CleanBoan

Posted: December 14, 2012

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	6,911
Threat Level:	2/10
Infected PCs:	1,977

First Seen:	December 14, 2012
Last Seen:	October 2, 2023
OS(es) Affected:	Windows

CleanBoan is a fake anti-malware program from the Onescan family, a family of scamware products that are noted for targeting South Korean PCs. Although their choice of regions for victimization is somewhat unusual, Onescane-based rogue anti-malware programs like CleanBoan are consistently confirmed as using the same types of inaccurate system alerts and scans that are found in fake anti-malware programs from other countries. In spite of its appearance, CleanBoan isn't capable of detecting malware or any other system problems, and SpywareRemove.com malware experts never recommend purchasing CleanBoan, which lacks any genuine security features. CleanBoan may pretend to be uninstallable like a normal application, but removing CleanBoan should use anti-malware applications that are capable of ensuring that all aspects of CleanBoan are deleted in their entirety.

The Grunge Beneath CleanBoan's Shiny Exterior

CleanBoan is a member of a large family of Korean rogue anti-malware applications that have been distributed in the wild for years. Despite their age, Onescan scamware products like CleanBoan still are capable of infecting modern Windows PCs – most typically through malicious websites and advertisements that host drive-by-download exploits, although other methods also may be utilized. Besides CleanBoan, other examples of members of Onescan that SpywareRemove.com malware researchers are familiar with include BoanKorea, SweeperLab, DoctorCom, PCVaccine, BoanCop and Dr.Boan. These scamware programs primarily are differentiated by different brand names and skins, as opposed to having meaningfully different functions or features.

After having installed themselves through disingenuous means, CleanBoan and its fellows will alter your Registry to allow themselves to launch automatically, although SpywareRemove.com malware research team notes that this isn't the full extent of possible changes by CleanBoan to your Registry. Once CleanBoan is in full gear, CleanBoan will display the fake infection warnings, system alerts and pop-up warnings that all scamware products are known for, as well as inaccurate scans of your PC that find infections in uninfected files.

These attacks are intended to make the victim pay for CleanBoan's software to remove the fake threats that CleanBoan detects, which SpywareRemove.com malware researchers obviously consider both unnecessary and ultimately harmful to your computer.

Scrubbing CleanBoan out of Sight of Your Hard Drive

CleanBoan isn't entirely passive in its fake security attacks; besides its main scamware functions, CleanBoan also updates itself for additional features and contacts a remote server to notify criminals of the installation. SpywareRemove.com malware analysts warn that such behavior often is associated with malware that can be exploited to cause other attacks specifically under criminal instruction. Naturally, CleanBoan should be removed as quickly as possible if you value your PC's real security over the appearance of it.

In some cases, CleanBoan may offer a normal uninstallation method as part of its pretense of being a real anti-malware program. However, SpywareRemove.com malware experts never recommend removing malicious software like CleanBoan with anything less than a dedicated anti-malware application. Deleting CleanBoan in this fashion will both ensure that all of CleanBoan's components are removed and remove any additional PC threats that may have been downloaded from the same infection vector as CleanBoan.

Technical Details

Additional Information

The following URL's were detected:

top-dating-center.com