System Check malware removal tool

16 Responses

  1. P Tomlinson says:

    I was at my wits end today trying to find a solution to this problem, with no success. Till I stumbled onto this page. I followed the instructions carefully and voila! My computer seems to be back in good working order. Thank you very much!

  2. D. Tran says:

    I’ve followed the steps of getting the restore.exe and unhider.exe
    However not all my files were recovered.
    When I run the restore.exe file, the window just pops up and tells me to press any key. I don’t see nothing like the window in the tutorial youtube vid (copying files).
    I appreciate any help.

  3. Mitch says:

    I’m having the same problem as D.Tran. My computer is working normally now as the system check virus is definitely gone but I am unable to restore or unhide my files.

  4. andy says:

    You need to run Restore.exe and unhider.exe with Administrator rights

  5. Kelly says:

    I too have followed the above steps and removed the malware however; like others Im unable to restore and do not see a place to type in the restore link in “My Computer” tab. Im still unable to get on-line also. Please help me.

  6. Phillip says:

    @ Kelly
    press your home key and “R” at the same time. it will pop up your run screen, and then type the link in.

  7. Khooleo says:

    Worked like a charm but it was definately stressful before i found this site. Memories of a past experience came to mind. Thank you very much!!

  8. Khooleo says:

    Huh, but now my bookmarks are missing……go figure. Any thoughts?

  9. BlackMagic says:

    Windows has a nice feature, called System Restore. Worked perfectly for me.

  10. Djorkboy says:

    The files are not gone or even moved

    The malware has hidden them

    Just go to folder options and choose to show hidden files and system files and you will now be able to see all your files, right click them and uncheck the ‘hidden’ option, then when you are done go back to folder options and uncheck the show hidden files box.

  11. sardoggy says:

    Mine got stuck somewhere in the middle of the scan and whole computer froze. Definitely not hardware related as I already tested for that.

  12. Steve says:

    I had the same problem. Was able to get the files unhidden but not my programs, including Outlook. Any ideas on how to fix this? Thanks!!!

  13. Luc Filiatrault says:

    I got a system check malware in a WinXP laptop.
    I am not able to open any application nor the task manager. Normally I right click the taskbar and call taskmanager from there but it is grayed out. I did this in safe mode also and it is not acessible.I used Knoppix to access the file system and to remove the links as per the manual instructions.
    Normal mode or safe mode: I cannot run any local tools or regedit.
    What can I try next?

  14. Phil says:

    I’m in the process of removing this from a customer’s PC.

    To Luc:
    As you noticed, System Check makes a number of changes to your system. None of which are simple to fix unless you have some patience or some handy programs/scripts.

    Using Knoppex to delete the links was good and bad. Good because if you deleted all of the links, you MAY HAVE prevented the program from restarting.

    Under XP, some of the executable files were installed under C:\Documents and Settigs\All Users\Application Data. You will want to look there for *.exe files and others that have a random garbage name.

    As for deleting the smtmp folder, that, IMHO, was bad because that is where the original Start Menu and Desktop folders were saved. Moving them back into place would have recovered all of your program links and Desktop items.

    I’ve seen this with other viruses and it appears to be a common “feature”. After all, the bogus program has to restore the function of your PC.

    To get the Task Manager back, get into Safe Mode and start regedit. Change the value for the following key to zero (0).
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ‘1’

    I would recommend using the scripts to unhide your Desktop and Documents folders. Not everything within those folders is intended to be unhidden so you’ll want to be a bit careful.

  15. LDEJRuff says:

    Is it free? I currently have a trojan virus on mine.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.