Antimalware Doctor

Hi everyone!

It seems I have Antimalware Doctor on my Toshiba Satellite A305D with Windows Vista.

I downloaded Malewarebytes Anti-Malware, I ran it twice, and it seemed to have gotten rid of it, and it asked me to restart my computer, which I did, twice. However, Antimalware Doctor just keeps coming back! This is the first virus/malware I've had on my laptop since i bought it 2 years ago, and I'm really nervous about what repercussions it could have.

I'm going to try running Malwarebytes in safe mode now. Wish me luck!

In addition you may want to download and run combofix

running malwarebytes in safe mode worked, thankfully. i'll download and run combofix too. thank you!

Quote:

---

Originally Posted by Niclo Iste

In addition you may want to download and run combofix

---

Excellent suggestion, and you many need to run two passes, with the first run in Safe Mode. Several of the currently common variants in the fake AV group will make changes to your hosts file to redirect your searches to sites containing additional malware, and may try to connect to a remote host and transmit information about your computer. Additionally, the variants I've run into the most lately disable your antivirus software, and prevent most AV programs from installing.

If you aren't familiar with what a hosts file does, try this article. Spybot Search & Destroy uses it's immunization feature to add blocked malware sites to your hosts file (you need to use the Run as Administrator option) and it's an easy and effective way to keep your hosts file updated.

Hi fuzziyelochicki, welcome to WinDrivers.

Before considering use of ComboFix, please review the instructions for proper use of the program here:

http://www.bleepingcomputer.com/comb...o-use-combofix

and the good advice from Anti-Malware expert Quietman7 here:

http://www.bleepingcomputer.com/foru...28&hl=combofix

Also i might add that it may hide in the restore file and therefore come back again and again. I usually turn off the restore feature ,clean the computer,wait a bit and then turn the restore back on

Agreed, re-infection from System Restore is a real factor.

fuzziyelochicki, what security software are you using on your system, ie firewall, anti-virus, any other anti-malware application?

Quote:

---

Originally Posted by Ferrit

Also i might add that it may hide in the restore file and therefore come back again and again. I usually turn off the restore feature ,clean the computer,wait a bit and then turn the restore back on

---

These days virtually all decent antimalware programs will clean the restore files as part of the removal process. In fact, ComboFix tries to create a System Restore Point as well as a new backup of the Registry before it attempts to clean the system. Additionally, on computers that do not have the Recovery Console installed (or if you choose not to install it when prompted by ComboFix) the program won't perform some of the riskier removal techniques. This makes it rare for ComboFix to be a cure that's worse than the disease.