Antimalware Doctor

What is Antimalware Doctor?

Antimalware Doctor or sometimes called as Anti-Malware Doctor vurus is a fake or commonly called as rogue security software. Existence of Antimalware Doctor is a complete scam and was designed to trick people and condition their mind that it was a legitimate antivirus application. When inside the computer, Antimalware Doctor will constantly annoy computer users with system warning asserting that system is infected with numerous viruses and threats. This was aimed to promote Antimalware Doctor and convince its victim to purchase the full version of the program. To support its claim, Antimalware Doctor will exhibit a local virus scanning and generate exaggerated results showing dozens of infected files. It follows by a prompt to purchase the Antimalware Doctor registration code to unlock it and make the full version remove detected threats. 

It was already confirmed by security experts that having the licensed version of Antimalware Doctor will not help remove any kinds of threats from an ailing computer. Instead, Antimalware Doctor will add harm in its own way  by contacting a remote server and download additional malicious programs. Remove Anti-Malware Doctor immediately from your computer using a legitimate anti-malware programs.

What are the Symptoms of Antimalware Doctor Infection?

A virus scan will be provided to users displaying dozens of threat and prompt user to purchase the Antimalware Doctor activation code and registration key to unlock the full version.

It will modify Windows Registry and add the following entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run “Antimalware Doctor”
• HKEY_CLASSES_ROOT\SA345d.DocHostUIHandler
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “AMD” =”h ttp://127.0.0.1:27777/?inj=%ORIGINAL%”
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Internet Settings\5.0\User Agent\Post Platform “App/7.00195″

Anti-Malware Doctor will drop the following malicious files:

• %UserProfile%\Application Data\Antimalware Doctor
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antimalware Doctor.lnk
• %UserProfile%\Application Data\Antimalware Doctor\cookies.sqlite
• %UserProfile%\Recent\ANTIGEN.drv
• %UserProfile%\Recent\ANTIGEN.exe
• %UserProfile%\Recent\cid.dll
• %UserProfile%\Recent\CLSV.drv
• %UserProfile%\Recent\DBOLE.sys
• %UserProfile%\Recent\ddv.dll
• %UserProfile%\Recent\ddv.sys
• %UserProfile%\Recent\energy.tmp
• %UserProfile%\Recent\FS.drv
• %UserProfile%\Recent\gid.drv
• %UserProfile%\Recent\PE.drv
• %UserProfile%\Recent\PE.exe
• %UserProfile%\Recent\PE.sys
• %UserProfile%\Recent\runddlkey.dll
• %UserProfile%\Recent\std.exe
• %UserProfile%\Recent\tjd.sys
• %UserProfile%\Start Menu\Antimalware Doctor.lnk
• %UserProfile%\Start Menu\Programs\Antimalware Doctor.lnk

How to Remove Antimalware Doctor Manually

1. Restart your computer in SafeMode
- After Power-On the computer, just before Windows start, press F8
- From the selections, Select SafeMode

2. Remove Registry entries that the threat added. You MUST BACKUP YOUR REGISTRY FIRST.
- Click Start > Run
- Type in the field, regedit
- Navigate and look for the registry entries mentioned above and delete if necessary

3. Delete malicious files that the threat added:
- Base on the given location above, browse and delete the file
- If no location is given, click Start>Search> and search for the files.
- If cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. If it is, select the file and click End Process. Perform file delete again.

4. Scan computer with Antivirus Program
- Update antivirus program
- Scan computer and delete all detected threats.

Automatic Removal of Antimalware Doctor

1. Download and run MalwareBytes AntiMalware to remove Antimalware Doctor