CleanScan

CleanScan is a rogue security program. Programs like CleanScan are fake anti-virus applications that are used to carry out a well known online misleading tactic. CleanScan is part of a large family of Korean rogue security programs, the family, that are used to carry out attacks. Despite not being in English, CleanScan is identical to other rogue security programs. However, the added difficulty of understanding Korean may confuse inexperienced computer users who may have become infected with CleanScan in a country other than Korea. If CleanScan is installed on your computer, PC security researchers strongly recommend taking steps to remove this threat.

CleanScan is Far from Being a Genuine Security Program

Rogue security programs like CleanScan carry out the same basic tactic when infecting computers. The following are the steps that CleanScan may follow when infecting a computer. These are typical of most rogue security programs.

1. CleanScan is distributed using typical threat delivery methods. Some of these include fake file downloads on file sharing networks, attack websites and email spam messages. A typical way of distributing CleanScan is through the use of social engineering strategies. Fake advertisements for supposed 'malware scans' may lead to attack websites that install CleanScan on the victim's computer.
2. CleanScan installs itself on the victim's computer and make harmful changes to the infected computer's settings that allow CleanScan to display bogus system error messages, interfere with other software, and affect how the victim's computer connects to the Internet. CleanScan will also ensure that this fake security program runs automatically whenever the infected computer starts up.
3. CleanScan will try to make the victim believe that there are threats present on the infected computer. To do this, CleanScan will display fake error messages and notifications alarming the victim of supposed threats. CleanScan pretends to be a real security program. CleanScan displays a fake virus scan and a report indicating numerous infections on the victim's computer. CleanScan will make it appear as if there are threats on the affected computer by affecting the PC's performance. For example, CleanScan will interfere with other software, preventing the victim from running other applications. When the victim tries to open another program, CleanScan displays a fake error message claiming that CleanScan prevented it from opening because of the presence of threats. CleanScan also prevents legitimate security software from running, making it quite difficult for computer users to remove CleanScan.
4. When computer users try to use CleanScan to remove these supposed infections, CleanScan will display error messages claiming that it is necessary to pay for a 'full version' or a 'license' of CleanScan in order to remove these threats.

Do not Fall into CleanScan’s Trap!

CleanScan does not have the ability to detect or remove threats. Rather, CleanScan is a threat itself. CleanScan is designed to take over a computer and make it appear as if there is a large number of threats on it in order to trick inexperienced computer users into paying for a 'full version' of CleanScan. However, the 'full version' of CleanScan is no different from the 'free version', except that it will stop spamming computer users with as many error messages.

One of the difficulties of dealing with CleanScan is the Korean language, which may be disorienting for computer users not located in Korea, who may not understand why their computer is displaying error messages in Korean all of a sudden. Regardless, malware researchers advise using a reliable security program that is fully up-to-date to remove CleanScan completely. If there is difficulty opening your security program because of CleanScan, malware analysts recommend using alternate start-up methods, such as starting up Windows in Safe Mode or in Repair Mode, or using an external device to boot Windows and bypass CleanScan.

Some clones of CleanScan include