Windows Recovery. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as WindowsRecovery | Type: Rogue Antispyware
12

Windows Recovery is a fake disk defragmenter that displays fake error messages and pop-ups to make you think that your computer has some serious hard drive problems. The rogue program prompts to pay for a full version of the program to fix the errors. If you choose to purchase this bogus program, you will lose your money and give your credit card details to the scammers who created this malware. Please use the removal instructions below to remove Windows Recovery from your computer as soon as possible.

Windows Recovery enters the system via Trojans, infected websites and fake online scanners. The program runs system scanner and later on reports critical errors detected on your system. It warns you that some of your private data might be lost because of the lack of free space, RAM memory usage, etc. The truth is that it is fake information and Windows Recovery only wants you to believe your system is infected. Windows Recovery will offer you purchasing a full version of its program with a promise that this will fix everything. However, its real intention is to receive your money, but in return you won’t get anything. Do not buy this rogue program. It won't help you. In order to stop all malicious activities on your computer you should remove it upon detection. You can remove Windows Recovery manually too, but remember that manual removal guide was made for the rogue program only and do not include other possible malware, rootkits.

The latest parasite names used by FakeHDD:
[newest id=”fakehdd”]

do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Recovery you agree to our privacy policy and agreement of use.
Reimage is recommended to uninstall Windows Recovery. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Windows Recovery (2011-09-20)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Windows Recovery (2011-09-20)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Windows Recovery (2011-09-20)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Windows Recovery (2011-09-20)
Windows Recovery snapshot
Windows Recovery

Windows Recovery manual removal:

Kill processes:
[random].exe

Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[random].exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[random]"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAssociations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAttachments "SaveZoneInformation" = '1'

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "CheckExeSignatures" = 'no'

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain "Use FormSuggest" = 'yes'

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "WarnonBadCertRecving" = '0'

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableTaskMgr" = '1'

Unregister DLLs:
[random].dll

Delete files:
[random].exe [random].dll Windows Recovery.lnk

Delete directories:


About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author


  • Caroline

    I have just got this nuisance virous and cant seem to get rid of it as I am no expert. Can anyone provide a guide for dummies to get rid of this.

    Also can you assure me that this will not upload another virous

    Thanks

    Caroline

  • An thony

    What the program actually does is to change the attributes of all of your files to hidden. Even though you remove the program your files are still hidden. I took me numerous hours to go in and try to “unhide” all of my files. I also have to use the original installation disks to recover the Start files as they too were emptied.
    Microsoft Security Essentials was able to pick up the program and get rid of it after infection. As mentioned you can get rid of it but you need to manually go in and repair the damages that this program causes.