Restoro Software Broke My Computer

Discussion in 'Software' started by Eileen Speck, May 1, 2020.

  1. Eileen Speck

    Eileen Speck Private E-2

    I bought the program for a year, one license. Ran it, let it scan, found a ton of issues, and ran fix. This morning I came out to the reboot prompt and it told me not to do anything, that the files that needed fixing would appear after the reboot. So I rebooted, and lost everything! It never came back to desktop, no cursor,.nothing. it's now been 10 hours since I hit reboot, and I still have no controls. Can anyone please tell me how to fix this problem? Restoro, destroyed my computer, my only link to the outside world.
     
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

  3. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

  4. Anon-469e6fb48c

    Anon-469e6fb48c Anonymized

    Malwarebytes does the same thing to Advance System care most of those hits are false positive.Malwarebytes likes to cause issues to third party makers like ASC with PUP.Optional

    I have to ignore the threat when scanning is complete.

    I have been using ASC from the start and it never did any damage to my systems.

    But i do agree that i have never heard of Restoro i think what they did was stole the design from iobit company.So it might just be a nock off of asc.

    But i did read a lot of the reviews on the site and it looks like a scam nock off.
    https://www.trustpilot.com/review/restoro.com

    A lot of the post seem to be on the same day's.
     
  5. Replicator

    Replicator MajorGeek

    Yep....restoro is craporo!

    Uninstalling it would be the best advice IMHO.
     
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    She can't.
     
  7. Replicator

    Replicator MajorGeek

  8. Imandy Mann

    Imandy Mann MajorGeekolicious

    And in this virusresearch.org's link at least 3 times I see

    "
    Please, keep in mind that SpyHunter’s scanner tool is free. To remove any detected infection, you need to purchase its full version.
    "
    Trying to send an already flustered pc novice to a site to be played? Do you earn anything?

    If there was an "unLike" button, I'd hit it!
     
    satrow likes this.
  9. Anon-469e6fb48c

    Anon-469e6fb48c Anonymized

    Let me run test.I am not afraid of getting infected.

    Holly crap
    Malwarebytes
    www.malwarebytes.com

    -Log Details-
    Scan Date: 5/2/20
    Scan Time: 10:08 PM
    Log File: f85e6358-8ce2-11ea-8ffd-b42e994ca475.json

    -Software Information-
    Version: 4.1.0.56
    Components Version: 1.0.889
    Update Package Version: 1.0.23342
    License: Trial

    -System Information-
    OS: Windows 10 (Build 18362.815)
    CPU: x64
    File System: NTFS
    User: DESKTOP-9HEUBFL\ZeroCool

    -Scan Summary-
    Scan Type: Threat Scan
    Scan Initiated By: Manual
    Result: Completed
    Objects Scanned: 261950
    Threats Detected: 101
    Threats Quarantined: 0
    Time Elapsed: 0 min, 49 sec

    -Scan Options-
    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Enabled
    Heuristics: Enabled
    PUP: Warn
    PUM: Warn

    -Scan Details-
    Process: 3
    PUP.Optional.Restoro, C:\Program Files\Restoro\bin\RestoroApp.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\bin\RestoroProtection.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\bin\RestoroService.exe, No Action By User, 761, 551606, , , ,

    Module: 3
    PUP.Optional.Restoro, C:\Program Files\Restoro\bin\RestoroApp.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\bin\RestoroProtection.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\bin\RestoroService.exe, No Action By User, 761, 551606, , , ,

    Registry Key: 22
    PUP.Optional.Restoro, HKU\S-1-5-21-795060796-476563376-855322845-1001\SOFTWARE\Local AppWizard-Generated Applications\Restoro, No Action By User, 761, 551612, 1.0.23342, , ame,
    PUP.Optional.Restoro, HKU\S-1-5-21-795060796-476563376-855322845-1001\SOFTWARE\Restoro, No Action By User, 761, 551610, 1.0.23342, , ame,
    PUP.Optional.Restoro, HKLM\SOFTWARE\Restoro, No Action By User, 761, 551614, 1.0.23342, , ame,
    PUP.Optional.Restoro, HKLM\SOFTWARE\CLASSES\CLSID\{BA827421-E282-479E-AE60-34796877B8AE}, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\CLASSES\CLSID\{AE198C69-7358-4856-9029-F4C0FAD524C1}, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\CLASSES\TYPELIB\{C661BE9A-11D8-47DD-A980-6494B09F3AF3}, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\CLASSES\INTERFACE\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\CLASSES\INTERFACE\{BD51A48E-EB5F-4454-8774-EF962DF64546}, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{BD51A48E-EB5F-4454-8774-EF962DF64546}, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BD51A48E-EB5F-4454-8774-EF962DF64546}, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C661BE9A-11D8-47DD-A980-6494B09F3AF3}, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{C661BE9A-11D8-47DD-A980-6494B09F3AF3}, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\CLASSES\CLSID\{AE198C69-7358-4856-9029-F4C0FAD524C1}\InprocServer32, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\CLASSES\CLSID\{BA827421-E282-479E-AE60-34796877B8AE}\InprocServer32, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\CLASSES\Restoro.Engine.1, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\CLASSES\Restoro.Engine, No Action By User, 761, 551619, 1.0.23342, , ame,
    PUP.Optional.Restoro, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\RestoroActiveProtection, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Restoro, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\Restoro.exe, No Action By User, 761, 551617, 1.0.23342, , ame,
    PUP.Optional.Restoro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\Restoro.exe, No Action By User, 761, 551617, 1.0.23342, , ame,

    Registry Value: 1
    PUP.Optional.Restoro, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Restoro, No Action By User, 761, 551606, , , ,

    Registry Data: 0
    (No malicious items detected)

    Data Stream: 0
    (No malicious items detected)

    Folder: 10
    PUP.Optional.Restoro, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\RESTORO, No Action By User, 761, 551604, 1.0.23342, , ame,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Results\EXE2.0.1.8\RUN20200502_2207, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Temp\20200502_2207\DownloaderTemp, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Results\EXE2.0.1.8, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Temp\20200502_2207, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\bin\Results, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Results, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Temp, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\bin, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\bin, No Action By User, 761, 551606, , , ,

    File: 62
    PUP.Optional.Restoro, C:\WINDOWS\RESTORO.INI, No Action By User, 761, 551609, 1.0.23342, , ame,
    PUP.Optional.Restoro, C:\USERS\PUBLIC\DESKTOP\RESTORO.LNK, No Action By User, 761, 551608, 1.0.23342, , ame,
    PUP.Optional.Restoro, C:\PROGRAM FILES\RESTORO\AX.DLL, No Action By User, 761, 551619, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restoro\Help & Support.lnk, No Action By User, 761, 551604, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restoro\Privacy Policy.lnk, No Action By User, 761, 551604, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restoro\Restoro.lnk, No Action By User, 761, 551604, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restoro\Run in safe mode.lnk, No Action By User, 761, 551604, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restoro\Terms of Use.lnk, No Action By User, 761, 551604, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restoro\Uninstall Instructions.lnk, No Action By User, 761, 551604, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restoro\Uninstall.lnk, No Action By User, 761, 551604, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\AV\avupdate_msg.avr, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\AV\cacert.crt, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\AV\HBEDV.KEY, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\AV\productname.dat, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\AV\xbvRei.vdf, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\bin\Results\restoro-service-setup.log, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\bin\Results\restoro-service-updater.log, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\bin\active_protection.txt, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\bin\conf.res, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\bin\urls.set, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Results\EXE2.0.1.8\RUN20200502_2207\installed.rec, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Results\EXE2.0.1.8\RUN20200502_2207\out.log, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Results\EXE2.0.1.8\RUN20200502_2207\restoro.2.log, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Results\EXE2.0.1.8\RUN20200502_2207\restoro.log, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Results\EXE2.0.1.8\RUN20200502_2207\stability.html, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Results\EXE2.0.1.8\RUN20200502_2207\StabilityScanRes.xml, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Results\EXE2.0.1.8\RUN20200502_2207\vars.res, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\Temp\20200502_2207\ImageArray.ini, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\conf.res, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\res-v05.ini, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\restoro.ext, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\ProgramData\Restoro\TechSupportApp.ini, No Action By User, 761, 551605, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\bin\RestoroApp.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\bin\RestoroProtection.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\bin\RestoroScanner.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\bin\RestoroService.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\bin\RestoroUI.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\bin\RestoroUpdater.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\ax.lza, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\engine.dll, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\engine.lza, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\LZMA.EXE, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\Restoro Help & Support.url, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\Restoro Privacy Policy.url, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\Restoro Terms of Use.url, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\Restoro Uninstall Instructions.url, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\Restoro.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\RestoroAM.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\Restoroicon.ico, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\RestoroMain.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\RestoroSafeMode.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\Restoro_SafeMode.ico, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\Restoro_uninstall.ico, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\Restoro_website.ico, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\TechSupportApp.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\Program Files\Restoro\uninst.exe, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\DOCUMENTS AND SETTINGS\PUBLIC\Desktop\Restoro.lnk, No Action By User, 761, 551606, , , ,
    PUP.Optional.Restoro, C:\USERS\ZEROCOOL\DOWNLOADS\RESTORO.EXE, No Action By User, 761, 551611, 1.0.23342, , ame,
    PUP.Optional.Restoro, C:\USERS\ZEROCOOL\APPDATA\LOCAL\TEMP\RESTORO.EXE, No Action By User, 761, 551611, 1.0.23342, , ame,
    PUP.Optional.Restoro, C:\USERS\ZEROCOOL\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\FTV1ZU0Z\RESTOROSERVICESETUP64[1].EXE, No Action By User, 761, 551611, 1.0.23342, , ame,
    PUP.Optional.Restoro, C:\USERS\ZEROCOOL\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\FTV1ZU0Z\RESTORO[1].EXE, No Action By User, 761, 551611, 1.0.23342, , ame,
    PUP.Optional.Restoro, C:\USERS\ZEROCOOL\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\FTV1ZU0Z\RESTOROSETUP64[1].EXE, No Action By User, 761, 551611, 1.0.23342, , ame,

    Physical Sector: 0
    (No malicious items detected)

    WMI: 0
    (No malicious items detected)


    (end)
     
  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Would everyone please focus on the fact her computer is bricked and she can't get it to boot instead of talking about some crap software that bricked it.

    She probably needs assistance in re-installing.
     
  11. Anon-469e6fb48c

    Anon-469e6fb48c Anonymized

    Agreed that software probably bricked her system.I aborted the scan be for it happened not knowing what was going to happen.Every thing was automatic the only thing i could stop was the scan part.

    I was able to remove it with the Virus removal guide.
     
  12. Imandy Mann

    Imandy Mann MajorGeekolicious

    Tried booting with the 'f' 8, 9 or 10 keys to see if a 'Fix ' PC option is available. Might be 'escape, 'delete' or f12. Watch the screen while booting and try each key combo. One should finally show content printed on the screen. Sometimes stuff will flash by fast so pay attention. Tell us how it goes for you.
     
  13. satrow

    satrow Major Geek Extraordinaire

    F5 and F8 are the keys I have most success getting to a boot menu with. Last Known Good is usually listed on one of them - that can be used multiple times to 'step back' to a bootable state (I've read 10 times but I've had success several times at about the 5th/6th attempt, so keep trying it!).
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds