Title: Windows XP Restore
Also known as: WindowsXPRestore

Remove Windows XP Restore
Removal instructions

 
Severity scale:Windows XP Restore severity is 72  (72 / 100)
 

Windows XP Restore is a rogue computer optimization and defragmentation program that wants to scare you into thinking that your computer has some problems and issues. Windows XP Restore pretends to scan your hard drives and system memory for various errors. Then it states that you need to use the defragment tool to fix supposedly found errors. It fixes some errors for free and then prompts to pay for a full version of the program to fix other programs as well. Please do not fall victim to this rogue program and remove Windows XP Restore from your computer upon detection. Please use the removal instructions below.

Windows XP Restore enters the system without user permission and in order to protect itself attempts to disable legit antimalware software found. Actually, it blocks nearly all programs on the computer. Just run a program several times and it will eventually work. Compromised computer becomes completely taken over by this fake program in the result of such actions and Windows XP Restore begins the campaign it was designed to. Win Defrag will be configured to launch at startup, so be sure it will greatly affect your computer by running fake scanners and pop-up ads or notifications that will annoy you.

Overall, your computer will work slower. You will also see fake alerts from Windows taskbar. As you can see, Windows XP Restore is a total scam. Do not purchase it. If you have this rogue program on your computer please use the removal instructions below. You can remove Windows XP Restore manually but we strongly recommend to use an automatic removal tool given below.



Automatic Windows XP Restore removal:

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software to remove Windows XP Restore you agree to our privacy policy and agreement of use.
SpyHunter is recommended remover to uninstall Windows XP Restore. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of Windows XP Restore and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Windows XP Restore using SpyHunter please report this to us.
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Windows XP Restore (2011-06-14 13:51:32)
STOPzilla
Tested and Confirmed! STOPzilla removes Windows XP Restore (2011-06-14 13:51:32)
Spyware Doctor
We are testing Spyware Doctor's efficiency at removing Windows XP Restore (2012-02-06 02:53:08)
XoftSpySE Anti Spyware

Windows XP Restore manual removal:

Kill processes:
[random].exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = 0'
Delete files:
%AllUsersProfile%\Application Data\~[random]
%AllUsersProfile%\Application Data\~[random]r
%AllUsersProfile%\Application Data\[random].dll
%AllUsersProfile%\Application Data\[random].exe
%UserProfile%\Desktop\Windows XP Restore.lnk
%UserProfile%\Start Menu\Programs\Windows XP Restore\Uninstall Windows XP Restore.lnk
%UserProfile%\Start Menu\Programs\Windows XP Restore\Windows XP Restore.lnk
Delete directories:
%UserProfile%\Start Menu\Programs\Windows XP Restore
%AllUsersProfile%\Application Data\[random]
Phone Support to remove Windows XP Restore
Phone Support to remove Windows XP Restore

QR code for Windows XP Restore removal instructions:

Windows XP Restore qrcode
QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like Windows XP Restore are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Windows XP Restore right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.

SYMPTOMS OF rogue antispyware INFECTION

Rogue AntiSpyware virus enters your PC without your consent or using some sort of social engineering trick. Fake scanner pages, malicious mail attachments or system vulnerabilities are often used. 

Virus has a single goal: to gain money. Like other rogue anti-spyware applications, it will try to convince you that your system is infected with multiple parasites: trojans, adware, or other rogues. Typically, rogues do not provide enough detail about infections detected or show fake results. Rogue anti-spyware like Windows XP Restore will not clean any actual infections for free.

Most of the parasites of this type do not have parasite detection engine thus every warning they show is a random one. If you see persistent popups or alerts, you can safely discard them. 

You should never pay for Rogue Anti-spyware application like Windows XP Restore as it funds development of other computer parasites.

Information added: 2011-06-14 13:51:32
Information updated: 2012-02-06 00:15:53

Additional resources:

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

more resources
0
0
carson
This article really was usefull !!! Restore a Windows XP system to a previous State using System Restore.

Post Comment:

Attention: Use this form only if you have additional information about Windows XP Restore parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name



«


* All field required
Latest spyware news:
Subscribe to news

Similar parasites:
Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2 HijackThis Log Analyzer Beta 2

I failed to remove Windows XP Restore using SpyHunter.

Email


Close

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
add text box
rss feed
help other