Saturday, May 8, 2010

Data Protection Removal GuideData Protection Removal Guide

Data Protection Removal Guide
Data Protection (DataProtection) is a rogue anti-spyware program designed to cheat money from Internet users. Data Protection will produce fake scan results to scare the computer user into purchasing useless software. Data Protection will not remove any threats from your computer. Do not become another victim of a cyber scams and remove Data Protection immediately.

Removal Guide
Kill Process
(How to kill a process effectively?)
MSWINSCK.exe
wscsvc32.exe
spam001.exe
spam002.exe
spam003.exe
troj000.exe
datprot.exe
Uninstall.exe

Unregister DLL files
%ProgramFiles%\Data Protection\dathook.dll
%ProgramFiles%\Data Protection\datext.dll
%ALLUSERSPROFILE%\Application Data\fiosejgfse.dll

Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Data Protection"
HKEY_LOCAL_MACHINE\SOFTWARE\Program Groups
HKEY_LOCAL_MACHINE\SOFTWARE\Paladin Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Data Protection
HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense
HKEY_LOCAL_MACHINE\SOFTWARE\Data Protection
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CURRENT_USER\Software\Paladin Antivirus
HKEY_CURRENT_USER\Software\Malware Defense

Remove Folders and Files
%UserProfile%\Desktop\troj000.exe
%UserProfile%\Desktop\spam003.exe
%UserProfile%\Desktop\spam002.exe
%UserProfile%\Desktop\spam001.exe
%UserProfile%\Desktop\Data Protection.lnk
%UserProfile%\Desktop\Data Protection Support.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Data Protection.lnk
%Temp%\wscsvc32.exe
%Temp%\MSWINSCK.exe
%Temp%\4otjesjty.mof
%ALLUSERSPROFILE%\Application Data\fiosejgfse.dll
%ProgramFiles%\Data Protection
%UserProfile%\Start Menu\Programs\Data Protection

No comments:

Post a Comment