System Repair virus. Removal guide
System Repair stands for the serious malware that attacks thousands of computers today. It is the direct successor of File Restore scam, even though previously there have been malwares with exactly the same name. This is a fake system optimization utility (fake HDD) that imitates defragmentation of your computer. The peculiarity of this program is that it is responsible for probably the most severe damage caused to your system – hiding the majority of your important data (files, folders, pictures, documents, etc.) by setting up the hidden attribute to them and relocating them to specifically designated folder (which is also hidden, by the way). Thus, after all malicious modifications initiated by System Repair scam user cannot recognize the computer. Instead of a common desktop background with all important icons, shortcuts, etc. user doesn’t see anything except for the black (blank) screen, plus a couple of files and icons associated with System Repair malware. Surely, this event is quite a scary one to observe.
System Repair malware comes to computers without user’s permission or even knowledge. This takes place by means of participation of a special Trojan horse that searches for some possible leaks in system security and thus finds some gaps and vulnerabilities that make it possible for the scam to infiltrate it. In the majority of the cases it is the fault of already installed security software for inability to timely identify the malware infiltration attempts and to terminate them ahead of time. However, in some cases it is the fault of user for not having any security software installed on the computer at all. In this case there’s nothing to be surprised about occurrence of System Repair and other, more serious malwares on the computer.
While System Repair is being installed without your consent it immediately sets up some additional parameters into your computer for the purpose of being self-started automatically together with very system startup. This is done by means of adding some registry entries into your PC’s settings. Hence, once you turn your computer on to do something necessary and important for you, the GUI of System Repair comes up and begins scaring you with the fact of hiding files and many other scary warnings and alerts. It runs the fake scan of your system and, upon its termination, reports many fake system, hard drive and memory errors and bugs. In addition, it gives plenty of popups and warnings about all sorts of malfunctions detected by it during the scan, such as the ones quoted below.
System message – Write Fault Error
A write command during the test has failed to complete. This may be due to a media or read/write error. The system generates an exception error when using a reference to an invalid system memory address.
System Error. Hard disk failure detected
It’s highly recommended to run complete HDD scan to prevent loss of personal files.
Scan and repair, Cancel and restart
|Fake HDD’s alert screenshot||fake HDD’s alert quotation|
|This device cannot find enough free resources that it can use|
|Critical error. Drive sector not found error|
|Data error reading drive C:|
|Critical Error. Hard drive controller failure|
|Serious disk error writing drive C|
|Seek error. Sector not found|
|Device initialization failed|
Eventually, System Repair hoax will ask you to buy its license to have all the above-mentioned fake problems fixed. Of course, purchasing its registration key (activation code) will not help you. Instead, you will simply waste your funds for a totally useless application that cannot really optimize your system. And remember this – System Repair hoax is the reason for your files to be hidden and out of order. So, when you see this malware on your computer, make sure to completely ignore its hazardous offers to buy its licensed (full version). Instead, please follow the guide below that will help you remove it and restore you data that was initially hidden by malware.
In order to delete System Repair rogue from your workstation it is strongly advised that you first run GridinSoft Trojan Killer. Use Win + E” hotkey to open “My Computer”. In the address field you may insert the address of GridinSoft Trojan Killer’s site http://trojan-killer.net and download our recommended malware removal tool. Install and update it, run the scan and delete all threats it finds by pressing “Remove selected” button. Then download two extra free tools called Unhider.exe and Restore.exe. Run both of them and reboot your PC. Good luck! The download links are as follows:
- GridinSoft Unhider http://trojan-killer.net/download/unhider.exe
- GridinSoft Restore http://trojan-killer.net/download/restore.exe
System Repair detailed removal guide:
Removal video at YouTube:
System Repair manual remover:
Delete System Repair files: %AppData%MicrosoftInternet ExplorerQuick LaunchSystem_Repair.lnk %Desktopdir%System_Repair.lnk %Programs%System RepairSystem Repair.lnk %Programs%System RepairUninstall System Repair.lnk %CommonAppData%[rnd_0].exe %CommonAppData%[rnd_1] %CommonAppiData%[rnd_1].exe
Delete System Repair registry entries:
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun[rnd_0].exe %CommonAppData%[rnd_0].exe HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciessystemDisableTaskMgr 0