Home Malware Programs Viruses CleanBoan


Posted: December 14, 2012

Threat Metric

Ranking: 6,911
Threat Level: 2/10
Infected PCs: 1,977
First Seen: December 14, 2012
Last Seen: October 2, 2023
OS(es) Affected: Windows

CleanBoan is a fake anti-malware program from the Onescan family, a family of scamware products that are noted for targeting South Korean PCs. Although their choice of regions for victimization is somewhat unusual, Onescane-based rogue anti-malware programs like CleanBoan are consistently confirmed as using the same types of inaccurate system alerts and scans that are found in fake anti-malware programs from other countries. In spite of its appearance, CleanBoan isn't capable of detecting malware or any other system problems, and SpywareRemove.com malware experts never recommend purchasing CleanBoan, which lacks any genuine security features. CleanBoan may pretend to be uninstallable like a normal application, but removing CleanBoan should use anti-malware applications that are capable of ensuring that all aspects of CleanBoan are deleted in their entirety.

The Grunge Beneath CleanBoan's Shiny Exterior

CleanBoan is a member of a large family of Korean rogue anti-malware applications that have been distributed in the wild for years. Despite their age, Onescan scamware products like CleanBoan still are capable of infecting modern Windows PCs – most typically through malicious websites and advertisements that host drive-by-download exploits, although other methods also may be utilized. Besides CleanBoan, other examples of members of Onescan that SpywareRemove.com malware researchers are familiar with include BoanKorea, SweeperLab, DoctorCom, PCVaccine, BoanCop and Dr.Boan. These scamware programs primarily are differentiated by different brand names and skins, as opposed to having meaningfully different functions or features.

After having installed themselves through disingenuous means, CleanBoan and its fellows will alter your Registry to allow themselves to launch automatically, although SpywareRemove.com malware research team notes that this isn't the full extent of possible changes by CleanBoan to your Registry. Once CleanBoan is in full gear, CleanBoan will display the fake infection warnings, system alerts and pop-up warnings that all scamware products are known for, as well as inaccurate scans of your PC that find infections in uninfected files.

These attacks are intended to make the victim pay for CleanBoan's software to remove the fake threats that CleanBoan detects, which SpywareRemove.com malware researchers obviously consider both unnecessary and ultimately harmful to your computer.

Scrubbing CleanBoan out of Sight of Your Hard Drive

CleanBoan isn't entirely passive in its fake security attacks; besides its main scamware functions, CleanBoan also updates itself for additional features and contacts a remote server to notify criminals of the installation. SpywareRemove.com malware analysts warn that such behavior often is associated with malware that can be exploited to cause other attacks specifically under criminal instruction. Naturally, CleanBoan should be removed as quickly as possible if you value your PC's real security over the appearance of it.

In some cases, CleanBoan may offer a normal uninstallation method as part of its pretense of being a real anti-malware program. However, SpywareRemove.com malware experts never recommend removing malicious software like CleanBoan with anything less than a dedicated anti-malware application. Deleting CleanBoan in this fashion will both ensure that all of CleanBoan's components are removed and remove any additional PC threats that may have been downloaded from the same infection vector as CleanBoan.

Technical Details

Additional Information

The following URL's were detected: