clean up scan & change string for decrypt