Forum Discussion

bwanshoom's avatar
bwanshoom
Explorer
Sep 18, 2017

Heads Up: CCleaner Infected

I know that CCleaner is popular on this forum. For almost a month it was compromised and installing malware. This is quite serious - it means that Piriform's development servers were probably compromised. CCleaner is owned by Avast which would also be a great target for the bad guys. It doesn't appear that Avast detected this on their own which is also troubling.

Link
  • pbitschura's avatar
    pbitschura
    Explorer
    Sep 18, 2017
    https://www.forbes.com/sites/thomasbrewster/2017/09/18/ccleaner-cybersecurity-app-infected-with-backdoor/#56e73ce1316a

    Don't update. Uninstall and do a new install of the repaired version.
  • 1492's avatar
    1492
    Moderator
    Sep 18, 2017
    If I'm reading Cisco Talos correctly, if one has an infected version of CCleaner, they recommend rolling back (System Restore) before August 15, 2017. Or do a "re-install". :E
  • bwanshoom's avatar
    bwanshoom
    Explorer
    Sep 18, 2017
    1492 wrote:
    If I'm reading Cisco Talos correctly, if one has an infected version of CCleaner, they recommend rolling back (System Restore) before August 15, 2017. Or do a "re-install". :E
    That is what they're recommending. Note that that is in stark contrast to Avast's claims that just reinstalling CCleaner is sufficient. I don't think I trust Avast in this instance - I think they're statements are self-serving and disingenuous.
  • SidecarFlip's avatar
    SidecarFlip
    Explorer III
    Sep 18, 2017
    My Norton 360 caught it right away and I did the upgrade and no issues now. Kind of wondering about the CCleaner on my Android phone.
  • T18skyguy's avatar
    T18skyguy
    Explorer
    Sep 19, 2017
    I read that it only infects 32 bit machines and not 64 bit, but might still be plenty of 32's still out there.
  • ksg5000's avatar
    ksg5000
    Explorer
    Sep 19, 2017
    When you update CCleaner they always provide a list of the reasons for the update - they mentioned fixing various minor bugs but conveniently left out any mention of the virus. Not sure I am going to re-install - credibility counts and they just lost some.
  • bwanshoom's avatar
    bwanshoom
    Explorer
    Sep 19, 2017
    ksg5000 wrote:
    When you update CCleaner they always provide a list of the reasons for the update - they mentioned fixing various minor bugs but conveniently left out any mention of the virus. Not sure I am going to re-install - credibility counts and they just lost some.
    Avast (owners of CCleaner) didn't mention anything about it until Cisco's security group Talos wrote about it. And now there are reports that Avast was first notified a month ago by another security company. They're becoming a case study on how not to handle a security incident.

    If I were an Avast user I'd uninstall that, too.
  • SidecarFlip's avatar
    SidecarFlip
    Explorer III
    Sep 19, 2017
    The upgrade 5.34.0.6207 cures (removes) the virus. My Norton 360 caught it right away (even before I ran the CCleaner.), but I agree, a very poor way to manage a program.

    Nothing in the release notes at all and should have been. I run the freeware version myself and have for years.

    Never used Avast, Always used Norton. never an issue with them.

About RV Must Haves

Have a product you cannot live without? Share it with the community!8,793 PostsLatest Activity: Aug 22, 2023