How to remove Windows Recovery
Thursday, March 24th, 2011 at 5:33 amHome » Rogue Antispyware » Windows Recovery
Windows Recovery description
Windows Recovery presents itself as a system tool. However, it is not able to optimize a computer: Windows Recovery is only an imitation made to gain a purchase. Do not purchase Windows Recovery and remove it as soon as possible.
WindowsRecovery is distributed on deceptive websites but it may also make its way on a PC via trojans. If Windows Recovery pops on your screen, do not mistake it for some legitimate Windows tool. The program is malicious. Windows Recovery may hijack web browser and it may also disable regular applications on the compromised computer.
Windows Recovery is a Rogue Antispyware software
How to manually remove Windows Recovery
To remove Windows Recovery spyware you must block Windows Recovery sites, stop and remove processes, unregister DLL files, search and delete all other Windows Recovery files and registry utility. Follow the Windows Recovery detection and removal instructions below.
The most typical software removal method is to remove Windows Recovery by using "Add or Remove Programs" service. However there may be hidden Windows Recovery files, running processes and registries in your computer, so Windows Recovery may recreate all other files after reboot.
Windows Recovery manual removal instructions
Locate and delete Windows Recovery registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = "/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = "yes"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = "0"
Read more how to delete Windows Recovery registry entries
Download RegistryBooster 2010 to scan errors caused by Windows Recovery
Detect and delete other Windows Recovery files:
%AllUsersProfile%\Application Data\~[random]
%AllUsersProfile%\Application Data\~[random]r
%AllUsersProfile%\Application Data\[random].dll
%AllUsersProfile%\Application Data\[random].exe
%AllUsersProfile%\Application Data\[random]
%AllUsersProfile%\Application Data\[random].exe
%UserProfile%\Desktop\Windows Recovery.lnk
%UserProfile%\Start Menu\Programs\Windows Recovery\
%UserProfile%\Start Menu\Programs\Windows Recovery\Uninstall Windows Recovery.lnk
%UserProfile%\Start Menu\Programs\Windows Recovery\Windows Recovery.lnk
We strongly recommend you to use spyware remover to track Windows Recovery and automaticaly remove Windows Recovery processes, registries and files as well as other spyware threats.


