Windows Recovery (WindowsRecovery) Virus Removal
Windows Recovery (another name for the virus is WindowsRecovery) is a fake computer program. The goal of the program is to look like a real program which is suppose to make optimize your computer by making changes to the computer hard disk and computer ram. For example, it shows the user that it is removing files which aren’t needed to make it run faster. However, Windows Recovery is a fake program. This guide will detail more about the virus, provide a removal tool, and also provide a method to manually remove Windows Recovery along with tips to unhide your files which Windows Recovery has hidden (details are at the bottom of the guide).
The program is classified as a rogue program since it is generally installed without your permission. It installs itself through different methods. Windows Recovery is a copy of WindowsFixDisk; the main difference between the two is the name. The software hopes to trick you into purchasing their fake software. They do this by scaring the user by hiding all the files in the computer (essentially, they change the properties of each file to hidden); however, if the user turns on hidden files, then they will be able to see their files. This can be done in the folder options under the view tab under the sub header hidden files and folders. Generally, Windows Recovery will create many popups to constantly annoy and scare the user into purchasing the program. The program can be removed automatically or manually.
We recommend the following removal tool for Windows Recovery. The tool can be downloaded below.
Below are a couple of the popups Windows Recovery will create:
“The system has detected a problem with one or more installed IDE / SATA hard disks. It is recommended that you restart the system.”
“Requested registry access is not allowed. Registry defragmentation required.”
Windows Recovery Manual Removal -
Stop Windows Recovery Processes (Learn How To Do This)
[RANDOM].exe
Delete Windows Recovery Files (Learn How To Do This)
C:/Documents and Settings/All Users/Application Data/Microsoft/[RANDOM].exe
Delete Windows Recovery Registry Keys (Learn How To Do This)
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run/”Windows Recovery″
Hidden Files and Folders
Windows Recovery will hide a majority of the user files. In order to unhide these files, go to folder options, go to the view tab, and click show hidden files, folders, and drives. In order to make these hidden files permanently not hidden, go to the properties settings of the file and uncheck hidden.
We highly recommend scanning with antivirus or antispyware after successful removal of Windows Recovery. By scanning with antivirus or antispyware, it will allow you to be sure all the parts of the virus are gone.
Please follow our safety tips to protect yourself from future forms of malware. Please Click Here To View. This can help to protect you in the future.
Please feel free to comment on any questions or comments you may have. Your input is highly valued by everyone.
April 27th, 2011 at 10:53 pm
My computer became infected with the Window Recovery virus last Friday. Of course it is now useless in normal mode as it takes over the desktop.
So I rebooted in Safe Mode and installed Malwarebytes Anti-Malware and then ran a full system scan. After running, it identified 1 infection which I promptly quarantined. I ran another scan which revealed 0 infections.
I rebooted the computer but the virus seems to have remained unscathed. I don’t feel confident or competent enough to remove specific system files or make changes to the registry.
I would welcome any advice or suggestions as to what I should do at this point in time. Thanks very much for your help. Please send any reply to my email.
May 3rd, 2011 at 2:40 am
Roy,
I am experiencing the same issue. Malwarebytes seems to have elminated all pop ups, however, all of my desktop icons remain hidden – as well as all programs that used to exist in my Start->Programs File Folders are gone!
In an effort to fix this, I ran unhide.exe in both Safe and Normal Windows mode, to no avail. When I open C:\ and right-click on available icons for the properties settings, all of the available icons are not hidden…but they ironically remain hidden from my desktop and subsequent Statr Menu.
There must be an issue with the registry.
Oh yeah…and Windows XP System Restore does not work either.
If any one has found a solution to these ailments, please share! Thanks!