Data Protection, which is related to Digital Protection, is a rogue security software application that tries to trick users into purchasing its license by using techniques similar to its relative. Data Protection gets installed on a user’s system via Trojan viruses that get downloaded through bogus websites which claim to have security scanners and along with fake video codec packs. Once installed, Data Protection disables all security software present on the system along with essential system tools such as Windows Task Manager and Registry Editor, and proceeds to load at startup. It then performs fake security scans on the system, returning false results that claim that the computer is severely infected with malicious software. It also displays a large number of fake pop-ups from the Windows taskbar, which warn the user of potential ‘threats’ to the computer. Meanwhile, Data Protection constantly request the user to purchase the ‘full’ version of the software, claiming that the currently installed ‘trial’ version of Data Protection is insufficient to completely clean the system. However, it is important to note that Data Protection is a fake application and therefore its so-called ‘full’ version is just as incapable of scanning or cleaning any system as the ‘trial’ version.
Data Protection
» Download Data Protection Removal Software
As soon as you find a copy of this malicious program on your system, you should take steps to immediately remove Data Protection. For Data Protection removal, it is necessary to stop processes, unregister DLLs, delete files and folders and remove registry entries.
Data Protection Manual Removal Procedures
The first step you need to take in order to delete Data Protection is to stop the following processes:
- spam001.exe
- spam002.exe
- spam003.exe
- troj000.exe
It is important to know that some of these process names may have different numerical suffixes. For this reason, proper scanning with genuine antivirus software such as Spyware Doctor with Antivirus may proof to be an excellent choice. Additionally, the following processes need to be ended as well:
- wscsvc32.exe
- MSWINSCK.exe
- datprot.exe
- Uninstall.exe
The next step in Data Protection removal is to unregister the following DLL files:
- fiosejgfse.dll
- digext.dll
- dighook.dll
Next, it is necessary to delete the following files and folders:
Windows XP:
- %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Data Protection.lnk
- %UserProfile%\Desktop\Data Protection Support.lnk
- %UserProfile%\DesktopData Protection.lnk
- %UserProfile%\Start Menu\Programs\Data Protection
- %UserProfile%\Start Menu\Programs\Data Protection\About.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Activate.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Buy.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Data Protection Support.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Data Protection.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Scan.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Settings.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Update.lnk
- c:\Program Files\Data Protection
- c:\Program Files\Data Protection\about.ico
- c:\Program Files\Data Protection\activate.ico
- c:\Program Files\Data Protection\buy.ico
- c:\Program Files\Data Protection\dig.db
- c:\Program Files\Data Protection\digext.dll
- c:\Program Files\Data Protection\dighook.dll
- c:\Program Files\Data Protection\datprot.exe
- c:\Program Files\Data Protection\help.ico
- c:\Program Files\Data Protection\scan.ico
- c:\Program Files\Data Protection\settings.ico
- c:\Program Files\Data Protection\splash.mp3
- c:\Program Files\Data Protection\Uninstall.exe
- c:\Program Files\Data Protection\update.ico
- c:\Program Files\Data Protection\virus.mp3
- c:\Documents and Settings\All Users\Application Data\fiosejgfse.dll
- %Temp%\4otjesjty.mof
- %Temp%\MSWINSCK.exe
- %Temp%\wscsvc32.exe
- %UserProfile%\Desktop\spam001.exe
- %UserProfile%\Desktop\spam002.exe
- %UserProfile%\Desktop\spam003.exe
- %UserProfile%\Desktop\troj000.exe
Windows Vista/7:
- C:\Users\%Username%\Application Data\Microsoft\Internet Explorer\Quick Launch\Data Protection.lnk
- C:\Users\%Username%\Desktop\Data Protection Support.lnk
- C:\Users\%Username%\DesktopData Protection.lnk
- C:\Users\%Username%\Start Menu\Programs\Data Protection
- C:\Users\%Username%\Start Menu\Programs\Data Protection\About.lnk
- C:\Users\%Username%\Start Menu\Programs\Data Protection\Activate.lnk
- C:\Users\%Username%\Start Menu\Programs\Data Protection\Buy.lnk
- C:\Users\%Username%\Start Menu\Programs\Data Protection\Data Protection Support.lnk
- C:\Users\%Username%\Start Menu\Programs\Data Protection\Data Protection.lnk
- C:\Users\%Username%\Start Menu\Programs\Data Protection\Scan.lnk
- C:\Users\%Username%\Start Menu\Programs\Data Protection\Settings.lnk
- C:\Users\%Username%\Start Menu\Programs\Data Protection\Update.lnk
- c:\Program Files\Data Protection
- c:\Program Files\Data Protection\about.ico
- c:\Program Files\Data Protection\activate.ico
- c:\Program Files\Data Protection\buy.ico
- c:\Program Files\Data Protection\dig.db
- c:\Program Files\Data Protection\digext.dll
- c:\Program Files\Data Protection\dighook.dll
- c:\Program Files\Data Protection\datprot.exe
- c:\Program Files\Data Protection\help.ico
- c:\Program Files\Data Protection\scan.ico
- c:\Program Files\Data Protection\settings.ico
- c:\Program Files\Data Protection\splash.mp3
- c:\Program Files\Data Protection\Uninstall.exe
- c:\Program Files\Data Protection\update.ico
- c:\Program Files\Data Protection\virus.mp3
- c:\Documents and Settings\All Users\Application Data\fiosejgfse.dll
- %Temp%\4otjesjty.mof
- %Temp%\MSWINSCK.exe
- %Temp%\wscsvc32.exe
- C:\Users\%Username%\Desktop\spam001.exe
- C:\Users\%Username%\Desktop\spam002.exe
- C:\Users\%Username%\Desktop\spam003.exe
- C:\Users\%Username%\Desktop\troj000.exe
Data Protection Registry Removal Procedures
Removing files and folders is not enough to ensure complete Data Protection removal. To completely remove Data Protection, you need to delete the following keys and settings from the Windows Registry:
- HKEY_CURRENT_USER\Software\Malware Defense
- HKEY_CURRENT_USER\Software\Paladin Antivirus
- HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
- HKEY_LOCAL_MACHINE\SOFTWARE\Data Protection
- HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Data Protection
- HKEY_LOCAL_MACHINE\SOFTWARE\Paladin Antivirus
- HKEY_LOCAL_MACHINE\SOFTWARE\Program Groups
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1"
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Data Protection"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = "1"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}
Now it is safe to say that your computer is completely safe from Data Protection.
Data Protection Directories:
- C:\Users\%Username%\Start Menu\Programs\Data Protection\
- c:\Program Files\Data Protection\
- %UserProfile%\Start Menu\Programs\Data Protection\
Conclusion
Outside Resources:
http://www.bleepingcomputer.com/virus-removal/remove-data-protection
Speak Your Mind