Data Protection Adware Removal Instructions
The Emsisoft malware research team has discoverd a new outbreak of the Data Protection adware. Emsisoft Anti-Malware detects this malware as Adware.Win32.DataProtection.
Data Protection is a rogue security program. This is a new variant from Digital Protection, Your Protection, User Protection, Dr. Guard , and PaladinAntivirus. This rogue application tries to trick you by displaying false positive/misleading scan results report, which says that your computer is infected with viruses or trojan, but you will not be able to delete them before you purchase.
Create new files:
- %ProgramFiles%\Data Protection\virus.mp3
- %ProgramFiles%\Data Protection\about.ico
- %ProgramFiles%\Data Protection\activate.ico
- %ProgramFiles%\Data Protection\buy.ico
- %ProgramFiles%\Data Protection\dat.db
- %ProgramFiles%\Data Protection\datext.dll
- %ProgramFiles%\Data Protection\dathook.dll
- %ProgramFiles%\Data Protection\datprot.exe
- %ProgramFiles%\Data Protection\help.ico
- %ProgramFiles%\Data Protection\scan.ico
- %ProgramFiles%\Data Protection\settings.ico
- %ProgramFiles%\Data Protection\splash.mp3
- %ProgramFiles%\Data Protection\Uninstall.exe
- %ProgramFiles%\Data Protection\update.ico
- %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Data Protection.lnk
- %UserProfile%\Desktop\Data Protection.lnk
- %UserProfile%\Desktop\Data Protection Support.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Update.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\About.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Activate.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Buy.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Data Protection Support.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Data Protection.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Scan.lnk
- %UserProfile%\Start Menu\Programs\Data Protection\Settings.lnk
Create new registry entries:
- HKEY_LOCAL_MACHINE\software\Classes\*\ShellEx\ContextMenuHandlers\SimpleShlExt
- HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
- HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}\InprocServer32
- HKEY_LOCAL_MACHINE\software\Classes\Folder\shellex\ContextMenuHandlers\SimpleShlExt
- HKEY_LOCAL_MACHINE\software\Data Protection
- HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Uninstall\Data Protection
- HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Run, “Data Protection”
Screenshots:
How to remove the infection of Data Protection (Adware.Win32.DataProtection)?
To delete this malware infection, please download and install Emsisoft Anti-Malware. Run a full scan on all drives and move all detected items to the quarantine.
Tags: DataProtection, Rogue