PDA

View Full Version : New Ccleaner 5.34 --BEWARE



wainuitech
13-09-2017, 08:09 AM
Had to happen :(

Beware of the new Ccleaner, its now got Avast bundled in and will install unless you are watching what you are doing, untick the box, and be careful which option to install from the center buttons -free or 14 day trial of professional.
8271

Lawrence
13-09-2017, 08:19 AM
Well,Avast did buy Piriform and has happened as predicted

Colpol
13-09-2017, 08:46 AM
Just downloaded and installed 5.34.
It was a standard install with no hangers on ?????

1101
13-09-2017, 08:49 AM
"light , powerful antivirus"

If only it was still a light AV, without uneeded addons & scareware popups . Then I'd still be using it

so how long before CC is riddled with popups as well.
:badpc:

wainuitech
13-09-2017, 08:57 AM
Just downloaded and installed 5.34.
It was a standard install with no hangers on ????? Just discovered as well. The same downloaded exe, on two computers it came up with the screen as I posted on another it didn't, weird.


so how long before CC is riddled with popups as well. Oddly enough, my Smart Security picked up PUPS in the download, but Nod32 didn't. :confused:

paulw
13-09-2017, 10:21 AM
Just did an update today to 5.34.6207 but didn't see this AV info on the installer screen but will watch out in furture..

wratterus
13-09-2017, 11:34 AM
I'm sticking with using the minimal installer with 5.29. Still works fine, and no crapware.

Speedy Gonzales
13-09-2017, 12:51 PM
Was fine here. Altho it was already installed. I just updated it. I think you get the options if it's a new install.

Sirhc
13-09-2017, 06:39 PM
I use the portable version.

And what's light and powerful about Avast? :D

Whenu
14-09-2017, 08:58 AM
Was fine here. Altho it was already installed. I just updated it. I think you get the options if it's a new install.

Updated mine, it had the added bonus.

Neil F
18-09-2017, 03:44 PM
I upgraded from 5.33 - on sign of Avast OR automatically I am very careful about unchecking prefilled in boxes so unticked routinely.

dugimodo
18-09-2017, 04:05 PM
I think there should be a law that added extras are opt in by default not opt out. In other words if you don't pay attention and just click install you just get the main program and nothing else. Some other things have gone that way in the past, like credit limits on credit cards in NZ - they used to increase automatically if you didn't respond to the letters they sent out occasionally and now you have to reply to get the increase which is how it should be.

Anyway mine prompted me to update and included Avast in the downloaded installer as described so thanks for the heads up. I'm fairly certain I would have noticed but a warning is appreciated.

linw
18-09-2017, 08:47 PM
But it gets worse. 5.33 is VERY bad news apparently. See Talos blog http://blog.talosintelligence.com/2017/09/avast-distributes-malware.html

sk69ersnz
19-09-2017, 06:47 AM
Eset found it this morning. 5.33 Win32/CCleaner.B, No add-ons were installed.
I should roll back eh?

linw
19-09-2017, 08:49 AM
On the evidence, you should certainly remove 5.33 and then try to find out if bad stuff has been left behind.

1101
19-09-2017, 10:13 AM
lets get some facts ... :badpc:
there is some scaremongering going around, even a (possibly false) claim that infected PC's cant be cleaned and need to be rolled back via system restore

https://forum.piriform.com/index.php?showtopic=48869
"We recently determined that older versions of our Piriform CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 had been compromised. We resolved this quickly and believe no harm was done to any of our users. This compromise only affected customers with the 32-bit version of the v5.33.6162 of CCleaner and the v1.07.3191 of CCleaner Cloud. No other Piriform or CCleaner products were affected."

so the newer versions arnt affected
someone hacked their code : not a good sign
the servers that the hacks linked into have been shutdown


https://www.bleepingcomputer.com/news/security/ccleaner-compromised-to-distribute-malware-for-almost-a-month/
"Version 5.33 of the CCleaner app offered for download between August 15 and September 12 was modified to include the Floxif malware...."

so any other version will be OK.
Certainly not a good look, for a company now owned by a AV company.

Pato
19-09-2017, 04:13 PM
Thanks for that information. I had V5.33.6162 64bit installed and have just now updated to V5.34.6207 64bit. I was a bit worried before I read your post.

wainuitech
19-09-2017, 05:11 PM
Eset found it this morning. 5.33 Win32/CCleaner.B, No add-ons were installed.
I should roll back eh? Had the same, one of my flash drives has several versions, went to use it today (flash Drive), and Nod32 deleted the 5.33 instantly.

zqwerty
20-09-2017, 10:44 AM
How to Tell If You Were Infected by the CCleaner Malware Issue:

http://www.majorgeeks.com/news/story/how_to_tell_if_you_were_infected_by_the_ccleaner_m alware_issue.html

wainuitech
20-09-2017, 01:50 PM
How to Tell If You Were Infected by the CCleaner Malware Issue:

http://www.majorgeeks.com/news/story/how_to_tell_if_you_were_infected_by_the_ccleaner_m alware_issue.html

Gotta love the line in the article
As of now, Avast indicates that there is no indication that this has occurred

Checked every PC that we have that had 5.33 installed, but Nod32 had already dealt to any problems.

Call me sceptical :nerd: BUT Ccleaner has always been clean (no pun intended) in fact many times infections will stop Ccleaner installing.

NOW only a short time after AVAST buys Ccleaner theres these problems :confused: Hmmmmmmmmm

1101
20-09-2017, 04:35 PM
NOW only a short time after AVAST buys Ccleaner theres these problems :confused: Hmmmmmmmmm

disgruntled Piriform employees ? :)


and a cover up ?
"Piriform said that Avast, its new parent company, had uncovered the attacks on Sept. 12. A new, uncompromised version of CCleaner was released the same day"
"Avast said little about the breach, posting nothing on its Twitter account in the 12 hours after the announcement and displaying nothing on its main web page. "
https://www.reuters.com/article/us-security-avast/hackers-compromised-free-ccleaner-software-avasts-piriform-says-idUSKCN1BT0R9

so how much value has that acquisition lost in the last few weeks?