Home Malware Programs Rogue Anti-Spyware Programs Smart HDD

Smart HDD

Posted: December 13, 2010

ScreenshotSmart HDD is a member of Win32/FakeSysdef, a group of rogue defraggers that pretend to notify you about various hard drive errors as a ploy to request registration money for their useless software. Although Smart HDD and similar PC threats from its family have been in circulation since 2010, SpywareRemove.com malware researchers have noted that Smart HDD has experienced developmental upgrades in recent times that have altered its appearance and may make Smart HDD more of a threat to your PC. Smart HDD should be considered a mid to high-level risk to your computer no matter what its protests to the contrary might be, since Smart HDD can block various types of applications, change your wallpaper, hijack your web browser and even disable Windows security features. However, once Smart HDD is disabled by standard anti-malware techniques, any competent anti-malware product that can handle -based PC threats should be able to remove Smart HDD completely and with Smart HDD, its accompanying side effects.

Why the Smartest Thing You Can Do is Keep Smart HDD Off of Your Computer

Smart HDD can be considered a clone of rogue defragmenters such as . Like its clones, Smart HDD makes up for a lack of diagnostic features by displaying inaccurate system warnings. These warning pop-ups are easily identified as fraudulent by even casual PC users, since, as SpywareRemove.com malware researchers note, their contents are unusual and alarmist to the point of being difficult to take seriously.

In spite of its close ties with other brands in the rogue defragger industry, Smart HDD has also managed to carve out a name for itself with at least two separate versions of its software. The earliest version of Smart HDD includes a few tabs for basic types of fake features like 'System Status,' 'Diagnostics' and a defragmentation scanner option, with the majority of Smart HDD's interface dominated by visual aspects of its fake defragmenter scanner. However, SpywareRemove.com malware researchers note that a new version of Smart HDD features a professionally-revamped interface appearance, as well as new fraudulent features: S.M.A.R.T. Repair, S.M.A.R.T. Check and a miscellaneous 'Advanced' tab that replaces the tabs that were formerly embedded in Smart HDD's window. All of these features provide inaccurate information and should be ignored until you get a chance to delete Smart HDD with the right anti-malware product. New versions of Smart HDD also contain an extra 'Trial version' tag line to encourage you to register their product – which, of course, would be a misapplication of your money.

Brightening Up and Kicking Smart HDD Out Before Your PC Suffers the Consequences of Its Visit

Both variants of Smart HDD are also capable of creating other difficulties that may make it challenging for you to remove Smart HDD with the relevant security software. Standard attacks that SpywareRemove.com malware analysts associate with Smart HDD infections are listed as follows:

  • Injection of malicious code into your normal Windows processes so that Smart HDD can launch automatically whenever Windows loads.
  • Attacked browser security settings that disable encryption and certificate-related safety measures. This may allow Smart HDD or related PC threats to steal private information or enable other attacks against your PC.
  • A desktop image that's locked to an undesirable one (in most cases, a fake warning message).
  • Disabled or blocked applications, including Windows Task Manager, which could assist with removing Smart HDD from your computer.
  • Changes to other security settings that make your PC more vulnerable (such as disabling signature checks for downloaded files or changing your computer's behavior towards various file attachments).

In light of these security hazards, SpywareRemove.com malware research team can't recommend strongly enough that you delete Smart HDD ASAP no matter which version of Smart HDD is on your PC. Nevertheless, it may be necessary to disable Smart HDD before appropriate anti-malware software can delete all of Smart HDD's components. This process can also be assisted by faking Smart HDD's registration with a FakeSysdef-associated code, such as '0973467457475070215340537432225' or '15801587234612645205224631045976' (with the latter being a more recent registry key than the former).

Smart HDD Screenshot 2Smart HDD Screenshot 3Smart HDD Screenshot 4Smart HDD Screenshot 5Smart HDD Screenshot 6Smart HDD Screenshot 7Smart HDD Screenshot 8Smart HDD Screenshot 9Smart HDD Screenshot 10Smart HDD Screenshot 11Smart HDD Screenshot 12Smart HDD Screenshot 13Smart HDD Screenshot 14Smart HDD Screenshot 15Smart HDD Screenshot 16

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Smart HDD may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%AppData%\Microsoft\Internet Explorer\Quick Launch\SMART_HDD.lnk File name: %AppData%\Microsoft\Internet Explorer\Quick Launch\SMART_HDD.lnk
File type: Shortcut
Mime Type: unknown/lnk
%CommonAppData%\ File name: %CommonAppData%\
%CommonAppData%\.exe File name: %CommonAppData%\.exe
File type: Executable File
Mime Type: unknown/exe
%CommonAppData%\-r File name: %CommonAppData%\-r
%StartMenu%\Programs\SMART HDD\SMART HDD.lnk File name: %StartMenu%\Programs\SMART HDD\SMART HDD.lnk
File type: Shortcut
Mime Type: unknown/lnk
%StartMenu%\Programs\SMART HDD\Uninstall SMART HDD.lnk File name: %StartMenu%\Programs\SMART HDD\Uninstall SMART HDD.lnk
File type: Shortcut
Mime Type: unknown/lnk
%TempDir%\dfrg File name: %TempDir%\dfrg
%TempDir%\dfrgr File name: %TempDir%\dfrgr
%TempDir%\Windows Update.exe File name: %TempDir%\Windows Update.exe
File type: Executable File
Mime Type: unknown/exe
%Desktop%\Smart HDD.lnk File name: %Desktop%\Smart HDD.lnk
File type: Shortcut
Mime Type: unknown/lnk
%Programs%\Smart HDD File name: %Programs%\Smart HDD
%Programs%\Smart HDD\Smart HDD.lnk File name: %Programs%\Smart HDD\Smart HDD.lnk
File type: Shortcut
Mime Type: unknown/lnk
%Programs%\Smart HDD\Uninstall Smart HDD.lnk File name: %Programs%\Smart HDD\Uninstall Smart HDD.lnk
File type: Shortcut
Mime Type: unknown/lnk
%UserProfile%\Local Settings\Temp\tmp2.tmp File name: %UserProfile%\Local Settings\Temp\tmp2.tmp
File type: Temporary File
Mime Type: unknown/tmp

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = 0HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = "Yes"HKEY..\..\..\..{RegistryKeys}{8856F961-340A-11D0-A96B-00C04FD705A2}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS].exe"

Additional Information

The following URL's were detected:


  • Martin Dowes says:

    Smart HDD has really fu**ed my PC> cannot run IE or surf web. keeps popups coming and scans. trying the malware remover scan tool to see what happens. better not waste my time. these scammers should be shot in the head. so sick of this.

  • Eric says:

    This piece of crap attacked one of our customer's file servers. It took a bit to figure out what it did, but once we figured it out we were able to get the file server back in working order...or so we thought. This pos hides every file and we thought we had unhidden everything, but there were still a couple of files that still showed as being hidden. I am with Martin, the makers of this and other crap need to be taken out and just shot in the head...no trial, just do it. They are worthless to society.