Dezinstaleaza Digital Protection – Ghid pentru Devirusare Completa

Digital Protection este un program anti-spyware de tip rogue. Este promovat prin intermediul unor Troieni care pretind sa fie codec-uri video sau actualizari flash absolut necesare pentru a urmari continutul online.

Programul va afisa numeroase alerte false si va efectua scanari ale PC-ului detectand in mod eronat sute de infectii.

Toate acestea au scopul de a induce in eroare utilizatorul, cu scopul de a achizitiona acest program. Fisierele detectate sunt fie inexistente, fie curate, iar alertele nu trebuie luate in considerare.

Digital Protection

Programul foloseste diverse tehnici pentru a fi foarte dificil de indepartat. Mai intai, incearca sa dezactiveze\dezinstaleze majoritatea programelor de securitate ce pot fi instalate.

La rularea oricarui program va afisa alerte de genul:

Warning! Virus threat detected!
Virus activity detected!
Trojan-Clicker.Win32 adware has been detected. This adware module advertises websites with explicit content. Be advised of such content being possibly illegal. Please click the button below to locate and remove this threat now.

Programul creeaza urmatoarele fisiere\foldere:

  • c:\Documents and Settings\All Users\Application Data\fiosejgfse.dll
  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Digital Protection.lnk
  • %UserProfile%\Desktop\Digital Protection Support.lnk
  • %UserProfile%\Desktop\Digital Protection.lnk
  • %UserProfile%\Start Menu\Programs\Digital Protection
  • %UserProfile%\Start Menu\Programs\Digital Protection\About.lnk
  • %UserProfile%\Start Menu\Programs\Digital Protection\Activate.lnk
  • %UserProfile%\Start Menu\Programs\Digital Protection\Buy.lnk
  • %UserProfile%\Start Menu\Programs\Digital Protection\Digital Protection Support.lnk
  • %UserProfile%\Start Menu\Programs\Digital Protection\Digital Protection.lnk
  • %UserProfile%\Start Menu\Programs\Digital Protection\Scan.lnk
  • %UserProfile%\Start Menu\Programs\Digital Protection\Settings.lnk
  • %UserProfile%\Start Menu\Programs\Digital Protection\Update.lnk
  • c:\Program Files\Digital Protection
  • c:\Program Files\Digital Protection\about.ico
  • c:\Program Files\Digital Protection\activate.ico
  • c:\Program Files\Digital Protection\buy.ico
  • c:\Program Files\Digital Protection\dig.db
  • c:\Program Files\Digital Protection\digext.dll
  • c:\Program Files\Digital Protection\dighook.dll
  • c:\Program Files\Digital Protection\digprot.exe
  • c:\Program Files\Digital Protection\help.ico
  • c:\Program Files\Digital Protection\scan.ico
  • c:\Program Files\Digital Protection\settings.ico
  • c:\Program Files\Digital Protection\splash.mp3
  • c:\Program Files\Digital Protection\Uninstall.exe
  • c:\Program Files\Digital Protection\update.ico
  • c:\Program Files\Digital Protection\virus.mp3
  • %Temp%\4otjesjty.mof
  • %Temp%\asd1.tmp
  • %Temp%\c865.tmp
  • %Temp%\davclnt.exe
  • %Temp%\dhdhtrdhdrtr5y
  • %Temp%\dig.dat
  • %Temp%\digr.dat



Ii sunt asociate cheile registry:
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_LOCAL_MACHINE\SOFTWARE\Digital Protection
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Digital Protection
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = “1”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Digital Protection”

Log-ul HijackThis va afisa intrarea:

O4 – HKCU\..\Run: [Digital Protection] “C:\Program Files\Digital Protection\digprot.exe” -noscan

DEVIRUSARE:

1. Porniti PC-ul in Safe Mode with Networking. Pentru aceasta restartati PC-ul si apasati tasta F8 de mai multe ori inainte de incarcarea Windows-ului pana obtineti ecranul de mai jos.
Dupa alegerea modului mentionat apasati tasta Enter si asteptati incarcarea completa a Windowsului.

safe mode

2. Descarcati si instalati Malwarebytes Anti-Malware. Scanati PC-ul complet (Full scan) si stergeti la final infectiile gasite apasand Remove selected.

Daca ai reusit sa cureti aceasta infectie, iti recomand sa cumperi versiunea PRO a Malwarebytes Anti-Malware pentru a te proteja si pe viitor de astfel de amenintari, avand in vedere ca nu au fost detectate\eliminate de antivirusul tau actual.

Administrator FaraVirusi.com
voluntar al Comodo Malware Research Team, expert Malwarebytes Anti-Malware

Leave a Reply