QuickHealCleaner

5 September 2009 0 Comment

QuickHealCleaner virus scanner will just pop-up from your computer and performs a virus scan without an intervention. Its presence signifies that a Trojan and malicious software is already occupying part of your hard drive. This potentially unwanted application is installed on your computer with the help of a Trojan that can accomplish this action without being detected by an antivirus program. Similar to previous version called SaveKeep, it will run local scan and displays exaggerated results containing numerous threats found on your computer. QuickHealCleaner will prompt to remove these malware but user must first upgrade the program to full working version.

No matter how eager you want to remove QuickHealCleaner on your computer on itself is close to impossible because it does not have uninstall information. It is not an ordinary program that you can automatically remove from Windows control panel. In fact, QuickHealCleaner is another clear example of a ‘ransomware’ that keeps on disrupting computer’s operation until a registration key is obtained.

For rogue programs like this, a legit anti-malware tool is required to eliminate its presence. Follow the removal guide on this page and take the malware out of your computer in few easy steps.

Screen Shot Images:

QuickHealCleaner image

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

[expand title="View More" swaptitle="Hide This"]

Characteristics (Analysis)

QuickHealCleaner is a rogue program. Unlike Trojans and viruses, rogues do not reproduce once it enters the system. They usually propagate by means of another infection. Once inside the computer, it generates some changes to Internet browser and registry. Rogue program process an attempts to call itself on every Windows boot-up. A more sophisticated rogue programs can halt security application by ending relevant process.

Other versions of this rogue program are:

  • SafetyKeeper
  • SoftSafeness
  • SafeFighter
  • SecureWarrior
  • SecureVeteran

Malware Behavior
While the program still resides on the computer, you will see a bunch of false warning and alerts. Some pop-up and task bar notices will contain messages similar to this:

Your system is at risk of being hijacked or damaged. Harmful software is currently running. These active processes may lead to the leak of your personal data and the extermination of your machine.

Added Registry Entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "QuickHealCleaner" 
HKCU\Software\QuickHealCleaner
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QuickHealCleaner
HKLM\SOFTWARE\QuickHealCleaner
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_QUICKHEALCLEANERSVC
HKLM\SYSTEM\CurrentControlSet\Services\QuickHealCleanerSvc
Associated Files and Folders:
C:\Documents and Settings\All Users\Desktop\QuickHealCleaner.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\QuickHealCleaner
C:\Documents and Settings\All Users\Start Menu\Programs\QuickHealCleaner\1 QuickHealCleaner.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\QuickHealCleaner\2 Homepage.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\QuickHealCleaner\3 Uninstall.lnk
C:\Program Files\QuickHealCleaner Software
C:\Program Files\QuickHealCleaner Software\QuickHealCleaner
C:\Program Files\QuickHealCleaner Software\QuickHealCleaner\license.txt
C:\Program Files\QuickHealCleaner Software\QuickHealCleaner\QuickHealCleaner.exe
C:\Program Files\QuickHealCleaner Software\QuickHealCleaner\uninstall.exe

How to Remove QuickHealCleaner

1. Temporarily Disable System Restore (Windows Me/XP). [how to]
2. Open your antivirus application and update the virus definition file. This method ensures that your antivirus program can detect even newer variants of QuickHealCleaner

3. Start Windows in Safe Mode with Networking.
- From a power-off state, turn on the computer and press F8 on your keyboard repeatedly.
- Your computer will display Windows Advanced Boot Options menu. Please select Safe Mode with Networking.
- The system will now boot Windows and loads only necessary drivers and files.

4. Open your antivirus program and run a full system scan. After the scan, delete all infected items. If unable, better place them in quarantine. Once the scan is complete, please proceed with the next step.

Online Virus Scanner:

Another way to remove QuickHealCleaner without the need to install additional antivirus application is to perform a thorough scan with free online virus scanner that can be found on websites of legitimate anti-virus and security provider.

5. Go to Online Virus Scanner list and run a virus scan. This may require plug-ins, add-on or Activex object, please install if you want to proceed with scan.
6. After completing the necessary download, your system is now ready for online virus scanning.
7. Select an option in which you can thoroughly scan the computer to make sure that it will find and delete entirely all infections not detected on previous scan.
8. Remove or delete all detected items.
9. When scanning is finished you may now restart the computer in normal mode.

Automatic Removal of QuickHealCleaner

In order to completely remove the threat, it is best to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected machine.