Wednesday, September 14, 2011

Removal of Data Recovery annoying bounds

Data Recovery or DataRecovery is notorious, just like most of the program of its genus, for the annoyance of restricting kind on the background of seemingly pat notifications reflecting on the circumstances that have resolved in some annoyance of restrictive kind such as failure to start web-browser. The malware does not directly mention the failure of web-browser that has occurred, but the alert follows instantly on clicking the software launching icon. Hence users tend to associate the report by the program in question and browser error.
Remove Data Recovery as it sets up such situations deliberately expecting these to scare you into activating it. The program is another striking example of malicious optimizer for Windows.
Hackers distribute its copies through websites known to contain malicious scripts, which exploit vulnerabilities of system firewall to use errors in software running its processes while attacked system is being connected to aggressive website. Along with such method, fake online scanners are applied to convince users into manual download of the hazardous counterfeit, as well as other types of deceptive ads are in use for the same purpose.
Get rid of Data Recovery as inexhaustive source of annoyance and fraud applying free scanner available here to detect and exterminate this and other malicious programs.

Data Recovery snapshot:




Manual removal guide:
Delete infected files:
%LocalAppData%\
%LocalAppData%\.exe
%LocalAppData%\~
%LocalAppData%\~
%StartMenu%\Programs\Data Recovery\
%StartMenu%\Programs\Data Recovery\Data Recovery.lnk
%StartMenu%\Programs\Data Recovery\Uninstall Data Recovery.lnk
%Temp%\smtmp\
%Temp%\smtmp\1
%Temp%\smtmp\1
%Temp%\smtmp\2
%Temp%\smtmp\3
%Temp%\smtmp\4
%UserProfile%\Desktop\Data Recovery.lnk
Delete infected registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘Yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer “NoDesktop” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = ’0′

1 comment:

Sean Maverick said...

The thing with most people today is they have this false perception data loss only happens in geeked techy television shows and not in real life. BIG MISTAKE. Usually, when the files go missing, the flow of regrets (and blaming) were a dragging recollection of what-ifs or i-should've-listened-to-that-ad-eventhough-I-can't-stand-the-speaker's-hair. Today's Backup software are available in many formats, each highlighting the need for installation.

Most people would label backups as something for the techy folks. Well, aside from the super easy steps during installation, there are options tailor-made for every user.