How to remove System Recovery (SystemRecovery) virus and restore your files

1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading...

Being infected with System Recovery virus is not the end of the world yet. Yes, it hides your files and folders, it makes your icons seem to be missing or gone. Similarly, the programs in the Start menu also disappear suddenly. In addition, instead of the common and nice desktop theme you have to encounter the black background. Well, if you prefer black color of your desktop this is your own choice, of course, and we surely respect it, but often users prefer to have some other backgrounds at their screen. Well, System Recovery virus does not give you any options but the black desktop and that’s it. Keep in mind that this virus is a fake system defragmenter which only aims to get more and more money from unwary users who don’t realize that any information presented by it is a fake one. Buying SystemRecovery will not help them. The problems created by this rogue would remain. What you need to do is to get rid of this infection immediately. The video tutorial in this article instructs you how to do it.

System Recovery automatic removal:

Download the latest version of GridinSoft Trojan Killer, install and run it.

System Recovery manual removal:

Delete System Recovery files:
%LocalAppData%\
%LocalAppData%\.exe
%LocalAppData%\~
%LocalAppData%\~
%StartMenu%\Programs\System Recovery\
%StartMenu%\Programs\System Recovery\System Recovery.lnk
%StartMenu%\Programs\System Recovery\Uninstall System Recovery.lnk
%Temp%\smtmp\
%Temp%\smtmp\1
%Temp%\smtmp\1
%Temp%\smtmp\2
%Temp%\smtmp\3
%Temp%\smtmp\4
%UserProfile%\Desktop\System Recovery.lnk

Delete System Recovery registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" =
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"

(Visited 3,147 times, 1 visits today)

Related posts:

One thought on “How to remove System Recovery (SystemRecovery) virus and restore your files

  1. Should I restore it even a fake default? If I do the system restore my files will be erased and probably return back to its original installed files.

Leave a Comment

*