What is CleanThis?

CleanThis is a fake anti-virus application that was spread by means of a fake Microsoft Security Essentials infection. also called as Clean this virus, it will display a fake alert stating that computer is contracted with an Unknown Win32/Trojan. a prompt to scan the computer using a fake virus scanner is followed. After, the fake alert will display the result asserting that system is infected with Trojan.Horse.Win32.PAV.64.a. at this point it will advise to install a copy of CleanThis software to be able to clean the computer. After successful installation it will prompt to reboot the computer that will make the rogue program to be places on the start-up entry of Windows.

Since CleanThis was configured to run each time the computer starts, expect an automatic scan that will load without self initialization. the scan will run for a couple of minutes and produce fabricated results in an effort to deceive users. this scare tactics will attempt to persuade users into obtaining the paid version of CleanThis. although it may look like a real AV software, keep in mind that rogue applications are created to be sold in an illegal manner. Remove CleanThis as soon as possible before it can bring additional damage to the computer. Follow the procedures below to completely remove CleanThis together with all of its files and registry entries.

TypeRogueSub-TypeFakeAVAliases OS AffectedWindowsDetected ByMalwareBytesWhat are the Symptoms of CleanThis Virus Infection?

It will modify Windows Registry and add the following entries:HKCUSoftwareMicrosoftWindows NTCurrentConfigurationWinlogonShell = %AppData%hotfix.exe

The threat will drop the following malicious files:%UserProfile%Application Datacompletescan%UserProfile%Application Datahotfix.exe%UserProfile%Application Datainstall

How to Remove CleanThis Virus Manually

1. Restart your computer in SafeMode- After Power-On the computer, just before Windows start, press F8- from the selections, Select SafeMode

2. Remove Registry entries that the threat added. you MUST BACKUP YOUR REGISTRY FIRST.- Click start > Run- Type in the field, regedit- Navigate and look for the registry entries mentioned above and delete if necessary

3. Delete malicious files that the threat added:- Base on the given location above, browse and delete the file- if no location is given, click Start>Search> and search for the files.- if cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. if it is, select the file and click End Process. Perform file delete again.

4. Scan computer with Antivirus Program- Update antivirus program- Scan computer and delete all detected threats.

Automatic Removal of CleanThis Virus

1. Download and run MalwareBytes AntiMalware to remove this computer threat.