Malware Doctor System Alert
Malware Doctor System Alert is a fake security alert launched by the rogue anti-spyware application known as Malware Doctor. The Malware Doctor System Alert pop-up reads as follows:
"Malware Doctor.
You are using unregistered version of Malware Doctor. The unregistered version DOES NOT heal infected files if they are discovered. Register Malware Doctor in order to protect your computer."
The purpose of this fake security notification, and the dozen of other pop-ups that Malware Doctor may bombard the user with, is to intimidate the user into purchasing the fake spyware remover Malware Doctor by making the user believe that their computer is infected.
File System Details
Malware Doctor System Alert may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %ProgramFiles%\Malware Doctor\Malware Doctor.exe | |
| 2. | %ProgramFiles%\Malware Doctor\Validation.dll | |
| 3. | MDsetup.exe | |
| 4. | %ProgramFiles%\Malware Doctor\htmlayout.dll | |
| 5. | Malware Doctor.exe | |
| 6. | %ProgramFiles%\Malware Doctor\unins000.exe | |
| 7. | %ProgramFiles%\Malware Doctor\unins000.dat | |
| 8. | main.css | |
| 9. | r_index.htm | |
| 10. | register.htm | |
| 11. | update.htm | |
| 12. | help.ico | |
| 13. | options.ico | |
| 14. | progress-body.png | |
| 15. | protection.ico | |
| 16. | register.png | |
| 17. | about.png | |
| 18. | button-back-active.png | |
| 19. | greenpoint.png | |
| 20. | sectionheader.png | |
| 21. | status.ico | |
| 22. | tab.png | |
| 23. | thanx.png | |
| 24. | update.png | |
| 25. | Malware Doctor.lnk | |
| 26. | %\Documents and Settings%\All Users\Start Menu\Programs\Malware Doctor\ | |
| 27. | %ProgramFiles%\Malware Doctor\maincfg.xml | |
| 28. | index.htm | |
| 29. | protect.htm | |
| 30. | r_support.htm | |
| 31. | support.htm | |
| 32. | header-hover.png | |
| 33. | ok.png | |
| 34. | progress-back.png | |
| 35. | protect.png | |
| 36. | regicon.png | |
| 37. | images | |
| 38. | button-back.png | |
| 39. | focusled.png | |
| 40. | scan.ico | |
| 41. | shield.png | |
| 42. | support.png | |
| 43. | tab-hover.png | |
| 44. | update.ico | |
| 45. | warningicon.png | |
| 46. | unins000.dat | |
| 47. | %ProgramFiles%\Malware Doctor\GUI\ | |
| 48. | %\Documents and Settings%\All Users\Start Menu\Programs\Malware Doctor\Malware Doctor.lnk | |
| 49. | help.htm | |
| 50. | options.htm | |
| 51. | r_protect.htm | |
| 52. | status.htm | |
| 53. | header_right.jpg | |
| 54. | noconnection.png | |
| 55. | header.png | |
| 56. | progress-body-dark.png | |
| 57. | redpoint.png | |
| 58. | options.png | |
| 59. | banner.png | |
| 60. | button-back-hover.png | |
| 61. | header.jpg | |
| 62. | sectionheaderred.png | |
| 63. | stripback.png | |
| 64. | tabback.png | |
| 65. | toolbarback.png | |
| 66. | warning.png | |
| 67. | maincfg.xml | |
| 68. | %ProgramFiles%\Malware Doctor\ |
Registry Details
Malware Doctor System Alert may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Malware Doctor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Malware Doctor_is1
HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Uninstall\Malware Doctor
HKEY_LOCAL_MACHINE\SOFTWARE\Malware Doctor
HKEY_USERS\Software\Microsoft\Windows\Explorer\MenuOrder\Start Menu2\Programs\Malware Doctor
HKEY_CURRENT_USER\Software\Malware Doctor\AntiSpy Knight
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Alcmtr"
