Malware doctor , gulp. Help please !.

[uscmhicks]

So ten minutes ago my computer went crazy , blacked out then my desktop wouldn't come back up. I shut down , went into safe mode , then managed to get to my installed programmes. I saw that the latest thing installed ( just before the crash ) was malware doctor which I hadn't installed at all.

I tried to remove it but apparently it was running so couldn't be removed , even though it wasn't. Then all crazy pop ups appeared telling me I had a vrius and to install malware doctor with a registration key.

With no other options I did a sytem restore back to the 1st of September and now knock on wood my computer itself seems ok.

What scares me is that I use online banking and things like that and what's even stranger is that today I was paid a monthly payment which is the most that enters my bank every month so it seems a little odd that this would happen today.
Now that I've done a system restore , will everything from this " malware doctor " be gone or could there still be traces left and is this a common virus or whatever it is ?.

I'm not amazing with computers , in fact I'm amazed I've managed to get my computer working again.
Sorry if these are stupid questions , I've just got my card put on hold until I'm certain of what's what.

Thanks in advance for any help !.

 

[Shropt]

Malwarebytes Anti-Malware.

Download the free version and do a full scan. You'll be all set.

 

[uscmhicks]

Awesome , thanks for the help.

 

[uscmhicks]

Scanning in progress. 27 objects infected already..

 

[Shropt]

Scanning in progress. 27 objects infected already..

I usually stop and clean them immediately when that happens then restart the scan. It's up to you though.

 

[Devil_666]

Some info:

Virus Doctor is an anti-spyware program that deliberately displays fake alerts, false online advertising, and uses scare tactics to make you think you are infected. It is for these reasons that we classify Virus Doctor as a rogue anti-spyware program. This program is advertised through the use of pop-ups stating that your computer has a security risk. When you close this pop-up, you will immediately be brought to a page pretending to be an online anti-malware scanner, but in reality it is just an advertisement. When the advertisement is finished, it will display a screen stating that your computer is infected with a variety of malware and that you should download and install Virus Doctor in order to clean your computer.

Associated Virus Doctor Files:
c:\Documents and Settings\All Users\Application Data\927e
c:\Documents and Settings\All Users\Application Data\927e\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\927e\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\927e\unins000.dat
c:\Documents and Settings\All Users\Application Data\927e\unins000.exe
c:\Documents and Settings\All Users\Application Data\927e\VDoca582.exe
c:\Documents and Settings\All Users\Application Data\927e\Languages
c:\Documents and Settings\All Users\Application Data\927e\Languages\VDDe.lng
c:\Documents and Settings\All Users\Application Data\927e\Languages\VDFr.lng
c:\Documents and Settings\All Users\Application Data\927e\Languages\VDIt.lng
c:\Documents and Settings\All Users\Application Data\927e\System Data Configuration
c:\Documents and Settings\All Users\Application Data\927e\System Data Configuration\DBInfo.ver
c:\Documents and Settings\All Users\Application Data\927e\System Data Configuration\vd952342.bd
c:\Documents and Settings\All Users\Application Data\System Data Configuration
c:\Documents and Settings\All Users\Application Data\System Data Configuration\config.cfg
c:\Documents and Settings\All Users\Application Data\System Data Configuration\DB.ini
c:\Documents and Settings\All Users\Application Data\System Data Configuration\fsvd6398.db
%UserProfile%\Application Data\Virus Doctor
%UserProfile%\Application Data\Virus Doctor\settings.ini
%UserProfile%\Application Data\Virus Doctor\uill.ini
%UserProfile%\Desktop\Virus Doctor.lnk
%UserProfile%\Start Menu\Virus Doctor.lnk
%UserProfile%\Start Menu\Programs\Virus Doctor.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Virus Doctor.lnk

File Location Notes:
%UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\ for Windows 2000/XP, C:\Users\ for Windows Vista/7, and c:\winnt\profiles\ for Windows NT.

Associated Virus Doctor Windows Registry Information:
%UserProfile%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Virus Doctor_is1
%UserProfile%HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Virus Doctor"
%UserProfile%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "URVDoc[]"

 

[uscmhicks]

Thanks for the info Devil. The Anti-Malware found 70 infected objects on a full scan and got rid of them all apparently.
Hopefully everything will be fine now. Thanks for the help guys , most awesome forum on the internet.

 

[Crimsonbob]

My brother had the exact same thing a while back m8. He hadn't done a restore point so i had to reformat his PC to get rid of that Virus Doctor crap with the popups.

You should be fine but if your really worried then reformat your drive.

If u use online banking always click random numbers/letters on a blank bit of screen everyonce n a while when your entering a password if your worried about keyloggin hackers that is.