exe

Thanks to tetonbob and Andrew for supplying me with the required start menus

Unhide
http://download.bleepingcomputer.com/grinler/unhide.exe

Iexplore
http://download.bleepingcomputer.com/grinler/iExplore.exe

TDSSKiller
http://support.kaspersky.com/downloads/utils/tdsskiller.exe

Malwarebytes.org

Category:

Howto & Style

Tags:

• How-to
• Remove
• Malware
• Rogue
• System
• Check
• Britec
• Trojan
• virus
• fake
• software
• windows
• xp
• vista
• rootkit
• tdl
• blocks
• error
• messages

[Macr888]

Just spent 4 hours trying to kill this thing. This video is probably the most useful video I've ever come across on youtube.. no joke. Thank you so much! You don't know how much this saved me (:

[Britec09]

@Macr888 your welcome, glad I could help.

[KintaroCwalk]

how to use that "unhide"? i just doubleclicked and it opens this black window.... and it happens NOTHING :(

[Britec09]

@KintaroCwalk Did you run as admin.

[canovel]

I seriously owe you a pint or 7 mate... absolute legend.

[Britec09]

@canovel I will hold you to that pint :)

[persianpride666]

THANK YOU THANK YOU THANK YOU THANK YOU THANK YOU THANK YOU THANK YOU THANK YOU THANK YOU THANK YOU THANK YOU THANK YOU THANK YOU THANK YOU

[wbtbwb4eva]

After 5 hours... I'm happy that my computer works again. Thank you so much :)

[XxNekoRubyxX]

YOU ARE AMAZING.

[TheLazz123]

Thank you so much! My computer works fine again.

[TheButtGurl]

the win 7 64 bit link isn't working...? 

[johnathan3gameking]

Too bad you didn't put the same link in the description that you copied and paste in the video you bastard

[airsoft1181]

All of my icons are unhidden too

[airsoft1181]

Thanks at first i had no internet but i simply ran a virus scan and downloaded updates and know it works!!!!!!!

[VaIIe94]

@britec09 .. I followed your instructions step by step and I'm quite sure System Check is removed now.. THANKS! But there is one problem: I am from Germany and so I need a german win7-x64-reset program ! where can I get this? could you help me find one?

[a4gottenboy]

i explore isnt working

[EpicRainbownizedStar]

you talk too much, just get to the point