Tag Archives: remove

Get Rid Of The Windows Restore Virus – Remove This Malware Fast

Get Rid Of The Windows Restore Virus – Remove This Malware Fast

The Windows restore virus is a program that looks like it meant to protect and optimize your computer but really it contains malware and does nothing at all to protect your PC or laptop. This malicious program works by tricking you into paying for the full version of this program.

This malware gets onto your computer by using hijacked sites to spread this software via pops and by using scripts which will install it without you even knowing about it. As soon as it is on your computer you will start to get warning messages and error messages telling you that your computer is under attack from malware.

You will see generic messages warning you of the following.

#1 Your hard drive has problems and you need to install this program to fix it.

#2 Files and programs are corrupt and you need to run windows restore to fix the problem.

#3 Your Computer security is as risk or it us under attack.

If you click yes to any of these warnings and download this software, or if it installs without you knowing about it you will need to remove the windows restore virus quickly.

Once this malware gets onto your computer it can be very hard to remove it and it will start up every time you start your computer and keep warning you about problems with your PC. All of these warnings are false but since this malware starts up as soon as you start your computer stopping it and being able to remove the windows restore virus can be difficult.

Once this software is installed it will keep prompting you to run a scan and to upgrade to the full version to remove non- existent threats. The only way to stop this is to get rid of the windows restore virus quickly.

How do you get rid of this malware?

This malware disguises itself by generating random files names so to remove this manually can be tricky but it is still possible to do so. Here is how.

#1 start task manger by right clicking on the windows taskbar and clicking on task manager. Once this starts go to the processes tab and look for a process that is made up of randomly generated numbers and letters. For example gkdhfreth1.exe.

Once you find it click on it with your mouse and select end process at the bottom of the task manager box.
If you cannot do this because task manager is blocked by this virus then you need to start your PC in safe mode and follow this procedure again. To start in safe mode restart your computer, press the F8 key before windows starts and select safe mode with networking from the menu screen.

#2 The next step after you have stopped this malware is to delete all the related files. To do this search for a folder called system restore in the programs folder and then delete the system restore folder and all its contents.

#3 Start the registry editor and do the following.

Search for and delete these entries. Where generated file name is listed this is the same file you found in task manager.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “generated file name.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “generated file name”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’

For the entries below you need to change the values on the entries to the opposite of what is listed below. For example if the value is a one below you need to change it to a zero and vice versa.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
“CertificateRevocation” = ‘0’

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ‘0’

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ‘1’

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = 0′

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ‘1’

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ‘1’

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ‘1’

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ‘0’

Once you have done this restart your pc or laptop and this malware should be gone for good. If is still there or you are unsure about how to carry out these steps follow the method below.

#1 Start your PC or laptop in safe mode using step #1 above.

#2 Once in safe mode open your web browser and download a system and registry scanner.

#3 Perform a full system and registry scan. Once you have done this you should restart your PC and you get rid of the windows restore virus for good.

Watch “How to Remove Windows Restore Virus” Video:


Related links:

Get rid of XP total security 2011 Virus – How To Get Rid Of This Malware Fast

Can’t Remove Windows Restore Virus? How To Uninstall Windows Restore Manually?

Windows Malware Remover Software

Brad Armstrong is an author specializing in technology. He writes many articles about technology and with this article he wants to share the solution for how to get rid of the windows restore virus.

More Anti Malware Programs Articles

Remove Computer Viruses, Worms and Malware Fast

Remove Computer Viruses, Worms and Malware Fast

Are you looking for ways to remove computer viruses, worms and malware fast? These malicious programs are able to spread and infect PCs all over the Internet as many users do not take any precautions against them. To get rid of them, a computer user needs to actively look for ways to deal with them. Any time the system gets connected to the web, there is a high chance that the PC will get infected by spyware, adware or viruses if there are not enough protection tools on the PC.

1. The Different Forms of Malicious Programs You Need to Defend Your System Against Malware and Virus Threats

There are many different types of potentially harmful programs that can infect your PC, and it is important to understand the key differences between each of them so as to know the right tools to use against them. One of the best methods that I have used was to download a piece of high quality antispyware, antivirus protection software.

It is capable of detecting viruses, malware, worms and Trojans and had helped me clean up my computer system before. Most people already have antivirus software installed on their systems, but these are not sufficient to defend against other forms of infections from spyware and adware.

2. What Do You Need to Do to Remove Computer Viruses, Worms and Malware Fast?

Dealing with malicious files and viruses requires specific tools and software that have the detection capability to find and destroy them. Finding them manually one by one is not a good idea because these malware can spread very quickly. Once the system is cleaned of these parasites it will be able to start running like new again.

3. What is the Danger of Not Removing Computer Viruses, Worms and Malware?

By not getting rid of them, they will start consuming a lot of resources like memory which then slows down and worsens the systems’ performance significantly.

Are you looking to Remove Viruses, Worms & Malware from your PC? Don’t do it yet, because the author has found many bad spyware and virus cleaning software on the web. Read the author’s review of the Top 5 Spyware & Virus Removal Software on the market now at http://www.review-best.com/spyware-virus-removal-software.htm first!

More Anti Malware Programs Articles