Data Restore
From Wiki-Security, the free encyclopedia of computer security
|
||||||||||||||||
Wiki-security.com malware researchers have identified and classified a computer program calling itself Data Restore, as a fake computer analysis and optimization tool. This means that Data Restore is a harmful and dangerous malware infection that attempts to masquerade as a bogus computer defragmenting tool on the computer systems that Data Restore infects.
As is the usual way with most rogue security programs of this kind, Data Restore comprises a spiteful and malevolent computer security threat that seriously threatens the integrity of any compromised computer systems' security environment. In addition to comprising a high-risk malware threat, as a fake computer defragmenter, Data Restore is also a malicious scareware scam that seeks to manipulate and deceive you by scaring you into thinking that your computer system's hard drive is seriously compromised with all kinds of errors and other severe issues.
The Data Restore Scareware Scam
As a spiteful scareware scam, Data Restore was created with an arsenal of malicious tactics and techniques solely designed to convince you of the blatant falsehood that there is something serious wrong with your computer's hard drive. These scareware-type tactics and techniques, include Data Restore's abilities to:
– Initiate entirely bogus scans of your computer system's hard drive.
– Conclude this bogus scan with a fake 'detection' report that comprises a list of non-existent hard drive errors, issues, and other problems.
– Flood compromised computer systems with a constant stream of frustrating and annoying pop-up alerts, which work to fully reinforce the lies and falsehoods inferred in Data Restore's bogus scans and detection reports.
Do not be fooled by any of these malicious tactics and techniques. They are filled with intentional and blatant lies aimed at achieving one singular end result and that end result is to pave the way to allow Data Restore and this rogue security program's malicious cyber-criminal creators to rob you of as much of your hard earned cash as Data Restore can possibly manage.
The following examples are of the specific kinds of messages that Data Restore's bogus pop-up alerts are known to contain:
Critical Error!
Damaged hard drive clusters detected. Private data is at risk.
Critical Error
RAM memory usage is critically high. RAM memory failure.
Activation Reminder
Data Restore Activation
Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features.
System Error
An error occurred while reading system files. Run a system diagnostic utility to check your hard disk drive for errors.
Hard Drive Failure
The system has detected a problem with one or more installed IDE/SATA hard disks. It is recommended that you restart the system.
Critical Error
Hard drive critical error. Run a system diagnostic utility to check your hard disk drive for errors. Windows can't find hard disk space. Hard drive error.
The entire purpose of this malicious rogue defragmenter's existence is to convince you to buy into Data Restore's false pretense of legitimacy, the 'full,' 'registered' or 'licensed' version of this malicious program. The problem with this is that, regardless of the specific version you may be referring to in Data Restore's entirety, Data Restore is utterly useless in terms of aiding or helping your computer system in any way; rather, both version are incredible dangerous and harmful to both the personal, sensitive data saved on your computer and your computer system's overall safety.
To check your computer for Data Restore, download
SpyHunter Spyware Detection Tool.
SpyHunter spyware detection tool is only a scanner meant to assist you in detecting Data Restore and other threats. If you detect the presence of Data Restore on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of Data Restore.
Contents |
Detection of Data Restore (Recommended)
Data Restore is difficult to detect and remove. Data Restore is not likely to be removed through a convenient "uninstall" feature. Data Restore, as well as other spyware, can re-install itself even after it appears to have been removed.
You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove Data Restore and other spyware, adware, trojans and viruses on your computer.
Run a Data Restore scan/check to successfully detect all Data Restore files with the SpyHunter Spyware Detection Tool. If you wish to remove Data Restore, you can either purchase the SpyHunter spyware removal tool to remove Data Restore or follow the Data Restore manual removal method provided in the "Remedies and Prevention" section.
Method of Infection
There are many ways your computer could get infected with Data Restore. Data Restore can come bundled with shareware or other downloadable software.
Another method of distributing Data Restore involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing Data Restore on your system. Data Restore installs on your computer through a trojan and may infect your system without your knowledge or consent.
If you think you may already be infected with Data Restore, use this SpyHunter Spyware dectection tool to detect Data Restore and other common Spyware infections. After detection of Data Restore, the next advised step is to remove Data Restore with the purchase of the SpyHunter Spyware removal tool.
Symptoms
Data Restore may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of Data Restore from your computer.
Remedies and Prevention
Data Restore, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. Data Restore along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.
Install a good anti-spyware software
When there's a large number of traces of Spyware, for example Data Restore, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect Data Restore and other types of spyware.
Remove Data Restore manually
Another method to remove Data Restore is to manually delete Data Restore files in your system. Detect and remove the following Data Restore files:
Processes
- %LocalAppData%\[RANDOM CHARACTERS].exe
Other Files
- %Temp%\smtmp\3
- %Temp%\smtmp\1
- %Temp%\smtmp\2
- %Temp%\smtmp\
- %Temp%\smtmp\4
- %LocalAppData%\[RANDOM CHARACTERS]
- %StartMenu%\Programs\Data Restore\
- %StartMenu%\Programs\Data Restore\Data Restore.lnk
- %StartMenu%\Programs\Data Restore\Uninstall Data Restore.lnk
- %UserProfile%\Desktop\Data Restore.lnk
Registry Keys
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" =
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '.zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;.scr;'
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
External links
|
If you believe your computer is infected with spyware, |
- McAfee Threat Center - Library of detailed information on viruses.
- How Spyware And The Weapons Against It Are Evolving
- Crimeware: Trojans & Spyware
- Windows System Update - Latest bug fixes for Microsoft Windows
|