How to remove Antimalware Doctor

Monday, February 22nd, 2010 at 12:59 am
Home » Rogue Antispyware » Antimalware Doctor

Antimalware Doctor description

Antimalware Doctor is a rogue anti-spyware program. It is a scam, which has to be deleted once it is noticed. This bogus system spreads via trojan, spam e-mail attachments, fake online scanners and etc.

This malicious program also displays continuous fake security alerts,  such as:

Warning! Removed attack detected!

Antimalware Doctor has detected that somebody is trying to block your computer remotely via {Trojan Worm BX12.434.CardStoler}.
Transfer for Your private data via internet will start in: 7
We strongly recommend you to block attack immediately.

Antimalware Doctor has detected that somebody is trying to transfer your private data via internet. We strongly recommend you to block attack immediately.

Your computer is subjected to hacker attack. Antimalware Doctor has detected that somebody is trying to transfer your private data via internet. We strongly recommend you to block attack immediately.

Antimalware Doctor starts to make its move after the user loges in the Windows. Malware fabricates computer scans and shows it to the user. It is misleading information and user may fall int this scam. The numerous fake pop-ups appears on the user’s desktop and this is parasites way to trick you into believing you have to purchase a supposedly legal version of  Antimalware Doctor. This system is not real security tool and nothing but parasite inside your computer. You are able to remove it. Just choose reputable anti-spyware system and kill it.

Antimalware Doctor is a Rogue Antispyware software

How to manually remove Antimalware Doctor

To remove Antimalware Doctor spyware you must block Antimalware Doctor sites, stop and remove processes, unregister DLL files, search and delete all other Antimalware Doctor files and registry utility. Follow the Antimalware Doctor detection and removal instructions below.

The most typical software removal method is to remove Antimalware Doctor by using "Add or Remove Programs" service. However there may be hidden Antimalware Doctor files, running processes and registries in your computer, so Antimalware Doctor may recreate all other files after reboot.

Antimalware Doctor manual removal instructions

Block Antimalware Doctor sites:
antimalwaredoctor.com
scanner.secure-web.info Read more how to block Antimalware Doctor sites

Stop and remove Antimalware Doctor processes:
Antimalware Doctor.exe
setupapp7070010000.exe Read more how to kill Antimalware Doctor processes

Locate and delete Antimalware Doctor registry entries:
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor\datarl1=KRoAGVdOQwQVExEoAAIQQRsl
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor\datarl2=KRoAGVdOQwQVExE3BAYNQRsl
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor\datarlA=KRoAGVdOQwQVExEoAAIQQRsl
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor\install_time=4/12/2010 3:48:12 AM
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor\database_version=256
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor\virus_signatures=62171
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor\affid=7070010000
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\setupapp7070010000.exe=C:\Documents and Settings\malwarehelp.org\My Documents\New Folder\setupapp7070010000.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor\DisplayIcon=C:\Documents and Settings\malwarehelp.org\My Documents\New Folder\setupapp7070010000.exe,0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor\DisplayName=Antimalware Doctor
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor\UninstallString=C:\Documents and Settings\malwarehelp.org\My Documents\New Folder\setupapp7070010000.exe /uninstall
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor\InstallLocation=C:\Documents and Settings\malwarehelp.org\My Documents\New Folder\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor\NoModify=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor\NoRepair=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\Documents and Settings\malwarehelp.org\My Documents\New Folder\setupapp7070010000.exe= Read more how to delete Antimalware Doctor registry entries
Download RegistryBooster 2010 to scan errors caused by Antimalware Doctor

Search and unregister Antimalware Doctor DLL libraries:
hookdll.dll Read more how to unregister Antimalware Doctor DLL files

Detect and delete other Antimalware Doctor files:
C:\Documents and Settings\malwarehelp.org\My Documents\New Folder\setupapp7070010000.exe
C:\Documents and Settings\malwarehelp.org\My Documents\New Folder\enemies-names.txt
C:\Documents and Settings\malwarehelp.org\My Documents\New Folder\hookdll.dll

We strongly recommend you to use spyware remover to track Antimalware Doctor and automaticaly remove Antimalware Doctor processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: ,

19 Responses to

Antimalware Doctor

  1. Miros
    May 5th, 2010 at 11:56 pm

    Thanks for help. It works. And it is better than our local IT-support :-)
    BR Miros

    Reply

  2. Renata Rogé
    June 11th, 2010 at 9:35 am

    Hi, I’m trying to get rid of it too, but I did all this and it didn’t work.
    Following the instructions, I couldn’t find the Antimalware Doctor files nor the Antimalware Doctor processes…
    They were simply not there.
    And now the software is not even in the add/remove programs, but it is still in my computer!
    What do I do?

    Reply

  3. Jonathan
    June 14th, 2010 at 11:42 am

    Ok quick update… the “setupapp7070010000″ references have changed. It is now setup(something)0000 both in the task manager processes and in the registry entries

    Reply

  4. Shannon
    June 14th, 2010 at 3:36 pm

    Thank you, it worked like a charm! I was getting nerveous for nothing – phew. x

    Reply

  5. Michael
    June 17th, 2010 at 5:15 am

    More interesting is how do you get this infection and why does an uptodate Symantec Endpoint Protection (11MR4) not detect this trojan?

    Reply

  6. Andy
    July 12th, 2010 at 1:02 am

    Hello, i am bad at this kind of thing and i do not understand how to get rid of the processes and block the site etc, can someone please run me through it! i am running out of time!

    Reply

  7. Froggy
    July 25th, 2010 at 4:53 pm

    I am still getting google search result redirect to ad pages.

    Reply

  8. Lamann, Adrian
    August 10th, 2010 at 10:52 am

    Thanks a lot!
    Vielen Dank!
    You saved my computer!
    Ihr habt meinen Computer gerettet!

    Reply

  9. Joost Buiters
    September 4th, 2010 at 2:33 am

    No need to buy any additional software (that will cost you just as much as the “Antimalware Doctor” you are trying to get rid of!), or perform elaborate actions in your registry!

    On startup, repeatedly push F7, and then select “start up in safe mode”. Now, simply perform a system restore to a point in time before the infectation. Done!

    Reply

    Luciana Reply:
    September 6th, 2010 at 2:26 am

    That is a great recommendation. Too bad it doesn’t work in most cases.

    Reply

  10. Alex
    September 11th, 2010 at 1:05 pm

    Thank you for the guide. Just as a little update for others: On my computer the setupapp file was named mediafix70700en01.

    The filename may change again so its best to do a search for “enemies-names.txt” file and find the folder its in from there.

    Reply

  11. Jerry
    October 8th, 2010 at 11:38 am

    With all the powerful software that is out there, simply find the person who is responsible for such virus and malware and spyware and publish their name, email, telephone numbers, address and ‘WE THE PEOPLE” can take care of the rest

    Reply

  12. Evelin Andrade
    October 19th, 2010 at 1:22 pm

    THANK YOU VERY MUCH
    I HAD THIS PROBLEM WITH THE COMPUTER AT WORK,
    I DINT KNOW WHAT TO DO I WAS SO NERVOUS,
    BUT THANKS TO THIS WEB I SOLVE THE PROBLEM.
    IM SO HAPPY NOW ; – )

    Reply

  13. RANDY
    November 12th, 2010 at 9:13 pm

    Can someone help me? My brother has this on his computer as well. We have tried the manual remove and nothing happened. The registry keys was deleted but brought back. Couldn’t delete or find any of those files. I have downloaded several programs but all are ones that has to be paid in order to remove! HELP HELP

    Reply

  14. shazard
    January 27th, 2011 at 6:13 pm

    just had antimalvare doctor visit my computer too but i had no setupapp…00.exe instead it was changed to candek700mem.exe

    Reply

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here
«
»