Language:

English
- English
- Russian
- German
- Spanish
- French

Home & Home OfficeBusinessPartnersClubAbout Security Stronghold

How to remove Data Recovery: Download Removal Tool

What is Data Recovery

Download WiperSoft Antispyware Malware Remediation Tool

Remove Data Recovery manually

Get Professional Support

Read Comments

Threat's profile

Name of the threat:

Command or file name:

Threat type:

Affected OS:

Data Recovery

random.exe

Rogue

Win32/Win64 (Windows XP, Vista, Windows 7, Windows 8/8.1, Windows 10)

Data Recovery is one from wide spread family of fake disk defragmentation programs that became popular in last 5 months. Program has many different names with the same core - HDD Fix, Window XP/Vista/7 Restore, System Recovery and many others with similar names. Interface of all this threats look the same trying to copy well-known brands or standard defragmentation utilities.

One of the inconveniences of Data Recovery is that by changing Desktop and Wallpaper responsible keys in the registry it makes your desktop black and with no icons. And there will be no standard option to turn it back to normal. this is done to make you think something is wrong with your file system or HDD. Data Recovery also disables Taskmanager.

After performing fake HDD analysis virus will find numerous problems with your disk and file system and will offer to fix all that for some amount of money. To remove this threat you can either follow instructions on this page and download removal tool or register Data Recovery with this key:

1203978628012489708290478989147

And uninstall software from Add/Remove programs in Control Panel. Quality antivirus scan is strongly recommended after uninstalling rogue application to make sure every trace of it is removed.

Data Recovery intrusion method

Data Recovery copies its file(s) to your hard disk. Its typical file name is random.exe. Then it creates new startup key with name Data Recovery and value random.exe. You can also find it in your processes list with name random.exe or Data Recovery. Also, it can create folder with name Data Recovery under C:\Program Files\ or C:\ProgramData.

If you have further questions about Data Recovery, please call us on the phone below. It is toll free. Or you can use programs to remove Data Recovery automatically below.

Download Wipersoft Antispyware

Download this advanced removal tool and solve problems with Data Recovery and random.exe (download of fix will start immediately):

Download WiperSoft Antispyware to remove Data Recovery

* WiperSoft Antispyware was developed to remove threats like Data Recovery in automatic mode. Remover has active module to protect PC from hijackers, trojans, ransomware and other viruses. Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.

Features of WiperSoft Antispyware

Removes all files created by viruses.

Removes all registry entries created by viruses.

You can activate System and Network Guards and forget about malware.

Can fix browser problems and protect browser settings.

Removal is guaranteed - if Wipersoft fails ask for FREE support.

24/7 Spyware Helpdesk Support included into the package.

Download Spyhunter Remediation Tool by Enigma Software

Download antimalware designed specifically to remove threats like Data Recovery and random.exe (download of fix will start immediately):

Download AntiMalware to remove Data Recovery

Features of Spyhunter Remediation Tool

Removes all files created by Data Recovery.

Removes all registry entries created by Data Recovery.

Fixes browser redirection and hijack if needed.

"Toolbar Remover" tool will help you get rid of unwanted browser extensions.

Removal is guaranteed - if Spyhunter Remediation Tool fails ask for FREE support.

24/7 Helpdesk Support and 5 hours of Remote Support via GoToAssist included into the package.

Let our support team solve your problem with Data Recovery and remove Data Recovery right now!

Submit support ticket below and describe your problem with Data Recovery. Support team will offer you solution in several minutes and give a step-by-step instruction on how to remove Data Recovery. Trouble-free tech support with over 10 years experience removing malware.

Submit support ticket

Threat's description and solution are developed by Security Stronghold security team.

Here you can also learn:

Technical details of Data Recovery threat.

Manual Data Recovery removal.

Download WiperSoft Antispyware Malware Remediation Tool.

How to remove Data Recovery manually

This problem can be solved manually by deleting all registry keys and files connected with Data Recovery, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Data Recovery.

To get rid of Data Recovery, you should:

1. Kill the following processes and delete the appropriate files:

random.exe

Data Recovery.lnk

Uninstall Data Recovery.lnk

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.

**Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.

2. Delete the following malicious folders:

%StartMenu%\Programs\Data Recovery\

%Temp%\smtmp\

%Temp%\smtmp\1

%Temp%\smtmp\1

%Temp%\smtmp\2

%Temp%\smtmp\3

%Temp%\smtmp\4

3. Delete the following malicious registry entries and\or values:

Key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Value: ShowSuperHidden

Key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Value: Hidden

Key: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download
Value: heckExeSignatures
Data: no

Key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
Value: DisableTaskMgr
Data: 1

Key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
Value: DisableTaskMgr
Data: 1

Key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Value: NoDesktop
Data: 1

Key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
Value: SaveZoneInformation
Data: 1

Key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
Value: LowRiskFileTypes
Data: /{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:

Key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop
Value: NoChangingWallPaper
Data: 1

Key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Value: WarnonBadCertRecving

Key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Value: CertificateRevocation

Key: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Value: Use FormSuggest
Data: Yes

Warning: if value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.

If Data Recovery blocks you from running security programs.

Often rogue programs like Data Recovery block you from running security programs and visiting anti-virus websites. In this case we recommend you to boot your Windows in Safe Mode with Networking. This is special mode when Windows will not load third-party services, drivers and start-up objects. However you will be able to use Internet. Just download and run suggested programs for easy Data Recovery removal is Safe Mode with Networking. To load in Safe Mode with Networking and remove Data Recovery do the following:

Start or restart your Windows
Keep pressing F8 button from the beginning of the boot
This will open Advanced Boot Option menu
In the menu choose Safe Mode with Networking (use arrows on the keyboard to navigate)
Wait until Windows loads
Download WiperSoft Antispyware Malware Remediation Tool scan and remove found threats.
Restart Windows in Normal Mode

Information provided by: Aleksei Abalmasov

Next threat: System Recovery »

« Back to catalog