A number of computer users have encountered a program called ‘Windows Repair’ only it does not to appear to be any type of ‘Windows Repair’ program that could be offered by a reputable company such as Microsoft. Instead, there is a fake Windows Repair application that touts itself as a program that will identify and fix computer issues. The users who have reported having this Windows Repair program will verify that it does not repair any type of computer issue but instead display an endless loop of popup alerts and misleading messages.
Windows Repair is essentially a program developed by computer hackers that closely resembles legitimate PC repair applications that can be purchased at a local computer store or electronics retailer. Windows Repair may be included with a free download from a malicious or compromised website. The creators of Windows Repair, basically hackers, have created Windows Repair to use clever tactics in scanning a computer making it look as if the program has detected several issues. After that, the fake PC repair program will offer a paid-for version to resolve the issues but to a victim’s surprise, Windows Repair won’t follow through with its promise of fixing issues after purchased.
How Can You Remove Windows Repair?
Windows Repair can be very difficult to manually remove if you are an inexperienced computer user. Not to mention, Windows Repair has been known to populate the Windows Registry with many different entries and removing the wrong entries could render a PC damaged or useless. The use of a reputable antispyware or antivirus tool is recommended to safely remove Windows Repair from your Windows computer.
To easily remove Windows Repair, find the following process and end them in the task manager. After that is done, delete each related Windows Repair file from your hard drive. In additional to locating the following processes, it is recommended that you delete the Windows Repair registry entries listed below as well. It is also a good idea to uninstall the Windows Repair application via your add/remove programs function found in the Windows Control Panel if your system recognizes Windows Repair has an installed program.
Windows Repair files (and folders) to remove:
- %Documents and Settings%\[User Name]\Start Menu\Programs\Windows Repair\Uninstall Windows Repair.lnk
- %Documents and Settings%\[User Name]\Start Menu\Programs\Windows Repair\Windows Repair.lnk
- %Documents and Settings%\[User Name]\Start Menu\Programs\Windows Repair
- %Documents and Settings%\[User Name]\Desktop\Windows Repair.lnk
- %Documents and Settings%\All Users\Application Data\[RANDOM CHARACTERS].dll
- %Documents and Settings%\All Users\Application Data\[RANDOM CHARACTERS].exe
- %Documents and Settings%\All Users\Application Data\[RANDOM CHARACTERS]
Windows Repair registry entries to remove:
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1′
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s’s:/ogn:/uyu:/dyd:/c’u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/’wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v’w:/rbs:’
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1′
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0′
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[RANDOM CHARACTERS].exe”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[RANDOM CHARACTERS]“
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1′
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s’s:/ogn:/uyu:/dyd:/c’u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/’wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v’w:/rbs:’
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1′
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0′
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[RANDOM CHARACTERS].exe”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[RANDOM CHARACTERS]“