Windows Fix Disk

By | April 17, 2011 | 0 Comment

Windows Fix Disk or also called as WindowsFixDisk virus is a bogus system and hard drive optimization program that will pop-up false information on the stability of the computer and state that problems were encountered. Windows Fix Disk is commonly acquire via Trojan infection and will be spread through the Internet. If this type of program gets through the system, a bunch of messages reporting bad sectors, initializing errors and boot problems will be notices. It may look like coming from Windows because it was designed to deceive victims. It also modifies registry and allow itself to run when Windows starts. A self-scan is performed followed by an advice to fix the error by having the licensed version of Windows Fix Disk.

This rogue application offers a variety of functionalities that will diagnose computer hard drives, RAM memory, system health and provide proactive protection for RAM and hard disk drives. Although not all of these were possible to be provided by a rogue program such as Windows Fix Disk. It was installed without the necessary components to afford them. A plain scam program will pretend as legitimate tool for Windows system. It is important to remove Windows Fix Disk as soon as possible to prevent further harm on the system. Provided below is a simple removal procedure and free tool to get rid of this program automatically.

Type Rogue
Sub-Type FakeAV
OS Affected Windows

What are the Symptoms of Windows Fix Disk Infection?

windows-fix-disk

It will modify Windows Registry and add the following entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ‘1’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ‘1’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’

The threat will drop the following malicious files:
Windows Vista & 7:
%AllUsersProfile%\~
%AllUsersProfile%\~r
%AllUsersProfile%\.dll
%AllUsersProfile%\.exe
%AllUsersProfile%\
%AllUsersProfile%\.exe
%UserProfile%\Desktop\Windows Fix Disk.lnk
%UserProfile%\Start Menu\Programs\Windows Fix Disk\
%UserProfile%\Start Menu\Programs\Windows Fix Disk\Uninstall Windows Fix Disk.lnk
%UserProfile%\Start Menu\Programs\Windows Fix Disk\Windows Fix Disk.lnk

Windows XP:
%AllUsersProfile%\Application Data\~
%AllUsersProfile%\Application Data\~r
%AllUsersProfile%\Application Data\.dll
%AllUsersProfile%\Application Data\.exe
%AllUsersProfile%\Application Data\
%AllUsersProfile%\Application Data\.exe
%UserProfile%\Desktop\Windows Fix Disk.lnk
%UserProfile%\Start Menu\Programs\Windows Fix Disk\
%UserProfile%\Start Menu\Programs\Windows Fix Disk\Uninstall Windows Fix Disk.lnk
%UserProfile%\Start Menu\Programs\Windows Fix Disk\Windows Fix Disk.lnk

Leave a Reply

Your email address will not be published. Required fields are marked *