How to remove Virus Doctor

Tuesday, February 3rd, 2009 at 3:21 am
Home » Rogue Antispyware » Virus Doctor

Virus Doctor description

Virus Doctor (a.k.a. Virus Doctor Freeware) is another malware masquerading as a security program. It is distributed using misleading online advertisements but it may also be installed secretly by trojans.

VirusDoctor is part of a bigger scam. It is advertised via fake online scanners that recommend downloading the program as the only mean to fix a computer. The problems and viruses (W32.Nimda.J@mm and others) reported by online advertisements are falsified. If installed, Virus Doctor encourages purchasing a full version. The strategy is fraudulent because Virus Doctor offers nonexistent full version for deleting nonexistent infections.

Virus Doctor may look like a legitimate tool but it is dangerous for a machine. VirusDoctor makes a computer run slowly and it may even crash a system occasionally. It also loads plenty of annoying pop-ups.

Virus Doctor is a Rogue Antispyware software

How to manually remove Virus Doctor

To remove Virus Doctor spyware you must block Virus Doctor sites, stop and remove processes, unregister DLL files, search and delete all other Virus Doctor files and registry utility. Follow the Virus Doctor detection and removal instructions below.

The most typical software removal method is to remove Virus Doctor by using "Add or Remove Programs" service. However there may be hidden Virus Doctor files, running processes and registries in your computer, so Virus Doctor may recreate all other files after reboot.

Virus Doctor manual removal instructions

Block Virus Doctor sites:
virusdoctor-online.com
av1-scanner.info
av1-download.info
virusdoctoronline.com
best-click-scanner.info
av-best.info
scanner.av-best.info
download.av-best.info Read more how to block Virus Doctor sites

Stop and remove Virus Doctor processes:
VirusDoctor.exe
VDocf360.exe
unins000.exe
VDo[RANDOM].exe Read more how to kill Virus Doctor processes

Locate and delete Virus Doctor registry entries:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run virus doctor
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run virus doctor
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 displayicon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 displayversion
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 helplink
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 inno setup: app path
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 inno setup: icon group
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 inno setup: setup version
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 inno setup: user
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 installdate
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 installlocation
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 nomodify
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 norepair
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 publisher
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 urlinfoabout
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virus doctor_is1 urlupdateinfo
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run virus doctor Read more how to delete Virus Doctor registry entries
Download RegistryBooster 2010 to scan errors caused by Virus Doctor

Search and unregister Virus Doctor DLL libraries:
mozcrt19.dll
sqlite3.dll Read more how to unregister Virus Doctor DLL files

Detect and delete other Virus Doctor files:
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Virus Doctor.lnk
%UserProfile%\Application Data\Virus Doctor\settings.ini
%UserProfile%\Application Data\Virus Doctor\uill.ini
%UserProfile%\Desktop\Virus Doctor.lnk
%UserProfile%\Start Menu\Programs\Virus Doctor.lnk
%UserProfile%\Start Menu\Virus Doctor.lnk
C:\Documents and Settings\All Users\Application Data\[RANDOM]\Languages\VDDe.lng
C:\Documents and Settings\All Users\Application Data\[RANDOM]\Languages\VDFr.lng
C:\Documents and Settings\All Users\Application Data\[RANDOM]\Languages\VDIt.lng
C:\Documents and Settings\All Users\Application Data\[RANDOM]\System Data Configuration\DBInfo.ver
C:\Documents and Settings\All Users\Application Data\[RANDOM]\System Data Configuration\vd[RANDOM].bd
C:\Documents and Settings\All Users\Application Data\[RANDOM]\unins000.dat
C:\Documents and Settings\All Users\Application Data\System Data Configuration\config.cfg
C:\Documents and Settings\All Users\Application Data\System Data Configuration\DB.ini
l5yM1JLo.exe.part
I_iHBi4m.exe.part
4nRqp5nw.exe.part

We strongly recommend you to use spyware remover to track Virus Doctor and automaticaly remove Virus Doctor processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , , ,

33 Responses to

Virus Doctor

  1. Danny
    February 19th, 2009 at 9:14 am

    I saw You on 3 first page Google Search sites, but I couldn’t use You on my Vista Windows System…..boo hoo.
    Don’t like this Virus Dr, which lists as av1-scanner.info

    -Danny

    Reply

    Luciana Reply:
    February 20th, 2009 at 1:01 am

    Could you please be more specific? Av1-scanner.info is a malicious and fraudulent website. I assume it’s how you got infected with VirusDoctor malware. Have you tried using the manual removal guide?

    Reply

  2. Aaron
    February 20th, 2009 at 5:50 am

    While I did not use the tools provided on this site to remove this software, I found this information to be pretty useful. Managed to clear my HD up of this mess before it got even remotely out of hand and took a few measures myself to prevent this specific software from coming back.

    One think that I’m curious about, is where it comes from. My less computer-savy girlfriend was using my computer, and emailed me at my workplace when she seen the thing pop up that said it was infected. I had her turn the computer off and I came home and found this site here. It would be nice if some very popular sources of this software was listed so I can ask her not to use those sites/services anymore :P

    Reply

  3. Paul
    February 22nd, 2009 at 10:10 am

    When I am using the application “Mob Wars” on Facebook.com, I will from time to time get a screen stating that I need to download the virusdoctor. It displays a warning page that I am infected with multiple viruses then asks to install virusdoctor. I do not click on any of the buttons but instead, I end all processes of iexplorer. I then started my PC in safemode and checked for files in registry or on the PC itself.

    I found nothing.

    Yet this is the second time that Ive seen this. Could Facebook have a link that is pointing to an infected source? Or do I have a residual file or registry entry that is not listed in your removal instructions?

    Reply

    bryan Reply:
    February 22nd, 2009 at 12:31 pm

    Yes you can have running processes related to Virus Doctor. They can be hidden.
    Please start windows in safe mode and run scanner.

    Reply

    Paul Reply:
    February 22nd, 2009 at 6:45 pm

    I did and it found no viruses or malware on my computer.
    I ran Trend Micro and Windows Live OneCare, all current and ran clean.

    I was also unable to find the running processes, registry entries or registred DLL entries.

    I added the three links associated with this malware to my host file and blocked them in internet explorer. Since I did that, I have had no reoccurance.

    Reply

  4. James
    March 15th, 2009 at 8:53 pm

    I was on facebook playing parking wars and a screen popped up and said that I was infected with viruses. So I clicked on it and it wanted me to run virus doctor. I wasn’t sure if I should do it so I ran a mcafee virus scan, I haven’t found anything yet. It is still running. So I decided to go to the virus doctor website and found this. I think reading the comments on here, that it was just an hoax. I didn’t download anything and we will see what happens! Hopefully everything is ok.

    Reply

    Luciana Reply:
    March 15th, 2009 at 10:48 pm

    Although your anti-virus hadn’t detected any threats, there’s still a possibility of computer infection. Antiviruses are not meant to detect or delete computer parasites like ‘Virus Doctor’ thing. Viruses are different kind of issue; that is why you need both antivirus and antispyware to protect your computer.
    If you want to be sure that your pc is not infected, take a look at the manual removal guide above the comments section. If there are no signs of the malicious files listed on the removal guide, then your computer is not infected.

    Reply

  5. Serena
    March 29th, 2009 at 1:06 pm

    I have found the warning message to pop up when I come home after going to music school. What I do is click the x button on this message. Of course, it then goes to the fake scan anyway. To stop it, you have to click on the x before the “scan” completes. This way, it cannot download itself. My recommendation: Be extra-vigilant when surfing the web, and never surf unprotected.

    Reply

    Luciana Reply:
    March 29th, 2009 at 10:27 pm

    I’m sorry to say this, but if you get pop-ups and if you see the fake scan, Virus Doctor is already installed on your computer. It is a malware and it doesn’t need your approval for downloading itself. You should run anti-spyware to deal with the VirusDoctor.

    Reply

    Orchid Reply:
    August 29th, 2009 at 9:00 am

    So even if you don’t install it when it prompts you to and you shut everything down… it’s still installed on your computer?

    I get this popup occasionally. Not a huge amount but every so often. My antispyware hasn’t found anything but i’ll try running it in safe mode.

    Reply

    Orchid Reply:
    August 29th, 2009 at 9:03 am

    It seems like this is an unavoidable virus. You never know what site it’s attached itself to.

    Luciana Reply:
    August 30th, 2009 at 10:33 pm

    You are right, Virus Doctor installs itself without your permission. If your anti-spyware won’t be able to remove this infection, I recommend the manual removal.

  6. Myaki
    April 3rd, 2009 at 9:56 pm

    What I found is while I was talking to people on a site, that I’ve used for a year now, and never ever gotten a virus. But also VirusDoctor appeared when I had gone to a everyday normal picture site, all the sudden, it asked me to run a scanner, but I checked my AVG and Windows Defender, nothing was said to be infected! So I thought for a second, that this musn’t be right. But if you get something about it slowing your computer’s performance, that si when you close the window, your computer seems to run normal. I think that VirusDoctor is trouble.

    Reply

    Luciana Reply:
    April 5th, 2009 at 10:20 pm

    You are right. Virus Dotor is trouble. If your anti-spyware hadn’t found a thing and you don’t receive numerous pop-ups, you most likely evaded VirusDoctor. The pop-up you saw might have been just an online “advertisement”.

    Reply

  7. Nick
    August 30th, 2009 at 10:43 am

    I first got a virus doctor pop up about a week ago when my mom was on the computer. I wasn’t sure what to do, so I had my real anti-virus and anti-spyware program do a scan, and it found no infections. At that point I figured it was a trick, and using Task Manager managed to get rid of the pop up. The next night it came up again, but I used Task Manager again to exit it immediately. After that, it hasn’t come back until today, upon which I also used Task Manager to exit it. It only seems to come up when my mom is on.

    Were those only advertisements, or did it install itself?

    Reply

    Luciana Reply:
    August 30th, 2009 at 11:03 pm

    If you see the pop-ups, there’s a big chance that Virus Doctor is already installed on your PC. Run anti-spyware scan to make sure everything’s fine.

    Reply

    Nick Reply:
    August 31st, 2009 at 6:36 am

    Alright, hope the anti-spyware thing works out fine…thanks for the quick response.

    Reply

  8. Rebekah
    September 5th, 2009 at 5:53 am

    Oh and forgot to say, I did not fall for the “instalation” issue. But reading further on you’ve said it doesn’t matter, that it’s on your computer. due to the annoying popups.

    Reply

  9. Celina
    September 7th, 2009 at 8:34 am

    Hi all. the other day I visited a site and my Kaspersky security went crazy saying there was a Trojan trying to come home with me ;p I went through the steps and Kaspersky disenfected/deleted it. Fast forward 3 days and I’m on a Yahoo site, I get a virus doctor pop up saying I have problems blah blah. I closed it out and did a full scan with Kaspersky and Windows Defender. Kaspersky disinfected a trojan and windows found nothing after that. I’ve had no other pop ups no other symptoms whatsoever. So am I good to go? :) Can I pay bills online now? Thanks in advance!

    Reply

    Luciana Reply:
    September 7th, 2009 at 11:26 pm

    If the pop-ups don’t appear anymore and your browser is not redirected and you don’t experience other inconveniences caused by malware, your computer is most likely fine. If you wanna be sure, you can check manually if Virus Doctor files are left on your PC.

    Reply

  10. B
    September 18th, 2009 at 8:30 pm

    I got a pop up while I was on the internet and I stopped it and when I went to the task manager I didn’t see any of the processes and I don’t get any pop ups when I’m on my computer so does this mean I’m safe? If I’m not then what’s another way to check? Please respond as soon as you can.

    Reply

    Luciana Reply:
    September 20th, 2009 at 11:24 pm

    Take a look at the manual removal above this comments section. If you can’t find any of the malicious files or registry entries, your computer is most likely fine. You can also run antispyware scan to check if the malware is gone.

    Reply

  11. Agustina
    September 19th, 2009 at 4:50 am

    Hello! I was recently visiting a lyrics website when I got the Virus Doctor advertisement thing about how my computer was infected and asking me to download some Greensomethingsomething.exe file. I stupidly clicked the red x on the top right corner instead of closing the browser through task manager.

    After that, I got a pop up that made my browser window really tiny and urged me to do a scan. This time I did close the browser window through task manager. I ran a full scan with the latest Malwarebytes Anti-Malware and it said there were no infections. I ran a quick scan with the same result. I ran my McAfee antivirus full scan and it found the Greensomethingsomething.exe file and quarantined it. I immediately removed it and thought all must be well.

    About an hour after, I got another pop up. I don’t know if it was a new one from another site or a leftover from the previous thing. I followed your instructions for manual removal and found none of the files, processes, registries, dll libraries you cited. I’m running Vista, so I don’t know if it makes a difference (it made it harder to find the files in the All Users\Application Data area). I looked at other websites to see other associated files with the virus and checked for them all over my laptop and can’t find any of them. My laptop isn’t any slower or weird either…it was just that after I removed that file I still got one more popup. I haven’t gotten another one, so does this mean I’m probably okay…? I’m trying the Kaspersky online scanner thing too, just in case.

    Thanks for your time!

    Reply

  12. bowwow
    December 26th, 2009 at 2:23 pm

    the virus doctor itself is virus

    Reply

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here
«
»