What is System Check

System Check is NOT legitimate.

System Check is a fake computer analysis and optimization program from the FakeHDD family of rogues. This rogue displays false alerts that are designed to make you think that your computer has hard disk problems that have lead to corrupt and missing data. It displays these alerts in order to scare you into purchasing the program so that you can fix these issues. In reality, though, there is nothing wrong with your hardware or data, so please ignore any error messages that this program displays. System Check is installed through hacked sites that exploit vulnerabilities in software that may be installed on your computer or through fake online scanner pages. Once installed, System Check will display false error messages and security warnings on the infected computer. These messages will state that there is something wrong with your computer's hard drive and then suggests that you download and install a program that can fix the problem. When you click on of these alerts, System Check will automatically be started.

Removal instructions can be found here.

Remove System Check (Uninstall Guide)

To make matters worse, recent variants of this family have been know to install the TDSS or ZeroAccess rootkits as well. These rootkits will attempt to stop you from using security programs that may help you to remove this infection. If you are infected with System Check and are unable to update your Malwarebytes's Anti-Malware definitions then you most likely have this rootkit installed.

Suggest you run TDSSKiller to make sure you have not picked up a rootkit.

http://www.bleepingcomputer.com/download/tdsskiller/

AlbinoPanda,

Is one of the images at the end of this post similar to what you are getting?


If so, please restart your computer, and tap the F8 key before Windows shows up.
At the Advanced Options Menu, select: Safe Mode with Networking
Press: Enter

See if you can download the programs that follow in Safe Mode with Networking:

Please download RogueKiller:
Tlcharger RogueKiller (Site Officiel)

When you get to the website, go to where it says:
(Download link) Lien de téléchargement
Select the version that applies to your system: 32-bit or 64-bit
Click the applicable dark-blue button to download.

Save to the Desktop.

Close all windows and browsers.
Right-click and select: Run as Administrator

At the program console, wait for the prescan to finish. (Under Status, it says: Prescan finished.)

Press: SCAN


When done, a report opens on the Desktop: RKreport.txt

Please provide the RKreport.txt (Mode: Scan) in your reply.


~~~~
Also download the Farbar Recovery Scan Tool
Select the version that applies to your system: 32-bit or 64-bit

Save it to your Desktop.

• Double-click the downloaded file to run it.
• When the tool opens click Yes to disclaimer.
• Press the Scan button.
• FRST64 makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).

Please provide the FRST.txt in your reply. <<---

The first time the tool is run, it also makes another log: Addition.txt
Also post the Addition.txt in your reply. <<---


Error Message:

Glad it looks good. Now, what you need to do is run a full system scan with Malwarebytes, your AV & run TDSSKiller again. A full system scan will take some time depending on how many files you have, but be sure to do it to weed out anything that might be hiding. And keep a sharp eye on your system for suspicious behavior.

If everything look good after running the scans, you may want to consider making a system image. That way if something serious strikes down the road, you can restore to the point when you made the system image.

Backup Complete Computer - Create an Image Backup

BTW, those error messages are nothing but BS. Programs like that (Scareware) attempt to trick you into buying the software so they can fix non-existent problems.

AlbinoPanda,

Since you ran TDSSKiller, the tool creates a log normally in the C:\ drive where the Operating System resides.
Logs have a name like:
C:\TDSSKiller.2.4.7_31.05.2013_15.31.43_log.txt

Is it possible to attach or post the TDSSKiller log in your reply?

We want to make sure all is well.

Also, please open Malwarebytes Anti-Malware, and obtain its last report by clicking the Logs tab.
Could you provide its log also?