Diranalyze Disk Removal Guide

If you think that Diranalyze Disk is a genuine and useful program, you have to think again. Our research has shown that this suspicious piece of software does not offer beneficial services, and, instead, leaks data without your permission. At the time of research, the data was encrypted before leaking it, and so it is unknown what kind of information is at risk, but, of course, we have to think about the worst case scenario, which is that the potentially unwanted program (PUP) is leaking private data. So, if you are still thinking about whether or not to install this program, we recommend against it. If this program is already active, we recommend removing it without further hesitation. Unfortunately, the elimination of this PUP is not that easy, and it takes quite a few steps to have Diranalyze Disk deleted completely. Our research team has thoroughly inspected this strange program, and, hopefully, this report will help you understand it better, as well as understand why keeping it installed could be dangerous.

Since Diranalyze Disk does not have an official installer, it is not surprising that it is spread via software bundles that, unfortunately, might spread many other infections. Was the suspicious PUP bundled with malicious infections? You can find that out using a legitimate anti-malware tool. Hopefully, serious threats are not running wild, and you can focus on the PUP. Of course, if more serious threats are found, you might want to pay attention to them first, but do not forget that Diranalyze Disk might be dangerous as well. Once this program is executed, it automatically creates scheduled tasks in %WINDIR%\Tasks\ and %WINDIR%\System32\Tasks\. These tasks might have unique names, but they are primarily employed to transfer data to sites that – as our researchers have found – are located in Russia. We cannot stress enough how dangerous this might be because it is unclear what kind of data is leaked. Needless to say, that is the main reason to remove this potentially unwanted program.

If you have used Diranalyze, you know that it runs as a scanner that allegedly scans every single directory found on your operating system to check for duplicates and junk. The “scan progress” pop-up is meant to convince you that the program is doing a real scan, but that is not what you need to focus on. Our research team has found that the main window of the program displays a link. The name of the link is “Diranalyze,” and it is unlikely that anyone would think of clicking it. However, if you do, you are routed to Scanfolder.space. This website represents an unnamed program that allegedly can find files that are taking up space on the computer. No installer is available, and so it is possible that it is meant to represent Diranalyze Disk. At this time, we cannot confirm that. Overall, the PUP is incredibly suspicious, and you might be taking a huge risk by installing it onto your operating system. The good news is that you can change things around, and all you need to do in this situation is to eliminate the culprit.

As you already know, the manual removal of Diranalyze Disk is not an easy task. That being said, this does not mean you cannot get rid of this infection yourself. Our malware analysts have created a guide that shows how to eliminate this potentially unwanted program. If you are having issues with any of the steps, or if the PUP remains active on your computer afterward, you can consult us via the comment section below. Otherwise, you also can install a legitimate anti-malware tool to help you out. You do not need to invest in a legitimate tool just for the removal of the PUP. By installing this tool, you would be investing in your own virtual security as well because legitimate anti-malware software does exactly that: It prevents malware from slithering in.

How to delete Diranalyze Disk

1. Tap Win+E on the keyboard to launch Explorer.
2. Enter %WINDIR%\System32\Tasks\ into the bar at the top.
3. Right-click and Delete the task named SDisk Finder (the name could be different).
4. Enter %WINDIR%\Tasks\ into the bar at the top.
5. Right-click and Delete the tasks named DirAnalyzer and Test Task.job (the names could be different).
6. Enter %PROGRAMFILES% into the bar at the top (depending on the Windows OS, you might find the folder under %PROGRAMFILES(x86)% instead).
7. Right-click and Delete the folder named SDisk Finder.
8. Enter %PUBLIC% into the bar at the top and Delete the folder named DiskCleaner
9. Tap Win+R to launch RUN and then enter regedit.exe to access Registry Editor.
10. In the pane on the left move to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\.
11. Right-click and Delete the key named DiskOptimizer (the name could be different).
12. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\.
13. Right-click and Delete the keys named SDisk Finder and DirAnalyzer (the names could be different).

N.B. It is recommended that you change logins and passwords of your personal accounts to ensure that they are not hacked in case the suspicious PUP is capable of leaking this kind of data.