Windows Personal Doctor

ESG security analysts have detected a large batch of rogue anti-virus programs released in the early months of 2012. Windows Personal Doctor belongs to this batch. The main danger of Windows Personal Doctor is the fact that all members of this particular rogue anti-virus program famil, the FakeVimes tend to be distributed along with a nasty case of the ZeroAccess rootkit. Once this malware threat enters a computer system, removing Windows Personal Doctor can be quite difficult, often requiring the help of a specialized anti-rootkit program. Windows Personal Doctor is part of a scam that will usually target computer users with little experience with the large amount of malware that exists online. These inexperienced computer users can be made to believe that their computer is severely infected and that Windows Personal Doctor, supposedly a legitimate security program, can help them remove these imaginary threats... for a price. None of Windows Personal Doctor's alleged anti-virus functions will be available to the computer user unless he/she 'unlock' the program by purchasing a 'full version'. However, paying for Windows Personal Doctor does nothing except give criminals access to your credit card information. Because of this, ESG malware analysts instead recommend that you remove Windows Personal Doctor with a real, trustworthy anti-malware tool.

Windows Personal Doctor is just one more fake security program in a family that includes such frauds as Virus Melt, Presto TuneUp, Fast Antivirus 2009, Extra Antivirus, Windows Security Suite, Smart Virus Eliminator, Packed.Generic.245, Volcano Security Suite, Windows Enterprise Suite, Enterprise Suite, Additional Guard, PC Live Guard, Live PC Care, Live Enterprise Suite, Security Antivirus, My Security Wall, CleanUp Antivirus, Smart Security, Windows Protection Suite, Windows Work Catalyst.

Common Sources of a Windows Personal Doctor Infection

The vast majority of Windows Personal Doctor infections come from fake online malware scans. These advertisements are quite common in websites with poorly-monitored advertisements, especially pornographic websites and web pages dealing with pirated software and files. Clicking on these advertisements will often send the victim to an attack website which will try to use a common exploit pack (like the Black Hole Exploit Kit, for example) in order to search for vulnerabilities in the victim's computer system and attempt to install malware by force.

If this does not work, inexperienced computer users are still likely to believe the results of the fake online malware scan, which will invariably detect an impossibly severe malware infection and recommend that the victims themselves accept the download and set up Windows Personal Doctor to be able to deal with this nonexistent threat. Oddly enough, giving the victim the loaded gun and letting them shoot themselves is often the most effective tactic in the scammers' arsenal. Most malware infections come from inexperienced computer users downloading and installing the malware themselves, which will often come disguised as a free screensaver, free smilies for Facebook or (in this case) a free anti-virus tool.

File System Details

Windows Personal Doctor may create the following file(s):
# File Name Detections
1. %AppData%\Inspector-[RANDOM].exe
2. %AppData%\npswf32.dll
3. %CommonPrograms%\Windows Personal Doctor.lnk
4. %DesktopDir%\Windows Personal Doctor.lnk

Registry Details

Windows Personal Doctor may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"

Messages

The following messages associated with Windows Personal Doctor were found:

Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.
Error
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.

Trending

Most Viewed

Loading...