DATAPARAM.EXE - Dangerous
%WINDIR%\DATAPARAM.EXE
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
DATAPARAM.EXE is known as: Trojan.FakeAV!rem [PCTools] Trojan.FakeAV [Symantec] Generic FakeAlert.ez [McAfee] Mal/Generic-L [Sophos] Trojan.Fraud [Ikarus] packed with UPX [Kaspersky Lab].
MD5 of DATAPARAM.EXE = 9849701B563179CB80A9F4593323A852
DATAPARAM.EXE size is 159792 bytes.
Full path on a computer: %WINDIR%\DATAPARAM.EXE
Related Files:
%COMMONAPPDATA%\BOANPACK 3.0\DATA\BAPCLS.BAP
%COMMONAPPDATA%\BOANPACK 3.0\DATA\BAPHIS.BAP
%COMMONAPPDATA%\BOANPACK 3.0\DATA\BAPIDC.BAP
%APPDATA%\INFOTAB\INFOTAB_UP.EXE
%PROGRAMFILES%\BOANPACK 3.0\BAPHIS.DLL
%PROGRAMFILES%\BOANPACK 3.0\BAPIDC.DLL
%PROGRAMFILES%\BOANPACK 3.0\BOANPACK.EXE
%PROGRAMFILES%\BOANPACK 3.0\BOANPACKMT.EXE
%PROGRAMFILES%\BOANPACK 3.0\BOANPACKUI.EXE
%PROGRAMFILES%\BOANPACK 3.0\BOANPACKUP.EXE
%PROGRAMFILES%\BOANPACK 3.0\LANG\BOANPACK.LNG
%PROGRAMFILES%\BOANPACK 3.0\UNINSTALL.EXE
%PROGRAMFILES%\ILIKECLICK\11MARKET.ICO
%PROGRAMFILES%\ILIKECLICK\AUCTION.ICO
%PROGRAMFILES%\ILIKECLICK\GMARKET_MONE.ICO
%PROGRAMFILES%\ILIKECLICK\ILIKECLICK.DAT
%PROGRAMFILES%\ILIKECLICK\ILIKECLICK.INI
%PROGRAMFILES%\ILIKECLICK\TOOLBARRESTORE.EXE
%PROGRAMFILES%\ILIKECLICK\UNINSTALL.EXE
%PROGRAMFILES%\ILIKECLICK\UPDATE.EXE
%PROGRAMFILES%\VACCINECOM\EGUTIL.DLL
%PROGRAMFILES%\VACCINECOM\UNINST_VACCINECOM.EXE
%PROGRAMFILES%\VACCINECOM\VACCINECOM.EXE
%PROGRAMFILES%\VACCINECOM\VACCINECOMD.DLL
%PROGRAMFILES%\VACCINECOM\VACCINECOMSTART.EXE
%PROGRAMFILES%\VACCINECOM\VACCINECOMU.EXE
%WINDIR%\DATAPARAM.DAT
%WINDIR%\DATAPARAM.EXE
%SYSTEM%\00.BAT