By Jim
Updated on Wednesday, May 12th, 2010
Data Protection is one of the nastier rogue anti-spyware apps out there. It secretly installs itself in your system and tries to uninstall your security programs as well. It will also block new installations of these antivirus and anti-spyware applications, making it difficult to clean from your machine. It doesn’t end there; Data Protection will also stop you from using Windows Task Manager and Registry Editor making it almost unremovable.
The main reason why you need to remove it is that it is a potential hazard to your data. It hijacks your web browser to display ads and porn sites, which can lead to more infections later on. Hackers will be able to get into your computer through the loopholes it creates in your system. It also will constantly send our virus alert messages to entice you to upgrade to a “paid” version. Do not buy it! If you have, call your credit card company and dispute the charges.
Don’t be complacent, you will need to remove this fake anti-spyware as soon as possible. If you do not, you might not be able to recover your computer when it crashes and lose all the data in it. Below are a few simple steps you can follow to eradicate this bad piece of software.
Symptoms Of Infection
- Your computer is acting slow. Data Protection slows down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. Data Protection infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious Data Protection infection.
Dangers Of Infection
Viruses like Data Protection will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.
Some Data Protection infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Uninstall Data Protection Processes
%UserProfile%\Desktop\spam001.exe
%UserProfile%\Desktop\spam002.exe
%UserProfile%\Desktop\spam003.exe
%UserProfile%\Desktop\troj000.exe
wscsvc32.exe
MSWINSCK.exe
datprot.exe
Uninstall.exe
Delete Data Protection Files
digext.dll
dighook.dll
Remove Data Protection Registry Files
HKEY_CURRENT_USER\Software\Paladin Antivirus
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Data Protection
HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Data Protection
HKEY_LOCAL_MACHINE\SOFTWARE\Paladin Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Program Groups
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Data Protection”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved “{5E2121EE-0300-11D4-8D3B-444553540000}”
Popular Search Terms
Remove Data Protection
Delete Data Protection
Uninstall Data Protection
How to get rid of Data Protection
How to remove Data Protection
Data Protection removal
Remove DataProtection
DataProtection removal
Data-Protection
Warning! If Spyware Doctor is blocked by the virus then run your system in safe mode and try again. To do this reboot your system and tap F8 repeatedly as your computer starts up. Then run Spyware Doctor as normal. If this doesn’t work try renaming the Spyware Doctor EXE file.
Posted under Fake Antispyware | No Comments
