How To Get Rid Of HDD Restore Virus? Eliminate And Remove HDD Restore Virus Fake Antivirus Completely And Manually - By: ArticleSubmit Auto

How to Get Rid of HDD Restore Virus? Eliminate and Remove HDD Restore Virus Fake Antivirus Completely and Manually

HDD Restore Virus is not a legitimate antivirus Program but itself a spyware, more precisely a new kind of rogue antispyware program from the same family of Win HDD, HDD Defragmenter, HDD Scan. The only variation being the center files are changed somewhat and the name is changed to hide it's detection by original Antivirus programs installed on your PC.

This program is spread-out with the help of trojans. When the trojan is commenced, it will automatically download and set up HDD Restore Virus onto your computer without your consent and knowledge and configure it to run when you start OS.

When HDD Restore Virus is started, it will simulate a system scan and detect a lot of various infections that will not be set right unless you first purchase the program. Important to know, all of these reported infections are fake andinexistent on your computer! So you can safely ignore the scan results.

>How to remove HDD Restore Virus, you need a good program to repair the damages, the rogue has caused. It changes files, folders,permissions and registry keys altogether....to rejuvenate your PC from malicious trojans that may still live and make your PC sluggish and to stop from getting re-infected.

How to removeHDD Restore Virus manually.

In order to get rid of HDD Restore Virus altogether, start your PC in safe mode with networking, by pressing F8 key. Clean your Windows temp folder.

Windows Temp folder.

By default, this is C:/Windows/Temp for Windows 95/98/ME, C:/DOCUMENTS AND SETTINGS/ProfileName/LOCAL SETTINGS/Temp for Windows 2000/XP, and C:/Users/ProfileName/AppData/Local/Temp for Windows Vista and Windows 7

HDD Restore Virus stores its files in Windows temp folder. You need to delete these files.

Altered Registry Entries, Files and Folders.

%Temp%[Random Characters]
%Temp%[Random Characters].exe
%Temp%dfrg
%Temp%dfrgr
%Temp%[Random Characters].dll
%Temp%[Random Characters].exe
%Temp%tmp2.tmp

And also

%UserProfile%DesktopHDD Restore.lnk
%UserProfile%Start MenuProgramsHDD Restore
%UserProfile%Start MenuProgramsHDD RestoreHDD Restore.lnk
%UserProfile%Start MenuProgramsHDD RestoreUninstall HDD Restore.lnk

%UserProfile% is C:/Documents and Settings for Windows 2000/XP & C:Users for Windows Vista/7

%Temp% is C:/DOCUMENTS AND SETTINGS/ProfileName/LOCAL SETTINGS/Temp for Windows 2000/XP & C:/UsersProfile/Name/AppData/Local/Temp for Windows Vista and Windows 7

Registry Entries:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[Random Characters]"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[Random Characters].exe"

Processes:
[Random Characters.exe]

You can also taskkill the random characters.exe file from your task manager e.g (AcD26689iuipv.exe) before you run the reimagepcrepair scan using the command

Go to start menu and click 'Run' and type as below

taskkill /f /im randomcharacters.exe like taskkill /f /im AcD26689iuipv.exe

If you can`t run the IE, then you should repair the proxy settings of Internet Explorer.

Run Internet Explorer,

Click Tools -> Internet Options

Select Connections Tab

Click LAN Settings button.

Uncheck "Use a proxy server" box. Click OK.

Click Apply.

Click OK.

And go to http://reimagepcrepair.com>Go to Reimage For a Complete Scan Now to Get Rid of HDD Restore Virus altogether

About the Author

Tom Parks works for Microsoft. He is currently researching on PC optimization and system security. He is also an avid gamer and owns xbox, PS3, Nintendo Wii, Dsi and PSP. Visit my blog http://reimagerepairreview.com

Article Directory Source: http://www.articlerich.com/profile/ArticleSubmit-Auto/95152

Additional Articles From - Home | Computers | Data security