February 25, 2011

Virus Doctor.

Virus Doctor is an spyware program that displays fake alerts, false online advertising, and uses scare tactics to make you think you are infected.




 
This program is advertised through the use of pop-ups stating that your computer has a security risk. When you close this pop-up, you will immediately be brought to a page pretending to be an online anti-malware scanner, but in reality it is just an advertisement. When the advertisement is finished, it will display a screen stating that your computer is infected with a variety of malware and that you should download and install Virus Doctor in order to clean your computer.

If you decide to install Virus Doctor, the program will be configured to start automatically when you login to Windows. Once running it will scan your computer and display numerous infections on your computer that cannot be removed unless you first purchase the program. The infections that are shown, though, are all fake and are only being displayed to make you think you are infected and thus trick you into purchasing the software.



Associated Virus Doctor Files:

c:\Documents and Settings\All Users\Application Data\927e

c:\Documents and Settings\All Users\Application Data\927e\mozcrt19.dll

c:\Documents and Settings\All Users\Application Data\927e\sqlite3.dll

c:\Documents and Settings\All Users\Application Data\927e\unins000.exe

c:\Documents and Settings\All Users\Application Data\927e\VDoca582.exe

c:\Documents and Settings\All Users\Application Data\927e\Languages\VDDe.lng

c:\Documents and Settings\All Users\Application Data\927e\Languages\VDFr.lng

c:\Documents and Settings\All Users\Application Data\927e\System Data Configuration

c:\Documents and Settings\All Users\Application Data\927e\System Data Configuration\DBInfo.ver

c:\Documents and Settings\All Users\Application Data\System Data Configuration

c:\Documents and Settings\All Users\Application Data\System Data Configuration\DB.ini

%UserProfile%\Desktop\Virus Doctor.lnk

%UserProfile%\Start Menu\Virus Doctor.lnk

Associated Virus Doctor Windows Registry Information:
 
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Virus Doctor_is1

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Virus Doctor"

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "URVDoc[]"

Removal:

Although it is possible to manually remove Virus Doctor, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend  malware and spyware removal applications.

After removing all these files, restart your computer and the issue will be fixed. And don’t forget to do update your Security Software, check the Firewall Settings and the Operating System and finally do a full system scan with the Security Software.

0 comments:

Post a Comment

Related Posts Plugin for WordPress, Blogger...

Search This Blog

Followers

Categories

Twitter Delicious Facebook Digg Stumbleupon Favorites More