Emsisoft Malware-Info

Name: Adware.Win32.DataProtection

Risklevel: Elevated Risk

Description:

Data Protection is a rogue security program. This is a new variant from Digital Protection, Your Protection, User Protection, Dr. Guard , and PaladinAntivirus. This rogue application tries to trick you by displaying false positive/misleading scan results report, which says that your computer is infected with viruses or trojan, but you will not be able to delete them before you purchase.

Removal instructions for Adware DataProtection:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware DataProtection.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Installation: Installed through EXE

Process: datprot.exe

Screenshots:

DataProtectionDataProtectionDataProtectionDataProtection

Used folders:

  • C:\Program Files\Data Protection\
  • C:\WINDOWS\system32\CatRoot2\
  • C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\
  • C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\
  • C:\WINDOWS\system32\WBEM\Logs\
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\
  • C:\Documents and Settings\[USER]\Desktop\
  • C:\Documents and Settings\[USER]\Local Settings\Temp\
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Data Protection\

Used files:

  • C:\Program Files\Data Protection\about.ico
    [1150 Bytes] ICO File
  • C:\Program Files\Data Protection\activate.ico
    [1150 Bytes] ICO File
  • C:\Program Files\Data Protection\buy.ico
    [1150 Bytes] ICO File
  • C:\Program Files\Data Protection\dat.db
    [6820136 Bytes] DB File
  • C:\Program Files\Data Protection\datext.dll
    [41984 Bytes] DLL File
  • C:\Program Files\Data Protection\dathook.dll
    [22528 Bytes] DLL File
  • C:\Program Files\Data Protection\datprot.exe
    [1699840 Bytes] EXE File
  • C:\Program Files\Data Protection\help.ico
    [5430 Bytes] ICO File
  • C:\Program Files\Data Protection\scan.ico
    [1150 Bytes] ICO File
  • C:\Program Files\Data Protection\settings.ico
    [1150 Bytes] ICO File
  • C:\Program Files\Data Protection\splash.mp3
    [75738 Bytes] MP3 File
  • C:\Program Files\Data Protection\Uninstall.exe
    [61440 Bytes] EXE File
  • C:\Program Files\Data Protection\update.ico
    [1150 Bytes] ICO File
  • C:\Program Files\Data Protection\virus.mp3
    [29256 Bytes] MP3 File
  • C:\WINDOWS\system32\CatRoot2\dberr.txt
    [6614 Bytes] TXT File
  • C:\WINDOWS\system32\CatRoot2\edb.chk
    [8192 Bytes] CHK File
  • C:\WINDOWS\system32\CatRoot2\edb.log
    [131072 Bytes] LOG File
  • C:\WINDOWS\system32\CatRoot2\tmp.edb
    [1056768 Bytes] EDB File
  • C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
    [1056768 Bytes] File
  • C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
    [3153920 Bytes] File
  • C:\WINDOWS\system32\WBEM\Logs\mofcomp.log
    [12059 Bytes] LOG File
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\3C83474D61E624A4F9844DF935AFE217
    [569 Bytes] File
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\79841F8EF00FBA86D33CC5A47696F165
    [413 Bytes] File
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\3C83474D61E624A4F9844DF935AFE217
    [142 Bytes] File
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\79841F8EF00FBA86D33CC5A47696F165
    [98 Bytes] File
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\Data Protection.lnk
    [714 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Desktop\bb6554e241025ac328b6a712144393b0_e5762b25c45685fa5e437cb178f3db81530a11de.exe
    [0 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Desktop\Data Protection Support.lnk
    [1602 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Desktop\Data Protection.lnk
    [696 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\1b6.tmp
    [6820136 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\49b.tmp
    [1864400 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\4otjesjty.mof
    [455 Bytes] MOF File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\dat.dat
    [136 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\datr.dat
    [128 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\dhdhtrdhdrtr5y
    [87040 Bytes] File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\efac.tmp
    [40552 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\fa98.tmp
    [19160 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\feee.tmp
    [33776 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Data Protection\About.lnk
    [1576 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Data Protection\Activate.lnk
    [1594 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Data Protection\Buy.lnk
    [1564 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Data Protection\Data Protection Support.lnk
    [1614 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Data Protection\Data Protection.lnk
    [708 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Data Protection\Scan.lnk
    [1570 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Data Protection\Settings.lnk
    [1594 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Data Protection\Update.lnk
    [1582 Bytes] LNK File

Additional information might be found here:

Search at Google for Adware DataProtection Search at Google for Adware DataProtection
Search at Bing for Adware DataProtection Search at Bing for Adware DataProtection
Search at Yahoo for Adware DataProtection Search at Yahoo for Adware DataProtection

How can I protect myself from Adware DataProtection?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software