Click on screenshot to zoom
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Normal system programs crash immediatelly
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

Windows Personal Doctor

If you see a program called Windows Personal Doctor performing a fake system scan in your computer, do not panic. Whatever this program might tell you it is not real, and your computer is not suffering from a severe infection. Well, in fact, it is, but not from the one that Windows Personal Doctor tells you about. The reality is that Windows Personal Doctor is a rogue antispyware program that is a dangerous computer threat in itself as it can cause an ultimate system crash. The reason why this rogue is in your computer is that it wants your money, and it is your job to secure your financial funds.

Download Spyware Removal Tool to Remove* Windows Personal Doctor
  • Quick & tested solution for Windows Personal Doctor removal.
  • 100% Free Scan for Windows

Windows Personal Doctor has many ways to enter your system. You have to realize that malicious programs are hiding behind every corner in the cyber space so you have to be extra careful while you browse the Internet. If you happened to have caught Windows Personal Doctor, ignore the fake scan results and the mass of fake security notifications that all are trying to push you into buying the full version of Windows Personal Doctor. Close the application and get yourself a computer safeguard program that will remove Windows Personal Doctor automatically, if you don’t know how to perform it manually. Consider your computer’s safety as your top priority and do not ignore this infection, because Windows Personal Doctor can easily lead to the ultimate system doom.

UPDATE

Windows Personal Doctor is exceptionally dangerous, because it is not the first rogue antispyware that has similar configurations. It belongs to Rogue.VirusDoctor family, and just recently we have informed you about other basically identical rogue clones, including Windows Personal Detective, Windows Trojans Sleuth, Windows Attacks Defender and the like. The abundance of these rogue proves that a lot of users are still getting tricked by fake antivirus software, and this shady business is still profitable.

However, you have to be strong and ignore the fake notifications that pop-up at the corner of your screen, because they are not true:

Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

Warning! Virus Detected
Threat detected: FTP Server
Infected file: C:\Windows\System32\dllcache\wmpshell.dll

Warning
Firewall has blocked a program from accessing the Internet
C:\program files\internet explorer\iexplore.exe
is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.

Since they use the same lingo as legitimate messages, it might be hard to tell them apart, but if you see Windows Personal Doctor interface on your screen, you have to realize that all the computer problems you face are caused by it, including the inability to open your executable programs, Windows Task Manager or Registry Editor. Windows Personal Doctor blocks the latter tools in order to ensure that the user does not get rid of it any time soon.

Nevertheless, you can outsmart Windows Personal Doctor by making use of this activation code:

0W000-000B0-00T00-E0020

Once you have Windows Personal Doctor "registered", the annoying notifications will no longer appear on your screen, and your computer will go back to normal for a time being. This is the moment that you have to seize and remove Windows Personal Doctor from your system through and through.

Just because the rogue is silent it doesn't mean it wouldn't come back again. It will. Therefore, if you are not a system security expert, you are advised to invest in a powerful computer safeguard tool that will detect and terminate Windows Personal Doctor along with its components in no time.

Download Spyware Removal Tool to Remove* Windows Personal Doctor
  • Quick & tested solution for Windows Personal Doctor removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows Personal Doctor

Files associated with Windows Personal Doctor infection:

Protector-xfg.exe
Protector-ogf.exe
Protector-ayh.exe
%AppData%\NPSWF32.dll
%AppData%\Protector-[Random].exe
%AppData%\result.db
%CommonStartMenu%\Programs\Windows Personal Doctor.lnk
%Desktop%\Windows Personal Doctor.lnk
Protector-bvl.exe
Windows Personal Doctor.lnk
Protector-mlo.exe

Windows Personal Doctor DLL's to remove:

%AppData%\NPSWF32.dll

Windows Personal Doctor processes to kill:

Protector-ayh.exe
Protector-bvl.exe
Protector-mlo.exe
Protector-xfg.exe
Protector-ogf.exe
%AppData%\Protector-[Random].exe

Remove Windows Personal Doctor registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = 2012-3-5_1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\antivirus.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autoupdate.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Exec
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.