Data Restore

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 416
First Seen: September 28, 2011
Last Seen: August 17, 2022
OS(es) Affected: Windows

Data Restore Image

Data Restore, much like its clones Data Recovery and Data Repair, is a fake defragmenter. This malware infection is advertised as a system optimization tool, designed to defragment your hard disk, increase your computer's speed and performance and fix any system errors. However, Data Restore does the opposite of what Data Restore advertises. Instead of defragmenting your hard disk, Data Restore will actually fill it with malicious files, Trojans and scripts; instead of improving your computer's speed and performance, Data Restore causes an infected computer to run slowly, sluggishly and crash frequently; and instead of fixing system errors, Data Restore is designed to pester a user with constant fake system error messages, until a useless '"full version'" of Data Restore is purchased. Data Restore belongs to a category of malware known as rogue security applications, a long-running computer scam with an important presence on the Web. If you have fallen for the scam, and installed Data Restore on your computer system, ESG security researchers recommend removing Data Restore with a real security program that is fully up to date.

Problems and Symptoms Associated with Data Restore

The most obvious symptom of a Data Restore is the presence of constant, alarming error messages from your computer system and from Data Restore itself. These error messages will try to convince you that there is something severely wrong with your computer, ranging from the plausible (there are some disk errors on your hard drive) to the impossible (such as being unable to detect your C: drive, despite your operating system and Data Restore itself being located on this device). Clicking on any of these error messages or on the fix errors button on the Data Restore main interface, takes the victim to a page for entering one's credit card number. Data Restore claims that only its 'full version' can fix all of these nonexistent problems on the victim's computer. Despite its claims to speed up your computer system, a Data Restore infection actually slows down your computer tremendously. Data Restore consumes system resources and runs continually in the background. It is also not programmed very efficiently. Even worse, Data Restore does not play well with many Windows services and common applications. This means that a computer infected with Data Restore will crash frequently. However, this is actually advantageous to Data Restore since it reinforces the illusion that the victim's computer has a severe problem. The problem, in fact, is Data Restore itself.ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
AVG Generic25.CCZJ
Ikarus AdWare.SuspectCRC
AhnLab-V3 Adware/Win32.FoxTab
DrWeb Adware.InstallCore.12
F-Prot W32/InstallCore.A.gen!Eldorado
NOD32 Win32/InstallCore
Fortinet Misc/OnlineInstaller
eTrust-Vet Win32/Agent.A!generic
AntiVir SPR/Dldr.Agent.dt.17
DrWeb Trojan.DownLoader.origin
Comodo ApplicUnwnt.Win32.Adware.Agent.~GGS
Kaspersky not-a-virus:Downloader.Win32.Agent.dt
Avast Win32:Dropper-EFY
F-Prot W32/Dropper.AE.gen!Eldorado
NOD32 a variant of Win32/SweetIM.A

SpyHunter Detects & Remove Data Restore

Data Restore Video

Tip: Turn your sound ON and watch the video in Full Screen mode.

File System Details

Data Restore may create the following file(s):
# File Name MD5 Detections
1. VideoConverterSetup.exe 9b0269781c9d357c00e3c668173a3fab 35
2. video_converter_setup.exe f8c14ab127e63b475aa6a7d9d4200e1f 22
3. A0060305.exe cc53e636516250d1de09f2d79d371170 6
4. ENtNsKwGvJhK.exe 308771f50c0ad12aee141ad369244b8d 2
5. %LocalAppData%\[RANDOM CHARACTERS].exe
6. %Temp%\smtmp\2
7. %LocalAppData%\[RANDOM CHARACTERS]
8. %StartMenu%\Programs\Data Restore\Uninstall Data Restore.lnk
9. %Temp%\smtmp\1
10. %Temp%\smtmp\4
11. %StartMenu%\Programs\Data Restore\Data Restore.lnk
12. %Temp%\smtmp\3
13. %Temp%\smtmp\
14. %StartMenu%\Programs\Data Restore\
15. %UserProfile%\Desktop\Data Restore.lnk
16. 6DSS92c31Apgjk.exe b083cf5dd168f87af9e19f5bf13e20ab 0

Registry Details

Data Restore may create the following registry entry or registry entries:
File name without path
Uninstall Data Restore.lnk
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" =
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '.zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;.scr;'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'

Messages

The following messages associated with Data Restore were found:

Activation Reminder
Data Restore Activation
Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features.
Critical Error!
A critical error has occurred while indexing data stored on hard drive. System restart required.
Critical Error!
Damaged hard drive clusters detected. Private data is at risk.
Critical Error!
HDD clusters are partly damaged. Segment load failure
Critical Error!
Hard Drive not found. Missing hard drive.
Critical Error!
RAM memory usage is critically high. RAM memory failure.
Critical Error!
Windows OS can’t detect a free hard disk space. HDD error
Critical Error!
Windows can’t find hard disk space. Hard drive error
Critical Error!
Windows was unable to save all the data for the file \System32\496A8300. The data has been lost. This error may be caused by a failure of your computer hardware.
Critical Hard Disk Drive Error
Data Restore detected a bad sector on your hard disk drive.
This error may cause the following problems:

- Data corruption and loss
- Hard drive inaccessibility
- System errors and failures
Data Restore Diagnostics
Windows detected a hard disk error.
A problem with the hard drive sectors has been detected. It is recommended to download the following sertified software to fix the detected hard drive problems. Do you want to download recommended software?
Fix Disk
Data Restore Diagnostics will scan the system to identify performance problems.
Start or Cancel
Hard Drive Failure
The system has detected a problem with one or more installed IDE/SATA hard disks. It is recommended that you restart the system.
Low Disk Space
You are running very low disk space on Local Disk (C:).
System Error
An error occurred while reading system files. Run a system diagnostic utility to check your hard disk drive for errors.
System Restore
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.
Windows - Delayed Write Failed
Failed to save all the components for the file \System32\00004823. The file is corrupted or unreadable. This error may be caused by a PC hardware problem.
Windows detected a hard disk problem
A potential disk failure may cause loss of files, applications and documents store on the hard disk. It's highly recommended to scan and solve HDD problems before continue using this PC.
Windows detected a hard disk problem
A potential disk failure may cause loss of files, applications and documents stored on the hard disk. Please try not to use this computer until the hard disk is fixed or replaced.
Windows – No Disk
Exception Processing Message 0×0000013

Trending

Most Viewed

Loading...