PiBoSo Official Forum

General => Off Topic => Topic started by: HornetMaX on September 19, 2017, 06:40:06 AM

Title: CCleaner warning
Post by: HornetMaX on September 19, 2017, 06:40:06 AM
https://www.techpowerup.com/237111/piriform-hacked-ccleaner-august-versions-v5-33-6162-injected-compromised (https://www.techpowerup.com/237111/piriform-hacked-ccleaner-august-versions-v5-33-6162-injected-compromised)

64bit version seems unaffected.
Title: Re: CCleaner warning
Post by: Hawk on September 19, 2017, 08:26:31 AM
Thanks for that Max, appreciated.  ;)

Looking at my CCleaner Install I've got v5.34.6207 so I should be okay.... Plus I always download the installer and scan it first before install. I learned my lesson after getting hit with that ransom virus from auto-installing flash player updates about a year and a half ago now.
Title: Re: CCleaner warning
Post by: HornetMaX on September 19, 2017, 08:35:43 AM
Quote from: Hawk on September 19, 2017, 08:26:31 AM
Thanks for that Max, appreciated.  ;)

Looking at my CCleaner Install I've got v5.34.6207 so I should be okay.... Plus I always download the installer and scan it first before install. I learned my lesson after getting hit with that ransom virus from auto-installing flash player updates about a year and a half ago now.
Good practice, but I doubt a scan would have detected it at the time (as nobody was aware yet).
Title: Re: CCleaner warning
Post by: HornetMaX on September 19, 2017, 11:41:34 AM
In case: https://www.bleepingcomputer.com/how-to/security/ccleaner-malware-incident-what-you-need-to-know-and-how-to-remove/ (https://www.bleepingcomputer.com/how-to/security/ccleaner-malware-incident-what-you-need-to-know-and-how-to-remove/)
Title: Re: CCleaner warning
Post by: Hawk on September 19, 2017, 01:53:20 PM
Just did a reg search for Agomo and I'm clean....

Thanks for that Max. ;)
Title: Re: CCleaner warning
Post by: PeterV on September 19, 2017, 03:34:52 PM
Thx Max i use 64bit nothing found in registry
Title: Re: CCleaner warning
Post by: HornetMaX on September 19, 2017, 07:19:04 PM
Hmm ... I have the 64bit version, no Agomo stuff,but Avira & Malwarebytes picked up the .exe as infected (which may be OK, sometimes they over-detect).
The strange thing is that I had trouble in uninstaling CCleaner, the .exe was hard to remove (required admin rights, but th eonly account on the pC is an admin one, of course).
Weird ... had to quarantine it and reboot.