Error Doctor 2009

Threat Scorecard

Threat Level: 20 % (Normal)
Infected Computers: 2
First Seen: November 28, 2011
Last Seen: October 31, 2020
OS(es) Affected: Windows

Error Doctor 2009 Image

Despite its name, Error Doctor 2009 is not designed to fix errors on your computer system or to help your operating system in any way. Rather, Error Doctor 2009 is part of a fairly widespread online scam, designed to steal your money by convincing you to purchase a useless fake anti-spyware application. According to ESG security researchers, there is nothing remotely associated with a legitimate anti-spyware program beyond Error Doctor 2009's interface. While on the surface, Error Doctor 2009 is designed to resemble legitimate security programs, Error Doctor 2009 is designed for nothing more than to display a large number of fake error messages and alerts in order to convince its victim to purchase a useless 'full version' of Error Doctor 2009. ESG security researchers recommend removing Error Doctor 2009 with a legitimate security program. Because Error Doctor 2009 may be able to block access to the Internet or to your real security applications, it may be necessary to start up Windows in Safe Mode. This will allow you to bypass Error Doctor 2009's host of error messages and malicious actions long enough to download and install a real security solution.

Protecting Yourself from Error Doctor 2009

Error Doctor 2009 will usually be installed through a Trojan infection. Once installed, this Trojan will download and install Error Doctor 2009's components and make harmful changes to your computer system. Once Error Doctor 2009 is up and running, Error Doctor 2009 launches automatically every time you start up your operating system, taking over your computer system, unless you decide to remove Error Doctor 2009. Some ways in which Trojans associated with Error Doctor 2009 can make their way onto your computer include the following:

  • Trojans associated with security programs such as Error Doctor 2009 will often be acquired after clicking on a pop-up window resembling an error message, claiming that your computer system is infected with malware. Pop-up windows and advertisements claiming to run a full malware scan of your computer or to give you your PC's rating are usually associated with rogue security programs and dangerous Trojans.
  • It is also fairly common to find Trojans associated with Error Doctor 2009 disguised as fake system updates, video codecs or popular files on file sharing networks.
  • Error Doctor 2009's associated malware and installer may also be included within a suspicious email attachment or through other spam messaging scams.

File System Details

Error Doctor 2009 may create the following file(s):
# File Name Detections
1. %Common Program Files%\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll
2. %Common Program Files%\InstallShield\Professional\RunTime\Objectps.dll
3. %Common Program Files%\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll
4. %Common Program Files%\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe
5. %Common Program Files%\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll
6. %Common Program Files%\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll
7. ErrorDoctor.exe
8. %Program Files%\SoftwareDoctor\ErrorDoctor\ErrorDoctor.exe
9. %Common Program Files%\InstallShield\Professional\RunTime\11\00\Intel32\iGdi.dll
10. %Common Program Files%\InstallShield\Professional\RunTime\11\00\Intel32\setup.dll
11. DotNetInstaller.exe
12. %Program Files%\SoftwareDoctor\ErrorDoctor\icon.ico
13. %Documents and Settings%\All Users\Start Menu\Programs\SoftwareDoctor\ErrorDoctor\Uninstall.lnk
14. %Documents and Settings%\All Users\Start Menu\Programs\SoftwareDoctor\ErrorDoctor\ErrorDoctor.lnk
15. %Common Program Files%\InstallShield\Professional\RunTime\IsProBE.tlb
16. %Documents and Settings%\All Users\Desktop\ErrorDoctor.lnk
17. %Common Program Files%\InstallShield\Professional\RunTime\iKernel.rgs

Registry Details

Error Doctor 2009 may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\SoftwareDoctor
HKEY_LOCAL_MACHINE\SOFTWARE\ErrorDoctor
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4817E4B-04B6-11D3-8862-00C04F72F303}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B74DE36A-B95C-49A1-8F41-A09F3D187747}
HKEY_ALL_USERS\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\SoftwareDoctor

Trending

Most Viewed

Loading...