Help_Recover_Instructions virus, simple removal instruction

Help_Recover_Instructions is a bunch of files on your computer that contain a message for a user. This message claims that your files have been encrypted and you have to pay money for extortionists to get them back. This kind of virus is called a crypter. But the truth is that this crypter virus is fake and you files are completely fine. Check this instruction to know how to remove these pop-ups and malicious downloader.


Help_Recover_Instructions
Help_Recover_Instructions

The developers of Help_Recover_Instructions are using interesting ways of installation for their fake program. They are using bundling method with some other programs. When you install this bundle you will also install Help_Recover_Instructions files in EVERY(!) folder on your computer.

After the installation, you will see 3 Help_Recover_Instructions files in all folders on your computer:

help_recover_instructions.html
help_recover_instructions.png
help_recover_instructions.txt

All these files will contain the same message about encryption of your files. The only difference between them is in links, you will be able to click on the links on help_recover_instructions.html files. But you should not do that! It is not safe to click on them, you will be redirected to a payment page where you can pay to fake extortionists or you will be redirected somewhere else and infected with more malicious files. Because it is a fake crypter, your files are safe, all you need to do is to remove all of them from your computer. But the real danger is hiding in a downloader file that installed these files on your computer. Follow the instructions below to remove these files and a downloader.


Help_Recover_Instructions automatic removal tool:

Help_Recover_Instructions removal steps:

  • Download GridinSoft Anti-Malware and scan your computer with it.
  • Click on “Apply” to remove all infections found after the scan is completed:
  • Apply actions by GridinSoft Anti-Malware

  • Shut down all your available browsers.
  • In GridinSoft Anti-Malware click on “Tools” and then on “Reset browser settings“:
  • Built-in utility of GridinSoft Anti-Malware to reset browser settings

  • Follow the instructions, select browsers you need to be reset, and click on “Reset” button. Finally, restart your computer to apply all made changes:
  • Options to reset browsers with GridinSoft Anti-Malware

Video explaining how to reset your browser using GridinSoft Anti-Malware:

How to prevent your PC from being reinfected with Help_Recover_Instructions in the future.

GridinSoft Anti-Malware offers excellent solution which may help to prevent your system from being contaminated with malware ahead of time. This feature is referred to as “Real-Time Protection”. By default, it is disabled once you install the software. To enable it, please click on “Protect” button and press “Start” as demonstrated below:

Enabling Real-Time Protection by GridinSoft Anti-Malware

This options helps you to prevent execution of malicious programs and to avoid their installation ahead of time. When certain malware tries to install itself into your system, GridinSoft Anti-Malware and its Real-Time Protection module will terminate this installation attempt ahead of time. You may click on “Confirm” button to continue blocking this malicious program, or to select “Ignore this file” and allow the malicious application to be installed (at your own risk):

Malicious item blocked by GridinSoft Anti-Malware

Leave a Comment


*