1 of 6
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:
WinDisk, Windows Disk , DiskRecovery
Infection Video Disk Recovery

Disk Recovery

Disk Recovery demands attention as the developers behind this rogue defragmenter take their attack on users’ PCs to an entirely new level with this rogue. Disk Recovery enters the system under utterly suspicious circumstances and keeps itself hidden from users until such time as it starts its attack on the system. Disk Recovery will try and come across as a genuine security tool but in truth there is nothing genuine about it. Despite what it wants you to believe, Disk Recovery has no ability to detect, quarantine or remove any type of threat or infection, and is nothing more than an infection in itself.

Disk Recovery enters the system with the help of seditious Trojans. These Trojans and malware are spread via fake online malware scanners and sneaky browser hijackers. The browser hijackers quite literally hijack users’ browsing and search sessions and forcefully redirects PC owners to their compromised websites. Once there, the compromised web pages will make use of various techniques including drive-by download techniques in order to deposit the Disk Recovery Trojans in the system.

To stop annoying pop ups and start removal process of Disk Recovery infected files you can enter this registration code:
0973467457475070215340537432225

This rogue will cleverly hide itself from the attentions of the user until such time that it deems it appropriate to reveal itself to the user. This will happen by Disk Recovery spamming the user with various fake alerts. These false security notifications were designed to panic users into thinking their systems are compromised and under attack. Disk Recovery will of course offer to generously get rid of these false security risks but only once the user pays for its worthless software. Some of the fake security alerts to be on the lookout for include the following:

Windows detected a hard drive problem.
A hard drive error occurred while starting the application.

Windows cannot find notepad. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.

Windows detected a hard drive problem.
Scanning for hard drive errors...
Hard drive scan helps to detect and resolve hard drive problems and system performance issues.

Fix Disk
Disk Recovery Diagnostics will scan the system to identify performance problems.
Start or Cancel

Disk Recovery Diagnostics
Windows detected a hard disk error.
A problem with the hard drive sectors has been detected. It is recommended to download the following sertified software to fix the detected hard drive problems. Do you want to download recommended software?

Requested registry access is not allowed. Registry defragmentation required
Read time of hard drive clusters less than 500 ms
32% of HDD space is unreadable
Bad sectors on hard drive or damaged file allocation table
GPU RAM temperature is critically high. Urgent RAM memory optimization is required to prevent system crash
Drive C initializing error
Ram Temperature is 83 C. Optimization is required for normal operation.
Hard drive doesn't respond to system commands
Data Safety Problem. System integrity is at risk.
Registry Error - Critical Error

Critical Error!
Damaged hard drive clusters detected. Private data is at risk.

Critical Error
Hard Drive not found. Missing hard drive.

Critical Error
RAM memory usage is critically high. RAM memory failure.
Critical Error
Windows can't find hard disk space. Hard drive error

Critical Error!
Windows was unable to save all the data for the file System32496A8300. The data has been lost. This error may be caused by a failure of your computer hardware.

Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required.
System Restore
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.

Activation Reminder
Disk Recovery Activation
Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features.

Low Disk Space
You are running very low disk space on Local Disk (C:).

Windows - No Disk
Exception Processing Message 0x0000013

Naturally none of these false alerts can be trusted, and PC owners who value the safety of their PCs are urged to accept all correspondence received from Disk Recovery as highly suspicious. Disk Recovery was not designed to be of any value of help to a PC system, and will do far more damage than good.

In order to circumvent the devastatingly crippling effects of this infection on your PC, destroy Disk Recovery before it destroys your system. Do this by investing in a properly functioning security tool which will not only annihilate Disk Recovery but also offer continued protection against similar threats.

Download Spyware Removal Tool to Remove* Disk Recovery
  • Quick & tested solution for Disk Recovery removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Disk Recovery

Files associated with infection (Disk Recovery):

lrzu0iQS.exe
%UserProfile%\Start Menu\Programs\Win Disk\Uninstall Win Disk.lnk
%UserProfile%\Desktop\Win Disk.lnk
%AllUsersProfile%\Application Data\[random].exe
%AllUsersProfile%\Application Data\[random].dll
%UserProfile%\Start Menu\Programs\Win Disk
%UserProfile%\Start Menu\Programs\Win Disk\Win Disk.lnk

Files associated with infection (Disk Recovery) (Win7, Vista):

%AllUsersProfile%\[random].dll
%AllUsersProfile%\[random].exe
%UserProfile%\Desktop\Win Disk.lnk
%UserProfile%\Start Menu\Programs\Win Disk\Uninstall Win Disk.lnk
%UserProfile%\Start Menu\Programs\Win Disk
%UserProfile%\Start Menu\Programs\Win Disk\Win Disk.lnk

Dynamic Link Libraries to remove (Disk Recovery):

%AllUsersProfile%\Application Data\[random].dll

Processes to kill (Disk Recovery):

lrzu0iQS.exe
%AllUsersProfile%\Application Data\[random].exe

Remove registry entries (Disk Recovery):

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]”
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.