HDD rescue is another skin of fake system optimization applications. This family of applications (typically under guise of hard disk defragmenters) detect various non-software related issues and claim to be able to fix these errors. The problem is that the problems HDD Rescue detects are fake and tries to scare you into buying a software that you do not need. This is considered scam and rates this HDD rescue as rogue application.
HDD rescue attacks PC in several stages. First it starts showing various alerts. These alerts would not convince an experienced system user, but they look serious enough to convince other people:
Damaged hard drive clusters detected. Private data is at risk.
Hard Drive not found. Missing hard drive.
RAM memory usage is critically high. RAM memory failure.
Windows can’t find hard disk space. Hard drive error
Windows was unable to save all the data for the file [random name]. The data has been lost. This error may be caused by a failure of your computer hardware.
A critical error has occurred while indexing data stored on hard drive. System restart required.
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.
As many users do not pay attention to alerts, HDD Rescue tries to attract attention by stopping legitimate programs from executing by simulating HDD failure :
Windows cannot find notepad.exe . Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.
Windows detected a hard drive problem.
A hard drive error occurred while starting the application.
One must note, that running applications, even ones accessing disk, are not affected. Thus there are no real disk failure.
If you click on any of the alerts, you are forced to scan PC with this “HDD Rescue” application. It will show more scammy warnings and will ask to purchase its full versions for 60-80 USD. Do not pay for it, as it is a phishing scam : They re-sell your credit card details and might charge you more than once for nothing. Also, all you will get for paying is a registration key for software you do not need.
The key will likely be this : 0973467457475070215340537432225 like in other parasites of the same family. You should use it to disable HDDRescue popups and to ease the full removal process.
After you disable the HDD Rescue popups, we recommend downloading spyhunter or Malwarebytes Anti-Malware for full system scan as it uses random file names. These programs might help to remove HDD Rescue fully from the system as well. If there are problems launching the programs, do a system restore, run TDSS killer and above mentioned programs again.
You should remember, that it is far less likely to get infection like HDD Rescue with full versions of spyhunter or Malwarebytes Anti-Malware, as they prevent majority of infections from entering the system.
Screenshot take from Malware researchers S!Ri.URZ blog.
Automatic Malware removal tools