WINDOWS RECOVERY FAKE WARNING VIRUS MALWARE - REMOVAL

First off all you deep breath you dont lose anything and you can solve your problem easly if you experienced user its take nearly 5 minute to get everything like before.


first you need activate task manager
download and double click

http://windowsxp.mvps.org/reg/EnableTM.reg

or clikc windows +r and type regedit strg+f search for DisableTaskMgr change value to zero 0

if you able to show TASKMANAGER find ram resource and kill application

your files external harddisk c d are hidden dont worry about that click and run Unhide.exe


Remove Windows Recovery Virus (Fake Windows Recovery Manual Removal Guide)




Windows Recovery Step-by-Step Removal Instructions
1.The associated files of Windows Recovery to be deleted are listed below:

%AppData%\Microsoft\[random].exe

%UserProfile%\Desktop\Windows Recovery.lnk

%UserProfile%\Start Menu\Programs\Windows Recovery\

%UserProfile%\Start Menu\Programs\Windows Recovery\Windows Recovery.lnk

%UserProfile%\Start Menu\Programs\Windows Recovery\Uninstall Windows Recovery.lnk 2.The registry entries of Windows Recovery that need to be removed are listed as follows:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = ’0′

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = ’0′

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = ’1′

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = ’1′

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = ’1′

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = ’1′

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = ‘no’

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = ‘yes’

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = ’0′

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = 0′





on my computer Turkish was ProgramData


Windows Recovery Description
Windows Recovery is a fake security application which is the same family of Windows Diagnostic and lures users to unknowingly perform corrupt actions on a targeted computer. This fake Microsoft windows recovery program installed without your awareness by a trojan horse that can easily access the targeted system through a backdoor you might not even know about and it won’t let you uninstall it instead of popping up fake security alert. Windows Recovery poses as a so-called security application that displays deceptive warnings and misleading scan results such as suddenly pops up alert in front of the desktop on your computer, announcing that the PC is seriously in risk. It then start scanning and asks for users to purchase it once scanning is completed. But actually it is not true, it just scareware your system to execute certain processes that are nonexistent, it aiming to get your money so you must skip it. Windows Recovery is preventing from scanning by anti-virus and you should remove windows recovery malware completely by manual to make your computer safety.

Windows Recovery Identified as Security Threat by Impressions
Windows Recovery reputation/ rating online is terrible. Windows Recovery is installed/ run without your permission. The official website of Windows Recovery is poorly built without contact info. The payments website of Windows Recovery is suspicious & claims your OS is unsafe. Poor Performance like highly-consumed system resources is caused by Windows Recovery.