File Recovery

File Recovery Description

File Recovery Image 13File Recovery belongs to a family of bogus system optimization applications. These fake defragmenters and disk repair utilities are a scam which goal is to prey on inexperienced computer users. Like most rogue defragmenters, File Recovery will harass the computer user with numerous error messages and system alerts in order to convince them that they need to purchase an expensive 'upgrade' for this useless application. Once File Recovery is installed, File Recovery will run automatically whenever you start up Windows and cannot be removed easily through normal means. Removing File Recovery will require the use of an anti-malware program. ESG security analysts strongly advise to ignore File Recovery's alarming error messages and to regard this program as a malware infection rather than as a supposed computer optimization application.
 
File Recovery has numerous clones, which have been around since at least 2010. Examples of clones of File Recovery include programs with names such as Data Recovery, Memory Scan and System Recovery. Despite the fact that File Recovery claims to offer defragmentation, file recovery, and disk optimization services, there is little to this program except for its misleading interface and a handful of malicious scripts. The main goal of the File Recovery scam is to scare computer users into thinking that their machines are on the verge of breakdown by making outrageous and often impossible claims. Using File Recovery to fix any of these supposed severe computer problems will simply result in additional error messages claiming that the computer user will need to 'register' File Recovery. However, neither File Recovery nor its 'full version' have any way of fixing your computer, so it is not recommended that you pay for this fake defragmenter.

Common Symptoms of a File Recovery Infection


Unfortunately, a File Recovery infection is not limited to misleading error messages. File Recovery will also cause a variety of problems on the infected computer system, either directly or by way of malware typically associated with this bogus security program. Common side effects of a File Recovery infection include:
  • Web browser redirects that may be caused by a rootkit infection on the victim's computer system.
  • Vanishing files, which may have their settings changed to 'hidden' or moved to other locations. File Recovery has been known to move file shortcuts to the Temp folder, for example.
  • Problems accessing and using legitimate security software.

Infected with File Recovery? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect File Recovery

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Screenshots & Other Imagery

File Recovery Image 1 File Recovery Image 2 File Recovery Image 3 File Recovery Image 4 File Recovery Image 5 File Recovery Image 6 File Recovery Image 7 File Recovery Image 8 File Recovery Image 9 File Recovery Image 10 File Recovery Image 11 File Recovery Image 12 File Recovery Image 13

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of File Recovery outbreaks and other threats from global to local level.

File System Details

File Recovery creates the following file(s):
# File Name Size MD5 Detection Count
1 File_Recovery.lnk 84
2 %UserProfile%\Start Menu\Programs\File Recovery 83
3 %ALLUSERSPROFILE%\whvaayta5ugfb2.exe 249,344 870dea68b0b13e07a22b522072d96e75 83
4 %AppData%\Microsoft\Windows\Start Menu\Programs\File Recovery 82
5 %CommonAppData%\[RANDOM].exe N/A
6 %Programs%\File Recovery\Uninstall File Recovery.lnk N/A
7 %Programs%\File Recovery\File Recovery.lnk N/A
8 %DesktopDir%\File_Recovery.lnk N/A
9 %AppData%\Microsoft\Internet Explorer\Quick Launch\File_Recovery.lnk N/A

Registry Details

File Recovery creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[RANDOM].exe" "%CommonAppData%\[RANDOM].exe"

More Details on File Recovery

The following messages associated with File Recovery were found:
Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required.
Critical error
Windows can`t find disk space. Hard drive error.
Hard Drive Boot Sector Reading Error
During I/O system initialization, the boot device driver might have failed to initialize the boot device. File system initialization might have failed because it did not recognize the data on boot device.
Hard drive boot sector reading error
System blocks were not found
Error 0×00000024 – NTFS_FILE_SYSTEM
Error 0×00000078 – INACCESSIBLE_BOOT_DEVICE
Error 0×0000002E – DATA_BUS_ERROR
Error 0×00000050 – PAGE_FAULT_IN_NONPAGED_AREA
The DRM attribute value is too small before disk scan
System blocks were not found
This is most likely occurred because of hard disk failure.
This may also lead to a potential loss of data.
System Restore
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.
The system has detected a problem with one or more installed IDE / SATA hard disks.
It is recommended that you restart the system.
Windows cannot find notepad. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.
Windows detected a hard drive problem.
A hard drive error occurred while starting the application.
Windows – No Disk
Exception Processing Message 0×0000013.

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 9 + 3 ?