File Restore Virus

1
File Restore Virus
2
How to Remove File Restore Virus Malware (Manual
Removal Instructions)

• What is File Restore Virus?
• File Restore Virus is a dangerous rogue program
  disguising as legal hard drive repair software
  that will runs itself after your start the
  computer and then opens a whole bunch of prompts
  with horrible results stating there are critical
  errors within your computer to scare you so that
  you need to pay money to activate this rogue to
  get all the errors resolved. This program is
  quite similar to file recovery virus, data
  recovery virus, smart HDD virus with the same
  purpose that pretends to be a legal security
  software trying to rob your money. You cant even
  close all these malicious pop-ups when they are
  shown on your screen. 

3
The Usual Symptoms of File Restore Rogue Malware
Infection

• A.  There will pop up a warning box saying Your
  computer is in critical state. Hard disk error
  detected and listing threats such as Hard drive
  boot sector reading error or System blocks were
  not found etc.
• B.  It will show a checking result with File
  Restore in the title, and listing Scan raw
  tables of system attributes for in-depth
  diagnostics.
• C.  An Overview window popping up to tell you
  Hard drive health status (A brief overview of
  reliability and performance of current hard
  drives).
• D.  You got a alert message which has a content
  of Your disk is in a critical. Click here for
  more S.M.A.R.T. details, take required actions to
  prevent data loss.

4
Screenshots of File Restore Virus Check Page
5
Screenshots of File Restore Virus Repair Page
6
Screenshots of File Restore Virus Overview Page
7
Best Way to Remove File Restore Virus Step by
Step
8
Please follow these steps to get rid of File
Restore Virus manually

• Step 1 Press CTRLALTDEL or CTRLSHIFTESC.
  Open the Windows Task Manager.If that didnt
  work, try another way. Press the Start button and
  click on the Run option. This will start the Run
  tool. Type in task-mgr and press OK. This should
  start the Windows Task Manager.

9
Please follow these steps to get rid of File
Restore Virus manually

• Step 2 Within the Windows Task Manager click on
  the Processes tab. Find the process by name.
  random.exe related to File Restore Virus. Then
  scroll the list to find required process. Select
  it with your mouse or keyboard and click on the
  End Process button. This will kill the process.

10
Step 3 Remove malicious files of File Restore
Virus.

• C\windows\system32\services.exeC\Windows\winsxs
  \amd64_microsoft-windows-s..s-servicecontroller_31
  bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b
  1\services.exeC\Windows\Installer\bbee3ba2-89af
  -930c-bb78-1fb4e17db3cc
• Step 4 Delete malicious registry entries of File
  Restore Virus.
• HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\
  Windows\CurrentVersion\Run\Random.exeHKCU\SOFTWAR
  E\Microsoft\Windows\CurrentVersion\Run\Random.exe
  HKEY_LOCAL_MACHINE\software\microsoft\windows\curr
  entversion\policies\explorerEnableShellExecuteHo
  oks 1 (01)HKEY_LOCAL_MACHINE\SOFTWARE\Microsof
  t\Windows\CurrentVersion\policies\Explorer\run\Ran
  dom.exe