1 of 5
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Connects to the internet without permission
  • Shows commercial adverts
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:

Virus Doctor

Due to its sophisticated appearance and graphical user interfaces, users will not be able to easily identify rogue antispyware application Virus Doctor as the harmful rogue that it is. Virus Doctor is a well-known rogue security tool which incorporates various nefarious tactics to extort money out of unsuspecting consumers. It will do everything in its power to come across as a legitimate security application, but the truth is that it has no ability to live up to any of its over embellished promises.

Virus Doctor will enter the system uninvited. It will root itself into the PC without the user’s consent, and once it is securely lodged it will start its attack. The rogue makes use of established forms of infection, most notably using browser hijacking websites and infected online flash ads and fake malware scanners. The browser hijackers will forcefully redirect the user to its compromised landing pages where drive-by download tactics will be employed to surreptitiously root the Virus Doctor infection into the system.

Once the rogue is securely rooted in the system it will start its attack against the PC. It will be configured to start each time the user logs on to Windows, and will generate a fake system scan each time. This fake system scan was designed solely to panic the user into thinking his PC is under attack and extremely compromised. Some of the fake threats Virus Doctor will report on include the following: Trojan-IM.Win32.Faker.a, SpamTool.Win31.Delf.h, Trojan.PSW.VBS.Half, Trojan-Spy.HTML.Citifraud.

As a further attack on the system, Virus Doctor will spam the user with incessant fake security alerts in the form of pop up messages. Some of the more infamous fake alerts to be on the lookout for include the following:

Malicious applications which can contain trojans found on your PC need to be immediately removed. Click here to remove these potentially harmful items immediately with Virus Doctor.

An unauthorized program has been prevented from accessing your PC.#Port:433 from

An unidentified program-potentially: %ThreatPath% #malicious and able to modify system files- has been prevented from getting installed on your PC.

(Port scan detected at port %portnumber%.

9Process %Process%# attempted to change the address space.

An unidentified program tries to access your computer

Virus Doctor makes use of Microsoft icons and backgrounds in its GUIs in an effort to further come across as a genuine application. Do not fall victim to this worthless rogue’s insidious tactics, and destroy Virus Doctor immediately. Employ the removal power of a genuine security tool to limit the damage this rogue will cause to your system.

Download Spyware Removal Tool to Remove* Virus Doctor
  • Quick & tested solution for Virus Doctor removal.
  • 100% Free Scan for Windows

How to manually remove Virus Doctor

Files associated with Virus Doctor infection:


Virus Doctor processes to kill:


Remove Virus Doctor registry entries:

Microsoft\Windows\CurrentVersion\Run\Virus Doctor
Microsoft\Windows\CurrentVersion\Uninstall\Virus Doctor_is1


  1. mcfallon mcroot Sep 19, 2009

    thanks so much for posting this warnings....i was a little bit curious when it came out of no where (virusdoctor) but the warnings and scan results looked so real i knew it was fishy after seeing this! thanks for protecting me!

  2. Dzemal Dec 2, 2015

    Now that's sutlbe! Great to hear from you.

  3. Nazmi Dec 2, 2015

    Essays like this are so important to

  4. Debbie Dec 4, 2015

    This tool is simple but amsoewe. Something similar for layer 7 scripting languages should be very beneficial. I can picture something like this for firefox.pdp | GNUCITIZEN | Hakiri

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.