How to remove Windows XP Recovery

Home » Rogue Anti-Spyware » Windows XP Recovery Repair and protect your computer easily. Download Windows XP Recovery removal tool

Windows XP Recovery description

Windows XP Recovery is a rogue anti-spyware application which spreads via trojan horse. Malware downloads itself automatically without user’s knowledge and consent. It seeks to trick user into thinking their PC is infected and need to be healed with its “registered” version of program.

Once active it starts to scan your PC and displays numerous fake warning messages that state about computer infections:

Critical Error!
Damaged hard drive clusters detected. Private data is at risk.

Critical Error
Hard Drive not found. Missing hard drive.

Critical Error
RAM memory usage is critically high. RAM memory failure.

Critical Error
Windows can’t find hard disk space. Hard drive error

Critical Error!
Windows was unable to save all the data for the file \System32\496A8300. The data has been lost. This error may be caused by a failure of your computer hardware.

Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required.

System Restore
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.

Activation Reminder
Windows XP Recovery Activation
Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features.

Low Disk Space
You are running very low disk space on Local Disk (C:).

Windows – No Disk
Exception Processing Message 0×0000013

Windows XP Recovery Diagnostics
Windows detected a hard disk error.
A problem with the hard drive sectors has been detected. It is recommended to download the following sertified <sic> software to fix the detected hard drive problems. Do you want to download recommended software?

This is a scam. Ignore all fake security alerts because they are not real. The parasite may redirect your browser to counterfeit websites as well. They usually offer to pay small fees for its “licensed” version of application. Do not fall for this scam but use decent anti-spyware application and delete malware immediately

How to get rid of Windows XP Recovery

This infection can be removed using Spyware Doctor.

Download does not start? Try a mirror download here

Spyware Doctor is widely valued as one of the best AntiSpyware programs available to protect you from Windows XP Recovery and the latest internet security threats. If your computer is infected with Windows XP Recovery we strongly recommend automatic spyware scanner.

How to manually remove Windows XP Recovery

To get rid of spyware such as Windows XP Recovery you need to remove processes, search and delete registry keys, DLL and other Windows XP Recovery related files from your computer.

Take Note: The manual process of removing spyware from your computer is difficult and puts you at risk of damaging your computer. We advise using our automatic Windows XP Recovery remover.

  1. Uninstall Windows XP Recovery from Control Panel
    Start > Settings > Control Panel > Add/Remove Programs. Double click to uninstall.
  2. Delete Windows XP Recovery registry entries: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'yes'
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = 0'

    To open registry editor click Start > Run > type "regedit".
    Warning! Manual registry entries editing may cause damage to your system.
    Download Uniblue RegistryBooster 2010 to scan for registry errors.
  3. Search and delete these Windows XP Recovery related files:
    %AllUsersProfile%\Application Data\~
    %AllUsersProfile%\Application Data\~r
    %AllUsersProfile%\Application Data\.dll
    %AllUsersProfile%\Application Data\.exe
    %AllUsersProfile%\Application Data\
    %AllUsersProfile%\Application Data\.exe
    %UserProfile%\Desktop\Windows XP Recovery.lnk
    %UserProfile%\Start Menu\Programs\Windows XP Recovery
    %UserProfile%\Start Menu\Programs\Windows XP Recovery\Uninstall Windows XP Recovery.lnk
    %UserProfile%\Start Menu\Programs\Windows XP Recovery\Windows XP Recovery.lnk

Tags

, , ,

Similar Threats

2 Responses on Windows XP Recovery removal

  • 1
    Remove Windows XP Restore, WindowsXP Restore removal help
    June 9th, 2011 08:55

    [...] decent malware remover and delete Windows XP Restore immediately. The parasite is also a clone of Windows XP Recovery [...]

  • 2
    Remove Windows XP Repair, Windows XP Repair removal guide
    June 20th, 2011 08:49

    [...] is a rogue security tool. Malware also can be found in different names, such as Windows XP Restore, Windows XP Recovery. Once installed rogue program will perform a quick system scan and report fake malware infections [...]

Leave a Reply