Anonymous
Anonymous asked in Computers & InternetSecurity · 1 decade ago

How do I Remove HDD Plus? Virus/Malware?

If any of you know what HDD Plus is, is it a virus or malware? I don't know. But I have Windows and I tried Spybot Search & Destroy but it doesn't seem to work and now I am trying Malwarebytes Anti-Malware and its kind of sort of working like Spybot! It scans, takes 5 infections out and there are 2 left over then says "this will be completed after a restart" !? Is my computer doomed? Dead? Because I "think" I removed it but I restart it and the HDD Plus malware pops up again and makes an icon on my desktop!

Sorry if I didn't make a whole lot of sense but if any of you could help me I will be truly grateful!

18 Answers

Relevance
  • Favorite Answer

    make sure your security programs are updated. hdd plus malware is pretty new so chances are that either your tools can't delete it yet or they need new updates. i got another idea. you can delete hdd plus on your own. here's detailed step-by-step removal: http://www.spywarevoid.com/remove-hdd-plus-hddplus...

  • Anonymous
    1 decade ago

    In short, Yes it is a virus. It's a new variant on an old virus. We first ran across it from our users a few days ago (December 8th, 2010). It's not SUPER hard to get rid of, but it's a little difficult for most users because of the places it infects.

    You can usually STOP it using msconfig, do a reboot, then run malware-bytes, or another anti spyware app to REMOVE it. (It's a two step process) You can't usually remove it using those tools if it's currently running until you stop it because it prevents those tools from working as long as it's active.

    We've already removed it for quite a few customers this week so far, and if we can help please feel free to check us out online.

    The page about HDD plus on our site is:

    http://remote247.com/hddplus/

  • 1 decade ago

    I ran Malwarebytes' Anti-Malware 1.50 (www.malwarebytes.org) in Safe Mode and it found HDD Plus and removed it. I then rebooted and everything looked OK. I then ran it again in normal mode and it found 2 more entries in the registry that it also removed.

    Database version: 5276

    Windows 5.1.2600 Service Pack 2

    Internet Explorer 6.0.2900.2180

    12/9/2010 11:50:47 AM

    mbam-log-2010-12-09 (11-50-47).txt

    Scan type: Full scan (C:\|)

    Objects scanned: 349824

    Time elapsed: 1 hour(s), 59 minute(s), 55 second(s)

    Registry Values Infected:

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\201238515 (Trojan.SCTool.Gen) -> Value: 201238515 -> Quarantined and deleted successfully.

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\1998890 (Trojan.SCTool.Gen) -> Value: 1998890 -> Quarantined and deleted successfully.

    I did a lot of things before, but HDD Plus kept coming back. Manual should be your last choice as regedit is permanent when changed and can crash your computer if you delete the wrong thing.

    Source(s): This site, and Cnet where I downloaded Malwarebytes in safe mode with network.
  • 1 decade ago

    Follow this instructions to Remove Virus in you Computer.

    Restart You Computer Safe Mode with Networking

    1. Log out and reboot your machine.

    2. When the machine starts the reboot sequence, press the F8 key repeatedly.

    3. Select Safe Mode with Networking from the resulting menu.

    4. Login. If the malware has changed your password, try logging in as

    Administrator. By default, Administrator has no password.

    5. The machine will continue booting, but the Windows desktop will look different.

    Then in The Safe With Networking .Download by using Rkill press here http://www.bleepingcomputer.com/forums/topic308364...

    Download and Scan By Using Malwarebytes’ Anti-Malware http://download.cnet.com/Malwarebytes-Anti-Malware...

    Download and Scan By Using Super Anti-Spyware Press here http://www.superantispyware.com/

    Download ATF is a new, freeware, temporary file cleaner for Windows, IE, Firefox and Opera with a simple, easy-to-use interface.

    The main screen allows the user to either clean all temporary files, or select files for cleaning. The program also knows if Firefox and or Opera is being used, and gives the option of cleaning the temporary files associated with those applications.

    ATF Cleaner provides the user with a window showing the total bytes freed upon completion. The program is small (36kb), quick to run and no installation required. to Download ATF Cleaner press this link http://download.cnet.com/ATF-Cleaner/3000-18512_4-...

    Download and Scan By using

    Remove Fake Antivirus 1.64 press here http://www.softpedia.com/progDownload/Remove-Fake-...

    After Finish Scan and Remove all Virus,Restart you Computer to be Normal.

    Then

    Download and Scan again By using Norman Malware Cleaner Press here http://www.norman.com/support/support_tools/58732/... This is to make sure you Virus, Malware, Trojan, Worm,

    Rogue Fake Anti-Virus, Hijack Web Browser, Pop up Advertisements,

    Rootkit and Spyware it is not on you Computer Forever.

    Please give me the feedback and Rate Me

  • How do you think about the answers? You can sign in to vote the answer.
  • Anonymous
    1 decade ago

    You can run antivirus and antispyware programs, but the sad fact is if you have found one virus on your computer, you probably have several. Cleaning the computer now requires you to follow these steps, because modern viruses and spyware entrench themselves in files that your computer needs in order to run:

    1. Virus-check your data files (not application files-- you have installer CDs for those).

    2. Back up the data files, getting them off your hard drive.

    3. Get your original operating system CDs that came with your computer.

    4. Boot your computer from the operating system CD.

    5. Select the option that erases your hard drive and then reinstall your system software.

    6. Turn on your software firewall that came with your operating system.

    7. Reconnect to the internet, and download *all* Windows updates, no matter how long it takes.

    8. Reinstall your application software, and update the applications as much as you can.

    9. Reinstall your data files.

    10. Create a limited user account on your system that does *not* have administrator access, and web surf only from this account.

    Yes, this is a pain in the butt. No, there is no other way. No, antivirus and antispyware programs cannot fix this problem on its own.

    So, what do you do in the future?

    1. Never click on links you find in an e-mail.

    2. Never open an e-mail attachment, ever.

    3. Only download files from a reputable website that you know is on the up-and-up.

    4. Never use bit-torrent and other file-sharing programs.

    5. Never use an unsolicited drive-checking site.

    6. Turn off all java and java scripting by default, and only enable java and java scripting for sites that you know you can trust.

    7. Never read an unsolicited e-mail, and delete spam immediately. It is possible to be hacked by reading an e-mail alone.

    Please adhere to the 'dont's' I provided above, because you will have to repeat the cleaning steps that I listed first *every time you get infected.* Anti-spyware and anti-virus programs are good to have, but they are a second line of defense. The best way to protect your system is you, and changing your behavior.

    Good luck!

  • Anonymous
    1 decade ago

    Visit the following link to safely remove HDD Plus Virus

    http://www.cleanallvirus.com/how-to-remove-hdd-plu...

  • 1 decade ago

    You will probably need more information than we can give here.

    The Website "bleepingcomputer" specializes in providing information on removing malware, and they do have a webpage devoted to HDD Plus. And they use Malwarebytes.

    http://www.bleepingcomputer.com/virus-removal/remo...

    You might have more than one malware program on your computer by now, so in the long term, you need to make backups of all your important data and plan on erasing the hard drive and re-installing the factory software and starting over.

  • Anonymous
    1 decade ago

    Boot the computer into Safe Mode with Networking. (When you boot up, after the manufacturers splash screen, tap F8 a few times until the Advanced Boot Options menu appears. With your arrow keys and the enter key, select Safe Mode with Networking.)

    The desktop background will be black. This is normal.

    Open your browser, and go to http://www.pcthreat.com/parasitebyid-15421en.html and download the free scanner. After installing it, do a quick scan and remove anything found.

    Reboot normally.

    That should solve the problem.

  • Anonymous
    6 years ago

    Hey,

    A good registry cleaner I use is CCleaner. It's a reliable tool to get rid of worms, trojams, malwares and viruses that affect your pc performances. Free download here http://j.mp/UrAF38

    It works like a charm.

  • Anonymous
    1 decade ago

    HDD Plus is a Virus, You can safely remove it using the steps given in the below link

    http://www.fixspywarenow.com/hdd-plus-removal-how-...

Still have questions? Get your answers by asking now.