How to remove Data Recovery (DataRecovery) malware and virus program

Sept. 14, 2011 - PRLog -- For automatic removal of this virus please read this article:
http://remove-malwares.blogspot.com/2011/09/data-recovery-virus-how-to-remove-data.html

Data Recovery is a bogus system optimizer and antivirus software which is just like HDD Repair, PC Repair, System Recovery fake softwares. Data Recovery may scan system about memory, hard drive, registry status of compromised system and use false positive to scare computer owners. With persuasive errors such as critical error about Hard Drive tells you it’s not found. Missing hard drive. Data Recovery can easily put you in its designed trap. For it appears as an unregistered version, to fix all the so-called threats from false positive, Data Recovery suggests you to buy its full version, which doesn’t exist at all. All it wants is your money and it cannot be easily uninstalled as legit software. Anyone who has already suffered from Data Recovery should remove Data Recovery as early as possible.

For automatic removal of this virus please read this article:
http://remove-malwares.blogspot.com/2011/09/data-recovery...

Manual removal

Virus files to be deleted:
%LocalAppData%\
%LocalAppData%\.exe
%LocalAppData%\~
%LocalAppData%\~
%StartMenu%\Programs\Data Recovery\
%StartMenu%\Programs\Data Recovery\Data Recovery.lnk
%StartMenu%\Programs\Data Recovery\Uninstall Data Recovery.lnk
%Temp%\smtmp\
%Temp%\smtmp\1
%Temp%\smtmp\1
%Temp%\smtmp\2
%Temp%\smtmp\3
%Temp%\smtmp\4
%UserProfile%\Desktop\Data Recovery.lnk

Virus registry entries to be deleted:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" =
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"

Excellent removal video can be watched at the link above.