Threat Scorecard

Ranking: 13,621
Threat Level: 20 % (Normal)
Infected Computers: 177
First Seen: May 11, 2022
Last Seen: September 19, 2023
OS(es) Affected: Windows

Scanoclean is an untrustworthy website, that could run various popular online tactics. The exact scenario shown by the page could be determined by specific factors, such as the visitor's IP address, geolocation, browser type and potentially more. For example, some of the deceptive behavior of the page that has been confirmed by cybersecurity researchers involves using misleading messages to trick users into enabling its push notifications, running a variation of the 'Your PC is infected with 5 viruses!,' as well as a version of the 'Your Windows 10 is infected with viruses' schemes.

Sites running 'Your PC is infected with 5 viruses!' show numerous fake security alerts presented as if being sent by a reputable security vendor, typically Norton or McAfee. Of course, both companies have absolutely no connection to any of these dubious pages. Users also may be presented with a pop-up window that claims to have scanned their devices and found numerous threats. Keep in mind that such functionality is not something that websites can perform on their own. As for the 'Your Windows 10 is infected with viruses' tactic, it consists of showing a fake alert designed to appear as a real Windows 10 prompt. Like in the previous case, the claims made by the alert are completely false and should be ignored.

As for the users who encounter misleading messages instructing them to press the displayed 'Allow' button, they would soon be subjected to a drastic increase in the advertisements encountered while browsing. Indeed, pressing the button will grant important browser permissions to Scanoclean, allowing the page to start generating unwanted and annoying advertisements. It is important to approach the shown advertisements with caution, as they could be promoting more dubious destinations or intrusive PUPs (Potentially Unwanted Programs) masquerading as legitimate applications.

URLs may call the following URLs:


Most Viewed