CleanerCom

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 7
First Seen: January 13, 2012
Last Seen: January 10, 2019
OS(es) Affected: Windows

According to ESG security researchers, CleanerCom belongs to a large family of rogue security programs that are targeted at Korean computer users. However, in last months of 2011, these rogue security programs have started to leak beyond Korean borders, infecting computer systems all around the world. In this particular case, the fact that non-Korean victims cannot read any of the text that CleanerCom displays actually makes this malware's attack less effective. Rogue security programs in the CleanerCom family will display error messages and all of their text entirely in Korean. In fact, only the program's name is written in Western characters. Regardless of its origin, CleanerCom runs what is basically the same scam as dangerous rogue security programs that have been around since 2009, such as those belonging to FakeScanti, FakeSmoke or FakeCog families of rogue security programs.

How the CleanerCom Scam Works

Like most rogue security programs, the main goal of CleanerCom is to steal its victims' money by pretending that there is malware on the victim's computer system that can only be removed if a 'full version' of CleanerCom is purchased. However, CleanerCom simply takes the money and runs which is only to be expected if you realize that CleanerCom has absolutely no anti-malware capabilities. While this malware application has various convincing elements in its interface, these are all just for show. Beyond its showy interface, CleanerCom is composed of nothing more than a handful of malicious scripts and dangerous Trojan infections. Do not be fooled, CleanerCom should be removed immediately with the help of a legitimate anti-malware application.

Removing a CleanerCom Infection from Your Computer System

The best way to remove CleanerCom from an infected computer is to use a legitimate, reliable anti-virus application. However, CleanerCom has elements that permit CleanerCom to disable the victim's security programs by overwriting portions of these applications' files. For this reason, download or reinstallation of your security program may be necessary or even run it from an external drive. CleanerCom also includes components designed to block access to your files or to the Internet, displaying error messages whenever the victim attempts to do this. To bypass these effects, it is necessary to prevent CleanerCom from loading automatically when Windows starts up. This can be achieved by starting up Windows in Safe Mode before attempting the removal of CleanerCom from your computer system.

SpyHunter Detects & Remove CleanerCom

File System Details

CleanerCom may create the following file(s):
# File Name MD5 Detections
1. C:\Program Files\MCleanerCom\CleanerComLaunch.exe
2. C:\Documents and Settings\\StartMenu\Programs\MCleanerCom\CleanerCom.lnk
3. CleanerComUp.exe a83fc49d0193f0fce5071f2e7db58188 0

Directories

CleanerCom may create the following directory or directories:

%ProgramFiles%\MCleanerCom

Trending

Most Viewed

Loading...