Dr.Boan
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Ranking: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 80 % (High) |
| Infected Computers: | 91 |
| First Seen: | December 28, 2011 |
| Last Seen: | June 17, 2022 |
| OS(es) Affected: | Windows |
The only difference between Dr.Boan and the most common rogue security applications online is that Dr.Boan's interface, messages, and files are all Korean. While there are some snippets of English in the contents of Dr.Boan's files, there is no doubt that this rogue security program targets Korean computer users. However, computers from any nationality are vulnerable to become infected with the Dr.Boan. This is especially true if you have regular contact with infected Korean servers or receive messages or email from Korean sources. In fact, this infection can be quite disorienting for non-Korean speakers, making even experienced computer users unsure on how to react. Even if you do not understand the Korean characters in Dr.Boan's interface and messages, you will probably notice that something is not right with your computer system. According to ESG security researchers, any program, regardless of its nationality, that enters your computer system without your authorization, starts up automatically and refuses to let you close it or remove it, is definitely a malware infection. Even if you do not speak Korean, it should be immediately obvious from Dr.Boan's interface that Dr.Boan is imitating legitimate security applications such as Windows Defender or Microsoft Security Essentials. One characteristic that most malware similar to Dr.Boan has in common is that these rogue security programs originate in Korea and all have highly attractive and colorful interfaces. However, do not fall for this scam, Dr.Boan is a rogue security program like any other. Use a legitimate anti-malware tool to remove all traces of Dr.Boan from your computer system.
Dr.Boan follows the typical attack strategy that most rogue security programs follow. Dr.Boan will first infect a computer system with the help of another malware infection or by using social engineering. Then, Dr.Boan will install itself onto the victim's computer, making harmful changes to the Windows Registry and system settings in the process. Once Dr.Boan is installed, Dr.Boan reboots the infected computer and starts up automatically whenever Windows is launched. This means that the victim will always be greeted with Dr.Boan's splash screen when opening Windows. Dr.Boan will then display a fake system scan (which is just for show, since Dr.Boan does not have the capacity to scan your system for malware). Invariably, Dr.Boan detects many malware threats on the victim's computer. However, Dr.Boan claims that Dr.Boan will only fix them if the victim purchases a 'full version' of Dr.Boan. Since Dr.Boan is the cause of the problems on the infected computer, purchasing Dr.Boan is obviously not a good idea.
