-
Posts
2 -
Joined
-
Last visited
Posts posted by Stray_Trons
-
-
Not sure what is going on but Piriform may have gotten hacked again. My McAfee AV hit on a Tojan in CCleaner last night. This morning I woke up to a missing CCleaner and a popup telling me "The product is not permitted for use in your current location". Gone, done & dusted. Not a trace of CCleaner to be found on the machine.
So I figure something sent wahoonie shaped and I'll need to reinstall CCleaner, right after I run a fill AV scan to see if something else did not get past my firewalls. As soon as I load the Piriform page my AV pops up again and I get a warning:
10/7/2018 11:13:54 AM Deleted [REDACTED]C:\Program Files\Internet Explorer\iexplore.exe C:\Users\[REDACTED]\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\W147MR22\addthis_widget[1].js JS/Faceliker.ag (Trojan) 64e780aad3077cffdb6279619950440f (MD5)
McAfee AV locks up the page like it should and I'm left scratching my head. So can someone (Piriform...) tell me just what the bloody hell is going on?
McAfee Bug: Piriform Website causes AV Alert for JV/Faceliker.ag Trojan
in Windows Security
Posted
The website is https://www.ccleaner.com/
My AV is continually warning about the faceliker.ag on each attempt to reach that page.
There is a possibility that there is a Facebook add-in buried in the html. It is possibly malicious, but I'm not taking a chance. I'll be contacting Piriform Corporate Tuesday AM to discuss this.
The info on faceliker.ag is here: https://securingtomorrow.mcafee.com/mcafee-labs/mcafee-labs-faceliker-surge-manipulates-facebook-likes-promote-news-content/