FrEn

E-mail Print

Free Removal Tool for Data Restore
Written by Administrator  |  Friday, 30 September 2011 05:04
AddThis Social Bookmark Button
Data Restore is another spyware from the Data Recovery, Master Utilities... family. Data Restore is not a legit program; it's a fake, a counterfeit. Data Restore claims to fix your system, but not, do not trust on it. Do not believe in the scan results of this pretentious, it's a scam, and the only flaw in your system is this Data Restore. Data Restore is just another fake Antispyware whose purpose is to trick you to pay this useless program. Uninstall Data Restore immediately from your system.

Data Restore

To remove Data Restore (Uninstall Data Restore)

  • Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
  • Choose Start computer in SAFE MODE with network support (This removal tool should work under normal mode as well)
  • Download this free removal tool for Data Restore
  • Extract it
  • Launch
  • Click on the delete button

Data Restore will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

  • [random].exe

Files :

  • %Temp%\smtmp\[NUMBER]
  • %CommonAppData%\[random]
  • %CommonAppData%\[random].exe
  • %CommonAppData%\~[random]
  • %StartMenu%\Programs\Data Restore\
  • %Programs%\Data Restore\Uninstall Data Restore.lnk
  • %Programs%\Data Restore\Data Restore.lnk
  • %DesktopDir%\Data Restore.lnk

Registry

New registry keys created

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\[Random0]
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\[Random0]\DEBUG
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\[Random1]
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\[Random1]\DEBUG
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\[Random2]
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\[Random2]\DEBUG

New registry values created

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\[Random0]\DEBUG
    • Trace Level = ""
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\[Random1]\DEBUG
    • Trace Level = ""
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\[Random2]\DEBUG
    • Trace Level = ""
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
    • Use FormSuggest = "Yes"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
    • WarnOnZoneCrossing = 0x00000000
    • WarnonBadCertRecving = 0x00000000
    • CertificateRevocation = 0x00000000
  • HKEY_CURRENT_USER\Software
    • 12B79064-EB17-4f82-9DFE-B975BD26D1DC = ""
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • [Random].exe = "%CommonAppData%\[Random].exe"
    • [Random] = "%AppData%\[Random].exe"

Download

 

Remove Data Restore Software manually :

  • Restart your computer in safe mode :
    • Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
    • Choose Start computer in SAFE MODE
  • Open the infected account
  • Open explorer, paste into the address bar the text %Temp% then press enter, it will open C:\Documents and Settings\Christian\Local Settings\Temp on my computer
  • Remove all .exe files and all random folders under this path
  • Open explorer, paste into the address bar the text %AppData% then press enter, it will open C:\Documents and Settings\Christian\Local Settings\Application Data on my computer
  • Remove all .exe files and all random folders under this path
  • Remove Data Restore.lnk from your desktop
  • Remove Data Restore.lnk from your start menu
  • Click on the start menu button then click on run
  • Type msconfig and press enter
  • Go to the Startup tab
  • Uncheck all random character keys in it and click on the OK button
  • Restart your computer in normal mode
This will solve the problem but you can run the removal tool to remove the other registry keys and values.
 

Add comment


Security code
Refresh

Related articles
Latest posts

  • Free malware removal tool for Guard Online

    Written by %s admin 10/10/2011
    Guard Online is a another rogue Antispyware from the OpenCloud and AV Guard Online familly, it's a malware that pretends to be an Antivirus. Guard Online conducts a fake scan of your system; you are…
    Read more...

  • Free malware removal tool to remove AV Guard Online

    Written by %s admin 05/10/2011
    AV Guard Online is a another rogue Antispyware from the OpenCloud familly, it's a malware that pretends to be an Antivirus. AV Guard Online conducts a fake scan of your system; you are warned by a…
    Read more...

  • Free removal tool to remove Security Guard 2012

    Written by %s admin 05/10/2011
    Security Guard 2012 is a another rogue Antispyware from the OpenCloud familly, it's a malware that pretends to be an Antivirus. Security Guard 2012 conducts a fake scan of your system; you are warned…
    Read more...

  • Free removal tool for Advanced PC Shield 2012

    Written by %s admin 01/10/2011
    Advanced PC Shield 2012 is a another rogue Antispyware, it's a malware that pretends to be an Antivirus. Advanced PC Shield 2012 conducts a fake scan of your system; you are warned by a fake alarm…
    Read more...

  • Security Sphere 2012 Free Removal Tool

    Written by %s admin 01/10/2011
    Security Sphere 2012 is another spyware from the Security Tool family. Security Sphere 2012 is not a legit program; it's a fake, a counterfeit. Security Sphere 2012 claims to fix your system, but…
    Read more...
.
Information | Contact

© All Rights Reserved. net-studio.org 2009