Disk OKDisk OK will enter the system unannounced, and without ceremony. It makes use of various ways of delivering its infection, the most popular being through fake online malware scanners. These scanners redirects users to browser hijacking websites, where Disk OK Trojan and malware infections exploit system and browser vulnerabilities in order to root the Disk OK infection in the system. Disk OK also bundles its Trojans along with other seemingly legitimate security updates and software downloads obtained from third party websites. The user will remain oblivious to the presence of Disk OK on his system until it deems it the correct time to reveal itself with the help of various fake security alerts. These fake alerts were created with the express purpose of panicking the user into believing his system is compromised by various fake threats, in an effort to endear Disk OK to him and place it in an authoritative light. All of the security notifications received from Disk OK is fake, and should never be believed or acted upon. Some of the more notorious Disk OK fake security alerts to be on the lookout for read as follows: "Critical Error! Damaged hard drive clusters detected. Private data is at risk." "Critical Error Hard Drive not found. Missing hard drive." "Critical Error RAM memory usage is critically high. RAM memory failure." "Critical Error Windows can't find hard disk space. Hard drive error" "Critical Error! Windows was unable to save all the data for the file System32496A8300. The data has been lost. This error may be caused by a failure of your computer hardware." "Critical Error A critical error has occurred while indexing data stored on hard drive. System restart required." "System Restore The system has been restored after a critical error. Data integrity and hard drive integrity verification required." "Activation Reminder Disk OK Activation Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features." "Low Disk Space You are running very low disk space on Local Disk (C:)" "Windows - No Disk Exception Processing Message 0x0000013" Obviously none of these fake security alerts can be trusted. These fake security messages are only a ploy in Disk OK’s assault on the system, and should be regarded as such. As a further assault on the system, Disk OK will attempt to withhold the user from running any executable on his system. This is in an attempt to block the user from running any security application which will not only detect, but also delete Disk OK from the system. When the user tries to launch a program, Disk OK will terminate its process, and present the user with the following error messages: "Windows detected a hard drive problem. A hard drive error occurred while starting the application." Or "Windows cannot find notepad. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search." Or "Windows detected a hard drive problem. Scanning for hard drive errors... Hard drive scan helps to detect and resolve hard drive problems and system performance issues." After the user closes the bogusly generated fake alert, he will be presented with the following message from a program which will supposedly attempt to fix the hard drive: "Fix Disk Windows Disk Diagnostics will scan the system to identify performance problems. Start or Cancel" If the user acts on this call to action, Disk OK will emulate a genuine scan of the system, and then go on to report that there is something amiss with the following fake security alert: "Windows Disk Diagnostics Windows detected a hard disk error. A problem with the hard drive sectors has been detected. It is recommended to download the following sertified software to fix the detected hard drive problems. Do you want to download recommended software?" These are all only further attacks employed by Disk OK on its victim’s system. If the PC owner does decide to run the scan, Disk OK will report on various fake security issues, and rather magnanimously offer to fix it, but only after the user pays for its subversive products: "Requested registry access is not allowed. Registry defragmentation required Read time of hard drive clusters less than 500 ms 32% of HDD space is unreadable Bad sectors on hard drive or damaged file allocation table GPU RAM temperature is critically high. Urgent RAM memory optimization is required to prevent system crash Drive C initializing error Ram Temperature is 83 C. Optimization is required for normal operation. Hard drive doesn't respond to system commands Data Safety Problem. System integrity is at risk. Registry Error - Critical Error" It is clear to see that Disk OK rogue defragmenter takes control of its victim’s PC, and holds it ransom until the user decides to pay up. You need to destroy Disk OK, before it destroys your system. In order to minimize the damage done by this seditious rogue, erase Disk OK by making use of a genuine security tool which will not only obliterate Disk OK from the PC but also provide protection against similar future attacks. | ||||||||
|
Download Spyware Removal Tool to Remove*
Disk OK
| ||||||||
|
|
Danger level:
9
Type: Rogue Anti-Spyware
Common infection symptoms:
- Installs itself without permissions
- Connects to the internet without permission
- Slow internet connection
- System crashes
- Annoying pop-up's
- Slow Computer
How to manually remove Disk OK
Files associated with Disk OK infection:
zhhJ9qbh5Mht.exe
HAxHiltNLTtQl.dll
GXADAOEbUaHOS.exe
%UserProfile%\Start Menu\Programs\Disk OK\Uninstall Disk OK.lnk
%UserProfile%\Start Menu\Programs\Disk OK\Disk OK.lnk
%UserProfile%\Start Menu\Programs\Disk OK\
%UserProfile%\Desktop\Disk OK.lnk
%AllUsersProfile%\Application Data\[random].exe
%AllUsersProfile%\Application Data\[random]
%AllUsersProfile%\Application Data\[random].dll
%AllUsersProfile%\Application Data\~[random]r
%AllUsersProfile%\Application Data\~[random]
HAxHiltNLTtQl.dll
GXADAOEbUaHOS.exe
%UserProfile%\Start Menu\Programs\Disk OK\Uninstall Disk OK.lnk
%UserProfile%\Start Menu\Programs\Disk OK\Disk OK.lnk
%UserProfile%\Start Menu\Programs\Disk OK\
%UserProfile%\Desktop\Disk OK.lnk
%AllUsersProfile%\Application Data\[random].exe
%AllUsersProfile%\Application Data\[random]
%AllUsersProfile%\Application Data\[random].dll
%AllUsersProfile%\Application Data\~[random]r
%AllUsersProfile%\Application Data\~[random]
Disk OK DLL's to remove:
HAxHiltNLTtQl.dll
%AllUsersProfile%\Application Data\[random].dll
%AllUsersProfile%\Application Data\[random].dll
Disk OK processes to kill:
zhhJ9qbh5Mht.exe
GXADAOEbUaHOS.exe
%AllUsersProfile%\Application Data\[random].exe
GXADAOEbUaHOS.exe
%AllUsersProfile%\Application Data\[random].exe
Remove Disk OK registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes"='.zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.ms
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes"='.zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.ms
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'

Post comment — WE NEED YOUR OPINION!