Removal Guide
Kill Process
(How to kill a process effectively?)
MSWINSCK.exe
wscsvc32.exe
spam001.exe
spam002.exe
spam003.exe
troj000.exe
datprot.exe
Uninstall.exe
Unregister DLL files
%ProgramFiles%\Data Protection\dathook.dll
%ProgramFiles%\Data Protection\datext.dll
%ALLUSERSPROFILE%\Application Data\fiosejgfse.dll
Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Data Protection"
HKEY_LOCAL_MACHINE\SOFTWARE\Program Groups
HKEY_LOCAL_MACHINE\SOFTWARE\Paladin Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Data Protection
HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense
HKEY_LOCAL_MACHINE\SOFTWARE\Data Protection
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CURRENT_USER\Software\Paladin Antivirus
HKEY_CURRENT_USER\Software\Malware Defense
Remove Folders and Files
%UserProfile%\Desktop\troj000.exe
%UserProfile%\Desktop\spam003.exe
%UserProfile%\Desktop\spam002.exe
%UserProfile%\Desktop\spam001.exe
%UserProfile%\Desktop\Data Protection.lnk
%UserProfile%\Desktop\Data Protection Support.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Data Protection.lnk
%Temp%\wscsvc32.exe
%Temp%\MSWINSCK.exe
%Temp%\4otjesjty.mof
%ALLUSERSPROFILE%\Application Data\fiosejgfse.dll
%ProgramFiles%\Data Protection
%UserProfile%\Start Menu\Programs\Data Protection
Kill Process
(How to kill a process effectively?)
MSWINSCK.exe
wscsvc32.exe
spam001.exe
spam002.exe
spam003.exe
troj000.exe
datprot.exe
Uninstall.exe
Unregister DLL files
%ProgramFiles%\Data Protection\dathook.dll
%ProgramFiles%\Data Protection\datext.dll
%ALLUSERSPROFILE%\Application Data\fiosejgfse.dll
Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Data Protection"
HKEY_LOCAL_MACHINE\SOFTWARE\Program Groups
HKEY_LOCAL_MACHINE\SOFTWARE\Paladin Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Data Protection
HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense
HKEY_LOCAL_MACHINE\SOFTWARE\Data Protection
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CURRENT_USER\Software\Paladin Antivirus
HKEY_CURRENT_USER\Software\Malware Defense
Remove Folders and Files
%UserProfile%\Desktop\troj000.exe
%UserProfile%\Desktop\spam003.exe
%UserProfile%\Desktop\spam002.exe
%UserProfile%\Desktop\spam001.exe
%UserProfile%\Desktop\Data Protection.lnk
%UserProfile%\Desktop\Data Protection Support.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Data Protection.lnk
%Temp%\wscsvc32.exe
%Temp%\MSWINSCK.exe
%Temp%\4otjesjty.mof
%ALLUSERSPROFILE%\Application Data\fiosejgfse.dll
%ProgramFiles%\Data Protection
%UserProfile%\Start Menu\Programs\Data Protection
No comments:
Post a Comment