PUP.InstallBrain

By GoldSparrow in Potentially Unwanted Programs

Threat Scorecard

Ranking:	3,691
Threat Level:	10 % (Normal)
Infected Computers:	15,008

First Seen:	January 11, 2013
Last Seen:	March 8, 2024
OS(es) Affected:	Windows

InstallBrain is promoted as an updater service and is developed by PerformerSoft LLC. InstallBrain is a Potentially Unwanted Program. PUPs like InstallBrain are used by software developers and distributors or third party marketers to increase their profits and monetize free software. InstallBrain runs in the background as a Windows Service. InstallBrain is a download manager, a common way of distributing PUPs.

Table of Contents

How InstallBrain and Its Components Work

InstallBrain, described as an updater service, has four variants, signed either by Performersoft LLC or by WhiteSmoke Inc, both of which are entities that have been linked to other PUPs. As soon as InstallBrain is installed, InstallBrain will attempt to connect to various URLs in order to retrieve advertisement information that InstallBrain then displays on affected Web browsers. The most typical release of InstallBrain is 14.12.8.9, which accounts for nearly all of the versions that have been reported by affected computer users. As soon as InstallBrain is installed, InstallBrain creates a Windows Service that runs without stopping in the background as soon as the computer user starts up Windows. Manually stopping this service may make the program crash.

In most cases, InstallBrain does not deliver a valuable service, and most computer users remove InstallBrain and its associated software nearly immediately. There are several reasons why InstallBrain should be removed. InstallBrain may be associated with threats, despite not being threatening itself. InstallBrain is classified as a PUP that may cause unwanted symptoms on affected computers and expose computer users to unwanted advertising material. InstallBrain installs a Windows Service automatically, running in the background constantly and consuming system resources. InstallBrain is distributed by third parties who take advantage of payment schemes where they are paid according to the number of people that install InstallBrain on their computers.

Removing InstallBrain from an Affected Computer

Most computer users do not install InstallBrain on purpose. This is because InstallBrain may be bundled with third party software, which uses misleading tactics to trick inexperienced computer users into installing InstallBrain. This is a common tactic of most PUPs. It is simpler to remove InstallBrain using a reliable, fully updated security program capable of dealing with PUPs. However, manual removal of InstallBrain also is not too complicated and requires the following steps:

Computer users can uninstall InstallBrain by using the Add/Remove Program feature that is available in Windows (through the Control Panel). Uninstalling InstallBrain using this method should be a straightforward process, simply following the Windows prompts. In some cases, InstallBrain will not be able to be uninstalled through this method. In these cases, Microsoft's utility for dealing with software that cannot be uninstalled has been proven to help.
Once InstallBrain has been removed, it is recommended to perform a full scan of the affected computer to ensure that no threat is present. Although not threatening, PUPs like InstallBrain may be associated with threats indirectly or may be installed along with numerous other PUPs. Since many threat infections run silently in the background and do not cause any symptoms, computer users should take actions to assure that they have not compromised their computer as a result of the presence of InstallBrain.
InstallBrain may make changes to Web browser and computer settings. These changes may not be reverted by security software. Because of this, malware researchers recommend inspecting the Web browser and PC settings and changing them to their defaults or to their desired settings manually after InstallBrain has been uninstalled.

SpyHunter Detects & Remove PUP.InstallBrain

File System Details

PUP.InstallBrain may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	ibsvc.exe	f58575604dfc874ac5a861772810a6fc	490
Name: ibsvc.exe MD5: f58575604dfc874ac5a861772810a6fc Size: 677.98 KB (677984 bytes) Detections: 490 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\InstallBrainService Group: Malware file Last Updated: January 14, 2017
2.	ibsvc.exe	f214e27fc1893ae6da0910d69a1db448	260
Name: ibsvc.exe MD5: f214e27fc1893ae6da0910d69a1db448 Size: 638.04 KB (638048 bytes) Detections: 260 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
3.	ibsvc.exe	0145ada6c27ca4579860ce452b685cd0	257
Name: ibsvc.exe MD5: 0145ada6c27ca4579860ce452b685cd0 Size: 596.48 KB (596480 bytes) Detections: 257 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
4.	ibsvc.exe	a98df8d28fc2e7ce6622cfa77d96d24a	254
Name: ibsvc.exe MD5: a98df8d28fc2e7ce6622cfa77d96d24a Size: 690.49 KB (690496 bytes) Detections: 254 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
5.	ibsvc.exe	919005860750ccd69c95649ebef864d2	212
Name: ibsvc.exe MD5: 919005860750ccd69c95649ebef864d2 Size: 651.32 KB (651328 bytes) Detections: 212 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
6.	ibsvc.exe	b8ad70efeb5eb161b38d7f3ed5321fea	210
Name: ibsvc.exe MD5: b8ad70efeb5eb161b38d7f3ed5321fea Size: 642.84 KB (642848 bytes) Detections: 210 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
7.	ibsvc.exe	e9fbe6ad115a68a074916c8aaac5f24a	200
Name: ibsvc.exe MD5: e9fbe6ad115a68a074916c8aaac5f24a Size: 642.84 KB (642848 bytes) Detections: 200 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
8.	ibsvc.exe	abb41b3bc5cc9bfcf8d18a4de1f277fa	183
Name: ibsvc.exe MD5: abb41b3bc5cc9bfcf8d18a4de1f277fa Size: 622.59 KB (622592 bytes) Detections: 183 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
9.	ibsvc.exe	2d852191b8f8136b7f9a84f17a7bcf60	178
Name: ibsvc.exe MD5: 2d852191b8f8136b7f9a84f17a7bcf60 Size: 608.12 KB (608128 bytes) Detections: 178 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\InstallBrainService Group: Malware file Last Updated: January 14, 2017
10.	ibsvc.exe	8ee3a015237409f2cbc7f58ba3f37924	169
Name: ibsvc.exe MD5: 8ee3a015237409f2cbc7f58ba3f37924 Size: 621.05 KB (621056 bytes) Detections: 169 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\InstallBrainService Group: Malware file Last Updated: January 14, 2017
11.	ibsvc.exe	9700591318c9be07cd0ad8a05b851499	162
Name: ibsvc.exe MD5: 9700591318c9be07cd0ad8a05b851499 Size: 608.25 KB (608256 bytes) Detections: 162 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
12.	ibsvc.exe	21f15b982a0543c4351c360458a2e871	143
Name: ibsvc.exe MD5: 21f15b982a0543c4351c360458a2e871 Size: 637.95 KB (637952 bytes) Detections: 143 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\InstallBrainService Group: Malware file Last Updated: January 14, 2017
13.	ibsvc.exe	78544d1b9e401a8e1f0f5a8af156e798	140
Name: ibsvc.exe MD5: 78544d1b9e401a8e1f0f5a8af156e798 Size: 690.49 KB (690496 bytes) Detections: 140 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
14.	ibsvc.exe	d2582a4a18011ce78932979bfd083629	130
Name: ibsvc.exe MD5: d2582a4a18011ce78932979bfd083629 Size: 690.52 KB (690528 bytes) Detections: 130 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
15.	ibsvc.exe	057664a9d42504cf7d3690044d9da402	121
Name: ibsvc.exe MD5: 057664a9d42504cf7d3690044d9da402 Size: 647.68 KB (647680 bytes) Detections: 121 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
16.	ibsvc.exe	2a6094d56cd62e17facfdceef9d0c86f	117
Name: ibsvc.exe MD5: 2a6094d56cd62e17facfdceef9d0c86f Size: 621.12 KB (621120 bytes) Detections: 117 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
17.	ibsvc.exe	3def23ac8c00b834e840b2934db767e6	108
Name: ibsvc.exe MD5: 3def23ac8c00b834e840b2934db767e6 Size: 651.29 KB (651296 bytes) Detections: 108 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
18.	ibsvc.exe	409f8ffc5e0e7bce40646520b2a22c5c	105
Name: ibsvc.exe MD5: 409f8ffc5e0e7bce40646520b2a22c5c Size: 677.98 KB (677984 bytes) Detections: 105 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
19.	ibsvc.exe	a485617fe8a08814a08dbb3ca0a7767a	105
Name: ibsvc.exe MD5: a485617fe8a08814a08dbb3ca0a7767a Size: 638.04 KB (638048 bytes) Detections: 105 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
20.	ibsvc.exe	ec4f7ecf594228d72afcd971db083910	102
Name: ibsvc.exe MD5: ec4f7ecf594228d72afcd971db083910 Size: 632.32 KB (632320 bytes) Detections: 102 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
21.	ibsvc.exe	3b8664f3df1146d78d4ec9d8ec1370cf	101
Name: ibsvc.exe MD5: 3b8664f3df1146d78d4ec9d8ec1370cf Size: 621.08 KB (621088 bytes) Detections: 101 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
22.	ibsvc.exe	64609fcdad7ba88e4a1582b55b039a45	94
Name: ibsvc.exe MD5: 64609fcdad7ba88e4a1582b55b039a45 Size: 596.48 KB (596480 bytes) Detections: 94 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\InstallBrainService Group: Malware file Last Updated: January 14, 2017
23.	ibsvc.exe	e5f0c3f33cd23a9626a7431e4e58549a	93
Name: ibsvc.exe MD5: e5f0c3f33cd23a9626a7431e4e58549a Size: 690.49 KB (690496 bytes) Detections: 93 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
24.	ibsvc.exe	f763e80a1b526f2f2f8996cfabd8f5db	86
Name: ibsvc.exe MD5: f763e80a1b526f2f2f8996cfabd8f5db Size: 677.98 KB (677984 bytes) Detections: 86 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\InstallBrainService Group: Malware file Last Updated: January 14, 2017
25.	ibsvc.exe	24e155399d5581487de0ae760b66333f	83
Name: ibsvc.exe MD5: 24e155399d5581487de0ae760b66333f Size: 621.05 KB (621056 bytes) Detections: 83 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\InstallBrainService Group: Malware file Last Updated: January 14, 2017
26.	ibsvc.exe	a8d9025076a7961b16e799e539ddc469	82
Name: ibsvc.exe MD5: a8d9025076a7961b16e799e539ddc469 Size: 596.48 KB (596480 bytes) Detections: 82 Type: Executable File Path: %ALLUSERSPROFILE%\InstallBrainService Group: Malware file Last Updated: January 14, 2017
27.	C:\Documents and Settings\\Application Data\IBUpdaterService\ibsvc.exe
Name: C:\Documents and Settings\<username>\Application Data\IBUpdaterService\ibsvc.exe Type: Executable File Group: Malware file
28.	drop/2b2b1f1ed597eed9dd62ba4ad2a	2b2b1f1ed597eed9dd62ba4ad2abe15e	0
Name: drop/2b2b1f1ed597eed9dd62ba4ad2a MD5: 2b2b1f1ed597eed9dd62ba4ad2abe15e Size: 396.02 KB (396024 bytes) Detections: 0 Group: Malware file Last Updated: January 15, 2013
29.	0f1583197f5d7f6a2952adb0d0f6773c.exe	0f1583197f5d7f6a2952adb0d0f6773c	0
Name: 0f1583197f5d7f6a2952adb0d0f6773c.exe MD5: 0f1583197f5d7f6a2952adb0d0f6773c Size: 398.07 KB (398072 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: January 15, 2013
30.	77371b9678258eff4dc7b9fb269799e9	77371b9678258eff4dc7b9fb269799e9	0
Name: 77371b9678258eff4dc7b9fb269799e9 MD5: 77371b9678258eff4dc7b9fb269799e9 Size: 554.4 KB (554400 bytes) Detections: 0 Group: Malware file Last Updated: January 15, 2013
31.	1944df25b6fd7c5fa9e42ff8bef38cd2	1944df25b6fd7c5fa9e42ff8bef38cd2	0
Name: 1944df25b6fd7c5fa9e42ff8bef38cd2 MD5: 1944df25b6fd7c5fa9e42ff8bef38cd2 Size: 388.37 KB (388376 bytes) Detections: 0 Group: Malware file Last Updated: January 15, 2013

More files

Directories

PUP.InstallBrain may create the following directory or directories:

%ALLUSERSPROFILE%\Application Data\InstallBrainService

%ALLUSERSPROFILE%\InstallBrainService

%PROGRAMFILES%\InstallBrainService

%PROGRAMFILES(x86)%\InstallBrainService

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

PUP.InstallBrain

Threat Scorecard

EnigmaSoft Threat Scorecard

How InstallBrain and Its Components Work

Removing InstallBrain from an Affected Computer

SpyHunter Detects & Remove PUP.InstallBrain

File System Details

Directories

Submit Comment

Trending

1xlite-348611.top

SSH-Snake Worm

'Microsoftsupport.co' Pop-Up Scam

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?