Home Malware Programs Potentially Unwanted Programs (PUPs) DiskPower

DiskPower

Posted: August 1, 2016

Threat Metric

Ranking: 4,819
Threat Level: 1/10
Infected PCs: 42,451
First Seen: August 1, 2016
Last Seen: October 17, 2023
OS(es) Affected: Windows

DiskPower is a low-quality computer application that malware researchers classified as a Potentially Unwanted Program (PUP). PUPs are not a type of threatening software, but their presence on a computer may often be unwelcome because they have tendencies to exhibit annoying behavior or consume excessive amounts of hardware resources. The DiskPower application is advertised as a great utility that can optimize your hard drive's speed and free up space taken by unnecessary files. However, a closer look at the program's official page reveals that DiskPower's features are not anything special, and it is very unlikely that they'll be able to improve your hard drive's speed at all! The only DiskPower feature mentioned there is its ability to scan the hard disk for duplicate files and remove them. Many users may find this functionality useless because even in the best case scenarios it will not free up much space, and there's a significant chance that it may delete files that aren't identical mistakenly.

The installation of DiskPower doesn't happen via direct download necessarily. This program's installation wizard may often be featured in software bundles that may use misleading instructions, confusing statements, and other tricks whose sole purpose is to get more users to authorize DiskPower's installation unknowingly. If you notice this application on your computer, and you didn't install it knowingly, then you should consider the removal of DiskPower immediately. Despite its harmless nature, DiskPower should be removed with the assistance of a reputable anti-malware utility that can guarantee the complete removal of all files and components linked to DiskPower.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Users\<username>\AppData\Local\Temp\RNP4Z31MAD.exe File name: RNP4Z31MAD.exe
Size: 451.93 KB (451934 bytes)
MD5: 3e9d0839f43cbdc4dc4732805b5de698
Detection count: 117
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\RNP4Z31MAD.exe
Group: Malware file
Last Updated: August 17, 2022
%PROGRAMFILES%\DPower\wemoshow.exe File name: wemoshow.exe
Size: 276.99 KB (276992 bytes)
MD5: 5739dd165792c00a70e2f87151050c6f
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\DPower
Group: Malware file
Last Updated: September 22, 2016
%PROGRAMFILES(x86)%\DPower\wemoshow.exe File name: wemoshow.exe
Size: 557.05 KB (557056 bytes)
MD5: 283be4fb418eddb99a5b8d5f78fb1ad0
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\DPower
Group: Malware file
Last Updated: September 22, 2016
%PROGRAMFILES%\DPower\wemoshow.exe File name: wemoshow.exe
Size: 1 MB (1000960 bytes)
MD5: 73f9e1a004ed2aec92c364537ce941ed
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\DPower
Group: Malware file
Last Updated: September 22, 2016
%PROGRAMFILES%\DPower\wemoshow.exe File name: wemoshow.exe
Size: 879.61 KB (879616 bytes)
MD5: faef07f0c92225311959b7e059ecc960
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\DPower
Group: Malware file
Last Updated: September 22, 2016
%PROGRAMFILES%\DPower\wemoshow.exe File name: wemoshow.exe
Size: 883.71 KB (883712 bytes)
MD5: 6ce76446dc85ef9e4569f8d25a641981
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\DPower
Group: Malware file
Last Updated: September 22, 2016
%PROGRAMFILES%\DPower\wemoshow.exe File name: wemoshow.exe
Size: 113.66 KB (113664 bytes)
MD5: 199fc59238893db95a4882bdcfefd1fb
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\DPower
Group: Malware file
Last Updated: September 22, 2016
%PROGRAMFILES%\DPower\wemoshow.exe File name: wemoshow.exe
Size: 939.52 KB (939520 bytes)
MD5: 1c1e34431cdd4ac32cfbc9df41213132
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\DPower
Group: Malware file
Last Updated: September 22, 2016
%PROGRAMFILES%\DPower\wemoshow.exe File name: wemoshow.exe
Size: 879.61 KB (879616 bytes)
MD5: 79882cd314571db2f69812005e869584
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\DPower
Group: Malware file
Last Updated: September 22, 2016
%PROGRAMFILES%\DPower\wemoshow.exe File name: wemoshow.exe
Size: 244.73 KB (244736 bytes)
MD5: d685cf97e552f52e9201d867101787aa
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\DPower
Group: Malware file
Last Updated: September 22, 2016
%PROGRAMFILES%\DPower\wemoshow.exe File name: wemoshow.exe
Size: 608.76 KB (608768 bytes)
MD5: 206e29a219e56cebda2805aa27b2445d
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\DPower
Group: Malware file
Last Updated: September 22, 2016

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\diskpowerSOFTWARE\Microsoft\Tracing\wemoshow_RASAPI32SOFTWARE\Microsoft\Tracing\wemoshow_RASMANCSHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}DiskP_is1DiskWMpower_is1DPower_is1

Additional Information

The following directories were created:
%PROGRAMFILES%\DPower%PROGRAMFILES%\DiskP%PROGRAMFILES%\DiskWMpower%PROGRAMFILES(x86)%\DPower%PROGRAMFILES(x86)%\DiskP%PROGRAMFILES(x86)%\DiskWMpower
Loading...