Hard drive of any computer, either desktop or laptop, may have certain types of errors and problems. The hardware part of our PCs is not eternal. This sometimes results in various malfunctions and problems. In certain cases radical measures like purchasing another hard drive are necessary. If you store too much information on your disk (like movies, pictures, music and other files that might occupy too much space) there is a risk that you hard drive would become overburdened with lots of information and simply become unable to store other data. You might consider purchasing another more powerful and brand new computer or obtaining extra hard drive (additional one). Thus, the problem of your hard drive space running low is not something unusual.
Notwithstanding the aforesaid, nowadays there are many fake system optimization tools that are known to present various types of fake system error messages, whereas such errors are not even peculiar to your computer. The aim of such fake hard drive defragmenters is to make you scared with plenty of lies they report to you about your system not functioning well. However, the chances are that your PC does not have all those errors claimed by these fake HDD tools. You are simply being deceived by the virus program and its scary warnings.
System Check virus is the example of the huge family of fake hard drive defragmenters. Upon successful installation to your PC without your consent this malware modifies the system registry in order to be launched automatically with each Windows startup. Then it run the bogus scan of your computer and reports various sorts of fake system errors. In this particular case the error of your hard drive space being less than technical limits is entirely fabricated. The malware simply tries to make you think it is real and then, on this basis, to persuade you to purchase its full or registered version (license). Nevertheless, it does not make any difference whether you see trial of full version of System Check virus. The same can be applied to other fake hard drive defragmenters of this large malware family. Purchasing them is the total waste of your money and time.
If you would like to find the solution on how to get rid of System Check malware and similar cyber pests you’ve found the good place from where to start the cleanup procedure for your PC. Such types of viruses are known to completely hide all the data available on your PC. Well, except for the one having to do with fake HDD program, of course. In order to remove the source of such problem please follow the guide specifically devoted to System Check virus removal (also applicable to other fake hard drive defragmenters). Then take some time to restore your missing files by following this tutorial. The last but not the least – go ahead and download some powerful anti-virus program which would protect you from further malware aggression.
Screenshot of fake error presented by malware:
Hard drive space less than technical limits
List of fake HDD virus files:
- %CommonAppData%\~[random]
- %CommonAppData%\~[random]
- %CommonAppData%\[random]
- %CommonAppData%\[random].exe
- %AppData%\Microsoft\Internet Explorer\Quick Launch\[Fake HDD name].lnk
- %Desktop%\[Fake HDD name].lnk
- %StartMenu%\Programs\[Fake HDD name]\
- %StartMenu%\Programs\[Fake HDD name]\[Fake HDD name].lnk
- %StartMenu%\Programs\[Fake HDD name]\Uninstall [Fake HDD name].lnk
- %Temp%\smtmp\
- %Temp%\smtmp\1
- %Temp%\smtmp\1
- %Temp%\smtmp\2
- %Temp%\smtmp\3
- %Temp%\smtmp\4
List of fake HDD virus entries:
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘Yes’
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ’0′
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0′
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ’1′
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘.zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;.scr;’
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1′
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer “NoDesktop” = ’1′
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1′
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]“
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ’1′
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ’0′
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = ’0′
File Location Implications:
%Desktop% implies that the file is located straight on your PC’s desktop. The full and detailed location is C:\DOCUMENTS AND SETTINGS\Current User\Desktop\ for Windows 2000/XP, and C:\Users\Current User\Desktop\ for Windows Vista and Windows 7.
%Temp% stands for the Windows Temp folder. By default, it has the location C:\Windows\Temp for Windows 95/98/ME, C:\DOCUMENTS AND SETTINGS\Current User\LOCAL SETTINGS\Temp for Windows 2000/XP, and C:\Users\Current User\AppData\Local\Temp for Windows Vista and Windows 7.
%AppData% means the current users Application Data folder. By default, it has the location C:\Documents and Settings\Current User\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\Current User\AppData\Roaming.
%StartMenu% stands for the Windows Start Menu. For Windows 95/98/ME the location is C:\windows\start menu\, for Windows XP, Vista, NT, 2000 and 2003 it stands for C:\Documents and Settings\Current User\Start Menu\, and for Windows Vista/7 it is C:\Users\Current User\AppData\Roaming\Microsoft\Windows\Start Menu.
%CommonAppData% means the Application Data folder in the All Users profile. For Windows XP, Vista, NT, 2000 and 2003 it has the location C:\Documents and Settings\All Users\Application Data\, and for Windows Vista/7 it is C:\ProgramData.
