Rogue software details: QuickHealCleaner

QuickHealCleaner is a rogue security application. In order to remove it, find out what files and registry entries to look for below.

Known system changes:

Files
c:\CommonDesktop\QuickHealCleaner.lnk

Folders
c:\ProgramFiles\QuickHealCleaner Software
c:\CommonPrograms\QuickHealCleaner

Registry entry
Key: HKEY_CURRENT_USER\software\QuickHealCleaner
Value:
Data:
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Uninstall\QuickHealCleaner
Value:
Data:
Key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\
Root\LEGACY_QUICKHEALCLEANERSVC
Value:
Data:
Key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\
QuickHealCleanerSvc
Value:
Data:
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\
Root\LEGACY_QUICKHEALCLEANERSVC
Value:
Data:
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\QuickHealCleanerSvc
Value:
Data:
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run
Value: QuickHealCleaner
Data: C:\Program Files\QuickHealCleaner Software\
QuickHealCleaner\QuickHealCleaner.exe -min

Source: Lavasoft Malware Lab’s Rogue Gallery.