Saturday, October 27, 2012

HOW TO: Remove the Smart HDD Malicious Software

Before I begin just like to thank YouTuber Beast2032 for submitting a question. If you would like your question answered go to the Contact Me page. Smart HDD is a malicious software that gives you fake pop-ups, and saying that your hard drive has x number of errors and they blend right into your Operating System and look completely legit but in all honestly they are nothing but fake error messages trying to get you to purchase their software resulting in your cash being stolen! To the right is how to pop-up screen will look like (as of this blog post, the interface might have changed). Now I don't really believe that you should pirate software but you could always enter the license key below and the errors will stop, but this WILL NOT remove the Smart HDD software out of your computer, and if you want to know how to..don't worry I got your back, keep reading!

The following is the serial:
15801587234612645205224631045976

Now just a friendly reminder I recommend that you follow my steps and the software should stop annoying you, remember no matter how much you get annoyed don't fall into their market and buy it...at least be smart enough to use my serial. GOSHH. No but all jokes aside, don't give them your financial information.


Step 1: Start your PC into Safe Mode with Networking

  1. What you need to do is remove all external means of media, that you can, this includes floppy discs (hope you don't have to do this, fingers crossed), DVDs, CDs, Blurays, and USBs and restart your PC.
  2. Press and hold the F8 key on your keyboard as your PC is in the midst of restarting and remember: you need to press the key before the Windows logo pops up (start-up logo shows up)
  3. Once you do that you should see Safe Mode with Networking, simply use the arrow keys to move up or down and once your on it, hit Enter
  4. Now log into your computer with an account that give you administrator rights


Step 2: Actually Removing the Smart HDD proxy server
Now the malicious software has something called a proxy which doesn't let you go on the Internet, your job to remove it.

  1. Fire up Internet Explorer (Get it like Firefox..no..oh okay) and click the gear button and select Internet Options. (If you have Internet Explorer 8 or lower, click Tools and than Internet Options)
  2. Navigate to the Connections tab and select LAN settings.
  3. Uncheck the box Use a proxy server for your LAN, this should let you use the internet again

Aside from that corny Firefox joke, if you have Firefox you could do it also buy clicking on Options > Advanced tab > Network > Settings > and select No Proxy.

Step 3: Kill known other malware associated with Smart HDD
1. Download a program known as RKill which attempts to terminate malicious processes that are mainly associated with the Smart HDD bug; in other words just get it to solve the problem, trust me. Click here to download it.

2. Once you have downloaded it open it and open run it as Admin if you have the option and it will try to automatically try to terminate the Smart HDD process. Now since you're computer still is infected a dialog box might appear stating something like RKill is a bug/virus uninstall it when really Smart HDD is the virus. Now my along with others advice is to not touch your computer, just open RKill and let it run and leave the Smart HDD dialog box alone.

3. If you still are having problems you can download another renamed version of RKill from here. Once RKill is done, it will show a report.

NOTE: DON'T RESTART YOUR PC AFTER RUNNING RKILL, THAT WILL RESULT IN THE SMART HDD TO START UP AGAIN, AND THEN YOU WILL HAVE TO DO EVERYTHING ALL OVER AGAIN! SO DON'T RESTART!!!

Step 4: Remove Smart HDD malicious files with Malwarebytes Anti-Malware 

1. Download Malwarebytes Anti-Malware here, it's a free program and you can even keep it after we resolve the issue you can use it so you have peace of mind.

2. Install it and at the last screen of the wizard where it says, "Update Malwarebytes' Anti-Malware" and "Launch Malwarebytes' Anti-Malware" make sure these two boxes are checked and click finish, once again if it tells you to reboot, DON'T DO IT! 

3. Once it opens you will have the option to Decline or Start the Trial, please select Decline. Now the program should look something like the image below, go to the Scanner tab and select Perform full scan and then scan. This is just a step to delete any unwanted Malware that Smart HDD may have caused it since it's a full scan it take some time. Once it's completed click OK to the dialog box.




4. Now this is where you will be able to see actually how much damage Smart HDD has caused since it shows you all the infections found on your computer, now since I'm sure you don't want ANY of these check all the boxes and click "Remove Selected".

5. At this point you just have to be patient since Malwarebytes will remove the unwanted files, now if it says you need to restart make sure you do and make sure this dialog box is from Malwarebytes (you can tell from reading the title on the top left of the dialog box).

6. Now you're almost done, all I strongly suggest is download an antivirus program such as Microsoft Security Essentials (which you can download here) and perform a full scan.

 Step 5: Remove Left over Malicious Registry Keys

1. Now since Smart HDD had moved our shortcuts files to the Temporary Internet folder and added some malicious registry keys to your computer all over the place, you will need a program call RogueKiller. (download here)  




2. Open RogueKiller up and wait for the pre scan to complete, this should go by pretty quick and click the start button now to perform the system scan. After the scan has finished, press the Delete button on the right hand side which will remove malicious registry keys.

3. After all that, you will need to restore your shortcuts so click on "ShortcutsFix" button and let the program run. 

Step 6: Check if this was successful? Did all these steps really help? 

1. If you have done the above steps you should be done but to verify all you need to do is change your background, and the reason this determines if you were successful is the Smart HDD "virus" changed your background to black and just change it to anything to want to make sure.

If you're still having problems please don't think twice of e-mailing me via the contact page, posting so on my Facebook Fan Page, or leaving a comment on this blog post so others that might have the same problem can find the solution easily.

Hope this blog post really helped Beast2032 as well as many others, thanks again!

-Thanks for reading and Happy Tech(: