Home Blog

How Can I Remove CleanBoan completely

Posted by in Blog Rogue Program
on December 18th, 2012 | Leave a comment

CleanBoan is a rogue antimalware program that could nothing good to a computer. Such rogue software is either promoted in rogue websites or downloaded by Trojans. No matter how it came to your computer, you should not trust it from now on. CleanBoan displays fake security alerts saying your computer is infected by virus and you need to run a scan immediately. When you use it to scan the computer, it will report non-exit Trojans and ask you to purchase the full version before removal. What if you do not register the software? You will find the infection blocks you from accessing internet and disables your desktop or windows basic functions. If you have no idea how to get rid of CleanBoan, you could learn some tips in the following passages.

For the CleanBoan infection, the following two ways are both feasible for ridding of CleanBoan from computer.

Remove CleanBoan manually

To get a successful and complete removal, the CleanBoan related files, registry entries and processes should be removed manually.

Related infected processes need to be deleted:
CleanBoan.exe

Related infected Files need to be deleted:

%AppData%\NPSWF32.dll
%AppData%\Protector-[random].exe
%AppData%\result.db
%Desktop%\CleanBoan.lnk
%StartMenu%\Programs\CleanBoan.lnk

Related infected registry entries need to be deleted:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 4
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = 2012-2-20_1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\{random}.exe

How to remove CleanBoan instantly
To get rid of the fake software, you need both a professional antispyware program and correct removal instruction. The one we recommended for CleanBoan removal is Spyware Cease, which is specialized at removing rogue programs.

If the rogue program block your internet access, you could download Spyware Cease to another computer and then transfer it via a USB drive. Alternatively, you could reset browser settings which were modified by CleanBoan. Take Firefox for example. Run firefox – click on Tools go to Advanced tab -go to the Network tab – click Settings – choose No proxy and click the OK

After you save Spyware Cease installer file to the desktop, rename it as iexplorer.exe. Run it and start online scan. To make sure CleanBoan is removed completely, you need to click Clean Virus at the top – choose full scan – select all the drives and click start. The double engine will quickly pick up CleanBoan.

Leave a Reply