For every question, there's an answer -- and you'll find it here!


Printer-friendly copy
Top The PC Q&A Forum The Computer Forum topic #564500
View in linear mode

Subject: "CCleaner hacked" Previous topic | Next topic
PcqandamanMon Sep-18-17 09:02 AM
Member since Nov 18th 2002
2184 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
"CCleaner hacked"


          

https://uk.finance.yahoo.com/news/hackers-compromised-ccleaner-free-software-avasts-piriform-says-084009922--finance.html

  

Alert Printer-friendly copy | | Top

Replies to this topic
Subject Author Message Date ID
RE: CCleaner hacked
Sep 18th 2017
1
RE: CCleaner hacked
Sep 18th 2017
2
RE: CCleaner hacked
Sep 18th 2017
3
RE: CCleaner hacked
Sep 19th 2017
4
      RE: CCleaner hacked
Sep 19th 2017
5
      RE: CCleaner hacked
Sep 19th 2017
7
      RE: CCleaner hacked
Sep 19th 2017
6
           RE: CCleaner hacked
Sep 20th 2017
8
RE: CCleaner hacked
Sep 20th 2017
9
RE: CCleaner hacked
Sep 20th 2017
10
      RE: CCleaner hacked
Sep 20th 2017
11
RE: CCleaner hacked
Sep 21st 2017
12
RE: CCleaner hacked
Sep 21st 2017
13
RE: CCleaner hacked
Sep 22nd 2017
14

KJTMon Sep-18-17 11:39 AM
Charter member
15901 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#1. "RE: CCleaner hacked"
In response to Pcqandaman (Reply # 0)


  

          

Thanks. I deleted the "hacked" version and then installed the latest update.

Jim.

  

Alert Printer-friendly copy | | Top

eileenMon Sep-18-17 10:48 PM
Member since Feb 10th 2006
237 posts
Click to view this author's profileClick to add this author to your buddy list
#2. "RE: CCleaner hacked"
In response to Pcqandaman (Reply # 0)


          

Malwarebytes did a scan today on two of our laptops yes postive for Trojan.Floxit (Ccleaner) Malwarebytes Quarantined then I uninstalled Ccleaner and shut down many times and in between shut downs scanned with Malwarebytes all clear.

  

Alert Printer-friendly copy | | Top

bobboMon Sep-18-17 11:33 PM
Charter member
7376 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#3. "RE: CCleaner hacked"
In response to Pcqandaman (Reply # 0)


  

          

Based on the original post, I ran Malwarebytes, and it quarantined 645 items, mostly PUPs. I run MWB regularly, but this time it found a lot. Thanks for the heads up.

  

Alert Printer-friendly copy | | Top

    
PcqandamanTue Sep-19-17 02:34 PM
Member since Nov 18th 2002
2184 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#4. "RE: CCleaner hacked"
In response to bobbo (Reply # 3)


          

I should be OK as I use the 64-bit version.

We recently determined that older versions of our Piriform CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 had been compromised. We estimate that 2.27 million people used the affected software. We resolved this quickly and believe no harm was done to any of our users. This compromise only affected customers with the 32-bit version of the v5.33.6162 of CCleaner and the v1.07.3191 of CCleaner Cloud. No other Piriform or CCleaner products were affected. We encourage all users of the 32-bit version of CCleaner v5.33.6162 to download v5.34 here: download. We apologize and are taking extra measures to ensure this does not happen again. ...

http://www.piriform.com/news/release-announcements/2017/9/18/security-notification-for-ccleaner-v5336162-and-ccleaner-cloud-v1073191-for-32-bit-windows-users

  

Alert Printer-friendly copy | | Top

        
wings515Tue Sep-19-17 02:40 PM
Member since Nov 24th 2004
587 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#5. "RE: CCleaner hacked"
In response to Pcqandaman (Reply # 4)


          

I installed the latest version of CCleaner and when it ran it determined MS Edge was still Open. I had closed it prior to running CC but I let CC close it via the prompt. It still skipped Edge. I tried multiple times to have it clean Edge with no success. After a restart Edge was completely cleaned. Even on older versions, having closed Edge prior to running CC would still pop up the warning to close Edge. This version takes it one step further and still skips it when it is closed.

Anyone else having this problem?

Regards,
wings515

Dan K

  

Alert Printer-friendly copy | | Top

            
KJTTue Sep-19-17 06:57 PM
Charter member
15901 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#7. "RE: CCleaner hacked"
In response to wings515 (Reply # 5)


  

          

I've had that happen with IE11, Firefox, and Opera - but primarily with IE as it is the main browser I use. I don't use Edge.

I've found that at times CCleaner will skip cookie scans if I try to scan immediately after closing whichever browser(s) I've been using. I now give them a little time and the scan completes correctly -
though at times a quick subsequent scan will find additional items to clean - usually from Firefox when I've had it and IE open at the same time. So, I now sometimes do a 2nd scan after the first scan completes.


I've opened Task Manager to observe how long it takes IE to close after being clicked to close. Sometimes it's 45 seconds or so before it disappears from Task Manager. Maybe the same is occurring with Edge.

Jim.-

  

Alert Printer-friendly copy | | Top

        
eileenTue Sep-19-17 03:32 PM
Member since Feb 10th 2006
237 posts
Click to view this author's profileClick to add this author to your buddy list
#6. "RE: CCleaner hacked"
In response to Pcqandaman (Reply # 4)
Tue Sep-19-17 03:41 PM by eileen

          

Both my laptops are 64bit they where affected. I would use Ccleaner often to do a clean up.I was using the free version. I would update manually on a regular basis.

  

Alert Printer-friendly copy | | Top

            
jbmcmillanWed Sep-20-17 02:13 AM
Member since Jul 17th 2002
6319 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#8. "RE: CCleaner hacked"
In response to eileen (Reply # 6)


          

Quote:
QUOTE:
Both my laptops are 64bit they where affected. I would use Ccleaner often to do a clean up.I was using the free version. I would update manually on a regular basis.


They were talking about the 32 bit installer which also works on 64 bit systems. So you probably downloaded the 32 bit version which is the one that was infected.

  

Alert Printer-friendly copy | | Top

bobboWed Sep-20-17 05:14 AM
Charter member
7376 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#9. "RE: CCleaner hacked"
In response to Pcqandaman (Reply # 0)


  

          

This evening, a popup for Cccleaner update appeared and I clicked on it, but remembered this post. I went to the CCleaner website and checked to find that I had the latest version. Later, after updating and running Malwarebytes, I got the following result.




Attachment #1, (txt file)
Attachment #2, (jpg file)

  

Alert Printer-friendly copy | | Top

    
KJTWed Sep-20-17 01:05 PM
Charter member
15901 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#10. "RE: CCleaner hacked"
In response to bobbo (Reply # 9)


  

          

That's interesting. What version of Ccleaner do you have? I have 5.34.6207 (64bit) which the Piriform website indicates is the latest version - and Mbam hasn't found anything. I have the same Mbam version that you show.

Are you sure that you had scanned/cleaned Ccleaner prior to installing the latest version?

Jim.

  

Alert Printer-friendly copy | | Top

        
bobboWed Sep-20-17 09:51 PM
Charter member
7376 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#11. "RE: CCleaner hacked"
In response to KJT (Reply # 10)


  

          

I have V5.35.6210 64 bit, downloaded from Piriform site. I had thought to uninstall, but the site says I have the latest version, hopefully its the unscathed proper app.

  

Alert Printer-friendly copy | | Top

Bob GThu Sep-21-17 03:20 AM
Charter member
7115 posts
Click to send email to this authorClick to view this author's profileClick to add this author to your buddy list
#12. "RE: CCleaner hacked"
In response to Pcqandaman (Reply # 0)


  

          

http://www.reuters.com/article/us-security-avast/hackers-used-avasts-ccleaner-breach-to-attack-technology-companies-idUSKCN1BW04K?il=0

  

Alert Printer-friendly copy | | Top

jeaThu Sep-21-17 05:02 AM
Charter member
1866 posts
Click to view this author's profileClick to add this author to your buddy list
#13. "RE: CCleaner hacked"
In response to Pcqandaman (Reply # 0)


          

I use an old version of CC (5.26 5937) Is it OK to keep using?
I do not see the need to update (unless of course you have the bad version).

  

Alert Printer-friendly copy | | Top

    
PcqandamanFri Sep-22-17 11:14 AM
Member since Nov 18th 2002
2184 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#14. "RE: CCleaner hacked"
In response to jea (Reply # 13)


          

Interesting details about the hack.
I'm surprised they have given out so much technical detail.
http://www.piriform.com/news/blog/2017/9/18/security-notification-for-ccleaner-v5336162-and-ccleaner-cloud-v1073191-for-32-bit-windows-users

  

Alert Printer-friendly copy | | Top

Top The PC Q&A Forum The Computer Forum topic #564500 Previous topic | Next topic
Powered by DCForum+ Version 1.27
Copyright 1997-2003 DCScripts.com
Home
Links
About PCQandA
Link To Us
Support PCQandA
Privacy Policy
In Memoriam
Acceptable Use Policy

Have a question or problem regarding this forum? Check here for the answer.