Thread: CCleaner Malware

If you have CCleaner installed on your machine, you might ought to upgrade to the new version......

Users of a free software tool designed to optimize system performance on Windows PCs and Android mobile devices got a nasty shock this morning when Piriform, the company which makes the CCleaner tool, revealed in a blog post that certain versions of the software had been compromised by hackers — and that malicious, data-harvesting software had piggybacked on its installer program.

The affected versions of the software are CCleaner 5.33.6162 and CCleaner Cloud 1.07.3191.
The company is urging users to upgrade to version 5.34 or higher (which it says is available for download here).

So clearly some users may still have a compromised PC on their hands (Piriform says it’s moving all users of the CCleaner to the latest version of the software, while noting that users of CCleaner Cloud will have been updated automatically.)

The malware was apparently capable of harvesting various types of data from infected machines — specifically, Piriform says: the computer name, IP address, list of installed software, list of active software and list of network adapters (data it describes as “non-sensitive”) — transmitting it to a third party computer server located in the US.

https://techcrunch.com/2017/09/18/avast-reckons-ccleaner-malware-infected-2-27m-users/?ncid=mobilenavtrend

Originally Posted by uncle junior

If you have CCleaner installed on your machine, you might ought to upgrade to the new version......


https://techcrunch.com/2017/09/18/avast-reckons-ccleaner-malware-infected-2-27m-users/?ncid=mobilenavtrend

thanks, just updated my wife's PC.

Don't know what version i had, i uninstalled it anyway and ran the anti-malware. Got the new version installed now.

I use CC daily

What is the prudent measure?

Delete and reinstall or

Update to the latest version?

Updating is obviously easier, but will that remove/negate the malware?

Thanks ...

Originally Posted by David48atTD

Delete and reinstall or

Delete and reinstall. Only takes a couple minutes.

I would use an uninstaller like Revo to get ride of all the nasty bits that may be left behind. Much more through then the app/windows uninstaller. I won't be reinstalling this until I know for sure it is safe.

Originally Posted by uncle junior

If you have CCleaner installed on your machine, you might ought to upgrade to the new version......

Thanks Uncle Junior. I just deleted my CCleaner and did a Malwarebites scan and it found two infections

Trojan.Floxif.Trace- Registry Value

and

Trojan.Floxif.Trace- Registry Key

Anyone other than harry have an idea on a good registry cleaner other than piriform

Originally Posted by david44

Anyone other than harry have an idea on a good registry cleaner other than piriform

Glary Utilities is good, bit more involved to use. Bleach Bit has a Windows version, I've used it for Linux but not Windows....should be all right though. No guarantee that these apps won't get infected same as CCleaner did though.

Originally Posted by uncle junior

Glary Utilities is good, bit more involved to use. Bleach Bit has a Windows version, I've used it for Linux but not Windows....should be all right though. No guarantee that these apps won't get infected same as CCleaner did though.

It got infected because Avast let one of their servers get hacked.


I would guess other hosters of this app have probably had a good look at theirs recently.

Avast’s Piriform Releases Security Update for CCleaner
09/19/2017 01:44 PM EDT

Original release date: September 19, 2017
Piriform, a subsidiary of Avast, has released CCleaner 5.34 and has pushed v1.07.3214 to CCleaner Cloud users. These versions do not contain the Floxif malware found in the 32-bit versions of CCleaner 5.33.6162 and CCleaner Cloud 1.07.3191. Floxif malware collects information from the victim's system and can download additional malware to the system.
US-CERT encourages users and administrators to review the Piriform Security Notification and apply the necessary update.

Something fishy about it happening after Avast buys out the CCleaner people. Sometimes I think these big anti-malware corps, create malware just to make a market for their product.

Anyway, I've deleted all my Piriform apps and just dowlloaded Glary Utils instead.

Originally Posted by uncle junior

Something fishy about it happening after Avast buys out the CCleaner people. Sometimes I think these big anti-malware corps, create malware just to make a market for their product.

Anyway, I've deleted all my Piriform apps and just dowlloaded Glary Utils instead.

It wouldn't be in Avast's interest to fuck up like this.

They've had enough bad press in recent years.

https://www.theregister.co.uk/2017/0...nection_snafu/

Avast Malware Signature Update Breaks Installed Programs

Originally Posted by harrybarracuda

It wouldn't be in Avast's interest to fuck up like this.

I agree but it is odd timing though....maybe Kapersky or McAfee is sandbagging them.