DirAnalyze - How to remove

DirAnalyze might look like useful tool, dedicated to optimize your computer. It is supposed to analyse your hard drive, detect duplicated files and enhance overall performance of the device. In order to do that successfully, collected data is sent to the remote servers in Russia. The problem is that the program encrypts information before it is sent to the remote servers, thus we can’t really tell what kind of information is transferred.

This particular feature is considered to be a major cyber security threat – you should never trust some shady application to manage your personal information and transfer it as encrypted file. That’s why DirAnalyze is listed as PUP (potentially unwanted program). We can’t find a way to download this application from the Internet, so the only logical explanation is that it comes bundled with other freeware that can be downloaded from the Internet. Even though they have a website at www.scanfolder.space, it’s just a static one-page website with no download or additional information functions.

In case you are yet not familiar with a term ‘bundling’, it’s when one particular free program is used to distribute other software. Usually bundling is performed to spread malware and other software that is either unwanted or malicious. To illustrate this distribution method, we will provide you with an example – you download some free PDF generator, flash game, downloads manager or any other similar application from a website with questionable reputation, and during the installation you get asked to add some ‘free and useful’ tool to your computer or web browser. Actually, usually you are not even asked as this option is default and if you just run through the installation without paying much of the attention, unwanted software gets installed.

If your computer is already infected with this virus, we recommend to eliminate it right now. This task is not that complicated and you can do it by yourself. For that purpose we have prepared some guidance for you.

First of all, remove the application from your computer:

1. Click on the start menu;
2. Select settings/control panel;
3. Find ‘DirAnalyze’ on the programs list;
4. Check the program and click ‘uninstall’.

Now when the virus is removed from your computer, you have to vanish all the files that are associated with this malicious program:

1. Click on the start menu again;
2. Click ‘Control menu’ and navigate to ‘Appearance and Personalization’ section;
3. Go to the option ‘Folder Option’;
4. On the next window, select tab called ‘View’;
5. In ‘Advanced settings’ category check the option ‘show hidden files and folders’;
6. Now, when all hidden files are visible, navigate to listed directories and delete all of them:

%Temp%\[random].exe
%AppData%\vsdsrv32.exe
%CommonAppData%\pcdfdata\config.bin
%Windows%\system32\[random].exe
%Documents and Settings%\[UserName]\Desktop\[random].lnk

Lastly, you should get rid of bad registry keys left by DirAnalyze:

1. Open Regedit. Press Win+R keys at the same time and type ‘regedit’ into the search box, then click OK;
2. Find registry keys created by DirAnalyze under ‘My Computer’ folder:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\[random].exe
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “EnableLUA” = 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115} “UrlHelper Class”

In case this removal process seems to be too complicated for you, you have an option to outsource all the work and have it done by anti-malware software. We suggest to use either SpyHunter Program like this will remove the virus from your computer, delete all hidden files and bad registry keys. Please note that you have to be extremely careful when managing registry keys, so only go for it if you really know what you are doing. Otherwise, it would be better to simply use appropriate software.

Automatic Malware removal tools

Manual removal