Smart HDD (you can also find it named as S.M.A.R.T. HDD) is another version of fake system optimizers and focusing on simulating hardware failures instead malware attacks or registry issues. A clone of HDD Rescue and Smart Defragmenter, and many other disk defragmenters, this malware was released only a few days after the last one. The internals of Smart HDD are not that different from its predecessors and the way it behaves is about the same. There are several versions of this parasite, the first one launched in late 2010, the second one during April 2012.
SmartHDD enters system through various browser vulnerabilities, trojans and exploits. When in system, it creates several files, typically in %Temp% directory and makes them launch on start. These executables are responsible for various Popups and Alerts that start annoying user.
Smart HDD popups state, that your PC is malfunctioning. Typically, hard drive is blamed, but it can be “bad RAM” or some problems in registry. The popups look like this :
Fix issues reported during the in-depth of S.M.A.R.T. attributes
Hard drives diagnostic report
Your computer is in critical state. Hard disk error detected.
As a result it can lead to hard disk failure and potential loss of data.
It is highly recommended to repair all found errors to prevent loss of files, applications and documents stored on your computer.
Windows detected a hard drive problem.
A hard drive error occurred while starting the application.
Windows cannot find notepad. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.
Requested registry access is not allowed. Registry defragmentation required
Surely, all of the popups are fake, but if you click on them, the main window of SmartHDD will be shown and system “Scan” will start. It is way too fast for a real system scan and it will detect about same collection of problems. Each of these problems can be “fixed” for modest price of 60-80 USD. Beware that it is a scam and the system will not be fixed if you pay. They will likely resell your credit card details and continue scam innocent people.
As you can see, you must remove Smart HDD. Removal procedure of this malware might be a bit complicated, as it will stop many programs from launching. Sometimes programs can be started, sometimes not. Typically, Smart HDD blames hard disk failure for this problem, but the fact is that the trojan is responsible for it. To get rid of SmartHDD follow one of our instructions.
First, Security researcher Siri reported, that old code for this family of rogues still work : 0973467457475070215340537432225 or 15801587234612645205224631045976 (updated). If you press on Help and support and register the program with this code, popups are likely to stop. In this case, do a full scan with Spyhunter, Spyhunter, Malwarebytes Anti-Malware and other tools. Update before scan.
Secondly, a more complex way is following :
- Open c:\windows\system32 in explorer. Find cmd.exe and create a desktop link to it.
- Launch cmd from desk. Type: “runas /user:cceng cmd” without quotes and press enter . A second command window will launch.
- In new window launch taskmgr
- Kill Smart HDD processes (random letters/numbers, you will know when you see it )
- In the same cmd, launch regedit
- Go to HKCU\Software\Microsoft\Windows\CurrentVersion\run and delete all the reg values that are from the same location like processes you killed
- Delete any desktop + startmenu icons to it.
- Download and run TDSS killer, Spyhunter, spyhunter. Run a full system scan with each of them in that order. This is to detect remaining infections to Smart HDD
- If S.M.A.R.T. HDD virus hides files and folders, you can see them after changing folder view settings. To make them permanently visible, press Start->Run->Cmd, then cd to your document folder and run ATTRIB -h -s *.*.
Video tutorial on Smart HDD virus removal
NOTE: There is a legitimate program with the same or similar name.
Automatic Malware removal tools