• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

MyAntiSpyware

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

How to remove Antimalware Doctor (Uninstall instructions)

Myantispyware team February 20, 2010    

Antimalware Doctor is a rogue antispyware program that distributed and installed throught trojans. The rogue detects false infections and displays numerous fake security warnings in order to scare you into thinking that your computer is infected with a lot of malware. It hopes that you will then purchase a full version of Antimalware Doctor.

When the trojan that installs Antimalware Doctor is started, it will download, then install the rogue on to your computer. During installation, the fake antispyware application will be registered in the Windows registry to run automatically when Windows loads. Immediately after launch, Antimalware Doctor will start to scan your computer and reports a lot of various infections that will not be fixed unless you first purchase the software. Important to know, all of these infections are a fake and do not actually exist on your computer.

What is more, Antimalware Doctor constantly displays various security alerts. However, all of these alerts ara fake and like the false scan results supposed to scare you into thinking that your computer is infected. So you can safely ignore all that the parasitic program gives you.

As you can see, Antimalware Doctor is a scam that created with one purpose to trick you into purchasing so-called “full” version of the program. If you find that your computer is infected with this malware, then be quick and take effort to remove it immediately. Use the removal guide below to remove Antimalware Doctor from your computer for free.

Symptoms in a HijackThis Log

O4 – HKCU\..\Run: [Antimalware Doctor.exe] C:\Windows\System32\Antimalware Doctor.exe

Use the following instructions to remove Antimalware Doctor (Uninstall instructions)

Download MalwareBytes Anti-malware (MBAM). Once downloaded, close all programs and windows on your computer.

Double-click on the icon on your desktop named mbam-setup.exe. This will start the installation of MalwareBytes Anti-malware onto your computer. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to “Update Malwarebytes’ Anti-Malware” and Launch “Malwarebytes’ Anti-Malware”. Then click Finish.

MalwareBytes Anti-malware will now automatically start and you will see a message stating that you should update the program before performing a scan. If an update is found, it will download and install the latest version.

As MalwareBytes Anti-malware will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main menu. You will see window similar to the one below.

malwarebytes-antimalware1
Malwarebytes Anti-Malware Window

Make sure the “Perform quick scan” option is selected and then click on the Scan button to start scanning your computer for Antimalware Doctor infection. This procedure can take some time, so please be patient.

When the scan is finished a message box will appear that it has completed scanning successfully. Click OK. Now click “Show Results”. You will see a list of infected items similar as shown below.
Note: list of infected items may be different than what is shown in the image below.

mbam
Malwarebytes Anti-malware, list of infected items

Make sure all entries have a checkmark at their far left and click “Remove Selected” button to remove Antimalware Doctor. MalwareBytes Anti-malware will now remove all of associated Antimalware Doctor files and registry keys and add them to the programs’ quarantine. When MalwareBytes Anti-malware has finished removing the infection, a log will open in Notepad and you may be prompted to Restart.

Note 1: if you can not download, install, run or update Malwarebytes Anti-malware, then follow the steps: Malwarebytes won`t install, run or update – How to fix it.

Note 2: if you need help with the instructions, then post your questions in our Spyware Removal forum.

Note 3: your current antispyware and antivirus software let the infection through ? Then you may want to consider purchasing the FULL version of MalwareBytes Anti-malware to protect your computer in the future.

Antimalware Doctor creates the following files and folders

C:\Windows\System32\enemies-names.txt
C:\Windows\System32\Antimalware Doctor.exe

Antimalware Doctor creates the following registry keys and values

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Antimalware Doctor.exe

Malware removal Rogue Anti Spyware

 Previous Post

How to remove Security Central (Uninstall instructions)

Next Post 

How to remove PC Defender (Uninstall instructions)

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

167 Comments

  1. Patrik
    ― September 4, 2010 - 10:34 am  Reply

    Eric, what shows your browser when you trying open any site ?

  2. Preet
    ― September 4, 2010 - 11:49 am  Reply

    Hi Patrick

    I have malwarebytes anti malware on my computer from a previos virus which happened a month ago. So now the pc is infected with antimalware doctor where pop ups keeps coming up. I can’t connect to the internet either as I’m using my laptop instead and I unchecked the proxy setting but still no connection not even on safe mode with nerworking. I run antimalware it says it got rid of it but because I haven’t updated for a long time maybe that’s why.. But I need to connect to the net to update it.
    I would highly appreciate it if you cansolve this problem. Thank you

  3. Patrik
    ― September 4, 2010 - 12:02 pm  Reply

    Preet, download Malwarebytes updates from here and move this file to your infected PC. Then install it. Run Malwarebytes and perform a scan.

  4. Preet
    ― September 4, 2010 - 12:11 pm  Reply

    Ok thanks I’ll try it now

  5. preet
    ― September 4, 2010 - 1:09 pm  Reply

    Hi Patrik,

    Thanks for that..it looks like it has deleted it as no pop ups for it have come up. Does that mean it has completely gone out of the system?
    When I do a registry editor and go on HKEY_current_user, software, microsoft, windows, current version,uninstall…antimalware is still there so im not completely sure if it has gone although I have deleted it several times but when I reboot the computer it is there.
    Also there is still no internet connection.
    Your help is highly appreciated. Thank you

  6. Patrik
    ― September 5, 2010 - 9:40 am  Reply

    preet, what is your version of Windows ?

  7. Preet
    ― September 5, 2010 - 10:28 am  Reply

    Hi, it’s windows xp

  8. Patrik
    ― September 5, 2010 - 12:01 pm  Reply

    Preet,
    try ping any site, google for example.
    Click Start, Run.
    Type cmd and press Enter.
    It will open a command console window, type into it:
    ping google.com
    Press Enter.
    What is result ?

  9. Preet
    ― September 5, 2010 - 12:14 pm  Reply

    Hi, I typed it in and pressed enter.. It says ‘ping request could not find host google.com. Please check the name and try again.

  10. Patrik
    ― September 6, 2010 - 10:01 am  Reply

    Preet, try ping 74.125.232.18

  11. Alvin
    ― September 6, 2010 - 3:34 pm  Reply

    Hi please can someone help me i just got the virus and it wont go away who can help me with it??!!!!!!!

  12. Sarah
    ― September 6, 2010 - 8:33 pm  Reply

    Hi,

    Should I uninstall malwarebytes when I’m done removing antimalware doctor? My full scan lasted only 27 minutes. Is that even normal?

    Thanks

  13. Preet
    ― September 7, 2010 - 3:50 am  Reply

    Hi patrik, it says destination host unreachable… What shall I do next? Thanks

  14. mitch
    ― September 7, 2010 - 5:44 am  Reply

    yeah mate i got the virus and it will not let me open any thing i wanna get rid of it?

  15. Patrik
    ― September 7, 2010 - 8:10 am  Reply

    Alvin, if the instructions above does not help you, then ask for help in our Spyware removal forum.

  16. Patrik
    ― September 7, 2010 - 8:18 am  Reply

    Sarah, if Malwarebytes detects nothing during a scan, then, of course, you can remove it.

  17. Patrik
    ― September 7, 2010 - 8:24 am  Reply

    Preet, how to you are connected to the Internet ? WiFi ? Cabel/DSL modem ?

  18. Patrik
    ― September 7, 2010 - 8:26 am  Reply

    mitch, you have tried to run Malwarebytes in Safe mode ?

  19. Preet
    ― September 7, 2010 - 9:49 am  Reply

    Patrik, the main pc which can’t connect to the net is a wireless router ( dsl)

  20. Preet
    ― September 7, 2010 - 10:01 am  Reply

    P.s patrik, it says ip address not recognized.. I think the virus changed it or something as every other device like my laptop and iPod can connect to the same internet wirelessly without any problem … It’s just as soon as the pc was infected it could not connect to the net.

  21. Carole
    ― September 7, 2010 - 5:21 pm  Reply

    I have a problem similar to the one Adrienne had, but with a few other twists. I am not able to access any browser – when I try it says that there is a problem and the only place it will take me is to the site to purchase the software. I tried booting in safe mode and I can, but I cannot access most programs on my computer – it keeps telling me that my there is a program trying to send my crdit card info to a malicious site. I cannot open the ad remove programs, but I can get to the control panel – I also do not have a working cd drive so I can’t download a program to another computer write it and then run it on the one that is hijacked. I have seen that you have said to download the program to the ddesk top, but that is also not possible.

    Is there a way to go in through DOS and possibly disable to program to be able to get on the internet and then download the programs?

    I have read through everything on here, and don’t see that anyone has had the same problem. Please help.

  22. Hannah
    ― September 10, 2010 - 6:57 am  Reply

    I can’t start my computer, even in safe mode, to allow me to download the software. Coming up with WINDOWS\SYSTEM32 string of messages and then to blue screen fatal system error.

    Tried restoring to last working set up but no joy…

    HELP!

  23. Patrik
    ― September 11, 2010 - 9:48 am  Reply

    Preet, download WinSock XP Fix to another PC, then move it to your computer. Run it, click Fix button.

  24. Patrik
    ― September 11, 2010 - 9:50 am  Reply

    Carole, reboot your PC in Safe mode.
    Run Internet Explorer, Click Tools -> Internet Options. Select Connections Tab and click to Lan Settings button. Uncheck “Use a proxy server” box. Click OK and click OK again.
    Download MalwareBytes, run it and perform a scan.

  25. Patrik
    ― September 11, 2010 - 9:59 am  Reply

    Hannah, Normal mode is ok?

  26. Preet
    ― September 11, 2010 - 10:08 am  Reply

    Patrik, I downloaded winsock xp fix already and clicked on fix but still doesn’t work.

  27. Patrik
    ― September 11, 2010 - 10:38 am  Reply

    Click Start -> Run.
    Type notepad and press Enter.
    Copy all the text below into Notepad.
    cmd /c (ipconfig /all&nslookup google.com&ping -n 2 google.com&route print) >log.txt
    Save this as cc.bat to your Desktop (remember to select Save as file type: All files in Notepad.)
    Double Click cc.bat and wait for the dos window to close and log.txt will appear on the desktop.
    Move log.txt to another PC using CD disk or flash drive. Open a new topic in our Spyware removal forum and post the contents of it into your topic.

  28. preet
    ― September 13, 2010 - 5:25 am  Reply

    Hi, I did all of the above and yes the dos window closed and a log.txt file appeared on the desktop. However when I clicked it there was no contents…it was just blank. Don’t know what to do next, help! thanks

  29. Patrik
    ― September 15, 2010 - 11:41 pm  Reply

    preet, i have made a mistake. Please use the following script:
    (ipconfig /all&nslookup google.com&ping -n 2 google.com&route print) >log.txt

  30. Preet
    ― September 19, 2010 - 4:05 pm  Reply

    Never mind, I give up… I’m just getting it done from a professional technician – it’s just been too long and nothing seems to be happening. This malware is so deadly it stays in the system even if you think it is deleted.
    But thanks for your suggestions anyway, much appreciated.

« Previous 1 2 3 4 5 6 Next »

Leave a Reply Cancel reply

New Guides

STDEI GLP 1 Review, Stdei GLP-1 Weight Loss Oral Solution Scam
scam alert
GOTEEX.com Review: Promo Code Scams Exposed
Olygee Cooling Ace Review, Don’t Be Fooled by False Promises and Misleading Ads
Suzuki Moorai Robot Dog Vehicle Real or a Scam, What You Need to Know
Liketonline Cooling Ace Review, Scam or Legit? What You Need to Know

Follow Us

Search

Useful Guides

ads by adware
How to remove Adware from Windows 10 (Virus removal guide)
DNSChanger
How to remove DNSChanger malware virus [Updated Apr. 2018]
Malwarebytes won’t install, run or update – How to fix it
Best free malware removal tools
Best Free Malware Removal Tools 2025
browser redirect virus
How to remove Browser redirect virus [Chrome, Firefox, IE, Edge]

Recent Guides

How to remove Security Central (Uninstall instructions)
How to remove Personal Anti Malware (Uninstall instructions)
How to remove Security Essentials 2010 (Uninstall instructions)
How to remove My Security Wall (Removal guide)
How to remove Antivirus (Uninstall instructions)

Myantispyware.com

Myantispyware has been a trusted source for computer security and technology advice since 2004. Our mission is to provide reliable tech guidance and expert, practical solutions to help you stay safe online and protect your digital life.

Social Links

Pages

About Us
Contact Us
Privacy Policy

Copyright © 2004 - 2024 MASW - Myantispyware.com.