Ccleaner update installed on my PC without my consent.

Had installed old version 5.73 and every update setting switched off since long time.

Today somehow there was installed latest version 6.11 without any prompt / consent. After booting the pc, a full screen CCleaner notification about it appeared.

Why is that?

There is a system in place to periodically update outdated/obsolete versions of CCleaner.

CCleaner versions 5.## have reached End-of-Life and so are currently being updated to the latest version, v6.11.

https://support.piriform.com/hc/en-us/articles/13760826790669-End-of-Life-of-CCleaner-for-Windows-v5

In particular you should note that CCleaner versions below v5.92 no longer clear cookies effectively, because the major browsers have changed how they handle and store cookies.

You need to keep your CCleaner up to date for it to be effective. Browsers, apps, and Windows change all the time so the cleaning has to change to keep up.

As you were using a very old version of CCleaner you should have been getting notifications that this update would happen soon.

(I have not seen the notifications myself but believe that they would have also told you how to prevent the automatic update <em>if you really wanted to</em>).

This week versions 5.36 to 5.73 that are still in use will be automatically updated to v6.11.

Next week it is intended that versions 5.74 to 6.0 will also be automatically updated to v6.11</strong>

As noted - These automatic updates of outdated versions can be prevented by more advanced users, who realise that by doing so their old CCleaner version is unsupported and will not be cleaning things properly.

PS. As moderators we were last week given a 'heads up' that these updates would be happening this week and next.

Quote
<div class="ipsQuote_contents ipsClearfix" data-gramm="false">
	<p>
		After several months of alerts to impacted users, next week this target range will be extended to CCleaner 5.36-5.73 and then up to CCleaner 6.00 the week afterwards to help out those who remain stuck on outdated versions and have not been able to update themselves.
	</p>
</div>

There was no notification that an update would happen.

All automatic update settings in CCleaner were switched off - due to reasons.

Unacceptable. Uninstalled.

There had been several notifications of this, although if you'd blocked CCleaner notifications or hadn't used CCleaner for the past year or so you may not have seen them. I would assume the latter if you had not noticed that your copy of CCleaner had not been working for the past 16 months or so. If the update reminded you that you may have old software running on your computer that you are no longer using, I hope you took the opportunity to use CCleaner's software removal tool (Tools > Uninstall) to remove any other unused software at the same time.

CCleaner has a monthly release cycle to keep up to date with changes in where operating systems, browsers, etc store their temp files. Some of our users may have very good reasons not prefer not to be updated every month and prefer to manually update less frequently and at a time of their choosing. That's great for us if some people do that - saves us money. But once you get to 3-6 months out of date you're bound to start seeing some performance degradation. Getting as far as 12 months out of date with any software and you've probably got yourself a security issue.

If you had been actively using a copy of CCleaner that was 2.5 years out of date, I would encourage you to try running a cleanup using the latest version - you'll find that it removes substantially more junk.

As already explained, there was absolutely no notification of this.

Automatically installing updates without prior notificaton and without consent and when installing updates it is clearly switched off in CCleaner is totally unacceptable.

And thanks, I already have removed the junk.

If you are afraid that your software could break systems, simply disable it. But do not play nanny games on your users.

Absolutely unacceptable to do these forced updates and also display a full screen for Chrome installation...

If i think about it, i guess this whole "to your security benefit" bull, is just a gimmick to hack install some Chrome browsers on people's devices.

I know you need money and try to sell your Pro version, but still not cool what u doing. Maybe Google gives you enough to cover the loses of potential pro users.

This was the one piece of software that i would recommend to anyone and installed on every pc i get my hands on, but i guess bleachbit will do the job as well.

Forcing updates is unacceptable.

What I did is uninstall it, reinstall an older version, start it and turn off autoupdates immediately.

Then I disabled the ccleaner_emergency_update task from startup and deleted the ccupdate611_free.exe file from the installation folder in Program Files/CCleaner.

That did it for now.

On 12/05/2023 at 13:12, pio said:
<div class="ipsQuote_contents ipsClearfix" data-gramm="false">
	<p>
		Absolutely unacceptable to do these forced updates
	</p>
</div>

If you don't want CCleaner to automatically update, you can switch off automatic updates. This only gets overridden for emergency security updates or (as is presently the case) the End of Life of CCleaner 5.x - the likes of which you wouldn't be seeing again until about a year after the release of CCleaner 7 (which itself is probably at least a year away).

On 13/05/2023 at 00:07, umarthdc said:
<div class="ipsQuote_contents ipsClearfix" data-gramm="false">
	<p>
		What I did is uninstall it, reinstall an older version, start it and turn off autoupdates immediately.
	</p>

	<p style="background-color:transparent;">
		Then I disabled the ccleaner_emergency_update task from startup
	</p>
</div>

Note that if the older version you installed was CCleaner 5.x then yes you have prevented any updates with those steps. Although a) if you're on CCleaner 5.88 or below, you'll need to be using a third party source of cleaning rules such as winapp2 for it to keep functioning and b) given that CCleaner 5.x has been End of Lifed, you may start to see some unhandled errors and bits of the infrastructure get switched off.

If the older version that you installed was CCleaner 6.0x then you weren't going to see an override update again until mid-2025 at the earliest, so disabling or removing the emergency updater probably wasn't necessary in that regard. Unless there's a Windows vulnerability that we need to do a security update for between now and then - in which case you should keep an eye on the https://www.ccleaner.com/ccleaner/version-history after each release to see if need to do a prompt manual update.

On 12/05/2023 at 13:12, pio said:
<div class="ipsQuote_contents ipsClearfix" data-gramm="false">
	<p>
		Absolutely unacceptable to do these forced updates and also display a full screen for Chrome installation...
	</p>
</div>

If you haven't used CCleaner for a while, you may have missed the news that you can switch off the "this update brought to you by" messages under Options > Privacy > Offers in CCleaner.

On 12/05/2023 at 13:12, pio said:
<div class="ipsQuote_contents ipsClearfix" data-gramm="false">
	<p>
		If i think about it, i guess this whole "to your security benefit" bull, is just a gimmick to hack install some Chrome browsers on people's devices.
	</p>
</div>

Not really. The 2010-2019 approach of forcing everyone to do manual updates every month was far more lucrative - since users had to navigate through multiple "buy me" screens on the website and then view website banner ads in order to get their free update, which would then show a small, banner sized offer for a browser or AV in the installer that some folks would accidentally accept - unless you bought CCleaner Professional that included the automatic updates as a paid feature. With automatic updates part of the free version since 2020 those steps are removed, the updates are optional, as are the sponsored messages, and the sponsored offers can't be missed and accidentally accepted any more, eg:

image.png

Found this thread via Google

I had rebooted the PC, noticed that desktop was taking too long to come up, when it did, I was greeted with this CCleaner Update screen.

I was astonished. I had all updates turned off. I had CCleaner.exe, CCleaner64.exe, CCUpdate.exe, and even uninst.exe blocked in Windows Firewall... both inbound and outbound.

Yet somehow, you were able to CIRCUMVENT Windows Firewall, and run something on my system, without my awareness or permission, to update the copy of the program that I SPECIFICALLY WANTED to be on my system.

The is 100% COMPLETELY UNACCEPTABLE.

What if a bad actor at your company or an unauthorized user gets the ability to do what you just did, to run ANYTHING that they wanted? This is a MAJOR SECURITY RISK!!

Besides that, you don't seem to be getting it. It DOES NOT MATTER if it's "End of Life". OBVIOUSLY, if I needed to contact Piriform for support or anything like that, I would NOT EXPECT ANY for an older version. I would in fact ONLY EXPECT IT for the most recent version, so then ***I MYSELF*** would choose whether or not to update it.

This is **MY** hardware, it's **MY** Internet connection, **I PAID** for them, and **I** am the user, so therefore, **I** and **ONLY I** get to decide what runs on it or not, what gets changed or not, or what gets updated or not.

Users such as myself who understand what "User" means have enough problems constantly fighting with software providers who have this "software as a service" mentality who want to take control away from the user, including WINDOWS ITSELF, to the point of having to spend HOURS to DAYS changing and modifying the operating system to make sure that it NEVER does anything the USER does not want it to without the user's knowledge or consent.

I had always thought of CCleaner as a very pro user application, but that hasn't been the case for a while, and now we all know that it is VERY MUCH not the case.

Because Piriform somehow CIRCUMVENTED Windows Firewall and run something without any knowledge or awareness from the user, I would classify this software as a MAJOR SECURITY RISK from this point forward. I will have to find something else to use.

The only thing I can *think* of, is that there is a "CCleaner Update" task in Task Scheduler that is set to run "at system startup", and I *may* have left this enabled... so perhaps Windows Firewall rules don't take effect until *after* scheduled tasks run that are set to run "at system startup". I did have another computer where I had the same executables blocked for both Inbound and Outbound in Windows Firewall, **and** the above mentioned Task Scheduler rule disabled. When I restarted that computer, the CCleaner auto update didn't happen. But, I can't be certain that this is what happened on the first computer, since it's now too late as CCleaner updated without permission, without prompting, and without informing.

Automatic updates must be opt-in only.

Software must NEVER update itself without the user's consent, for security reasons. Any fully automatic updates that I haven't priorly approved, I would consider NOT secure, regardless of your impending endless explanation why I should consider it secure anyway. You cannot convince me.

ME and ONLY ME, decide what goes on my computer.

In addition, remember to delete or disable the CCleaner update task in Windows Task Scheduler. Check out how AskVG at https://www.askvg.com/tip-disable-automatic-updates-for-software-versions-in-ccleaner/ or Bleeping Computer at https://www.bleepingcomputer.com/news/software/ccleaner-disregarding-settings-and-forcing-update-to-latest-546-version/. I searched "CCleaner forces update" on DuckDuckGo.

I actually deleted CCleaner 5.65 because of this. I am using cleanmgr.exe in Win 7 Pro and run as Administrator. I also use the cleaner under my paid Norton360 subscription. Do NOT use 'free' security software. Do NOT save logins/passwords. Only allow auto updates on your PAID security software. Important, stay away from Google and MS where possible. In private browsing with Firefox (I use an older version,) or a browser window with auto history, cookie, and tracker cleaning. Oh, and use an Ad blocker of some sort. Equals happy computing.

The entire freeware universe is becoming nothing but tracking cookies, data selling, and intrusive reporting back to the Mother ship. Also, I can still use my old Glary with the nag popup.

"Automatic updates must be opt-in only.

Software must NEVER update itself without the user's consent, for security reasons. Any fully automatic updates that I haven't priorly approved, I would consider NOT secure, regardless of your impending endless explanation why I should consider it secure anyway. You cannot convince me.

ME and ONLY ME, decide what goes on my computer."

I agree completely. This is a totally abusive business practice. And by doing so, these guys became just like Microsoft: "We know what you need better than you do"... Which is absolute BS!!

And what do you expect Piriform employees to say? They'll say that everything is ok, "leave everything to us and don't worry"... Microsoft style... They'll say that the previous versions of CCleaner have become obsolete so you really need the new version. This is not true. They just want you to install the new version so that they can sell you "new features" and take your money. But: 1) the new versions are heavy on the system, because they have sub-programs running in the background all the time, monitoring all your activity in the computer, thus making the system slow and unstable, and also it'll make your start up time much longer, because those sub-programs will make the computer take a long time to boot... and 2) I have the 5.40 version of the program installed in my computer, and it is much lighter, it doesn't mess with the start up process, and it only does what I need it to do, which is to get rid of the temporary files, clean the registry and keep an eye on the programs that start up with the computer. And I don't need anything else from this program, so I certainly don't need the new versions. And the 5.40 runs perfectly fine and does what I want it to do, so it's not true at all that it's obsolete. The cookies? I have never cared about the cookies because they are not executables, so they can't do any harm.

By the way, do you know how they sneak into your computer even if you expressly tell the program not to install updates? Do you know how they do it? I just realized how. Right after booting, suddenly the new version was already installed! How come, if I have a firewall, and I have blocked the CCleaner from having access to the internet? You know how they do it? They sneak in during boot time... because the firewall has not loaded yet... that's when they sneak in!! The solution? Disconnect the computer from the internet during boot time. Then, make sure that the firewall is fully loaded. Then, and only then, connect the computer to the internet. Of course, the firewall must be on all the time. They cannot sneak in anymore. They wouldn't tell you this. It's not convenient for them to tell you this. Problem solved.

On 06/09/2024 at 03:07, positron7 said:
<div class="ipsQuote_contents ipsClearfix" data-gramm="false">
	<p>
		 Do you think I should undo the work done by other experts at Malware etc by Restoring with System Image?
	</p>

	<p>
		In fact they closed my string. I am wondering if they think I am fabricating this. I am not.
	</p>
</div>

So you already had a support/malware thread open at Malwarebytes and one of the experts was working with you.

Did you not think that you should have told us that before?

When working with one of the experts there you should not be making any changes to your computer other than what they ask/instruct.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

I have now found your thread at Malwarebytes, which you started on 27th August only 3 days before you started posting here.


<a href="https://forums.malwarebytes.com/topic/316328-computer-seems-to-always-change-malware/#comment-1657521" ipsnoembed="true" rel="external nofollow">https://forums.malwarebytes.com/topic/316328-computer-seems-to-always-change-malware/#comment-1657521</a>

I see that JSntgRvr was working with you. (And AdvancedSetup also chimed in at one point).

Your thread at Malwarbytes has now been closed as you say.

Probably simply because it is 4 days since the last post was made there on Monday, that is standard practice with those help threads and they get closed if there have been no posts for 4 days.


Possibly though it was closed because you expressed your gratitude for their help, and as far as they were concerened the job was complete.

But also possibly because they had noticed that you had been ignoring instructions and asking for help elswhere whilst they were still in the middle of helping you.

JSntgRvr clearly stated - in red text:

Quote
<div class="ipsQuote_contents ipsClearfix" data-gramm="false">
	<p>
		<span style="color:#c0392b;">Do not make any changes to your computer that include installing/uninstalling programs, deleting files, modifying the registry, nor running scanners or tools of any kind unless specifically requested by me.</span>
	</p>
</div>

JSntgRvr found no malware on your machine, but did find corrupt Windows system files.

He suggested that you register at Sysnative forums for further help with fixing that corruption.

You kept asking questions and he gave you a specific list of Windows related KB's and other files that you needed to update.

He then instructed you how to clean up after the work that you had been doing together.

That help thread was then closed.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

A malware removal expert has declared that you machine does not have malware.

He did find corrupt Windows files and advised what you need to do to repair them.

IF you have done those Windows repairs as instructed/advised then -

<strong>DO NOT RESTORE ANY SYSTEM IMAGE FROM ANY TIME PREVIOUS TO DOING THOSE REPAIRS.


If you do that then you will just be undoing what you have done, removing any updates that you have made, and putting those corrupted system files back and then you will then need to repair them all over again and do all the recommended updates again.</strong>

In fact I suspect that is exactly what is happening here - you are restoring old system images and so undoing all the repair work you may have done.

I don't see that there is anything much extra we can add here to what you were advised at Malwarebytes..

Other than as already said - If you don't want CCleaner on your Win 7 machine then simply uninstall it.

However as you appear to have already accepted that the Win 7 machine is corrupted/broken, is only going to get worse, and that you need a new machine then I suggest that is the way that you should go and stop wasting time on a machine that you are unable to fix.

I hope that you will be happier with your new machine when you do get it.

As this thread now appears to be going round in circles then, like the Malwarebytes one, I will close this one.

I am not going to install Ccleaner again. I could purchase (guaranteed fresh, win 7 and key) after formatting my C: drive

for less money, and all should be clean. But I don't think I should although I like win 7, but cannot update it.

My favorite has been XP due to its small size vs Win 7.

Pos

I know, and version 11 is just a year away.

My printer/scanner won't work with 11 but will with 10. Don't know about the Dell monitor, keyboard, probably not.

With all that has been done these past few days, I am thinking of going back to System Image Restore as last ditch effort

before going to 10, or 11.

Any thoughts?

pos

10 minutes ago, positron7 said:
<div class="ipsQuote_contents ipsClearfix" data-gramm="false">
	<p>
		I am thinking I am just going to a different newer computer with win 10.  I think I can purchase one from a new store up town.
	</p>

	<p>
		Now what do I need to worry about with win 10?  
	</p>

	<p>
		pos
	</p>
</div>

10 is (or will be in a few weeks/months) end of life and won't be supported by Microsoft like 7. At which point it will be just as much a vector for malware as your 7 machine is.

12 minutes ago, positron7 said:
<div class="ipsQuote_contents">
	<p>
		Hi Imacri and thanks for posting. I checked and I am not sure I believe what I found. I will use the &gt;&gt; for my reply.
	</p>

	<p>
		Hi positron7:
	</p>

	<p>
		I fail to understand how programs like CCleaner and/or Avast Free Antivirus could mysteriously update or reinstall themselves when you keep insisting your machine is completely disconnected from the internet, unless you are performing some sort of system restore or repair that is rolling back your system to an earlier date.
	</p>

	<p>
		&gt;&gt; Please reread my previous posts. I am not going to explain it a 5<sup>th</sup> time. Reread closely.
	</p>

	<p>
		Have you re-applied all updates released prior to end of support for Windows 7 SP1 on 14-Jan-2020 since you <strong>restored your system back to 2018</strong>, including the <strong><a href="https://support.microsoft.com/en-us/topic/sha-2-code-signing-support-update-for-windows-server-2008-r2-windows-7-and-windows-server-2008-september-23-2019-84a8aad5-d8d9-2d5c-6d78-34f9aa5f8339" rel="external nofollow">KB4474419</a></strong> update (released 10-Sep-2019) that adds SHA-2 code signing support for digital certificates? If you aren't sure see my 28-Aug-2024 post in Skye's <em><a href="<___base_url___>/topic/67957-ccleaner-free-wont-open/?do=findComment&amp;comment=350805" rel="">Ccleaner free wont open</a></em>.
	</p>

	<p>
		&gt;&gt; I just checked, after all the Malware Antimalware testing, fixlogs etc. I only have 4 updates on my computer at this time. Zero updates hidden. I had I don’t know how many updates over the years. I have not tried a Restore System Image since last week. Do you think I should undo the work done by other experts at Malware etc by Restoring with System Image?
	</p>

	<p>
		What antivirus programs besides Avast Free AV have you installed, and is there any antivirus or anti-malware program still installed other than Malwarebytes Premium?. 
	</p>

	<p>
		&gt;&gt; I just have Malwarebytes Premium and Windows Defender now.
	</p>

	<p>
		<span> </span>Did you remove the last traces of your Avast Free AV off your system with the <strong>Avast removal tool</strong> (Avast Clear) as instructed in the support article<em> <a href="https://www.avast.com/en-ca/uninstall-utility#pc" rel="external nofollow">What To Do When Avast Won't Let You Uninstall From Windows</a></em>?
	</p>

	<p>
		&gt;&gt; I am trying to remember, so much tried. I remember I went into Regedit or something and I could not delete three files because I suddenly did not have “Run as Administrator” Authority. Crazy isn’t it. I will check/try again.
	</p>

	<p>
		Any orphaned files or registry entries from Avast Free AV (or any other AV you've run on your Win 7 machine) could interfere with Malwarebytes Premium, even if you've performed an uninstall from Control Panel | Programs | Programs and Features, and the last traces of any uninstalled AV should be removed with the manufacturer's removal tool .  Post back if you need help finding the correct AV removal tool(s) for any other AV software you've installed.
	</p>

	<p>
		&gt;&gt; I will do and check back.
	</p>

	<p>
		If you are certain your Win 7 SP1 OS is fully patched, Avast Free AV and all other uninstalled AV software has been wiped off your system with the manufacturer's removal tool, and you are using <strong>Malwarebytes v5.x</strong> (Free or Premium, currently v5.1.10.127-1.0.5021) then you are
	</p>

	<p>
		&gt;&gt; I just checked and updated, which it says it did, but I still just have 4.6.17.334.
	</p>

	<p>
		entitled to <strong>post in Malwarebytes' <a href="https://forums.malwarebytes.com/forum/7-windows-malware-removal-help-support/" rel="external nofollow">Windows Malware Removal Help &amp; Support board</a></strong> and ask a trained malware removal specialist to look for any traces of hidden malware on your system that might have been missed by both your Avast Free AV and Malwarebytes Premium scans.  Instructions on how to collect and post diagnostic logs in that board are included in the pinned post <em><a href="https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/" rel="external nofollow">I'm infected - What do I do now?</a></em>.
	</p>

	<p>
		&gt;&gt; I already have for days and we/they found no problems. In fact they closed my string. I am wondering if they think I am fabricating this. I am not.
	</p>

	<p>
		 
	</p>

	<p>
		pos
	</p>
</div>

I am thinking I am just going to a different newer computer with win 10. I think I can purchase one from a new store up town.

Now what do I need to worry about with win 10?

pos

Hi Imacri and thanks for posting. I checked and I am not sure I believe what I found. I will use the >> for my reply.

Hi positron7:

I fail to understand how programs like CCleaner and/or Avast Free Antivirus could mysteriously update or reinstall themselves when you keep insisting your machine is completely disconnected from the internet, unless you are performing some sort of system restore or repair that is rolling back your system to an earlier date.

>> Please reread my previous posts. I am not going to explain it a 5th time. Reread closely.

Have you re-applied all updates released prior to end of support for Windows 7 SP1 on 14-Jan-2020 since you restored your system back to 2018, including the KB4474419 update (released 10-Sep-2019) that adds SHA-2 code signing support for digital certificates? If you aren't sure see my 28-Aug-2024 post in Skye's Ccleaner free wont open.

>> I just checked, after all the Malware Antimalware testing, fixlogs etc. I only have 4 updates on my computer at this time. Zero updates hidden. I had I don’t know how many updates over the years. I have not tried a Restore System Image since last week. Do you think I should undo the work done by other experts at Malware etc by Restoring with System Image?

What antivirus programs besides Avast Free AV have you installed, and is there any antivirus or anti-malware program still installed other than Malwarebytes Premium?.

>> I just have Malwarebytes Premium and Windows Defender now.

Did you remove the last traces of your Avast Free AV off your system with the Avast removal tool (Avast Clear) as instructed in the support article What To Do When Avast Won't Let You Uninstall From Windows?

>> I am trying to remember, so much tried. I remember I went into Regedit or something and I could not delete three files because I suddenly did not have “Run as Administrator” Authority. Crazy isn’t it. I will check/try again.

Any orphaned files or registry entries from Avast Free AV (or any other AV you've run on your Win 7 machine) could interfere with Malwarebytes Premium, even if you've performed an uninstall from Control Panel | Programs | Programs and Features, and the last traces of any uninstalled AV should be removed with the manufacturer's removal tool . Post back if you need help finding the correct AV removal tool(s) for any other AV software you've installed.

>> I will do and check back.

If you are certain your Win 7 SP1 OS is fully patched, Avast Free AV and all other uninstalled AV software has been wiped off your system with the manufacturer's removal tool, and you are using Malwarebytes v5.x (Free or Premium, currently v5.1.10.127-1.0.5021) then you are

>> I just checked and updated, which it says it did, but I still just have 4.6.17.334.

entitled to post in Malwarebytes' Windows Malware Removal Help & Support board and ask a trained malware removal specialist to look for any traces of hidden malware on your system that might have been missed by both your Avast Free AV and Malwarebytes Premium scans. Instructions on how to collect and post diagnostic logs in that board are included in the pinned post I'm infected - What do I do now?.

>> I already have for days and we/they found no problems. In fact they closed my string. I am wondering if they think I am fabricating this. I am not.

pos

On 29/08/2024 at 22:02, positron7 said:
<div class="ipsQuote_contents">
	<p>
		I powered on my computer and Ccleaner filled the entire screen, locking my computer, and causing considerable damage.
	</p>

	<p>
		costing me all week's work, running <strong>all sorts of antivirus</strong>, frst, frst english, and many other programs trying to get it fixed,  repeating my win 7 System Images <strong>back to 2018</strong>, but to no avail
	</p>
</div>
1 hour ago, positron7 said:
<div class="ipsQuote_contents">
	<p>
		I had uninstalled <strong>AVAST free antivirus</strong> the other day, and today I find AVAST has been reinstalled but no icon in the tray.  So I uninstalled it again, made sure I could not find any remnants.  I also just tried to run Malwarebytes Premium, and the first time it just sat there and did nothing. No icon in the tray either.
	</p>
</div>

Hi positron7:

I fail to understand how programs like CCleaner and/or Avast Free Antivirus could mysteriously update or reinstall themselves when you keep insisting your machine is completely disconnected from the internet, unless you are performing some sort of system restore or repair that is rolling back your system to an earlier date.

Have you re-applied all updates released prior to end of support for Windows 7 SP1 on 14-Jan-2020 since you restored your system back to 2018, including the KB4474419 update (released 10-Sep-2019) that adds SHA-2 code signing support for digital certificates? If you aren't sure see my 28-Aug-2024 post in Skye's Ccleaner free wont open.

What antivirus programs besides Avast Free AV have you installed, and is there any antivirus or anti-malware program still installed other than Malwarebytes Premium?. Did you remove the last traces of your Avast Free AV off your system with the Avast removal tool (Avast Clear) as instructed in the support article What To Do When Avast Won't Let You Uninstall From Windows? Any orphaned files or registry entries from Avast Free AV (or any other AV you've run on your Win 7 machine) could interfere with Malwarebytes Premium, even if you've performed an uninstall from Control Panel | Programs | Programs and Features, and the last traces of any uninstalled AV should be removed with the manufacturer's removal tool . Post back if you need help finding the correct AV removal tool(s) for any other AV software you've installed.

If you are certain your Win 7 SP1 OS is fully patched, Avast Free AV and all other uninstalled AV software has been wiped off your system with the manufacturer's removal tool, and you are using Malwarebytes v5.x (Free or Premium, currently v5.1.10.127-1.0.5021) then you are entitled to post in Malwarebytes' Windows Malware Removal Help & Support board and ask a trained malware removal specialist to look for any traces of hidden malware on your system that might have been missed by both your Avast Free AV and Malwarebytes Premium scans. Instructions on how to collect and post diagnostic logs in that board are included in the pinned post I'm infected - What do I do now?.

-----------


<span style="font-size:11px;">Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.4780 * Firefox v130.0.0 * Microsoft Defender v4.18.24070.5-1.1.24070.3 * Malwarebytes Premium v5.1.9.124-1.0.5014 * Macrium Reflect Free v8.0.7783 * CCleaner Free Portable v 6.27.11214</span>