Free malware removal tool to remove Antimalware Doctor

Written by Administrator | Saturday, 20 March 2010 00:00

Antimalware Doctor (AKA Anti Malware Doctor) is a rogue Antispyware, a scareware, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is Antimalware Doctor. It invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall Antimalware Doctor immediately from system.

Antimalware Doctor

To remove Antimalware Doctor (Uninstall Antimalware Doctor)

Download this free removal tool for Antimalware Doctor
Extract it
Launch
Click on the delete button

Antimalware Doctor will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

Antimalware Doctor.exe
setupapp7070010000.exe (Installation)

Alias :

Spyware.Keylogger [Symantec]
Mal_Infostl [Trend Micro]
Troj/FakeAV-BAG [Sophos]
Trojan:Win32/FakeXPA [Microsoft]
packed with PE_Patch [Kaspersky Lab]

Files :

%Commo
%Programs%\Antimalware Doctor\Uninstall.lnk
%Programs%\Antimalware Doctor\Antimalware Doctor.lnk
%Programs%\Startup\Antimalware Doctor.lnk
%StartMenu%\Antimalware Doctor.lnk
%DesktopDir%\Antimalware Doctor.lnk
%AppData%\04CF591D498CE3C2969FCD91836D55A5\setupapp7070010000.exe
%AppData%\04CF591D498CE3C2969FCD91836D55A5\hookdll.dll
%AppData%\04CF591D498CE3C2969FCD91836D55A5\enemies-names.txt
%System%\enemies-names.txt
[Path to rogue]\Antimalware Doctor.exe
%System%\hookdll.dll

Registry

Registry keys created

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor

Registry values created

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor
- DisplayIcon = "[file and pathname of the sample #1],0"
- DisplayName = "Antimalware Doctor"
- UninstallString = "[file and pathname of the sample #1] /uninstall"
- InstallLocation = "%System%\"
- NoModify = 0x00000001
- NoRepair = 0x00000001
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- "Antimalware Doctor.exe" = [Path to the Rogue]\Antimalware Doctor.exe
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor
- datarl1 = "KRoAGVdOQx4PARElG00dAQ=="
- datarl2 = "KRoAGVdOQwQVExE3BAYNQRsl"
- datarlA = ""
- url_update_time = ""
- install_time = "3/26/2010 7:01:39 AM"
- database_version = "254"
- virus_signatures = "64287"
- affid = "7070010000"
- url_update_time = "3/26/2010 7:01:39 AM"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- setupapp7070010000.exe = "%AppData%\04CF591D498CE3C2969FCD91836D55A5\setupapp7070010000.exe"

Comments

123

0 #26 2011-04-09 22:25

This worked. Thank you so much. worked immediately. this virus is horrible.
You are the best.

Quote

0 #25 2011-03-27 21:45

didn't work

Quote

0 #24 2011-03-19 23:37

i was very skeptical about this but it really worked like a charm. with that antimal virus i couldn't uninstall anything on the computer now everything is working fine.

Quote

0 #23 2011-02-23 20:12

you are a saviour!!! thank you , ive been working on this for hours and you come along and save the day!! THANKKKK YOUUUUU !! u have no idea how much i appreciete you

Quote

+1 #22 2011-01-26 05:22

Thank you so much, it worked on my pc!
I can't understand why anyone would invent viruses to extort money from
Innocent people. If I were a judge, I would send those scammers to: Life Imprisonment without the possibility of
parol in a gay only jail! They're really
the scum of the earth.

Quote

0 #21 2010-12-22 17:34

Thanks a million.. It just worked awesome.
I tried many options but this worked

Quote

0 #20 2010-12-22 17:33

Thanks a million.. It just worked awesome.
I tried many options

Quote

0 #19 2010-10-20 02:13

Worked like a charm. Thank you.

Quote

0 #18 2010-08-19 17:10

Does NOT work. This thing morphs constantly and this removal tool does not work. It won't even run in full windows mode and it won't fix everything in safe mode.

Quote