Windows Recovery is a fake computer analysis and optimization malware program that displays fake error messages to scare you into believing your computer has problems.
How It Infects Your Computer
Your computer was initially infected by trojans. The trojans then display messages telling you there is something wrong with your computer's hard drive and then suggests you download and install a program to fix the problem. When you click on the alerts, Windows Recovery is automatically installed onto your computer.
The program can also be installed on your computer through email attachments.
What Does Windows Recovery Do?
It displays error messages when you try to launch a program or delete files. The program does this in order to protect itself from antivirus programs since you aren't able to start the antivirus and the antivirus can't remove it if found.
Windows Recovery will also ask you to scan your computer. The scanner will "find" a whole bunch of errors and asks you to buy the program in order to fix the problems. Do not buy this program. Your information will most likely to be used for credit card fraud. As a side note, please be wary of fraud whenever you make online purchases.
When the defragment tool is running, the program shows a fake background pretending to defrag your computer. It's really not doing any optimization.
Screenshot of the program
Windows Recovery will also hide some of your files to make it seem like your computer isn't working properly. What it does is change your files' properties to hidden and locks you out from viewing hidden files.
How to Remove it From Your Computer
1. Download and install RKill to terminate the virus's processes. Download by clicking the "Download Now" button.
2. Download and install Malwarebytes to remove the files. Download by clicking the "Download Now" button. Malwarebytes costs $24.95, but if you would like to use a different program, Spybot Search and Destroy is a free trusted malware removal tool.
3. Reboot your computer and run the program from step 2 again to be safe.
A set of more in-depth instructions on removing Windows Recovery can be found here.