HDD Tools
Remove HDD Tools virus from an infected computer by following the instructions on this page. Download our suggested tool to delete the malware with ease.
HDD Tools is destructive and potentially unwanted software that will pretend to be hard drive defragmentation software. This malware, also known as the HDDTools virus will attempt to misinform computer users with forged ‘PC Performance and Stability Analysis Report’. It contains detected errors that do not really exist on the computer. It was just a mere assumption of the rogue program to be able to deceive its victims. Aside from the fake scan, HDD Tools also provided mock warning messages stating that several errors were found on the system. These errors usually appear as system tray warning that mimics Windows own security alert. Some of these fake messages are:
Fix Disk
Windows Disk Diagnostics will scan the system to identify performance problems.
Start or Cancel
Bad Sectors on hard drive or damaged file allocation table – Critical Error
System Restore
Hard drive does not respond to system commands – Critical Error
After flashing these fake alerts, HDD Tools will successively promote the program as the only solution to solve errors. However, one must purchase the licensed version first. This is a clear indication that the program is aimed to be sold in a very misleading manner. As a last piece of advice, remove HDD Tools virus at once using only genuine anti-malware program. You may follow the link below to download the remover. Also, follow the guide carefully to ensure that you will eliminate the malware and all other components inside the system.
Screenshot Image of HDD Tools:

How to Remove HDD Tools
NOTE: It is recommended to PRINT or BOOKMARK this instruction because we need to restart Windows during the virus removal process.
Step 1 : Remove HDD Tools with this recommended tool
This guide requires a tool called Malwarebytes' Anti-Malware. It is a free tool designed to eradicate various computer infections including HDD Tools. MBAM scanner and malware removal tool is distributed for free.
1. In order to completely remove HDD Tools, it is best to download and run the recommended tool. Please click the button below to begin download.
2. After downloading, double-click on the file to install the application. If you are using Windows Vista or Windows 7, right-click on the file and select 'Run as administator' from the list.
3. When User Account Control prompts, please click Yes to proceed with the installation.
4. Follow the prompts and install as 'default' only. There are no changes needed during the installation process.
5. Before the installation procedure ends, MalwareBytes Anti-Malware will ask for database update, please proceed.

6. Click Finish button after installation. Program will run automatically run and you will be prompted to update if newer version of database is available.
7. At this moment, close MalwareBytes Anti-Malware and proceed with the next step.
Run a thorough scan in Safe Mode to remove HDD Tools
8. Remove all media such as floppy drive, cd, dvd, and USB devices. Then, restart the computer.
9. Before Windows begins to load, press F8 on your keyboard.
10. It will display the Advanced Boot Options menu. Select Safe Mode.
11. Windows will now start in Safe Mode. It runs on minimal set of drivers so expect your desktop to load a low-resolution display.

12. Once Windows is running on Safe Mode, find the icon of MalwareBytes Anti-Malware. Double-click to launch the program.
13. Choose Perform full scan on scanner's console to ensure that it thoroughly check the PC for any presence of HDD Tools and other forms of threats. Click the Scan button to start.

14. Once the scan has completed, Malwarebytes Anti-Malware will issue a list of identified threats. Mark all threats and click on Remove Selected.
15. If it prompts to restart the computer, please reboot Windows normally.
Step 2 : Run Additional Scanner to Ensure that HDD Tools is Totally Deleted
Portable SuperAntiSpyware
To thoroughly remove HDD Tools, it is best to do a separate scan of another security program so that other infected files not detected from previous can be removed as well. Click here to start using SuperAntiSpyware Portable.
Online Virus Scanner:
Another way to remove a virus without the need to install additional anti-virus software is to perform a thorough scan with free Online Virus Scanner. Browse this page to see a list of free services from specific anti-virus and security company.
Alternative Removal Procedures for HDD Tools
Use Windows System Restore to return Windows to previous state
During an infection, HDD Tools drops various files and registry entries. The threat intentionally hides system files by setting options in the registry. With these rigid changes, the best solution is to return Windows to previous working state is through System Restore.
To verify if System Restore is active on your computer, you can type system restore into the Start menu search box. Typing rstrui on the same box and pressing Enter also opens this function.

If previous restore point is saved, you may proceed with Windows System Restore. Click here to see the full procedure.
HDD Tools manual uninstall guide
IMPORTANT! Manual removal of HDD Tools requires technical skills. Deleting system files and registry entries by mistake may result to total disability of Windows system. We advise you to perform a backup of registry before proceeding with this guide.
1. Kill any running process that belongs to HDD Tools.
- Press Ctrl+Alt+Del on your keyboard.
- When Windows Task Manager appears, look for HDD Tools files (refer to Technical Reference) and click End Process.

2. Delete all registry entries that belong to this malware.
- Press [Windows Key]+R on your keyboard.
- In the 'Open' dialog box, type regedit and press Enter. This will open registry editor.
- Find and delete registry entries as mentioned in Technical Reference section.
- Close registry editor. Changes made will be saved automatically.

3. Scan the computer with antivirus program.
- Connect to Internet and open your antivirus software. Please update to obtain the latest database and necessary files.
- Restart the computer in Safe Mode.
- Just before Windows logo begins to load press F8 on your keyboard.
- On Windows Advanced Boot Options, select Safe Mode and press Enter.
- Thoroughly scan the computer with your updated antivirus software.
4. Delete all files dropped by HDD Tools.
- While still in Safe Mode, search and delete malicious files. Please refer to 'Technical Reference'. Make sure that you execute 'End Task' first before deleting the file. Otherwise, the system will not let you perform this action.
Technical Reference
Associated Files and Folders:Added Registry Entries:Ways to Prevent HDD Tools Infection
Take the following steps to protect the computer from threats. Suggested tools and security setup within installed software helps prevent the same attack on your PC.
anna
Dec 16, 2010 @ 04:32:50
I am not sure where i got this virus from, but it showed up today on my computer, knowing that it was weird and feeling that it was a virus I tried everything to get rid of the “program” that I knew i did not install onto my computer. it would not let me uninstall it, when running my antivirus program it would scan but say that files were locked and could not be tested, found that odd, as it said it about every single file it tried to scan on my hard drive. Would not let me run any of my programs that would find and remove spyware, malware and viruses.
I gave up and just wiped the hard drive on my computer and started over with a fresh install of windows 7.
Where is this virus coming from? It wasn’t on my computer at all until after a windows update, wondering if it came in with one of those, as it wouldn’t be the first time Microsoft released an update that had a virus in it lol
John
Dec 16, 2010 @ 18:00:47
These rogue developers are definitely Eastern European. In one sentence they use the phrase “don’t not”
Simone
Dec 21, 2010 @ 04:09:38
Hello. Seems like this stupid virus infected my mobile while used by my mother. Had to format and reinstall everything.
Now, if someone knows the address of the payments of the virus, if it’s not too far from my countery (ready < 1000kms) i'd like to go visit them for once..
you know, i dont like such jokes.
Thanks, if you are sure about this information feel free to mail it to quartolo@hotmail.com !