Home Malware Programs Rogue Anti-Spyware Programs RealClean

RealClean

Posted: May 3, 2011

RealClean is a clone of other rogue anti-virus programs from Korea. Like its clones, RealClean creates fake errors that indicate that your computer is infected by many different threats that, in reality, aren't on your PC. RealClean may also block applications or take over your web browser for the purpose of redirecting you towards dangerous websites. RealClean has also been observed to contact a wide range of malicious websites that serve as homepage mirrors for RealClean and RealClean's related rogue security programs. You should remove RealClean by applying your choice of anti-malware software as soon as possible, since the presence of RealClean on your PC opens up vulnerabilities to further malware attacks.

RealClean – Not Really Clean After All

As part of a series of rotating faces used by what amounts to a singular rogue security program, RealClean's name is strongly related to the following fake 'products' that are actually threats: PCTrouble Infocleaner, MyVaccine, EnPrivacy and One Scan. All of these fake anti-virus programs are essentially the same threat and manifest the same PC attacks.

Although you wouldn't download a known rogue security program like RealClean of your own free will, you may acquire a RealClean infection when visiting a website linked to RealClean. The RealClean family has a large number of websites, with some examples being myboan.co.kr, infocleannet.co.kr, myvaccine.co.kr, info-scan.co.kr, myprotect.co.kr, realclean.co.kr, infocleaner.co.kr and infocleanup.co.kr. The bottom line is that you should be careful when visiting a Korean website, although RealClean rogue security programs have also been associating with a smaller number of non-Korean .com sites, too.

RealClean was first seen in 2010, and has been rotating its names to avoid easy identification since that time. Although RealClean will create many fake errors to convince you of its own value as security software, RealClean can't detect viruses, Trojans or other PC threats. Since RealClean has no real security benefits, you should feel no guilt about removing RealClean even if you didn't know about the other dangers RealClean can present, as listed below.

What Happens to Your PC If You Trust RealClean

RealClean's attacks don't always stop with just fake infection warnings. Your PC may also suffer from:

  • An infected Registry that lets RealClean start right along with Windows. Even if you try to close the rogue security program, RealClean may remain running as a memory process with no externally visible interface.
  • RealClean is likely to try and hijack your browser. This can restrict website access by creating fake errors and redirecting you towards dangerous websites like RealClean's homepage. You should try to dodge any attempts at being redirected to RealClean-related websites since these sites may download malware onto your PC without your permission.
  • RealClean may also hinder various applications and is particularly likely to stop you from using anti-malware programs.

Switching to Safe Mode (by hitting F8 during startup) or using a boot from a removable drive or a second, non-Windows OS will help you stop RealClean from launching during startup. After that, if you have a good anti-malware scanner, RealClean should be somewhat easy to remove. Be certain to scan your entire system, since RealClean may be accompanied by Trojans and other malware infections.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %program files%\realclean
Loading...