One should not trust Windows personal doctor in any case and should not buy it. This tool may look legal and legitimate to many users, but in fact it is not. It is really malicious and dangerous to your computer system. It spreads via spam emails and Trojans, and offers its users to buy the full version. It makes the user believe in it, by showing them a fake scan of their computer system, and then by displaying various virus alerts and security errors. All these alerts and scans are, in fact, fake and bogus, and none of these exist in reality.

It shows the security alerts regularly using popup windows, which make the user hyper and he thinks that his computer system is under some serious virus attack. He then asks the Windows personal doctor to repair the damaged files and remove all the viruses from the computer. The tool now plays its trick and asks the user to buy the full version, so that the viruses can be removed effectively and the security of the computer can be made tight. The user in his innocence often buys the tool, as he is completely unaware of the cheap tactics played by some rogue applications to gain money in any way they can.

Following is a step-by-step process on how to remove Windows Personal Doctor from your computer:

Remove Windows Personal Doctor Processes

  1. Click on Start then click on the option Run from the menu.
  2. Type taskmgr in there and press Ok to open the Windows task manager.
  3. In the task manager select the tab named ‘processes’. This will show all the active processes of the window in the form of a list. Find the required Windows personal doctor process, which is ‘Protector-.exe’. Right click on the above process select the option End process.

Remove Windows Personal Doctor Registry entries

  1. You need to open the registry editor to delete the Windows personal doctor registry entries so click on Start then click on Run.
  2. Type regedit and press Ok.
  3. Go for the left pane of the registry editor and click on Edit. Now form the drop down menu, look for the option ‘Find’, and click on it. Then type in the following registry values.
  4. Right click on the registry values and select the option Delete.
  5. The Windows personal doctor registry values are:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adaware.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\belt.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deputy.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\icload95.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\lnetinfo.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mpftray.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\netscanpro.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nssys32.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ozn695m5.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\perswf.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PskSvc.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SafetyKeeper.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\spoler.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vbcons.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winservn.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zonealarm.exe “Debugger”

Remove Windows Personal Doctor DLL libraries

  1. Click the start button and then select the option Run.
  2. Type cmd and press enter to open Command prompt quickly.
  3. Now to remove the DLL file type “regsvr32 /u NPSWF32.dll” into the Command prompt window and press enter key.

Remove Windows Personal Doctor Files

Open the registry editor again by using the same method discussed above and find out the following methods or processes and then selecting the option Delete to remove them permanently.

%AppData%\NPSWF32.dll

%AppData%\Protector-.exe

%AppData%\result.db

%CommonStartMenu%\Programs\Windows Personal Detective.lnk

%Desktop%\Windows Personal Detective.lnk

 

How to remove Windows Personal Doctor?
Tagged on:         

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>