File Rescue virus description and removal

File Rescue malware belongs to the virus clan of fake hard drive defragmenters, also known as fake system optimizers. This fake HDD tool is the master of deceit and trickery. The program looks just as its another “big brother” – File Restore virus. These bogus system optimization utilities have the only thing in mind – to trick users into believing their system is in danger due to presence of various system, hard drive and memory errors. Nevertheless, all such errors are fake and not even peculiar to your machine.

File Rescue scam installs its components into the infected PC without user’s knowledge or approval. The very infiltration process is hidden from user’s attention. Thus, nobody can actually terminate the process during which the malicious codes of this malware are actually implanted into the infected workstation. This is the first sign that proves the fact of File Rescue being a rogue program. Furthermore, once the virus is successfully installed, it also modifies your PC in such a manner that makes it possible for the hoax to be launched with every system startup. This explains the fact that users see the GUI of File Rescue malware once then turn their PCs on. However, we forgot to mention that the very first time this hoax comes up is preceded by another scary notification, that is also common to File Restore scareware. Here is how it looks like:

System message – Write Fault Error
A write command during the test has failed to complete. This may be due to a media or read/write error. The system generates an exception error when using a reference to an invalid system memory address.

Write Fault Error

This scary alert comes up the multitude of times, and surely there is no need to such a number of alerts to appear one after another. The purpose of them all is to scare users to death. Finally, another fake system error warning comes up, saying the following:

System Error. Hard disk failure detected
It’s highly recommended to run complete HDD scan to prevent loss of personal files.
Scan and repair, Cancel and restart

Afterwards the interface of File Rescue rogue comes up, and the program immediately begins imitating the healing of your system. It first initiates the bogus system scanning of your machine and reports various fake system, hard drive and memory errors. The majority of them are formalized in the form of annoying popups that come up in the right-bottom section of the screen. By the way, here are the most widely spread examples of them:

Fake HDD’s alert screenshot fake HDD’s alert quotation
This device cannot find enough free resources that it can use This device cannot find enough free resources that it can use
Drive sector not found error Critical error. Drive sector not found error
Data error reading drive C Data error reading drive C:\
Hard drive controller failure Critical Error. Hard drive conroller failure
Serious disk error writing drive C Serious disk error writing drive C
Seek error. Sector not found Seek error. Sector not found
Device initialization failed Device initialization failed

Users whose computers have been infected with malwares like File Rescue should understand and be aware of the fact that all such misleading alerts, notifications, warnings and popups of this scareware aren’t true. The errors that are reported are all but invented and, most probably, your system functions as well as before File Rescue hoax interfered into your private territory. You might though experience the major system slowdown, but this is absolutely the cause of File Rescue virus presence on your hard drive.

The worst thing about File Rescue virus is the issue of hidden files. This virus application sets up the hidden attribute to all your data (files, folders, desktop shortcuts and icons, list of programs in the start menu, pictures and other important documents). In addition, the files are relocated to a special folder that is known as “smtmp”, which also has the hidden attribute. Thus, the issue of your important data missing is fully the cause of File Rescue rogue’s malicious activity.

You should be very careful not to follow the tricks of File Rescue virus. It will tell you that you must buy its licensed version to fix all fake errors and bugs. It will also promise to restore your hidden files, but remember that this program is fully responsible for hiding them initially! Thus, be wise and do not obey the misleading instructions of this hoax! Remove its malicious files and components using the powerful application – GridinSoft Trojan Killer. Below you may also find the necessary guidelines that will explain you how to do it, and how to recover your files that were hidden by this malicious utility.


In order to remove File Rescue malware from your PC it is strongly recommended that you first run GridinSoft Trojan Killer. Use Win + E” hotkey combination to open “My Computer” window. From this stage (in the address field) you may insert the address of GridinSoft Trojan Killer’s site http://trojan-killer.net and download our recommended software. Install and update it, run the scan and remove all threats it finds. Then download two additional free applications called Unhider.exe and restore.exe . The download links are as follows:

Run both of them and reboot your PC. Good luck!

File Rescue automatic remover:

Similar removal video at YouTube:

File Rescue manual remover:

Delete File Rescue files:
%AppData%\Microsoft\Internet Explorer\Quick Launch\File_Rescue.lnk
%Desktopdir%\File_Rescue.lnk
%Programs%\File Rescue\File Rescue.lnk
%Programs%\File Rescue\Uninstall File Rescue.lnk
%CommonAppData%\[rnd_0].exe
%CommonAppData%\[rnd_1]
%CommonAppiData%\[rnd_1].exe
Delete File Rescue registry entries:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\[rnd_0].exe %CommonAppData%\[rnd_0].exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\DisableTaskMgr 0

Leave a Comment

*