Antimalware Doctor is a rogue antispyware program that distributed and installed throught trojans. The rogue detects false infections and displays numerous fake security warnings in order to scare you into thinking that your computer is infected with a lot of malware. It hopes that you will then purchase a full version of Antimalware Doctor.
When the trojan that installs Antimalware Doctor is started, it will download, then install the rogue on to your computer. During installation, the fake antispyware application will be registered in the Windows registry to run automatically when Windows loads. Immediately after launch, Antimalware Doctor will start to scan your computer and reports a lot of various infections that will not be fixed unless you first purchase the software. Important to know, all of these infections are a fake and do not actually exist on your computer.
What is more, Antimalware Doctor constantly displays various security alerts. However, all of these alerts ara fake and like the false scan results supposed to scare you into thinking that your computer is infected. So you can safely ignore all that the parasitic program gives you.
As you can see, Antimalware Doctor is a scam that created with one purpose to trick you into purchasing so-called “full” version of the program. If you find that your computer is infected with this malware, then be quick and take effort to remove it immediately. Use the removal guide below to remove Antimalware Doctor from your computer for free.
Symptoms in a HijackThis Log
O4 – HKCU\..\Run: [Antimalware Doctor.exe] C:\Windows\System32\Antimalware Doctor.exe
Use the following instructions to remove Antimalware Doctor (Uninstall instructions)
Download MalwareBytes Anti-malware (MBAM). Once downloaded, close all programs and windows on your computer.
Double-click on the icon on your desktop named mbam-setup.exe. This will start the installation of MalwareBytes Anti-malware onto your computer. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to “Update Malwarebytes’ Anti-Malware” and Launch “Malwarebytes’ Anti-Malware”. Then click Finish.
MalwareBytes Anti-malware will now automatically start and you will see a message stating that you should update the program before performing a scan. If an update is found, it will download and install the latest version.
As MalwareBytes Anti-malware will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main menu. You will see window similar to the one below.
Malwarebytes Anti-Malware Window
Make sure the “Perform quick scan” option is selected and then click on the Scan button to start scanning your computer for Antimalware Doctor infection. This procedure can take some time, so please be patient.
When the scan is finished a message box will appear that it has completed scanning successfully. Click OK. Now click “Show Results”. You will see a list of infected items similar as shown below.
Note: list of infected items may be different than what is shown in the image below.
Malwarebytes Anti-malware, list of infected items
Make sure all entries have a checkmark at their far left and click “Remove Selected” button to remove Antimalware Doctor. MalwareBytes Anti-malware will now remove all of associated Antimalware Doctor files and registry keys and add them to the programs’ quarantine. When MalwareBytes Anti-malware has finished removing the infection, a log will open in Notepad and you may be prompted to Restart.
Note 1: if you can not download, install, run or update Malwarebytes Anti-malware, then follow the steps: Malwarebytes won`t install, run or update – How to fix it.
Note 2: if you need help with the instructions, then post your questions in our Spyware Removal forum.
Note 3: your current antispyware and antivirus software let the infection through ? Then you may want to consider purchasing the FULL version of MalwareBytes Anti-malware to protect your computer in the future.
Antimalware Doctor creates the following files and folders
C:\Windows\System32\enemies-names.txt
C:\Windows\System32\Antimalware Doctor.exe
Antimalware Doctor creates the following registry keys and values
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Antimalware Doctor.exe
Ran this routine but program keeps coming back, what is the next step?
Joseph, open a new topic in our Spyware removal forum. I will help you.
In my computer I have antivirus program but antimalware doctor named program is disturbing my pc how can i fix it ?
Dev, if the above instructions does not help, then ask for help in our Spyware removal forum. I will help you.
I did it… Go to msconfig and check under start up for newer stuff. Usually is in /documents~settings/application data/(directory had a whole bunch of numbers) I disabled it for startup, then had to reboot. I went to Control panel after, and saw the uninstall was still there. Whe I clicked remove it opened the program, which I stopped with Task manager. Msconfig had the program checked to start again. So I copied the location, unchecked it and rebooted. I went to the location and when I opened it, it had a different name than AntiMalware Doctor but the enemies.txt was there. I deleted both, then the folder. I emptied the recycle bin and rebooted. Got rid of it, then went to conrol panel, found the antimalware doctor listing still there. I clicked remove and got the message saying it might have been already uninstalled
coincidentally I also disabled a couple of weird named dlls in msconfig start up as well.
Thanks for this removal tool. However I still don’t have access to System Restore. A message pops up saying Domain Administrator has blocked and there’s no access to System Properties to ‘untick’. Any ideas please?
im unable to get into my run command options to get to the msconfig, due to the antimalware doctor. any ideas how to bypass the malware so i can remove it from starting up. i ran the mbam software once and it worked then the antimalware thing came back the next day. i run mbam now and it doesnt see the rogue malware. plese help any suggestions is appreciated.
Grizza, try scan your PC with SuperAntispyware. If it does not help, then start a new topic in our Spyware removal forum.
Cesar, start a new topic in our Spyware removal forum. I will check your PC.
Malwarebytes’ successfully removed the dreaded malware program. MBAM will be added to my arsenal of anti-crap software!
thank you so much for the help. ive finally got rid of that antimalware doctor.
Patrik,
You are my hero. Luckily, moments after noticing the infection, I googled how to rid my computer and your help cured this (I hope) so thank you so much.
you guys i had the antimalware virus thing and i downloaded this stopzilla thing and as soon as i finished installing it the antimalware disappeared and right after i went on to delete the stopzilla that i had just downloaded. now computer works just fine.
Hello Patrick,
Your program apears to have removedAntimalware doctor. Thanks for the program and the clear instruction.
But I get the RUNDLL message hfvipvoo.dll. Stopping with Msconfig doe not work. Can you give advice.
grtz
erik.
Erik, please start a new topic in our Spyware removal forum. I will help you.
I think Malwarebytes and Antimalware Doctor are by the same people. It’s like a good cop, bad cop.
They will create the problem with antimalaware doctor and then sell you the solution with malwarebytes.
Just get stopzilla and your problems are solved.
I downloaded malwarebytes and it got rid of the antimalware doctor. However, some of my settings reverted to default. My computer is still slow and Will not let me access some programs or the internet after it has been on for a few hours. Please help
chelsey, please start a new topic in our Spyware removal forum. I will check your PC.
I have run mbam.exe and it says it removes antimalware doctor, but after removal I cannot access the internet and it is always there when I restart. What can I do??
Tim, check your proxy settings. Run Internet Explorer, Click Tools -> Internet Options. Select Connections Tab and click to Lan Settings button. Uncheck “Use a proxy server” box. Click OK. Click OK.
I can get on the internet now. How can I prevent Antimalware Doctor from coming back when I restart the computer??
You mean “reinstall computer” ?
hi i jus recently was attacked with the antimalware virus and i can’t access my internet to download this or any other helpful antimalware programs im posting this from a different computer so if someone could please help me i would greatly appreciate it
David, try download the suggested app in Safe mode with networking.
Is the first walkthrough going to work or not?
Thank you very much for this information
A company computer has been recently infected with this crap. I have tried walking them through MalwareBytes, Spyware Doctor, removing it manually, and a few other methods over the phone but nothing has removed AnitMalware Doctor. Any ideas?
I have tried it in safe mode, normal mode, safe mode with networking.
Shane, probably the computer is infected with a new version of the rogue. Please start a new topic in our Spyware removal forum. I will help you.
antimalware doctor has invaded my laptop [pc]. i’ve looked everywehre for removal instructions but unfortunately, i am unable to successfully run the program because the malware seems to block any .exe apps from opening. it would say “application cannot be executed. the file mbam.exe is infected. do you want to activate your antivirus software now?” and of course i would click no. any suggestions ?