1 of 6
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

Windows Recovery

You sure want to keep your computer safe, because if it is infected you cannot use it properly. Windows Recovery makes use of your good intentions for its evil deeds. It is a rogue defragmenter tool which hides its real face behind an attractive design of a useful program. If you take a closer look at the rogue’s interface you will notice that Windows Recovery copies the appearance of a well-known security programs, because you are familiar with it, and you might trust easier something you are accustomed to. But Windows Recovery comes from the same family of rogue defragmenters as Windows Diagnostic, Windows Tool and Fake HDD. This is another reason for you to get rid of this parasite the moment you detect it.

Due to the fact that Windows Recovery is able to enter you system without you knowing it, you are strongly advised to check your computer of any possible errors, using the recommended malware scanner.

Windows Recovery aims to appear as a real product, so be smart and don’t fall into its trap. If you do, you will surely end up penniless with an absolutely desolated computer. Rogues are created with one single purpose in mind – getting rich fast at the cost of innocent users’ welfare.

Download Spyware Removal Tool to Remove* Windows Recovery
  • Quick & tested solution for Windows Recovery removal.
  • 100% Free Scan for Windows

As a fake defragmenter tool, Windows Recovery supposedly checks for any file errors in your hard drive, and naturally, there are always errors found, which Windows Recovery urgers you to fix immediately. When the rogue informs you about "detected" Errors you will see the "Advanced Module" tab light up at the bottom of the application's right corner. This way Windows Recovery tries to persuade you to pay for the license of the program. Windows Recovery claims that this is the only way for you to get rid of the file errors found in your computer. You might ask where these “errors” have come from if your computer has been working fine just a moment ago. Well, to tell you the truth, there are no threats in your system save one, which is Windows Recovery. Therefore, you should not pay attention to any of these fake messages:

Hard Drive Failure
The system has detected a problem with one or more installed IDE / SATA hard disks. It is recommended that you restart the system.

System Error
An error occurred while reading system files. Run a system diagnostic utility to check your hard disk drive for errors.

Critical Error
Hard drive critical error. Run a system diagnostic utility to check your hard disk drive for errors. Windows can't find hard disk space. Hard drive error.

Fix Disk
Windows Diagnostic Diagnostics will scan the system to identify performance problems.
Start or Cancel

Windows Diagnostic Diagnostics
Windows detected a hard disk error.
A problem with the hard drive sectors has been detected. It is recommended to download the following sertified software to fix the detected hard drive problems. Do you want to download recommended software?

Critical Error!
Damaged hard drive clusters detected. Private data is at risk.

Critical Error
Hard Drive not found. Missing hard drive.

Critical Error
RAM memory usage is critically high. RAM memory failure.

Critical Error
Windows can't find hard disk space. Hard drive error

Critical Error!
Windows was unable to save all the data for the file \System32\496A8300. The data has been lost. This error may be caused by a failure of your computer hardware.

Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required.

System Restore
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.

Activation Reminder
Windows Diagnostic Activation
Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features.

Low Disk Space
You are running very low disk space on Local Disk (C:)

You can "activate" Windows Recovery without exposing your credit card number. Simply enter this activation key:
8475082234984902023718742058948

Windows Recovery is not a computer threat for nothing. Even if you stay away from it and not follow its orders, you cannot leave there in your system, because in the long run it can slow down the performance your computer or even cause of a total system crash. Do yourself a favor and erase Windows Recovery right now.

Download Spyware Removal Tool to Remove* Windows Recovery
  • Quick & tested solution for Windows Recovery removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows Recovery

Files associated with infection (Windows Recovery):

IQoRoRfnYmWW.exe
alxjviag.exe
16113460.exe
%UserProfile%\Start Menu\Programs\Windows Recovery\Windows Recovery.lnk
%UserProfile%\Start Menu\Programs\Windows Recovery\Uninstall Windows Recovery.lnk
%UserProfile%\Start Menu\Programs\Windows Recovery\
%UserProfile%\Desktop\Windows Recovery.lnk
%AllUsersProfile%\Application Data\[random].exe
%AllUsersProfile%\Application Data\[random].dll
%AllUsersProfile%\Application Data\~[random]r
%AllUsersProfile%\Application Data\~[random]

Files associated with infection (Windows Recovery) (Win7, Vista):

%UserProfile%\Start Menu\Programs\Windows Recovery\Windows Recovery.lnk
%UserProfile%\Start Menu\Programs\Windows Recovery\Uninstall Windows Recovery.lnk
%UserProfile%\Start Menu\Programs\Windows Recovery\
%UserProfile%\Desktop\Windows Recovery.lnk
%AllUsersProfile%\[random].exe
%AllUsersProfile%\[random].dll
%AllUsersProfile%\[random]r
%AllUsersProfile%\~[random]

Dynamic Link Libraries to remove (Windows Recovery):

%AllUsersProfile%\Application Data\[random].dll

Processes to kill (Windows Recovery):

IQoRoRfnYmWW.exe
alxjviag.exe
16113460.exe
%AllUsersProfile%\Application Data\[random].exe

Remove registry entries (Windows Recovery):

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = 0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
Disclaimer

Comments

  1. James May 25, 2011

    Thanks SOOOOO much this saved me a lot of time, I just entered the activation code and my email address and it fixed it.

  2. monica fulmore Jun 24, 2011

    critical error.windows cant find hard disk space

  3. papap ryu Jul 3, 2011

    wow.... its totally works! after confused for several days, my laptop became normal just in a miute. thx so much....

  4. Steve Jan 15, 2012

    ThankS!!!!

  5. Lily Apr 25, 2012

    Activation code didn't work :( :(

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.