Windows Recovery is a fake scanning tool usually downloaded to the system on accident, and without a user knowing this program will install itself and produce a number of warnings indicating a system infection. These warnings are fake and should be ignored. The warnings it produces will inform a user of various security flaws and will do scans that tell a user that they are infected with a serious Trojan virus, Windows Recovery will then attempt to remove it and then gives a error messages saying the infection can only be removed with the purchase of their software. This is a scam and should never be purchased. If a user attempts to close out of the program it will continue to run in the background taking up system resources causing slow downs. Windows Recovery will also change internet settings causing browser redirects as well as disables some Windows Utilities.
Manual Removal of Windows Recovery: First users should restart into Windows Safe Mode. To do this shutdown the PC first, next turn on the computer and press the F8 button until a menu appears giving the options to start Windows in safe mode. If you don’t get this menu its usually because the F8 key wasn’t pressed in time, if the Windows Startup screen appears and shows its loading Windows this means it wasn’t pressed in time and you’ll have to restart and try again. Once in safe mode you will need to delete the following files that are written to the computer: