Information:
Windows Restore is a fake disk defragmenter that uses misleading methods such as displaying fake error messages and pop-ups to make you think that your computer has been infected by malware. It prompts to pay for a full version of the program to remove the infections. If you choose to purchase this bogus program, you will lose your money and give your credit card details to the malware creators who developed this scareware. You credit card details can be sold to other scammers, so you shouldn't purchase this bogus program. Don't give your email either because they might send you spam. Use the removal instructions below to remove Windows Restore from your computer. You can either remove it manually or use an automatic removal tool.
Windows Restore properties:
Changes browser settings.
Shows commercial adverts.
Connects itself to the internet.
Stays resident in background.
Manual removal:
Stop these Windows Restore processes:
[random].exe
Remove these Windows Restore Registry Entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policie \Associations "LowRiskFileTypes" = '{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
Remove these Windows Restore files:
%AppData%\Microsoft\[random].exe
%UserProfile%\Desktop\Windows Restore.lnk
%UserProfile%\Start Menu\Programs\Windows Restore\
%UserProfile%\Start Menu\Programs\Windows Restore\Windows Restore.lnk
%UserProfile%\Start Menu\Programs\Windows Restore\Uninstall Windows restore.lnk
