How to remove File Restore virus

[Jack]

File Restore is a PC virus that will display fake alerts, claiming that several hard drive issues were detected on your computer.
In reality, none of the issues are real, and are only used to scare you into buying File Restore and stealing your personal financial details.
We strongly advise you to follow our File Restore removal guide and ignore any alerts that this malicious software might generate.Under no circumstance should you buy this rogue security software as this can lead to identity theft.

If you've got a File Restore infection , you'll be seeing this screens :




Registration codes for File Restore
As an optional step,you can use the following license key to register File Restore virus and stop the fake alerts.
File Restore activation code: 08467206738602987934024759008355
Please keep in mind that entering the above registration code will NOT remove File Restore from your computer , instead it will just stop the fake alerts so that you'll be able to complete our removal guide more easily.

How to remove File Restore virus

This is a self-help guide, use at your own risk.

If you are still experiencing problems on your PC after following the instructions below or would like to have one of our staff members guide you through the process, please start a new thread in our Malware Removal Assistance forum.

STEP 1 : Start your computer in Safe Mode with Networking

To boot into Safe Mode with Networking press and hold the F8 key as your computer restarts.
On the Advanced Boot Options screen, use the arrow keys to highlight Safe Mode with Networking , and then press ENTER

---

STEP 2: Run RKill to terminate File Restore malicious processes

1. While your computer is in Safe Mode with Networking ,download and run RKill to terminate File Restore malicious processes.
   RKILL DOWNLOAD LINK (This link will automatically download RKILL renamed as iExplore.exe)
2. Run Rkill , when the program has completed its task, it will generate a log. You can then proceed with the rest of the guide.
   

WARNING: Do not reboot your computer after running RKill as the malware process will start again , preventing you from properly performing the next step.

---

STEP 3: Download and scan with Malwarebytes Anti-Malware FREE to remove File Restore malicious files from your computer.

1. Download Malwarebytes Anti-Malware FREE.
   MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK (This link will open a download page in a new window from where you can download Malwarebytes Anti-Malware Free)


2. Install Mawlarebytes Anti-Malware by following the prompts. Do not make any changes to the default installation settings and do not restart your computer if asked so.
   
3. On the Scanner tab,please select Perform full scan and then click on the Scan button to start scanning your computer for any possible infections.
   
4. When the scan is finished click the 'OK' button and then you will be presented with a screen showing you the malware infections that Malwarebytes' Anti-Malware has detected.
   Make sure that everything is Checked (ticked) and click on Remove Selected button.
   
5. Malwarebytes' Anti-Malware will now start removing the malicious files.
   If during the removal process Malwarebytes will display a message stating that it needs to reboot, please allow this request.
   

---

STEP 4: Download and scan with HitmanPro to remove File Restore rootkit from your computer.

1. This step can be performed in Normal Mode ,so please download the latest official version of HitmanPro.
   HITMANPRO DOWNLOAD LINK (This link will open a download page in a new window from where you can download HitmanPro)
2. Start HitmanPro  by double clicking on the previously downloaded file. and then following the prompts.
   
3. Once the scan is complete, a screen displaying all the malicious files that the program found will be shown as seen in the image below.After reviewing each malicious object click Next .
   
4. Click Activate free license to start the free 30 days trial and remove the malicious files.
   

---

STEP 5 : Restore your shortcuts and remove any left over malicious registry keys

File Restore has moved your shortcuts files in the Temporary Internet folder and added some malicious registry keys to your Windows installation , to restore your files we will need to perform a scan with RogueKiller.

1. Please download the latest official version of RogueKiller.
   ROGUEKILLER DOWNLOAD LINK (This link will automatically download RogueKiller on your computer)
2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Start button to perform a system scan.
   
3. After the scan has completed, press the Delete button to remove any malicious registry keys.
   
4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.
   

---

STEP 6: Unhide your files and folders

File Restore modifies your file system in such a way that all files and folders become hidden, to restore the default settings , you'll need to run the below program.

1. Download the Unhide utility, to unhide your files and folders.
   UNHIDE.EXE DOWNLOAD LINK (This link will automatically download the Unhide utility on your computer)
2. Double-click on the Unhide.exe icon on your desktop and allow the program to run.The whole process should not take more than 10 minutes to complete,and at the end this utility will generate a report.
   

---

STEP 7: Get your desktop look back!

File Restore changes your desktop background to a solid black color,to change it back to default one follow the below instruction.

• Windows XP : Click on the Start button and then select Control Panel. When the Control Panel opens, please click on the Display icon. From this screen you can now change your Theme and desktop background.
• Windows 7 and Vista : Click on the Start button and then select Control Panel. When the Control Panel opens, please click on the Appearance and Personalization category. Then select Change the Theme or Change Desktop Background to revert back to your original Theme and colors.

If you are still experiencing problems while trying to remove File Restore from your machine, please start a new thread in our Malware Removal Assistance forum.