HDD Plus

From Wiki-Security, the free encyclopedia of computer security

HDD Plus Information
Type:   Spyware
  Installs & gathers info from a PC without user permission.
  By downloading freeware & shareware programs.
  Changes PC settings, excessive popups
& slow PC performance.
Detection:   Download SpyHunter's Spyware Scanner.
IE Alert:

  If you are using Internet Explorer and can not download SpyHunter, please use a different browser like Firefox or Chrome.

HDD Plus is the malware component of a scam which is very similar to a rogue antivirus scam. HDD Plus is a fake disk defragmenter and system optimization program. It is identical to HDD Scan and essentially the same as a newer piece of malware called HDD Help. In keeping with the rogue antispyware pattern, HDD Plus uses scare tactics and disabling of normal system functions in order to manipulate people into buying its bogus software.

HDD Plus seems to have come to the forefront in early December 2010. Like many similar scams, HDD Plus winds up on a victim's computer as the payload of a Trojan transmitted in an ordinary way. It may spread through file sharing and email attachments, and through social networks like Twitter and Facebook. Once the Trojan has gotten in, it unpacks HDD Plus, and HDD Plus goes to work trying to scare you into paying to get rid of it.

When HDD Plus starts, it will run a fake scan of the hard drive. While it does this fake scan, it will use up a whopping amount of memory and slow down the system. It does not actually need all of that memory, because it isn't actually scanning anything! In reality, it is designed to slow down your system on purpose, so that you will believe it is doing something or that there is actually something wrong with your hard disk. When the scan completes, HDD Plus will give you a long list of critical, scary-sounding errors. It will often say that some portion of the drive is unreadable, that bad sectors were detected, or that errors have been found in the system registry. Then it will prompt you to buy HDD Plus, in the "full" version, in order to fix the hoaxed errors. Once paid for, HDD Plus does not perform any actual scan or service, and it does not do anything beneficial for the system.

After the initial fake scan completes, if you try to open any program including an Internet browser, HDD Plus will kill it and give an error message about something being really wrong with the hard drive. HDD Plus has also been reported to generate pop-ups, create or delete Desktop items apparently at random, and cause system instability and crashing (which helps to make its claims of serious errors seem legitimate). These symptoms make HDD Plus a very dangerous infection, which must be dealt with quickly.

To check your computer for HDD Plus, download SpyHunter Spyware Detection Tool.

SpyHunter spyware detection tool is only a scanner meant to assist you in detecting HDD Plus and other threats. If you detect the presence of HDD Plus on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of HDD Plus.


Detection of HDD Plus (Recommended)

HDD Plus is difficult to detect and remove. HDD Plus is not likely to be removed through a convenient "uninstall" feature. HDD Plus, as well as other spyware, can re-install itself even after it appears to have been removed.

You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove HDD Plus and other spyware, adware, trojans and viruses on your computer.

Run a HDD Plus scan/check to successfully detect all HDD Plus files with the SpyHunter Spyware Detection Tool. If you wish to remove HDD Plus, you can either purchase the SpyHunter spyware removal tool to remove HDD Plus or follow the HDD Plus manual removal method provided in the "Remedies and Prevention" section.

Method of Infection

There are many ways your computer could get infected with HDD Plus. HDD Plus can come bundled with shareware or other downloadable software.

Another method of distributing HDD Plus involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing HDD Plus on your system. HDD Plus installs on your computer through a trojan and may infect your system without your knowledge or consent.

If you think you may already be infected with HDD Plus, use this SpyHunter Spyware dectection tool to detect HDD Plus and other common Spyware infections. After detection of HDD Plus, the next advised step is to remove HDD Plus with the purchase of the SpyHunter Spyware removal tool.


HDD Plus may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of HDD Plus from your computer.

Remedies and Prevention

HDD Plus, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. HDD Plus along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.

Install a good anti-spyware software

When there's a large number of traces of Spyware, for example HDD Plus, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect HDD Plus and other types of spyware.

Remove HDD Plus manually

Another method to remove HDD Plus is to manually delete HDD Plus files in your system. Detect and remove the following HDD Plus files:


  • %Temp%\[random].exe


  • %Temp%\[random].dll

Other Files

  • %Temp%\[random]
  • %Temp%\dfrg
  • %Temp%\dfrgr
  • %Documents and Settings%\[User_Name]\Desktop\HDD Plus.lnk
  • %Documents and Settings%\[User_Name]\Start Menu\Programs\HDD Plus
  • %Documents and Settings%\[User_Name]\Start Menu\Programs\HDD Plus\HDD Plus.lnk
  • %Documents and Settings%\[User_Name]\Start Menu\Programs\HDD Plus\Uninstall HDD Plus.lnk

Registry Keys

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"

Known Variants

VirusBurst is a re-branded variant of other well-known rogue anti-spyware programs, including SpywareQuake, SpyFalcon, SpywareStrike, SpySheriff, SpyHeal and many other pseudonyms.

External links

PC Infected

If your computer is running slow, or making excessive popups, you may be infected with Spyware. Wiki-Security recommends,

Click here to Download SpyHunter's Spyware detection tool.Click here

Disclaimer Information
This website, its content or any portion of this website is NOT affiliated with, connected to, or sponsored by HDD Plus or its creators in any way. This website does not advocate the actions or behavior of HDD Plus and its creators. Our objective is to provide Internet users with the know-how to detect and remove HDD Plus and other Internet threats.

The readers of this article should not mistake, confuse or associate this article to be an advertisement or a promotion of HDD Plus in any way. The content provided on this website is intended for educational or informational purposes and is provided "AS IS" with no warranties, and confers no rights.