Net Studio

This Removal Tool for Windows Disk is not an Antivirus, It is a program designed to remove Windows Disk and Windows Disk only but may also remove some other malwares.

The differences between an Antivirus and a Removal Tool are :

1. A Removal Tool is a Stand Alone Application so it does not need to be installed. You can remove the application once your system is clean.
2. An Antivirus removes infected files and registry keys but a Removal Tool removes infected files, Windows malware's registry keys and restores any parameters altered by malicious softwares.
3. Antivirus takes time to scan your computer but it only takes at the very most 20s for a Removal Tool to remove malware's files and registry keys and to restore your computer default parameters. That is because a Removal Tool is designed for one specific malicious program and it does not need to scan your computer. It knows exactly which files to remove and where they are located, which registry keys to restore or to remove.
4. All Removal Tools from http://www.net-studio.org are free and free from virus but be aware, most of the time, security programs are most of the time treated by other security programs as malicious softwares, for instance Norton Antivirus is treated by Avast as a malicious software and some of our Removal Tools are treated by some Antivirus programs as Probably Unknown Virus. That is because a Removal Tool removes malicious registry keys and removes malware's files.
   You can trust in us and our programs, our goal is to fight against those people who want to harm your system or to scam you and we will NEVER NEVER NEVER be one of them.

To remove Windows Disk Software (Uninstall Windows Disk Software) :

• Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
• Choose Start computer in SAFE MODE with network support
• Open Internet Explorer
• Go to Tools => Internet Options => Connections Tab => LAN Settings
• Uncheck "Use a proxy server"
• Recheck "Automatically detect settings"
• Download this free removal tool for Windows Disk Software
• Extract it
• Launch
• Click on the delete button

Windows Disk Software will be removed from your system in 10s. Restart your computer when It is finished.

Processes :

• [random].exe

Files :

• %DesktopDir%\Windows Disk.lnk
• %Programs%\Windows Disk\Windows Disk.lnk
• %Programs%\Windows Disk\Uninstall Windows Disk.lnk
• %CommonAppData%\[random]
• %CommonAppData%\[random].exe
• %CommonAppData%\[random].tmp
• %CommonAppData%\[random].dll

Registry

Registry keys created :

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments

Registry values created :

• HKEY_CURRENT_USER\Software
  
  • 12B79064-EB17-4f82-9DFE-B975BD26D1DC = ""
• HKEY_CURRENT_USER\Software\Microsoft
  
  • BootData = 43 00 3A 00 5C 00 44 00 6F 00 63 00 75 00 6D 00 65 00 6E 00 74 00 73 00 20 00 61 00 6E 00 64 00 20 00 53 00 65 00 74 00 74 00 69 00 6E 00 67 00 73 00 5C 00 41 00 6C 00 6C 00 20 00 55 00 73 00 65 00 72 00 73 00 5C 00 41 00 70 00 70 00 6C 00 69 00 63 0
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
  
  • Use FormSuggest = "Yes"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
  
  • WarnOnZoneCrossing = 0x00000000
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
  
  • LowRiskFileTypes = "/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
  
  • SaveZoneInformation = 0x00000001
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
  
  • [random].exe = "%CommonAppData%\[random].exe"
  • [random] = "C:\DOCUME~1\ALLUSE~1\APPLIC~1\[random].exe"

Registry values modified :

• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download
  
  • CheckExeSignatures =
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
  
  • 1601 =

To Remove Windows Disk manually :

• Restart your computer in safe mode :
  • Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
  • Choose Start computer in SAFE MODE
• Open the infected account
• Open explorer, paste into the address bar %Temp% then press enter, it will open C:\Documents and Settings\Christian\Local Settings\Temp on my computer
• Remove all .exe files under this path
• Open explorer, paste into the address bar C:\Documents and Settings\All Users\Application Data then press enter
• Remove all .exe files under this path
• Remove Windows Disk.lnk from your desktop
• Remove the Windows Disk folder from your start menu
• Click on the start menu button then click on run
• Type msconfig and press enter
• Go to the Startup tab
• Uncheck all random character keys from the list and click on OK, there should be two keys
• Restart your computer in normal mode

This will solve the problem but you can run the removal tool to remove the other registry keys and values.