How to remove Windows Recovery

Thursday, March 24th, 2011 at 5:33 am
Home » Rogue Antispyware » Windows Recovery

Windows Recovery description

Windows Recovery presents itself as a system tool. However, it is not able to optimize a computer: Windows Recovery is only an imitation made to gain a purchase. Do not purchase Windows Recovery and remove it as soon as possible.

WindowsRecovery is distributed on deceptive websites but it may also make its way on a PC via trojans. If Windows Recovery pops on your screen, do not mistake it for some legitimate Windows tool. The program is malicious. Windows Recovery may hijack web browser and it may also disable regular applications on the compromised computer.

Windows Recovery is a Rogue Antispyware software

How to manually remove Windows Recovery

To remove Windows Recovery spyware you must block Windows Recovery sites, stop and remove processes, unregister DLL files, search and delete all other Windows Recovery files and registry utility. Follow the Windows Recovery detection and removal instructions below.

The most typical software removal method is to remove Windows Recovery by using "Add or Remove Programs" service. However there may be hidden Windows Recovery files, running processes and registries in your computer, so Windows Recovery may recreate all other files after reboot.

Windows Recovery manual removal instructions

Locate and delete Windows Recovery registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = "/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = "yes"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = "0"
Read more how to delete Windows Recovery registry entries
Download RegistryBooster 2010 to scan errors caused by Windows Recovery

Detect and delete other Windows Recovery files:
%AllUsersProfile%\Application Data\~[random]
%AllUsersProfile%\Application Data\~[random]r
%AllUsersProfile%\Application Data\[random].dll
%AllUsersProfile%\Application Data\[random].exe
%AllUsersProfile%\Application Data\[random]
%AllUsersProfile%\Application Data\[random].exe
%UserProfile%\Desktop\Windows Recovery.lnk
%UserProfile%\Start Menu\Programs\Windows Recovery\
%UserProfile%\Start Menu\Programs\Windows Recovery\Uninstall Windows Recovery.lnk
%UserProfile%\Start Menu\Programs\Windows Recovery\Windows Recovery.lnk

We strongly recommend you to use spyware remover to track Windows Recovery and automaticaly remove Windows Recovery processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: ,

Leave a Reply

Download does not start? Try a mirror download here