Data Restore Removal Process (remove DataRestore)

Protect Yourself from Data Restore

- Remove rogue anti-spyware/anti-virus programs
- Prevent trojans, hijackers & other malware infections
- Use spyware helpdesk to resolve pesky malware

Start Your Scan Now to Detect Data Restore

Several rogue security applications are spreading throughout the internet nowadays, which makes it a necessity to do research first before purchasing software online. Our malware researchers have always been on the lookout for these rogue applications, so a quick search should be able to tell you if the software you are about to buy was, in the past, discovered to be untrustworthy. In this article, we are about to discuss a newly discovered rogueware called Data Restore, which is a rogue PC defragmenter and optimization software. Data Restore is similar to Data Repair and Data Recovery.

The Characteristics of Data Restore

PCHubs malware researchers noted that Data Restore is a clone of Data Repair and Data Recovery, which have both been previously detected to be rogue optimization and diagnostic tools, as well. This means that they may have similar characteristics and symptoms of infection. Data Restore is usually spread via Trojans from infected website and fake online scanners. Since it is caused by a Trojan, the presence of Data Restore on your computer can cause a number of privacy violations and can block you from accessing various legitimate Windows applications and files on your PC.

Once installed on the infected PC, Data Restore would proceed to frighten PC users that their computer is infected by showing false critical system errors, fake registry entries and critical hard drive problems. A bogus system scan is displayed which yields results showing that your computer is infected with numerous system errors and RAM problems. These detected errors and problems must not be believed since these are actually just created by the Data Restore program and are actually non-existent. All these are just scare tactics so that the computer user would be enticed to purchase the full version of Data Restore in order to fix and remove the alleged errors and infections. As confirmed by our malware researchers, even the full version has been confirmed to be a fake, so it is of utmost importance not to divulge your credit card information to the Data Restore website unless you want to end up losing your money.

What to do when your Computer is Infected with Data Restore

It is important to remove Data Restore from your computer without delay before it can cause more damage to your computer. Our security analysts have noted that the longer Data Restore is left on your computer, then the more that your computer becomes vulnerable to more malware infections and remote attacks. Data Restore was also observed to have the ability to hide shortcuts and change the desktop background to a black color. Data Restore can also hide some of your important files and folders which can make you believe that your computer indeed has errors. This would potentially cause loss of some of your important information, so it is important to remove Data Restore as soon as possible.

Data Restore can be removed by running a genuine security anti-malware application on the infected computer. This must be updated with the latest signature database in order to remove all traces of Data Restore and to protect your computer against all future malware attacks.

Are you getting popups from Data Restore? Have you identified that you have Data Restore installed on your computer? Do you wish to remove Data Restore completely from your computer?

Why should you remove Data Restore?

If Data Restore resides on your computer, it can potentially damage your personal files or you may end up losing data stored on your system. Research has shown that Data Restore may have the ability to make your computer vulnerable to remote attacks which could result, initially, in loss of money, possibly identity theft, and, eventually, a painstaking Data Restore removal process.

How can you manually remove Data Restore

Manual removal of Data Restore may not be for everyone. Each manual Data Restore removal step must be followed delicately to completely remove all related files and registry entries from your computer. If you are unsure or have doubts about editing your system registry, then we recommend that you use the automatic Data Restore removal process.

Data Restore can be removed manually by following the steps below.

1. With all programs closed, click the Start Menu and go to the Control Panel.
2. Locate the Add/Remove Programs icon and double click it.
3. Locate Data Restore in the list of programs. If you find it, select it and remove it. If you cannot find Data Restore, you can continue to step 5.
4. Restart your computer.
5. Close all open programs and windows on your desktop.
6. Open your registry editor (regedit) program by going to Start Menu, type in regedit, and click OK.
7. Find all of the following registry entries and delete them. If you do not know how to do this, then you can read how to edit the registry in Windows.
   HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'

   HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" =

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""

   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'

8. You may need to return to this removal process for removing Data Restore. You can do this easily by bookmarking or adding a favorite to this page by clicking here. If you are using the FireFox web browser you can press the keys Ctrl and D simultaneously to bookmark this page.

   Image 1. Bookmark PCHubs removal process

   

9. Delete all of the following files that are associated with Data Restore from your computer.

   %LocalAppData%\

   %LocalAppData%\.exe

   %StartMenu%\Programs\Data Restore\

   %StartMenu%\Programs\Data Restore\Data Restore.lnk

   %StartMenu%\Programs\Data Restore\Uninstall Data Restore.lnk

   %Temp%\smtmp\

   %Temp%\smtmp\1

   %Temp%\smtmp\2

   %Temp%\smtmp\3

   %Temp%\smtmp\4

   %UserProfile%\Desktop\Data Restore.lnk

   If you need a better understanding on how to search for these files then you can read how to find and search for files and folders here.

   If you have issues deleting any of the previously listed files that are associated with Data Restore, you can try rebooting your computer into safe mode. Booting into safe mode may allow certain malicious files to be deleted. If you are wondering how to boot into safe mode, you can read our process for starting a computer in safe mode here.

   Image 2. Select "Safe Mode with Networking"

   

10. After locating and deleting the previous files you must remove all directories associated with Data Restore by going to the C:\ProgramFiles\Data Restore folder, select it, and delete it. In some cases you may not be able to find this directory. You can still continue to the next step.

11. Restart your computer. You do not need to boot into safe mode at this point. You should have removed Data Restore completely from your computer. If you find that Data Restore is still on your computer, you can repeat the steps again or go to the automatic Data Restore removal process.