Free malware removal tool to remove Antimalware Doctor

Écrit par Administrator | Samedi, 20 Mars 2010 00:00

There are no translations available.

Antimalware Doctor (AKA Anti Malware Doctor) is a rogue Antispyware, a scareware, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is Antimalware Doctor. It invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall Antimalware Doctor immediately from system.

Antimalware Doctor

To remove Antimalware Doctor (Uninstall Antimalware Doctor)

Download this free removal tool for Antimalware Doctor
Extract it
Launch
Click on the delete button

Antimalware Doctor will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

Antimalware Doctor.exe
setupapp7070010000.exe (Installation)

Alias :

Spyware.Keylogger [Symantec]
Mal_Infostl [Trend Micro]
Troj/FakeAV-BAG [Sophos]
Trojan:Win32/FakeXPA [Microsoft]
packed with PE_Patch [Kaspersky Lab]

Files :

%Commo
%Programs%\Antimalware Doctor\Uninstall.lnk
%Programs%\Antimalware Doctor\Antimalware Doctor.lnk
%Programs%\Startup\Antimalware Doctor.lnk
%StartMenu%\Antimalware Doctor.lnk
%DesktopDir%\Antimalware Doctor.lnk
%AppData%\04CF591D498CE3C2969FCD91836D55A5\setupapp7070010000.exe
%AppData%\04CF591D498CE3C2969FCD91836D55A5\hookdll.dll
%AppData%\04CF591D498CE3C2969FCD91836D55A5\enemies-names.txt
%System%\enemies-names.txt
[Path to rogue]\Antimalware Doctor.exe
%System%\hookdll.dll

Registry

Registry keys created

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor

Registry values created

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor
- DisplayIcon = "[file and pathname of the sample #1],0"
- DisplayName = "Antimalware Doctor"
- UninstallString = "[file and pathname of the sample #1] /uninstall"
- InstallLocation = "%System%\"
- NoModify = 0x00000001
- NoRepair = 0x00000001
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- "Antimalware Doctor.exe" = [Path to the Rogue]\Antimalware Doctor.exe
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor
- datarl1 = "KRoAGVdOQx4PARElG00dAQ=="
- datarl2 = "KRoAGVdOQwQVExE3BAYNQRsl"
- datarlA = ""
- url_update_time = ""
- install_time = "3/26/2010 7:01:39 AM"
- database_version = "254"
- virus_signatures = "64287"
- affid = "7070010000"
- url_update_time = "3/26/2010 7:01:39 AM"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- setupapp7070010000.exe = "%AppData%\04CF591D498CE3C2969FCD91836D55A5\setupapp7070010000.exe"

Ajouter un Commentaire