S.M.A.R.T. Repair – fake HDD’s trick

andy | May 12, 2012

No doubt, the malware developers know how to fool users when their concoctions reach the target PCs. They develop many rogue programs. Today we will talk about certain niche of them referred to as fake hard drive defragmenters. There has been many examples of them, among the latest of such rogues we may name Smart HDD or Data Recovery. These tools are bogus system optimizers aiming to make you believe your PC’s inner part (memory, hard drive and registry) are in a horrible condition. Finally, the goal of the hoax is to make you pay for the full version of this badware as a supposed remedy to fix your system malfunctions. This is so far the worst mistake that may take place when user, being scared, decides to obey the instructions of this malware. This is why it is of utmost importance to be aware of such unwanted cyber pests and how to deal with them.


DataRecovery.jpg

DataRecovery.jpg

When fake HDD program enters your system it doesn’t ask for your consent. The installation is performed in a hidden manner, so user can’t terminate this infiltration. Immediately the hoax modifies the PC in order to be able to launch itself automatically with every system startup. Then the program starts its fake scan (known as S.M.A.R.T. Check). The outcome of it is quite predictable – the program reports various system errors and bugs and says that you need to fix them all. It imitates fixing of some fake errors during its fake S.M.A.R.T. Repair, leaving some invented errors unsolved (unfixed). Then the rogue offers you to buy its license as the solution to recover your system. This is the point where you must stop following the rogue’s admonitions and, instead, seek for the proper solution to remove this malady from your system.

Probably one of the worst things about fake HDD virus (whatever name it has) is the problems of missing files that was caused by it initially. Removing the virus with anti-malware program (like GridinSoft Trojan Killer) just deletes the rogue but does not recover (unhide) your files that were hidden. However, we’ve thought about this problem you might face and we developed the solution how to restore your missing data effectively. So, if your PC got contaminated with this serious pest (fake system optimization utility) please follow the removal guidelines below. Of course, please do not hesitate to contact us at any time if you need our assistance.

Removal steps:

In order to remove fake HDD malware from your PC it is strongly recommended that you first run GridinSoft Trojan Killer. Use Win + E” hotkey combination to open “My Computer” window. From this stage (in the address field) you may insert the address of GridinSoft Trojan Killer’s site http://trojan-killer.net and download our recommended software. Install and update it, run the scan and remove all threats it finds. Then download two additional free applications called Unhider.exe and restore.exe . The download links are as follows:

Run both of them and reboot your PC. Good luck!

Fake HDD automatic remover:

Fake HDD manual remover:

Delete fake HDD files:
%AppData%MicrosoftInternet ExplorerQuick Launch[fake HDD name].lnk
%Desktopdir%[fake HDD name].lnk
%Programs%[fake HDD name][fake HDD name].lnk
%Programs%[fake HDD name]Uninstall [fake HDD name].lnk
%CommonAppData%[rnd_0].exe
%CommonAppData%[rnd_1]
%CommonAppiData%[rnd_1].exe
Delete fake HDD registry entries:
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun[rnd_0].exe %CommonAppData%[rnd_0].exe
HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciessystemDisableTaskMgr 0

Leave a comment

*