Jump to content
CCleaner Community Forums


Experienced Members
  • Content Count

  • Joined

  • Last visited

Posts posted by pompste

  1. MD5: ef694b89ad7addb9a16bb6f26f1efaf7


    CCleaner.exe (32-bit 5.33.6162)

    SHA-256: 6F7840C77F99049D788155C1351E1560B62B8AD18AD0E9ADDA8218B9F432F0A9

    Signing date

    8/3/2017 10:42 AM


    By "2 active Trojans" you mean 2 left over registry traces? That hardly counts. What counts is the stage/phase 2 download that the attacker only did on some machines (targeted attack) that no-one is talking about or has an good sample of. No idea what it does or if it exists.


    Right--2 leftover registry Trojans---Malwarebytes listed them as "Trojans".

    I`ll be running a deep scan real soon---hoping it does`nt find anymore crap.

  2. Hi all,


    The only version affected is the 32-bit binary of CCleaner v5.33.6162. It was the application that was the issue, not the installer. If you’re using a 64-bit version of CCleaner, then you’re unaffected although we recommend updating to the latest version. There is also no effect to the Mac or Android versions.


    At this time, we won’t be releasing a detection tool as the issue was in CCleaner itself, so uninstalling or updating the software removes the risk. You can download directly for free from here: www.piriform.com/ccleaner/download/standard


    For those interested, the MD5 hash of the affected CCleaner.exe is: ef694b89ad7addb9a16bb6f26f1efaf7


    Thanks - Tom


    After installing CC V 5.35 I ran a Malwarebytes scan and it found 2 Floxit trojans in 2 registry keys named Agoma. I removed them quick then ran another scan to make sure it got rid of those.

    So it seems even though the new version may remove the threat, version 5.33 leaves behind at least 2 active Trojans.

    It found those on a quick scan--there may be more when I run a deep scan.

    Anyone that had version 5.33 installed should really run a Malwarebytes scan like now.

  • Create New...