1 of 8
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

Disk OK

It’s not hard to see why the developers of rogue defragmenters continue experiencing unrivaled success in their endeavors – when you consider the sophistication behind their fake products. Disk OK, a derivative from well known rogue Defragmenter is the perfect case in point. Disk OK, despite what it would like its victims to believe was designed with only one purpose in mind – to swindle as much money from its victims in the least amount of time. Disk OK will is unable to live up to any of its over exaggerated promises, and cannot detect or fix any system errors. It will stop at nothing to achieve its dubious goals, even going so far as to causing permanent and irreparable damage to its victim’s system in its endeavors to successfully achieve its goal.

Disk OK will enter the system unannounced, and without ceremony. It makes use of various ways of delivering its infection, the most popular being through fake online malware scanners. These scanners redirects users to browser hijacking websites, where Disk OK Trojan and malware infections exploit system and browser vulnerabilities in order to root the Disk OK infection in the system. Disk OK also bundles its Trojans along with other seemingly legitimate security updates and software downloads obtained from third party websites.

The user will remain oblivious to the presence of Disk OK on his system until it deems it the correct time to reveal itself with the help of various fake security alerts. These fake alerts were created with the express purpose of panicking the user into believing his system is compromised by various fake threats, in an effort to endear Disk OK to him and place it in an authoritative light. All of the security notifications received from Disk OK is fake, and should never be believed or acted upon. Some of the more notorious Disk OK fake security alerts to be on the lookout for read as follows:

"Critical Error!
Damaged hard drive clusters detected. Private data is at risk."

"Critical Error
Hard Drive not found. Missing hard drive."

"Critical Error
RAM memory usage is critically high. RAM memory failure."

"Critical Error
Windows can't find hard disk space. Hard drive error"

"Critical Error!
Windows was unable to save all the data for the file System32496A8300. The data has been lost. This error may be caused by a failure of your computer hardware."

"Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required."

"System Restore
The system has been restored after a critical error. Data integrity and hard drive integrity verification required."

"Activation Reminder
Disk OK Activation
Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features."

"Low Disk Space
You are running very low disk space on Local Disk (C:)"

"Windows - No Disk
Exception Processing Message 0x0000013"

Obviously none of these fake security alerts can be trusted. These fake security messages are only a ploy in Disk OK’s assault on the system, and should be regarded as such.

As a further assault on the system, Disk OK will attempt to withhold the user from running any executable on his system. This is in an attempt to block the user from running any security application which will not only detect, but also delete Disk OK from the system. When the user tries to launch a program, Disk OK will terminate its process, and present the user with the following error messages:

"Windows detected a hard drive problem.
A hard drive error occurred while starting the application."

Or

"Windows cannot find notepad. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search."

Or

"Windows detected a hard drive problem.
Scanning for hard drive errors...
Hard drive scan helps to detect and resolve hard drive problems and system performance issues."

After the user closes the bogusly generated fake alert, he will be presented with the following message from a program which will supposedly attempt to fix the hard drive:

"Fix Disk
Windows Disk Diagnostics will scan the system to identify performance problems.
Start or Cancel"

If the user acts on this call to action, Disk OK will emulate a genuine scan of the system, and then go on to report that there is something amiss with the following fake security alert:

"Windows Disk Diagnostics
Windows detected a hard disk error.
A problem with the hard drive sectors has been detected. It is recommended to download the following sertified software to fix the detected hard drive problems. Do you want to download recommended software?"

These are all only further attacks employed by Disk OK on its victim’s system. If the PC owner does decide to run the scan, Disk OK will report on various fake security issues, and rather magnanimously offer to fix it, but only after the user pays for its subversive products:

"Requested registry access is not allowed. Registry defragmentation required
Read time of hard drive clusters less than 500 ms
32% of HDD space is unreadable
Bad sectors on hard drive or damaged file allocation table
GPU RAM temperature is critically high. Urgent RAM memory optimization is required to prevent system crash
Drive C initializing error
Ram Temperature is 83 C. Optimization is required for normal operation.
Hard drive doesn't respond to system commands
Data Safety Problem. System integrity is at risk.
Registry Error - Critical Error"

It is clear to see that Disk OK rogue defragmenter takes control of its victim’s PC, and holds it ransom until the user decides to pay up. You need to destroy Disk OK, before it destroys your system. In order to minimize the damage done by this seditious rogue, erase Disk OK by making use of a genuine security tool which will not only obliterate Disk OK from the PC but also provide protection against similar future attacks.

Download Spyware Removal Tool to Remove* Disk OK
  • Quick & tested solution for Disk OK removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Disk OK

Files associated with infection (Disk OK):

zhhJ9qbh5Mht.exe
HAxHiltNLTtQl.dll
GXADAOEbUaHOS.exe
%UserProfile%\Start Menu\Programs\Disk OK\Uninstall Disk OK.lnk
%UserProfile%\Start Menu\Programs\Disk OK\Disk OK.lnk
%UserProfile%\Start Menu\Programs\Disk OK\
%UserProfile%\Desktop\Disk OK.lnk
%AllUsersProfile%\Application Data\[random].exe
%AllUsersProfile%\Application Data\[random]
%AllUsersProfile%\Application Data\[random].dll
%AllUsersProfile%\Application Data\~[random]r
%AllUsersProfile%\Application Data\~[random]

Dynamic Link Libraries to remove (Disk OK):

HAxHiltNLTtQl.dll
%AllUsersProfile%\Application Data\[random].dll

Processes to kill (Disk OK):

zhhJ9qbh5Mht.exe
GXADAOEbUaHOS.exe
%AllUsersProfile%\Application Data\[random].exe

Remove registry entries (Disk OK):

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes"='.zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.ms
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.