Data Repair virus. How to remove DataRepair malware

New fake anti-malware tool is already circulating in Web. It is known under the name of Data Repair. It is outwardly the same as Data Recovery. It claims to be system diagnostics utility, but believe us, it is far from truth. It pursues one objective only – to persuade trusting computer users that they have got serious bugs which are the results of virus aggressions. Data Repair emphasizes the necessity of immediate help for your PC. It displays preprogrammed invented warning notifications at certain intervals of time. This fake application also initiates a series of system scanners which allegedly detects tons of viruses, worms and rogues.


Data Repair virus
Data Repair virus

The snapshot of this bad program’s scanning screen above reflects the initiation of this pseudo system check. It goes without saying that it purportedly checks up your machine for related problems with “My Computer”, HDD, RAM Memory and OS Registry. A regular optimization tool enhances the computer performance while its scan is in progress, but Data Repair merely depicts something it was coded to. The program we speak about is not in state to fulfill the functions it claims to implement. Despite this absolute truth, it still generates multiple errors in its PC Performance and Stability analysis results. Once you receive these results, the pest insists on purchasing its commercial version by hitting the associated button at the bottom of its GUI. It pushes you to effect a payment, but do it under no circumstances, because you will waste your money for nothing. We would recommend you to keep away from Data Repair’s so-called services. And remove it at once after detection. Our team has developed automatic and manual removal instructions. Find them below please.

Fake information presented by Data Repair malware:

  • Hard drive rotational speed decreased by 20%
  • Drive C initializing error
  • Disk drive C:\ is unreadable
  • System files are damaged. System is unstable.
  • GPU RAM temperature is critically high. Urgent RAM memory optimization is required to prevent system failure
  • The problem may cause errors while loading your operation system
  • RAM memory speed decreased significantly and may cause a system failure
  • Hard drive does not correspond to system requests
  • Damaged hard drive clusters detected. Private data is at risk. Restore is required
  • C:\System32\drivers is damaged. This problem may cause a system failure
  • Hard drive rotational speed exceeds system limits and may cause a system failure
  • Boot sector of the hard drive is damaged
  • Hard drive space less than technical limits
  • RAM Memory temperature is 83

The following fake error messages normally popup in the right-bottom part of user’s desktop. No doubt, they all should also be disregarded by you.

  • Critical Error!
    HDD clusters are partly damaged. Segment load failure
  • Critical Error!
    Windows OS can’t detect a free hard disk space. HDD error
  • Critical Error!
    Damaged hard drive clusters detected. Private data is at risk.
  • Critical Error!
    Hard Drive not found. Missing hard drive.
  • Critical Error!
    RAM memory usage is critically high. RAM memory failure.
  • Critical Error!
    Windows can’t find hard disk space. Hard drive error
  • Critical Error!
    Windows was unable to save all the data for the file \System32\496A8300. The data has been lost. This error may be caused by a failure of your computer hardware.
  • Critical Error!
    A critical error has occurred while indexing data stored on hard drive. System restart required.
  • System Restore
    The system has been restored after a critical error. Data integrity and hard drive integrity verification required.
  • Activation Reminder
    Data Repair Activation
    Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features.
  • Low Disk Space
    You are running very low disk space on Local Disk (C:).
  • Windows – No Disk
    Exception Processing Message 0x0000013

Data Repair automatic removal:

It is also strongly recommended that you run Kaspersky TDSS Killer after you’ve run GridinSoft Trojan Killer.

GridinSoft Unhider download link:
www.trojan-killer.net/download/unhider.exe

GridinSoft Restore download link:
www.trojan-killer.net/download/restore.exe

Data Repair manual removal:

Delete Data Repair files:

  • %LocalAppData%\
  • %LocalAppData%\.exe
  • %LocalAppData%\~
  • %LocalAppData%\~
  • %StartMenu%\Programs\Data Repair\
  • %StartMenu%\Programs\Data Repair\Data Repair.lnk
  • %StartMenu%\Programs\Data Repair\Uninstall Data Repair.lnk
  • %Temp%\smtmp\
  • %Temp%\smtmp\1
  • %Temp%\smtmp\1
  • %Temp%\smtmp\2
  • %Temp%\smtmp\3
  • %Temp%\smtmp\4
  • %UserProfile%\Desktop\Data Repair.lnk


Delete Data Repair registry entries:

  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" =
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"

Leave a Comment

*