Security Stronghold security made easy

How to remove Data Recovery: Download Removal Tool


* What is Data Recovery

* Download WiperSoft Antispyware Malware Remediation Tool

* Remove Data Recovery manually

* Get Professional Support

* Read Comments


Threat indicator: HIGH

Threat's profile

Name of the threat:

Command or file name:

Threat type:

Affected OS:

Data Recovery

random.exe

Rogue

Win32/Win64 (Windows XP, Vista, Windows 7, Windows 8/8.1, Windows 10)


Data Recovery is one from wide spread family of fake disk defragmentation programs that became popular in last 5 months. Program has many different names with the same core - HDD Fix, Window XP/Vista/7 Restore, System Recovery and many others with similar names. Interface of all this threats look the same trying to copy well-known brands or standard defragmentation utilities.

One of the inconveniences of Data Recovery is that by changing Desktop and Wallpaper responsible keys in the registry it makes your desktop black and with no icons. And there will be no standard option to turn it back to normal. this is done to make you think something is wrong with your file system or HDD. Data Recovery also disables Taskmanager.

After performing fake HDD analysis virus will find numerous problems with your disk and file system and will offer to fix all that for some amount of money. To remove this threat you can either follow instructions on this page and download removal tool or register Data Recovery with this key:

1203978628012489708290478989147

And uninstall software from Add/Remove programs in Control Panel. Quality antivirus scan is strongly recommended after uninstalling rogue application to make sure every trace of it is removed.


Data Recovery

Data Recovery intrusion method

Data Recovery copies its file(s) to your hard disk. Its typical file name is random.exe. Then it creates new startup key with name Data Recovery and value random.exe. You can also find it in your processes list with name random.exe or Data Recovery. Also, it can create folder with name Data Recovery under C:\Program Files\ or C:\ProgramData.

If you have further questions about Data Recovery, please call us on the phone below. It is toll free. Or you can use programs to remove Data Recovery automatically below.


Download Wipersoft Antispyware

Download this advanced removal tool and solve problems with Data Recovery and random.exe (download of fix will start immediately):

Download WiperSoft Antispyware to remove Data Recovery

* WiperSoft Antispyware was developed to remove threats like Data Recovery in automatic mode. Remover has active module to protect PC from hijackers, trojans, ransomware and other viruses. Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.


Features of WiperSoft Antispyware

* Removes all files created by viruses.

* Removes all registry entries created by viruses.

* You can activate System and Network Guards and forget about malware.

* Can fix browser problems and protect browser settings.

* Removal is guaranteed - if Wipersoft fails ask for FREE support.

* 24/7 Spyware Helpdesk Support included into the package.


Download Stronghold AntiMalware by Security Stronghold LLC

Download antimalware designed specifically to remove threats like Data Recovery and random.exe (download of fix will start immediately):

Download AntiMalware to remove Data Recovery

Features of Stronghold Antimalware

* Removes all files created by Data Recovery.

* Removes all registry entries created by Data Recovery.

* Fixes browser redirection and hijack if needed.

* "Toolbar Remover" tool will help you get rid of unwanted browser extensions.

* Removal is guaranteed - if Stronghold AntiMalware fails ask for FREE support.

* 24/7 Helpdesk Support and 5 hours of Remote Support via GoToAssist included into the package.

Let our support team solve your problem with Data Recovery and remove Data Recovery right now!

support person

Submit support ticket below and describe your problem with Data Recovery. Support team will offer you solution in several minutes and give a step-by-step instruction on how to remove Data Recovery. Trouble-free tech support with over 10 years experience removing malware.


Submit support ticket


Software Industry Professionals Member
Threat's description and solution are developed by Security Stronghold security team.

Here you can also learn:

* Technical details of Data Recovery threat.

* Manual Data Recovery removal.

* Download WiperSoft Antispyware Malware Remediation Tool.


How to remove Data Recovery manually

This problem can be solved manually by deleting all registry keys and files connected with Data Recovery, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Data Recovery.

To get rid of Data Recovery, you should:

file logo

1. Kill the following processes and delete the appropriate files:

  • random.exe
  • Data Recovery.lnk
  • Uninstall Data Recovery.lnk

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.

**Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.

windows folder logo

2. Delete the following malicious folders:

  • %StartMenu%\Programs\Data Recovery\
  • %Temp%\smtmp\
  • %Temp%\smtmp\1
  • %Temp%\smtmp\1
  • %Temp%\smtmp\2
  • %Temp%\smtmp\3
  • %Temp%\smtmp\4

windows registry logo

3. Delete the following malicious registry entries and\or values:

  • Key:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced

    Value: ShowSuperHidden
  • Key:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced

    Value: Hidden
  • Key: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download
    Value: heckExeSignatures
    Data: no
  • Key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system

    Value: DisableTaskMgr
    Data: 1
  • Key:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

    Value: DisableTaskMgr
    Data: 1
  • Key:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

    Value: NoDesktop
    Data: 1
  • Key:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments

    Value: SaveZoneInformation
    Data: 1
  • Key:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations

    Value: LowRiskFileTypes
    Data: /{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:
  • Key:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

    Value: NoChangingWallPaper
    Data: 1
  • Key:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

    Value: WarnonBadCertRecving
  • Key:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

    Value: CertificateRevocation
  • Key: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
    Value: Use FormSuggest
    Data: Yes

Warning: if value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.


If Data Recovery blocks you from running security programs.

Often rogue programs like Data Recovery block you from running security programs and visiting anti-virus websites. In this case we recommend you to boot your Windows in Safe Mode with Networking. This is special mode when Windows will not load third-party services, drivers and start-up objects. However you will be able to use Internet. Just download and run suggested programs for easy Data Recovery removal is Safe Mode with Networking. To load in Safe Mode with Networking and remove Data Recovery do the following:


  • Start or restart your Windows

  • Keep pressing F8 button from the beginning of the boot

  • This will open Advanced Boot Option menu

  • In the menu choose Safe Mode with Networking (use arrows on the keyboard to navigate)

  • Wait until Windows loads

  • Download WiperSoft Antispyware Malware Remediation Tool scan and remove found threats.

  • Restart Windows in Normal Mode


Information provided by: Aleksei Abalmasov

Next threat: System Recovery »

« Back to catalog

Home | Partners | Shop | Support | Terms of use | Contact Us | Privacy Policy | Sitemap

Copyright © 2019 Security Stronghold. All Rights Reserved. All content on this website is protected and belongs to Security Stronghold LLC.