Title: Data Recovery
Also known as: DataRecovery
Remove Data Recovery
Removal instructions
Severity scale:  (72 / 100)
At the end of April 2012 new virus appeared with the same Data Recovery name. Its i a different program, please take a look at the screenshots to see with which Data Recovery you are infected with. The new Data Recovery virus we named Smart Data Recovery as this virus changed Smart HDD virus and share the same GUI.
Data Recovery is a rogue computer optimization program that displays fake critical security errors and reports registry, hard drive problems that do not even exist. It's not the first of its kind but this fake application may seriously compromise your privacy and restrict access to various application and files. It's a clone and System Recovery scam. Data Recovery runs a fake system scan and states that your computer has hard drive and RAM problems. It displays fake alerts claming that you can lose your important data anfd files if you won't fix the supposed problems immediately. That's a typical scam used to scare users into thinking that their computers are infected and to "push" bogus software to fix the problems. Data Recovery is distributed via hacked websites and fake virus scanners. If you manged to infect your PC with this fake computer optimization program you'll notice that right away. The rogue program will hide shortcuts and make your Dekstop black. It will also hide other files on your computer to make you think that there are some serious hard drive failures. You will have to unhide those files manually. Also, do not delete files from Windows temp folder. Data Recovery copies certain files to %Temp%\smtmp folder and if you remove those files, you've have to run Windows recovery disk because there is no other way to restore system shortcuts and files. We recommend Spyware Doctor. Some of the messages that will randomly be displayed are:
Data Recovery DiagnosticsWindows detected a hard disk error.
A problem with the hard drive sectors has been detected. It is recommended to download the
following sertifiedsoftware to fix the detected hard drive problems. Do you want to download recommended software?
Requested registry access is not allowed.
Registry defragmentation required
Hard Drive rotational speed decreased by 20%
Disk drive C:\ is unreadable.
System files are damaged.System is unstable.
The problem may cause errors while loading operating system
Ram memory speed decreased significantly and may cause system failure.
Critical Error!
Damaged hard drive clusters detected. Private data is at risk.
Critical Error
Hard Drive not found. Missing hard drive.
Please note that you may have to follow the removal instructions in safe mode with networking because most of the programs need to remove Data Recovery is are blocked in normal mode. Last, but not least, do not purchase this fake program. It's a scam. If you have already paid for it, contact your bank and dispute the charges. Then use Spyware Doctor to remove Data Recovery from your computer. Just enter the activation code given above, isntall Spyware Doctor and run a full system scan. It will remove the rogue program and related viruses from the system.
Data Recovery snapshot:
Automatic Data Recovery removal:
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software to remove Data Recovery you agree to our privacy policy and agreement of use.
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Data Recovery (2011-10-10 11:01:02)
We are testing Spyware Doctor's efficiency at removing Data Recovery
(2011-10-26 16:29:07)
We are testing STOPzilla's efficiency at removing Data Recovery
(2011-10-26 16:29:07)
Data Recovery manual removal:
Kill processes: [random].exe
6DSS92c31Apgjk.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"
Delete files:[random].exe
6DSS92c31Apgjk.exe
Phone Support to remove Data Recovery
QR code for Data Recovery removal instructions:
QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.
The reason we add QR code to the website is that parasites like Data Recovery are really hard to remove on infected computer.
you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Data Recovery right in your pocket.
Simply use the QR scanner and read removal instructions from mobile device.
SYMPTOMS OF rogue antispyware INFECTION
Rogue AntiSpyware virus usually imitates the legal anti-spyware software or some essential system components. Typically virus gets inside the computer with a help of trojans, that use security vulnerabilities for that. After getting inside the system, it tries to make it look like your system is infected with the numerous parasites, so it starts ‘scanning’ and finds numerous threats.
All rogue Anti-spyware along with Data Recovery have the same purpose: Get your money by using scare tactics. If you will believe that that fake threats are real and pay them money, you will not get them back even if you will ask to cancel the order in your Bank. All the infections are deceptive and you dont need to purchase their Paid version. You need to remove Rogue virus itself.
Information added: 2011-10-10 11:01:02
Information updated: 2012-05-12 08:49:52
Additional resources:
Attention: If you know know a reputable website reated to security threats, please add a link here: add
url
more resources
|
FORUM:
HELP:
|
Follow us 
|
Like us 
Where is the code???
recovery data
Post Comment: