Virus Doctor

Virus Doctor Description

ScreenshotVirus Doctor is a fake anti-virus application that is a textbook example of how rogue anti-virus programs attacks are able to steal money from their victims. Virus Doctor is linked to the website, where victims are instructed to enter their credit card information in exchange for a 'full version' of this useless application. Virus Doctor, first seen in 2009, is one of the first members of a very large family of rogue anti-virus programs. In fact, new members of the Virus Doctor family, the FakeVimes family of rogue anti-virus programs are detected every day. Fortunately, Virus Doctor's age and reputation make it reasonably easy to deal with since most legitimate security programs will have a detailed account of how the Virus Doctor infection works and how to remove it.

Some of the many known clones of Virus Doctor include older fake security programs like Virus Melt, Presto TuneUp, Fast Antivirus 2009, Extra Antivirus, Windows Security Suite, Smart Virus Eliminator, Packed.Generic.245, Volcano Security Suite, Windows Enterprise Suite, Enterprise Suite, Additional Guard, PC Live Guard, Live PC Care, Live Enterprise Suite, Security Antivirus, My Security Wall, CleanUp Antivirus, Smart Security, Windows Protection Suite, Windows Work Catalyst.

If You Want Your PC to Stay Healthy, Definitely Avoid a Check-Up with Virus Doctor

Like most rogue anti-virus programs, Virus Doctor claims that Virus Doctor can carry out all kinds of advanced security tasks, such as monitoring your firewall, downloads and system security. These are all lies – ESG security analysts have found that Virus Doctor has no way to remove or detect malware. This fake security product has been programmed to do nothing but display multiple misleading error messages until victims are scared enough to believe that they need to purchase Virus Doctor to fix the imaginary threats on their computer. Virus Doctor has been known to be associated with Google redirects in order to lead computer users to malicious websites promoting Virus Doctor and its many clones. Components of Virus Doctor have also been found to shut down legitimate security programs and Windows components that are usually needed to deal with malware (such as the Windows Registry Editor and Task Manager). Sometimes, depending on the case, it may be compulsory to start up Windows in Safe Mode or from a removable drive in order to ensure that Virus Doctor cannot start up automatically and interfere with programs used for its removal.

Aliases: Fraudtool.VirusDoctor.A, Win32.Adware.VirusDoctor, VirusDoctor [Sunbelt], Adware/VirusDoctor [Panda], Win32/Adware.VirusDoctor [NOD32], Riskware.Fake.VDoctor.1 [McAfee-GW-Edition], potentially unwanted program Generic!Artemis [McAfee+Artemis], not-a-virus:FraudTool.Win32.VirusDoctor.a [Kaspersky], Non-Virus: [K7AntiVirus], not-a-virus:FraudTool.Win32.VirusDoctor [Ikarus], Misc/VirusDoctor [Fortinet], FraudTool.Win32.VirusDoctor.a [F-Secure], Suspicious File [eSafe], ApplicUnwnt.Win32.FraudTool.VirusDoctor.~A [Comodo] and FraudTool.VirusDoctor.a (Not a Virus) [CAT-QuickHeal].

Technical Information

File System Details

Virus Doctor creates the following file(s):
# File Name Size MD5
1 VDocd201.exe 1,388,544 635ab761d6e8a486a7cc431271013222
2 VDoctor.exe 1,767,936 bb0aa7f23dc1f45188520975f750e3e4
3 VirusDoctor[1].exe 1,710,074 92f0b996b7a93751448856931b8d7e68
4 VDoc2636.exe 1,388,032 e05775cceef42b4df04d8ad4c53d1d25
More files

Registry Details

Virus Doctor creates the following registry entry or registry entries:
File name without path
Virus Doctor.lnk
%AppData%\Virus Doctor

More Details on Virus Doctor

The following cookies were found:
  • pay-virusdoctor

Related Posts

Site Disclaimer is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.

HTML is not allowed.