Welcome to remove-malware.net

How to remove CleanThis rogue anti-spyware

Malware Description:
The malicious software called CleanThis (also known as Clean This) is an updated variant of the infamous ThinkPoint rogue security client that terrorized the cyber world several months ago. Like its nefarious predecessor, CleanThis applies aggressive and extraordinarily intricate tactics to get promoted on to a potential victim’s computer. It usually comes with a trojan horse that secretly enters one’s machine and displays a misleading alert about the alleged presence of the “Unknown/Win32” trojan or something similar but definitely scary-sounding. The moment you click the option that suggests neutralizing this pseudo threat on the alert we mentioned, you become another unfortunate victim of CleanThis fraud. This application then configures your Operating System to keep executing its own malignant process following each boot-up. This means your computer will become completely dependent on the commands issued by Clean This virus. The nightmare usually continues with a scan reporting some serious infections even though these threats are not there at all. CleanThis just wants you to believe your machine is about to get messed up. Having scared you by means of such awful tactics, CleanThis will be sure to proceed and recommend registering its licensed copy. So we can single out several main stages of this invasion. During the first phase, the malware infiltrates your computer – not without your participation though, as we stated above (the trick with a bogus warning ad). The next stage involves a massive and annoying brainwashing attack which aims to intimidate the user. And finally, CleanThis will not fail to try persuading you to buy its “commercial” version and get the supposed malware items removed in return. This scheme may actually work in case you fall for information reported by CleanThis. We therefore urge you to not take this application for granted. So it’s absolutely obvious you need to get rid of this scareware if you have it on your PC. But there might be some complications on your way. You see, CleanThis may hijack your desktop after a system startup procedure, which means you might not have access to your apps and icons. What you will be actually seeing every time your PC restarts is a screen shown on the image below. Now, here is what you should do to pass through. Once you restart your computer and see the disgusting CleanThis interface, keep hitting Ctrl+Alt+Del to open up your Task Manager. It may take several attempts, so do not give up and keep trying. Then, when Task Manager is open, you need to hit ‘Processes’ and spot an executable called ‘gog.exe’ which is most likely to be associated with CleanThis. Now, you should immediately end that process using the menu options. Now that you are half way done, keep Task Manager open, go to ‘File’ menu, choose ‘New Task (Run)’ and type in ‘explorer.exe’. Hit Ok and you should now be able to see your desktop as usual. This being done, please proceed with CleanThis removal using our guide below. Best of luck!

Malware Type: Rogue Anti-Spyware

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

CleanThis Free Scanner and Remover: Download Now

CleanThis Screenshot:

CleanThis Fake Startup Screen Snapshot:

How to remove CleanThis manually:
Manual removal of CleanThis is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

• %Documents and Settings%\[User Name]\Application Data\[random].bat
• %Documents and Settings%\[User Name]\Application Data\gog.exe
• %Documents and Settings%\[User Name]\Desktop\CleanThis.lnk
• %Documents and Settings%\[User Name]\Start Menu\Programs\CleanThis.lnk
• %Windows%\Tasks\At[random].job

The registry entries that need to be removed are as follows:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “CleanThis”
• HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%Documents and Settings%\[UserName]\Application Data\gog.exe”

Please be aware that manual removal of CleanThis is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal CleanThis, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Related Articles:

There are currently no similar articles.