Home Malware Programs Fake Warning Messages Malware Doctor System Alert

Malware Doctor System Alert

Posted: June 26, 2009

Malware Doctor System Alert is a bogus security alert designed and created by the fake spyware remover Malware Cleaner. Like other scams, Malware Doctor launches numerous counterfeit warning pop-ups in order to trick you into thinking your PC is infected with non-existent threats. The Malware Doctor System Alert pop-up reads as follows:

"Malware Doctor.
You are using unregistered version of Malware Doctor. The unregistered version DOES NOT heal infected files if they are discovered. Register Malware Doctor in order to protect your computer."

Do not be fooled, and do not waste your money purchasing a program that will do absolutely nothing towards protecting your computer. Remove the problem immediately upon detection.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %\Documents and Settings%\All Users\Start Menu\Programs\Malware Doctor\
    2 %\Documents and Settings%\All Users\Start Menu\Programs\Malware Doctor\Malware Doctor.lnk
    3 %ProgramFiles%\Malware Doctor\
    4 %ProgramFiles%\Malware Doctor\GUI\
    5 %ProgramFiles%\Malware Doctor\htmlayout.dll
    6 %ProgramFiles%\Malware Doctor\maincfg.xml
    7 %ProgramFiles%\Malware Doctor\Malware Doctor.exe
    8 %ProgramFiles%\Malware Doctor\unins000.dat
    9 %ProgramFiles%\Malware Doctor\unins000.exe
    10 %ProgramFiles%\Malware Doctor\Validation.dll
    11 about.png
    12 banner.png
    13 button-back-active.png
    14 button-back-hover.png
    15 button-back.png
    16 focusled.png
    17 greenpoint.png
    18 header-hover.png
    19 header.jpg
    20 header.png
    21 header_right.jpg
    22 help.htm
    23 help.ico
    24 images
    25 index.htm
    26 main.css
    27 maincfg.xml
    28 Malware Doctor.exe
    29 Malware Doctor.lnk
    30 MDsetup.exe
    31 noconnection.png
    32 ok.png
    33 options.htm
    34 options.ico
    35 options.png
    36 progress-back.png
    37 progress-body-dark.png
    38 progress-body.png
    39 protect.htm
    40 protect.png
    41 protection.ico
    42 r_index.htm
    43 r_protect.htm
    44 r_support.htm
    45 redpoint.png
    46 regicon.png
    47 register.htm
    48 register.png
    49 scan.ico
    50 sectionheader.png
    51 sectionheaderred.png
    52 shield.png
    53 status.htm
    54 status.ico
    55 stripback.png
    56 support.htm
    57 support.png
    58 tab-hover.png
    59 tab.png
    60 tabback.png
    61 thanx.png
    62 toolbarback.png
    63 unins000.dat
    64 update.htm
    65 update.ico
    66 update.png
    67 warning.png
    68 warningicon.png

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Malware DoctorHKEY_CURRENT_USER\Software\Malware Doctor\AntiSpy KnightHKEY_LOCAL_MACHINE\SOFTWARE\Malware DoctorHKEY_USERS\Software\Microsoft\Windows\Explorer\MenuOrder\Start Menu2\Programs\Malware DoctorHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Alcmtr"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Malware DoctorMalware Doctor_is1
Loading...