Deleted (forgot to quite reply)
22 hours ago, nikki605 said:<div class="ipsQuote_contents"> <p> I found 2 more instances of the ccupdate.exe file by looking in my firewall settings: </p> <p> C:\Users\[username]\AppData\Local\Temp </p> <p> C:\Windows\Temp </p> <p> I deleted both files and removed the entries from the firewall list. </p> </div>
FWIW after CCleaner updated to 5.46 I also had these two files in "C:\Windows\Temp":
ccCB5A.tmp (file name is probably random) = SHA-256: 789ff77fdc292246a1956d314e277f497391162f3be4b1be3913bc20c6e7ddb7
ccupdate.exe = SHA-256: 8202b4a2e3a34e799324e97ed13610be07f2b01ae9bd11898fe1d748ea9d04c8
8 hours ago, crizal said:<div class="ipsQuote_contents"> <p> Hate to say it but Avast has been digging CCleaner's grave ever since they took over Piriform. </p> </div>
I knew that would eventually happen, didn't even take a year.
I only come on here a few times per week really to lurk, rarely post anymore, and see how much worse things are getting.
Hi,
I'm confirming 2 tasks in task sheduler, but my v5.38 slim never updated itself to v5.46, maybe as auto-update remained always unticked. Nonethless it phoned home, by-passing firewall rules (as it has to do) until I disabled the 1st of the 2 tasks (CCleaner.update) I wasn't aware of. Such a task seems to be more regular update performing than a so called emergency one I never found anywhere. Could that sheduled "call back home" task be the previous mentioned "heartbeat" ? Some advice welcome. I did never have Avast. Thanks.
3 hours ago, mrdimly said:<div class="ipsQuote_contents"> <p> Such a task seems to be more regular update performing than a so called emergency one I never found anywhere. Could that sheduled "call back home" task be the previous mentioned "heartbeat" ? </p> </div>
That "CCUpdate.exe" task is the emergency updater and was added in 5.36. It is used to update CCleaner regardless of your auto update settings.
From the v 5.36 release notes ...
Quote<div class="ipsQuote_contents"> <p> <strong>Emergency Updater</strong> </p> <p> Following the security incident in September we have taken steps to improve our security across the board. Within CCleaner, this means the addition of an 'Emergency Updater' security feature that allows us to force a software update in a worse-case scenario. </p> </div>
We don't know yet what criteria is used to determine who receives the forced update to 5.46 (hopefully someone from PiriForm will be able to tell us although we do know that it's no longer used just for "worst-case scenarios") but as long as you keep that "CCleaner Update" task disabled you probably won't be updated.
Hi there,
A few points so we’ll try and answer them all in one go.
All versions of CCleaner have been GDPR-compliant since 5.43.6522 (released 25 May 2018). While we weren’t legally required to update all our users to GDPR-compliant versions, we have the means to do this and we felt it was right that all our users have access to the same set of privacy controls.
Version 5.46 gives all users the best possible control over their data settings and brings everyone up to date with important stability fixes that prevent the loss of personal settings in Chrome and the potential for broken graphics drivers after a Windows update.
While we’re not planning on carrying out an update like this soon, we have taken your feedback on board and are working on a better solution with greater transparancy and that provides our users with more control.
Thanks
13 minutes ago, Ben Piriform said:<div class="ipsQuote_contents"> <p> All versions of CCleaner have been GDPR-compliant since 5.43.6522 (released 25 May 2018). While we weren’t legally required to update all our users to GDPR-compliant versions, we have the means to do this and we felt it was right that all our users have access to the same set of privacy controls. </p> <p> Version 5.46 gives all users the best possible control over their data settings and brings everyone up to date with important stability fixes that prevent the loss of personal settings in Chrome and the potential for broken graphics drivers after a Windows update. </p> </div>
Thanks for the additional info Ben.
One more quick question ... I was on 5.43 and was auto updated to 5.46. You mentioned that 5.43 was already GDPR compliant so I'm just wondering why the 5.43 clients are also being auto-updated? Is it to make sure we have the new privacy controls, etc? Basically I just want to know for sure that 5.43 was also included in the auto-update.
Thanks!
Sorry Ben but 5.46 is still not fully GDPR compliant.
Would you like to know more?
(A nod to the film Starship Troopers there)
1 hour ago, Ben Piriform said:<div class="ipsQuote_contents"> <p> While we weren’t legally required to update all our users to GDPR-compliant versions, we have the means to do this and <u>we felt it was right that all our users have access to the same set of privacy controls.</u> </p> </div>
..even if it meant invading their privacy to do it?
How difficult is it to just have a dialog box pop-up via CCleaner asking the user Yes or No to download the newest version? Allot of software goes that route and if they select No just honour the selection. It's very antivirus-like to just download and replace a version, but then again CCleaner is owned by an antivirus company.
On 9/14/2018 at 09:38, Andavari said:<div class="ipsQuote_contents"> <p> How difficult is it to just have a dialog box pop-up via CCleaner asking the user Yes or No to download the newest version? </p> </div>
Some sort of notification is essential, especially when the user specifically configured CCleaner not to update.
I had the free/standard version (5.43) installed and had update checking disabled so naturally when I noticed that it updated my initial concern was that it was something malicious.
sorry Ben but I think I may have missed some important point with GDPR....
I thought your legal requirement was to provide a compliant version NOT to force that update on users.
Just because you have the means, gives you no authority to abuse that trust and do the upgrade without permission, warning or consent.
I have the means to drive my car 200kph down the highway - doesn't make it legal.
Please correct me where I wrong here.
Deleted.
Can anyone please confirm that they're free version of CCleaner was auto-updated without having Avast installed? It sounds like there were a few but confirmation would be appreciated.
(I did not have Avast installed but was auto-updated from 5.43 (the free/standard version) to 5.46 on September 10)
Thanks!
31 minutes ago, Pamperlang said:<div class="ipsQuote_contents"> <p> Can anyone please confirm that they're <strong>free</strong> version of CCleaner was auto-updated <strong>without </strong>having Avast installed? It sounds like there were a few but confirmation would be appreciated. </p> <p> (I did not have Avast installed but was auto-updated from 5.43 (the <strong>free/standard</strong> version) to 5.46 on September 10) </p> <p> Thanks! </p> </div>
Doesn't matter anymore. After reading Ben's reply, from my understanding, all versions except portable should be considered untrustworthy.
37 minutes ago, Pamperlang said:<div class="ipsQuote_contents"> <p> Can anyone please confirm that they're <strong>free</strong> version of CCleaner was auto-updated <strong>without </strong>having Avast installed? It sounds like there were a few but confirmation would be appreciated. </p> <p> (I did not have Avast installed but was auto-updated from 5.43 (the <strong>free/standard</strong> version) to 5.46 on September 10) </p> <p> Thanks! </p> </div>
Yes the devs sent out a version through the "emergency" updater. Some of us are a Bit unhappy about that. It shouldn't happen on a regular basis but on the other hand this shouldn't have been an emergency to upgrade to .46 so make of that as you want.
19 minutes ago, Nergal said:<div class="ipsQuote_contents"> <p> Yes the devs sent out a version through the "emergency" updater. </p> </div>
Thanks for confirming Nergal!
I was pretty sure I was updated via "CCUpdate.exe" (emergency updater) but since I had the free version of CCleaner installed (I always thought only the paid versions get silent auto-updates) and did NOT have Avast installed (I use MBAM) I couldn't help but be a little worried about malware and such
Thanks again!
On 15/09/2018 at 00:20, mta said:<div class="ipsQuote_contents"> <p> sorry Ben but I think I may have missed some important point with GDPR.... </p> <p> I thought your legal requirement was to provide a compliant version NOT to force that update on users. Just because you have the means, gives you no authority to abuse that trust and do the upgrade without permission, warning or consent. I have the means to drive my car 200kph down the highway - doesn't make it legal. </p> <p> Please correct me where I wrong here. </p> </div>
Well GDPR regulates the collection, storage, and use of data/information.
So while forcing an update on people is not good practice it's not actually covered by GDPR.
If that update then collects any information/data then that is covered by GDPR.
The 5.46 update is still not GDPR compliant, because the 'privacy' tickbox is still pre-ticked after a new install.
GDPR clearly states that tickboxes like this <u>should not</u> be pre-ticked.
As I have been told in the past that Piriform being a large organisation knows better than I do, I'll give a couple of quotes from the ICO website to back that up:
Quote<div class="ipsQuote_contents"> <p> The GDPR does not specifically ban opt-out boxes but they are essentially the same as <strong>pre-ticked boxes, which are banned</strong>. Both methods bundle up consent with other matters by default, and then rely to some extent on inactivity. They also increase the likelihood of confusion and ambiguity. </p> </div>
Right at the bottom of the page gives (among a long list of invalid consent methods):
Quote<div class="ipsQuote_contents"> <p> In summary, you do not have valid consent if any of the following apply: </p> <ul><li> <strong> you use pre-ticked opt-in boxes or other methods of default consent;</strong> </li> </ul><p> </p> </div>
I am really confused now. I got my Windows 7 laptop out this afternoon (normally use Windows 10 desktop). I hardly ever use the laptop except for with my scanner but it has wi-fi so it connects to the internet and updates Windows and Windows Defender as soon as it's switched on. It hasn't been online or switched on for months.
I now find I've got the latest CCleaner on there - and I can't see any option to switch off updates to this 5.46 version.
My laptop is underpowered and so I like to have as little running on it as possible - I'm just a little bit annoyed that I can't find a way to switch off updates on this version which I didn't want anyway - CCleaner keeps stopping responding after a couple of tabs.
It looks like I'll have to uninstall and reinstall an older version where I CAN switch off updates. This is totally out of order. I can't believe the people who develop this product think this is anything like acceptable.
8 minutes ago, abc10 said:<div class="ipsQuote_contents"> <p> I am really confused now. I got my Windows 7 laptop out this afternoon (normally use Windows 10 desktop). I hardly ever use the laptop except for with my scanner but it has wi-fi so it connects to the internet and updates Windows and Windows Defender as soon as it's switched on. It hasn't been online or switched on for months. </p> </div>
You were probably auto-updated via the update task in Task Scheduler (CCupdate.exe) soon after you switched the laptop on. It appears that most people who is not on the latest version (5.46) is silently getting updated to 5.46 through CCupdate.exe.