Antimalware Doctor

What is Antimalware Doctor?

Antimalware Doctor is dangerous fake software that imitates an antivirus program. This rogue program is mostly distributed through various Trojans, and after your computer is infected with Antimalware Doctor, the program will configure itself to automatically run on every system start up.

When the rogue program starts, it performs a fake scan, indicating that many infections have been detected, and encouraging you to purchase the program in order to eliminate them.

Do not purchase this program, it is a scam. If you have already purchased this fake program, you should contact your credit card company and cancel the transaction, explaining that you have been tricked into purchasing a fake antivirus program.

You may see fake security warnings such as the following::

“Warning! Attack detected! Antimalware Doctor has detected that somebody is trying to block your computer remotely via {Trojan Worm BX12.434.CardStoler}; Transfer of your private data via the Internet will start in 7 seconds. We strongly recommend you to block this attack immediately.”
“Antimalware Doctor has detected that somebody is trying to transfer your private data via the Internet. We strongly recommend you to block this attack immediately.”
“Your computer is being subjected to a hacker attack. Antimalware Doctor has detected that somebody is trying to transfer your private data via the Internet. We strongly recommend that you block this attack immediately.”

If you notice Antimalware Doctor on your computer, you should remove it immediately. This is a rogue program employing misleading methods to encourage you to purchase the license.

The security scan performed each time you start your computer is an imitation only; the program is attempting to scare you into believing that your computer has severe security issues. The detection list that is presented at the end of the scan is entirely false.

This program is promoted by Cyber criminals who use misleading methods to install their rogue software on as many computers as possible. If you purchase Antimalware Doctor, you will be sending your money to Internet criminals and your computer will remain infected with this malicious software.

If you notice Antimalware Doctor on your computer, you should remove this fake security scanner from your PC immediately.

Do not be impressed by the professional appearance of this program - it was designed by Internet criminals in the hope that you will purchase a license for Antimalware Doctor to remove security threats that do not exist on your computer.

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is Antimalware Doctor?
• STEP 1. Remove Antimalware Doctor using Safe Mode with Networking.
• STEP 2. Remove Antimalware Doctor manually by deleting files and registry entries.

Antimalware Doctor removal

1. Start your computer in Safe Mode. Click Start, click Shut down, click Restart, click OK.

During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe Mode with Networking from the list.

2. Download HijackThis and save it to your desktop. Some malicious programs are able to block HijackThis, so when you click the download link, in the Save dialog, rename HijackThis.exe to iexplore.exe and only then click the Save button.

After saving the file to your desktop, double click it. In the main HijackThis window click the “Do a system scan only” button.

Select the following entry (place a tick at the left of the entry):

HKCU\..\Run: [Antimalware Doctor.exe] C:\Windows\System32\Antimalware Doctor.exe

After selecting the required entries, click "Fix Checked". After this procedure, you can close HijackThis and proceed to the next removal step.

3. Download legitimate anti-spyware software to fully remove Antimalware Doctor from your computer.

4. After downloading anti-spyware software, install it, update it, and then run a full system scan. Remove all infections found.

If you are unable to remove Antimalware Doctor, you can use these manual removal instructions. Use them at your own risk, since if you do not have strong computer knowledge, you could harm your operating system.

Use them only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)

End these Antimalware Doctor processes:

Antimalware Doctor.exe

setupapp7070010000.exe

setup[random characters]0000.exe

Remove these Antimalware Doctor registry entries:

HKEY_CURRENT_USERSoftwareAntimalware Doctor IncAntimalware Doctor
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionUninstallAntimalware Doctor
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "Antimalware Doctor.exe"
HKEY_CURRENT_USERSoftwareAntimalware Doctor Inc
HKEY_CURRENT_USERSoftwareAntimalware Doctor IncAntimalware Doctor
HKEY_CURRENT_USERSoftwareAntimalware Doctor IncAntimalware Doctordatarl1=KRoAGVdOQwQVExEoAAIQQRsl
HKEY_CURRENT_USERSoftwareAntimalware Doctor IncAntimalware Doctordatarl2=KRoAGVdOQwQVExE3BAYNQRsl
HKEY_CURRENT_USERSoftwareAntimalware Doctor IncAntimalware DoctordatarlA=KRoAGVdOQwQVExEoAAIQQRsl
HKEY_CURRENT_USERSoftwareAntimalware Doctor IncAntimalware Doctorinstall_time=4/12/2010 3:48:12 AM
HKEY_CURRENT_USERSoftwareAntimalware Doctor IncAntimalware Doctordatabase_version=256
HKEY_CURRENT_USERSoftwareAntimalware Doctor IncAntimalware Doctorvirus_signatures=62171
HKEY_CURRENT_USERSoftwareAntimalware Doctor IncAntimalware Doctoraffid=7070010000

Delete these Antimalware Doctor files:

Antimalware Doctor.exe
C:WindowsSystem32enemies-names.txt
setupapp7070010000.exe
enemies-names.txt
hookdll.dll

Unregister these Antimalware Doctor Dll files:

hookdll.dll

Summary:

The fake antivirus programs (also known as "rogue antivirus programs" or "scareware") are applications that tries to lure computer users into paying for their non-existent full versions to remove the supposedly detected security infections (although the computer is actually clean). These bogus programs are created by cyber criminals who design them to look as legitimate antivirus software. Most commonly rogue antivirus programs infiltrate user's computer using poop-up windows or alerts which appear when users surf the Internet. These deceptive messages trick users into downloading a rogue antivirus program on their computers. Other known tactics used to spread scareware include exploit kits, infected email messages, online ad networks, drive-by downloads, or even direct calls to user's offering free support.

A computer that is infected with a fake antivirus program might also have other malware installed on it as rogue antivirus programs often are bundled with Trojans and exploit kits. Noteworthy that additional malware that infiltrates user's operating system remains on victim's computer regardless of whether a payment for a non-existent full version of a fake antivirus program is made. Here are some examples of fake security warning messages that are used in fake antivirus distribution:

Computer users who are dealing with a rogue security software shouldn't buy it's full version. By paying for a license key of a fake antivirus program users would send their money and banking information to cyber criminals. Users who have already entered their credit card number (or other sensitive information) when asked by such bogus software should inform their credit card company that they have been tricked into buying a rogue security software. Screenshot of a web page used to lure computer users into paying for a non-existent full version of antimalware doctor rogue and other rogue antivirus programs:

To protect your computer from antimalware doctor rogue and other rogue antivirus programs users should:

• Keep their operating system and all of the installed programs up-to-date.
• Use legitimate antivirus and anti-spyware programs.
• Use caution when clicking on links in social networking websites and email messages.
• Don't trust online pop-up messages which state that your computer is infected and offers you to download security software.

Symptoms indicating that your operating system is infected with a fake antivirus program:

• Intrusive security warning pop-up messages.
• Alerts asking to upgrade to a paid version of a program to remove the supposedly detected malware.
• Slow computer performance.
• Disabled Windows updates.
• Blocked Task Manager.
• Blocked Internet browsers or inability to visit legitimate antivirus vendor websites.

If you have additional information on antimalware doctor rogue or it's removal please share your knowledge in the comments section below.

▼ Show Discussion