Data Recovery Virus Removal - Video Guide

Data Recovery is not a genuine system defragmentation software and can’t help you with anything. This software is actually a scam designed by on-line crooks who are harvesting money using this method. They infect your computer with fake software like Data Recovery which is very hard to remove and then ask you to purchase full version of Data Recovery. You buy full version in good faith not knowing that this software is bogus.

When Data Recovery virus infects your computer, It automatically changes your desktop background image and your desktop just shows black colors. It also hides all icons from the desktop as well as all files on your computer so that you cannot access them easily. These products are designed to gain trust of users and then motivate them to buy a software which is of no use. Such types of products are called fake defragmentation software and such products imitate features of a genuine software while none of those features actually work. Here is what happens when Data Recovery takes over your computer:

1. All the icons on desktop will no longer show up and a black colored background will be applied to your desktop. You will not be able to change background color as right clicking on the desktop will no longer work.

2. The attribute of all files on your hard disk will be changed to hidden. It means that when you’ll browse any partition on your hard disk, you’ll see it completely blank like there are no files on that partition. However all the files are still intact but marked as hidden by Data Recovery virus. Once you get rid of the virus, everything will get back to normal so you don’t need to worry.

3. Fake pop-ups will continuously pop-up in your computer and ask you to purchase full version of Data Recovery virus. Don’t pay attention to any of those prompts as this rogue software is just trying to push you into purchasing full version of data recovery.

How to Remove Data Recovery

It is very hard to remove data recovery because it hides everything on your computer. We advise you to follow any of these removal methods to get rid of data recovery virus:

1. Automatic Removal Method

This is the safest and most effective removal method to delete data recovery from your computer. This method is best because removal is performed by a genuine anti-spyware program. The removal is guaranteed and all the infected files are deleted completely from your computer.

This method is equally popular among new computer users as well as advanced computer users. We have personally tested this method and it works like charm. See how we conducted data recovery removal using this very easy method.

As you can see in above video, we used Spyware Doctor to clear the infections and unhide utility from bleeping computer to unhide all the files on your computer. Just follow these two steps and everything will be back to normal in not time. This method is very powerful, effective and protects your computer from potential threats in future. Spyware Doctor will works as an active shield against infections and all threats will be stopped before they damage your computer.

2. Manual Removal Method.

We don’t recommend this method as It useful only for people who are highly skilled with computers. Still, the chances are that this method won’t work and virus will return back to your computer on next reboot.

If you follow this method and delete wrong files based on your assumption, your computer may no longer boot up and reformatting your machine will be the only option. Please follow manual removal steps at your own risk as this method is not as effective as automatic removal method:

1. First you need to stop Data Recovery process using Task Manager. Press Alt+Ctrl+Delete buttons on your keyboard to run Task Manager and end data recovery process.

2. Delete these infected files from your computer :

%LocalAppData%\
%LocalAppData%\.exe
%LocalAppData%\~
%LocalAppData%\~
%StartMenu%\Programs\Data Recovery\
%StartMenu%\Programs\Data Recovery\Data Recovery.lnk
%StartMenu%\Programs\Data Recovery\Uninstall Data Recovery.lnk
%Temp%\smtmp\
%Temp%\smtmp\1
%Temp%\smtmp\1
%Temp%\smtmp\2
%Temp%\smtmp\3
%Temp%\smtmp\4
%UserProfile%\Desktop\Data Recovery.lnk

3. Delete/Correct these registry entries

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1' HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'

If you follow above steps carefully, your computer should be free of data recovery virus. Please note that above steps should be followed at your own risk. If you are not sure, please follow manual removal method instead.