[Announcement: Security Notification for CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191]

As long as the 2nd stage virus (and any other viruses it downloaded later) didn't delete that key and/or itself before you checked.

 

 

Didn't run ccleaner v5.33.0.6162 at any point = not infected

Installed but didn't run ccleaner v5.33.0.6162 before September 16th = not infected (this assumes the installed doesn't run the main exe files at all after installing)

Installed and ran ccleaner v5.33.0.6162 before September 16th, but firewall rules denied CCleaner.exe all network access = not infected

Installed and ran ccleaner v5.33.0.6162 after September 15th = not infected (malware server disabled)

 

64-bit users:

Installed and ran ccleaner v5.33.0.6162 before September 16th, but did not use the skip User Account Control (UAC) feature and did not run the 32-bit main exe = not infected

Installed and ran ccleaner v5.33.0.6162 before September 16th, and did use the skip User Account Control (UAC) feature OR ran the 32-bit main exe = status unclear (see note A1)

Note A1: If the tampered 32-bit main exe file (CCleaner.exe) exits after running the untampered 64-bit main exe = not infected

Note A1: If the tampered 32-bit main exe file (CCleaner.exe) persists while waiting for the 10 minute delay after passing control to the untampered 64-bit main exe = Stage 2 possible

 

32-bit users:

Installed and ran ccleaner v5.33.0.6162 before September 16th = Stage 2 possible

 

 

If Stage 2 possible:

The attackers probably decided not to infect your computer. They had the option to infect you, but they passed. (this info comes from the attacker's captured server, info could have been tampered with)

 

For those few machines that were passed stage 2, this malware could have taken any action(s), including downloading more malware, stealing info, and deleting all traces of infection.

I read an article that states a 32 bit and 64 bit trojan existed. This is what has confused me as it was stated it only affected 32 bit machines yet it says something different if a 64 bit existed. Was this 64 bit trojan for the second stage?

[Announcement: Security Notification for CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191]

With all these qurstions surely it would make more sense for Piriform/a vast to bring out a standalone tool. It would at least make people feel safer

[Announcement: Security Notification for CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191]

One thing I found today confused me on an article 

https://www.ghacks.net/2017/09/21/ccleaner-malware-second-payload-discovered/

 

 

The stage 2 installer is GeeSetup_x86.dll. It checks the version of the operating system, and plants a 32-bit or 64-bit version of the trojan on the system based on the check. Read also: BitLocker bypass on Windows 10 through upgrades The 32-bit trojan is TSMSISrv.dll, the 64-bit trojan is EFACli64.dll.

 

This seems to state a 64-bit trojan exists which contradicts the fact that it only infected 32-bit OS's

[Registry cleaning, it is ok to use?]

You never used registry cleaning or what you think? I think there is no benefit clean registry, only risk. I didn't know that in past. My mistake. But PC run just fine even cleaned by CCleaner.

Basically use it at your own risk. I like you have used ccleaner's registry cleaner for years without running into any issues but it's best to check what you are deleting and do backups, that way if anything does go wrong you should be okay.

[File Finder improvements in v4.x]

Yeah this would be good. I'm a bit wary about using duplicate finders as I've heard sometimes things that aren't duplicates appear to be duplicates in the program so something that could help you make sure they where exactly the same files would be great. On the name, I was confused at first when I saw File Finder as it sounds like a general search tool rather than a duplicate finder.

[CCleaner Free and Professional, what is the difference?]

Current Differences (Winapp will you update the FAQ post you made)

1) Paid Support

2) Ability to Clean multiple profiles, or with the correct permissions Profiles that are not ones own on a single machine.

3) Monitoring Capabilities: Background operation¹ which will clean browser and/or system clean at regular intervals/when a browser is closed.

 

¹I am unsure if it is a background operation or a task as I've yet to test this new (as of Ccleaner 4.x) feature

 

I think they need a better explanation on the pro page about this. I've often seen the make your computer more secure but no explanation on how.

[CCleaner Pro]

While I use the free version I think it's good that a lot of the pro features aren't necessary ones. For example auto update is a handy feature but free users can simply update manually with ease. 4.0 just released offers browser monitoring to so you can clear your history, caches on close up, free disk space automatically etc. - these are handy but free users can do these easily to manually.

 

What I mean to say is Piriform could easily be greedy and take actual features e.g. the new file duplicate finder and only include them on the pro version, but they don't which to me is great.

[CCleaner v4]

Is it safe to remove most duplicate files, zero byte files etc?

[CCleaner Metro?]

I assume you do not mean add/remove but the Tools -> Uninstall capability.

 

Are you sure that CCleaner is unable to support metro apps ?

It seems very unlikely to me that CCleaner would specifically exclude anything that can be removed via Windows native

"Control Panel\All Control Panel Items\Programs and Features"

Perhaps you could post a screen shot showing a couple of examples of what can be removed via the control panel which CCleaner ignores.

 

Personally I detest the look and thought of Metro,

but I will defend to the death the right of anyone to UNinstall such a monstrosity

 

Side note - Microsoft Modern UI is a future distortion of truth.

It will NOT be Modern when the next "in thing" is hexagonal tiles instead of square tiles - patent application's pending

 

See I quite like Modern UI. I hated the idea of not having a classic start menu to but after using Windows 8 for a few days I got used to metro and I'm glad that they removed the start menu as it made me have to learn the new system which isn't hard and is quite nice and sleek - if the start menu was there the problem is that I'd probably use it all the time and not bother learning the new system properly.

 

The big problem however is that there are too many apps without Modern UI versions that at the moment it makes Windows 8 feel slightly pointless although nice and handy. I wonder if more developers will design apps for it or if the opposite happens, if Windows 9 will be a massive step backwards.

 

I believe Metro apps have to be uninstalled through the windows store, but I may be mistaken.

 

Seem to be able to uninstall them via the metro start part but maybe that's linked with the store preventing others applications from doing so to.

[How long will it take for a single registry "fix" to backfire?]

This might be off topic, but I've always wondered why developers don't make applications better uninstallation wise. If uninstalling a product removed all registry keys that where no longer needed, doing their job, then people wouldn't need to use registry cleaners as much thus being safer. Is it something that is very tricky to do?

[CCleaner Metro?]

Hi there. I was wondering if there was any plans to create a metro (now modern UI) version of CCleaner. I know a lot of people may dislike this idea, but the ability to switch between normal and metro (similar to what browsers like IE/Chrome do) could avoid anyone getting annoyed. Also could the add/remove programs part of CCleaner support metro apps?

 

I know from searching the forum a few are not keen on Windows 8. I think that metro actually looks very sleek, the problem is that there are lots of non metro apps and switching back and forth between metro and the desktop isn't very seamless so hoping more developers will support it eventually.

 

Thanks

[some ideas]

I have had a few ideas - some I have seen used on other similar products

 

(1) Some type of review system for start up entries/programs - the idea is people can rate a program somehow e.g. a star system etc. Users could review the programs. This way if someone see's an entry in either the program installer area or the start up and they are not sure they can see if anyone has rated it and view reviews if any. This could help when people have stuff such as spyware but don't realise they have it and are scared to just remove it.

 

(2) A file duplicate finder - I have seen some utilities that also offer a way of finding any duplicates you might have on your pc and allowing you to delete them if need be - this might be handy to have in the tools area however as it is something I haven't used really I can't comment on their reliably.

 

Thanks.

[Chrome Add-ons?]

Chrome and Firefox have protections that prevent outside applications configuring or adding extensions. Removing extensions would be possible; however.

 

Thanks for your reply. I wasn't too sure on the differences with IE's add-ons over other browsers. Do you think CCleaner may add remove features eventually then?

[Chrome Add-ons?]

Hi all

 

I am new to this forum but have been using CCleaner for a while. I used to TuneUp Utilities which was costly and began to slow my pc. CCleaner seems to do everything that the paid for applications do and does it brilliantly.

 

I have noticed the two great new start up features - for Internet Explorer add-ons and for scheduled tasks (which I think is really handy as a lot of people don't realise the amount of stuff set up on there e.g. flash updates).

 

I just wondered if there was any plans to add additional browser add-ons or would this be tricky? I know Internet Explorer is still widely used but Chrome and Firefox these days are always pulling new customers.

 

Thanks