Alias: HDD Fake Tools, Disk Repair, HDD Doctor, HDD Rescue, Win HDD, Hard Drive Diagnostic, HDD Diagnostic, HDD Plus, Smart HDD, Win Defragmenter, FastDisk, GoodMemory, WinDisk, CheckDisk

Description:

HDD Fake Tools is a family of rogue applications that pretend to be hard disk protection tools while in actuality they are nothing more than a scam. HDD Fake Tools include HDD Rescue, Win HDD, Hard Drive Diagnostic, HDD Diagnostic, HDD Plus, Smart HDD, HDD Tools, Defragmenter, GoodMemory, Disk Repair, HDD Doctor and Win Defragmenter.

HDD Fake Tools block your browser and disable your programs. We have created a tool that temporarily removes this blocking ability so that you can download and run SpyNoMore to remove HDD Fake Tools. See the Special Instructions below.

Once on of these HDD Fake Tools infects your computer, it will start generating errors stating that your hard drive is damaged or that a hard drive error occurred. Of course this is nonsense, it is simply a scare tactic to try and get you to buy their fake product.

HDD Fake Tools display exaggerated fake scan results similar to those shown below:

Below is a typical message you receive when you try to run a program while your computer is infected with any HDD Fake Tool:

HDD Fake Tool Special Removal Instructions (method 1)

There are two methods to remove Fake HDD Tools. If your desktop has been replaced with a blank screen or a black screen, please use 'method 2' below, otherwise use 'method 1'.

Please make sure to bookmark this page as you may need to refer back to it to complete the removal steps.

Step 1: HDD Fake Tools can block you from running programs. To temporarily shut down HDD Fake Tools and download SpyNoMore to remove it, Download VKill (renamed to iexplore.exe) to your desktop and run it.

Step 2: Now that HDD Fake Tools is disabled, Download SpyNoMore to your desktop. If your browser is not opening pages, follow the instructions here to fix this.

Step 3: Install SpyNoMore on the infected computer. When the installation is completed, SpyNoMore will check for and download available updates. Download any available updates.

Step 4: SNM will scan your computer and if an HDD Fake Tool is present, SNM will detect it and you will be able to see either Fake Tool or one of the names it goes by (see above) in the scan results. Please note that the free version of SpyNoMore will only show you the detections but will not remove them. In order to remove the infection you need to purchase a 1-year license which costs $29 (or $39 for 3 computers). In all cases, you will be able to see the HDD Fake Tool in the free version scan results.

Step 5: After the scan is complete and you are able to see the HDD Fake Tool in the scan results, you can purchase the activation key and proceed to remove the infection. If you are unable to purchase the activation key from the infected computer, you can do so from a clean computer by clicking on our Purchase link on spynomore.com. Simply write down the activation key and use it to activate SNM on the infected computer. This will remove the intruder HDD Fake Tool and restore your program. You will again be able to run your programs and applications without trouble.

Step 6 (optional): It would be a good idea to check your computer for rootkits (which are basically hidden trojans) which may have tagged along with HDD Fake Tool. To do so, download and run TDSSKiller by Kaspersky Labs.

Step 7 (optional): If TDSSKiller does find a rootkit, it will ask you to restart your computer so that it can remove the rootkit(s). After your computer restart, scan your computer once more with SpyNoMore to make sure everthing is OK.

HDD Fake Tool Special Removal Instructions (method 2)

Use 'method 2' if your screen is blank and you can no longer see icons on your desktop.

Step 1: On your keyboard, hit the 3 buttons Ctrl+Alt+Delete at the same time. This will bring up your Task Manager.

Step 2: In Task Manager, click on 'New Task'. In the field that open, type iexplore.exe. This will open up your IE Browser.

Step 3: Download VKill (renamed to iexplore.exe) to your desktop and run it to temporarily disable HDD Fake Tools.

Step 4: Now that HDD Fake Tools is disabled, Download SpyNoMore to your desktop. If your browser is not opening pages, follow the instructions here to fix this.

Step 5: Install SpyNoMore on the infected computer. When the installation is completed, SpyNoMore will check for and download available updates. Download any available updates.

Step 6: SNM will scan your computer and if an HDD Fake Tool is present, SNM will detect it and you will be able to see either Fake Tool or one of the names it goes by (see above) in the scan results. Please note that the free version of SpyNoMore will only show you the detections but will not remove them. In order to remove the infection you need to purchase a 1-year license which costs $29 (or $39 for 3 computers). In all cases, you will be able to see the HDD Fake Tool in the free version scan results.

Step 7: After the scan is complete and you are able to see the HDD Fake Tool in the scan results, you can purchase the activation key and proceed to remove the infection. If you are unable to purchase the activation key from the infected computer, you can do so from a clean computer by clicking on our Purchase link on spynomore.com. Simply write down the activation key and use it to activate SNM on the infected computer. This will remove the intruder HDD Fake Tool and restore your program. You will again be able to run your programs and applications without trouble.

Step 8 (optional): It would be a good idea to check your computer for rootkits (which are basically hidden trojans) which may have tagged along with HDD Fake Tool. To do so, download and run TDSSKiller by Kaspersky Labs.

Step 9 (optional): If TDSSKiller does find a rootkit, it will ask you to restart your computer so that it can remove the rootkit(s). After your computer restart, scan your computer once more with SpyNoMore to make sure everthing is OK.

Hint: If you have a black screen and you followed Method 2 above, to switch between running applications (example to switch between Task Manager and SpyNoMore), hold down the 'Alt' button on your keyboard and then press the 'Tab' button to scroll through the applications. Release the buttons to select your application.

Hint: Ignore any message asking you to restart your computer. This is a tactic by the infection to get you to abort the removal process.

Threat type:

Hijacker - A Hijacker is a software application that takes control of your browser's settings. Usually it changes your home page and redirects it to some unknown site or modifies your search settings. It prevents you from changing back your browser's settings. An infected browser usually operates much slower.

Ransomware - Ransomware is a software application that infects a computer and asks for money to have the infection removed.

Trojan - A Trojans or Trojan Horse is any programs that installs itself secretly normally via malware programs, quite often with sinister intent. Once installed, the trojan author (hacker) can gain complete control of the infected PC. Trojans are usually designed to steal sensitive information and/or destroy the system. Trojans can be distributed as unsolicited email attachments, or bundled with freeware and shareware programs.

Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer and / or to protect your privacy.

Detection:
SpyNoMore removes HDD Fake Tools: Yes

Threat risk: Very High Risk

Extremely dangerous malware. Uses stealth installation, randomly named entries and has the capability to self update or resurrect after incomplete removal. Almost impossible to remove manually. Category mostly consists of trojans and spyware.

Symptoms:

HDD Fake Tools Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with HDD Fake Tools, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
N/A

File Signatures:
N/A

Registered Dll (Dynamic Link Library) Signatures:
N/A

Folder Signatures:
N/A

Registry Signatures:
N/A

SpyNoMore Collected Residual File Signatures:
N/A

See Also:
Win Defragmenter
Security Shield
Antivirus 8
Antivirus 8
HDD Rescue
Win HDD
Hard Drive Diagnostic
HDD Diagnostic
HDD Plus
Smart HDD