Data Protection Removal Guide

Data Protection, which is related to Digital Protection, is a rogue security software application that tries to trick users into purchasing its license by using techniques similar to its relative. Data Protection gets installed on a user’s system via Trojan viruses that get downloaded through bogus websites which claim to have security scanners and along with fake video codec packs. Once installed, Data Protection disables all security software present on the system along with essential system tools such as Windows Task Manager and Registry Editor, and proceeds to load at startup. It then performs fake security scans on the system, returning false results that claim that the computer is severely infected with malicious software. It also displays a large number of fake pop-ups from the Windows taskbar, which warn the user of potential ‘threats’ to the computer. Meanwhile, Data Protection constantly request the user to purchase the ‘full’ version of the software, claiming that the currently installed ‘trial’ version of Data Protection is insufficient to completely clean the system. However, it is important to note that Data Protection is a fake application and therefore its so-called ‘full’ version is just as incapable of scanning or cleaning any system as the ‘trial’ version.

Data Protection

Data Protection

» Download Data Protection Removal Software

As soon as you find a copy of this malicious program on your system, you should take steps to immediately remove Data Protection. For Data Protection removal, it is necessary to stop processes, unregister DLLs, delete files and folders and remove registry entries.

Data Protection Manual Removal Procedures

The first step you need to take in order to delete Data Protection is to stop the following processes:

  • spam001.exe
  • spam002.exe
  • spam003.exe
  • troj000.exe

It is important to know that some of these process names may have different numerical suffixes. For this reason, proper scanning with genuine antivirus software such as Spyware Doctor with Antivirus may proof to be an excellent choice. Additionally, the following processes need to be ended as well:

  • wscsvc32.exe
  • MSWINSCK.exe
  • datprot.exe
  • Uninstall.exe

The next step in Data Protection removal is to unregister the following DLL files:

  • fiosejgfse.dll
  • digext.dll
  • dighook.dll

Next, it is necessary to delete the following files and folders:

Windows XP:

  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Data Protection.lnk
  • %UserProfile%\Desktop\Data Protection Support.lnk
  • %UserProfile%\DesktopData Protection.lnk
  • %UserProfile%\Start Menu\Programs\Data Protection
  • %UserProfile%\Start Menu\Programs\Data Protection\About.lnk
  • %UserProfile%\Start Menu\Programs\Data Protection\Activate.lnk
  • %UserProfile%\Start Menu\Programs\Data Protection\Buy.lnk
  • %UserProfile%\Start Menu\Programs\Data Protection\Data Protection Support.lnk
  • %UserProfile%\Start Menu\Programs\Data Protection\Data Protection.lnk
  • %UserProfile%\Start Menu\Programs\Data Protection\Scan.lnk
  • %UserProfile%\Start Menu\Programs\Data Protection\Settings.lnk
  • %UserProfile%\Start Menu\Programs\Data Protection\Update.lnk
  • c:\Program Files\Data Protection
  • c:\Program Files\Data Protection\about.ico
  • c:\Program Files\Data Protection\activate.ico
  • c:\Program Files\Data Protection\buy.ico
  • c:\Program Files\Data Protection\dig.db
  • c:\Program Files\Data Protection\digext.dll
  • c:\Program Files\Data Protection\dighook.dll
  • c:\Program Files\Data Protection\datprot.exe
  • c:\Program Files\Data Protection\help.ico
  • c:\Program Files\Data Protection\scan.ico
  • c:\Program Files\Data Protection\settings.ico
  • c:\Program Files\Data Protection\splash.mp3
  • c:\Program Files\Data Protection\Uninstall.exe
  • c:\Program Files\Data Protection\update.ico
  • c:\Program Files\Data Protection\virus.mp3
  • c:\Documents and Settings\All Users\Application Data\fiosejgfse.dll
  • %Temp%\4otjesjty.mof
  • %Temp%\MSWINSCK.exe
  • %Temp%\wscsvc32.exe
  • %UserProfile%\Desktop\spam001.exe
  • %UserProfile%\Desktop\spam002.exe
  • %UserProfile%\Desktop\spam003.exe
  • %UserProfile%\Desktop\troj000.exe

Windows Vista/7:

  • C:\Users\%Username%\Application Data\Microsoft\Internet Explorer\Quick Launch\Data Protection.lnk
  • C:\Users\%Username%\Desktop\Data Protection Support.lnk
  • C:\Users\%Username%\DesktopData Protection.lnk
  • C:\Users\%Username%\Start Menu\Programs\Data Protection
  • C:\Users\%Username%\Start Menu\Programs\Data Protection\About.lnk
  • C:\Users\%Username%\Start Menu\Programs\Data Protection\Activate.lnk
  • C:\Users\%Username%\Start Menu\Programs\Data Protection\Buy.lnk
  • C:\Users\%Username%\Start Menu\Programs\Data Protection\Data Protection Support.lnk
  • C:\Users\%Username%\Start Menu\Programs\Data Protection\Data Protection.lnk
  • C:\Users\%Username%\Start Menu\Programs\Data Protection\Scan.lnk
  • C:\Users\%Username%\Start Menu\Programs\Data Protection\Settings.lnk
  • C:\Users\%Username%\Start Menu\Programs\Data Protection\Update.lnk
  • c:\Program Files\Data Protection
  • c:\Program Files\Data Protection\about.ico
  • c:\Program Files\Data Protection\activate.ico
  • c:\Program Files\Data Protection\buy.ico
  • c:\Program Files\Data Protection\dig.db
  • c:\Program Files\Data Protection\digext.dll
  • c:\Program Files\Data Protection\dighook.dll
  • c:\Program Files\Data Protection\datprot.exe
  • c:\Program Files\Data Protection\help.ico
  • c:\Program Files\Data Protection\scan.ico
  • c:\Program Files\Data Protection\settings.ico
  • c:\Program Files\Data Protection\splash.mp3
  • c:\Program Files\Data Protection\Uninstall.exe
  • c:\Program Files\Data Protection\update.ico
  • c:\Program Files\Data Protection\virus.mp3
  • c:\Documents and Settings\All Users\Application Data\fiosejgfse.dll
  • %Temp%\4otjesjty.mof
  • %Temp%\MSWINSCK.exe
  • %Temp%\wscsvc32.exe
  • C:\Users\%Username%\Desktop\spam001.exe
  • C:\Users\%Username%\Desktop\spam002.exe
  • C:\Users\%Username%\Desktop\spam003.exe
  • C:\Users\%Username%\Desktop\troj000.exe

Data Protection Registry Removal Procedures

Removing files and folders is not enough to ensure complete Data Protection removal. To completely remove Data Protection, you need to delete the following keys and settings from the Windows Registry:

  • HKEY_CURRENT_USER\Software\Malware Defense
  • HKEY_CURRENT_USER\Software\Paladin Antivirus
  • HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Data Protection
  • HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Data Protection
  • HKEY_LOCAL_MACHINE\SOFTWARE\Paladin Antivirus
  • HKEY_LOCAL_MACHINE\SOFTWARE\Program Groups
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Data Protection"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = "1"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}

Now it is safe to say that your computer is completely safe from Data Protection.

Data Protection Directories:

  • C:\Users\%Username%\Start Menu\Programs\Data Protection\
  • c:\Program Files\Data Protection\
  • %UserProfile%\Start Menu\Programs\Data Protection\

Conclusion

Outside Resources:

http://www.bleepingcomputer.com/virus-removal/remove-data-protection

RemoveVirus.org cannot be held liable for any damages that may occur from using our community virus removal guides. Viruses cause damage and unless you know what you are doing you may loose your data. We strongly suggest you backup your data before you attempt to remove any virus. Each product or service is a trademark of their respective company. We do make a commission off of each product we recommend. This is how removevirus.org is able to keep writing our virus removal guides. All Free based antivirus scanners recommended on this site are limited. This means they may not be fully functional and limited in use. A free trial scan allows you to see if that security client can pick up the virus you are infected with.