Latest version ccleaner freeware detected by my Zemana anti virus as virus, and also 3 separate antivirus software manufacturers on Virus Total incl ESET today. Tried downloading again--same result. Last version OK and i re-installed that.
Are you downloading it from here?
My original download was from the link generated by ccleaner software to piriform website. Then i repeated it by downloading from FileHippo--both 'infected' on Virus Total.
Have just downloaded from your link- also shows 3 companies on VT as 'virus'. Last version number downloaded from FileHippo was clean and i installed it. It did not trigger Zemana unlike the current version. Suggest you download 552 and test on VT.
Did you download the slim version (without any toolbars etc in it) ?
Shouldn't you take this a bit more seriously? Have you downloaded the std download--as i did --freeware- and tested it with Virus Total? After all there has been a major problem with ccleaner malware downloading not all that long ago (2017)? The std freeware download does nt offer a 'slim' version and i have never heard of such a thing! Where is it on your downloads page?
Regards mark
I am taking it seriously.
99.99% of the Virus Total listings are false positives because of the addons in the CCleaner full version.
Please try the slim build from here, it's what a lot of people (myself included) use
https://www.ccleaner.com/ccleaner/builds
It's because of the included 3rd party Google Software. Most antivirus' will just ignore it, while others such as ESET, etc., will likely always detect it.
8 hours ago, hazelnut said:<div class="ipsQuote_contents"> <p> I am taking it seriously. </p> <p> 99.99% of the Virus Total listings are false positives because of the addons in the CCleaner full version. </p> <p> Please try the slim build from here, it's what a lot of people (myself included) use </p> <p> <a href="https://www.ccleaner.com/ccleaner/builds" rel="external nofollow">https://www.ccleaner.com/ccleaner/builds</a> </p> <p> </p> </div>
Yes thanks the 'slim' version doesn't trigger either zemana or virus total--so i presume virus free. May i ask what it is that's triggering the problem in the full version? I haven't noticed any toolbars.
57 minutes ago, markmark said:<div class="ipsQuote_contents"> <p> Yes thanks the 'slim' version doesn't trigger either zemana or virus total--so i presume virus free. May i ask what it is that's triggering the problem in the full version? I haven't noticed any toolbars. </p> </div>
Google toolbar or chrome or avast antivirus are the three possible offers given by the full installer. Some AVs will flag this bundle and thus the false positives
Thanks that makes sense.
BW Mark
On 1/24/2019 at 22:48, markmark said:<div class="ipsQuote_contents"> <p> Yes thanks the 'slim' version doesn't trigger either zemana or virus total--so i presume virus free. May i ask what it is that's triggering the problem in the full version? I haven't noticed any toolbars. </p> </div>
Just curious, did you extract the slim version installer with 7zip before scanning the folder with Zemana?
No, i tested with virus total first ,then thinking it was ok just installed it. Zemana did not issue any warning--unlike the same procedure with the std download which did trigger zemana without me starting a scan manually. I also run webroot, and this did not object to either installation.
22 minutes ago, markmark said:<div class="ipsQuote_contents"> <p> No, i tested with virus total first ,then thinking it was ok just installed it. Zemana did not issue any warning--unlike the same procedure with the std download which did trigger zemana without me starting a scan manually. I also run webroot, and this did not object to either installation. </p> </div>
Zemana does not detect anything after you extract the installer and scan ccleaner.exe?
I got Zemana alert even on slim version "after" i extract the installer. I deleted the ccleaner.exe and use ccleaner64.exe instead just in case!
As regards to CCleaner.exe v5.52.6967:
Hashes:
MD5: F0F196FD71B9C7D65929861DD1BCFDCF
SHA-1: C31E7A531F0CF1406DE79966A821E9D349A14D2B
SHA-256: 00564FBE89D79BA9AA80A8C2A11C0F721E5FFDA0CA0549273A22CF270E52664F
Jotti states it's clean, scan results:
https://virusscan.jotti.org/en-US/filescanjob/svxxd6tsmv
VirusTotal states it's clean, scan results:
Edit:
On my own scanning it's been stated as clean by ClamWin, Dr.Web, Kaspersky, Malwarebytes, and Panda. If Zemana Anti-Malware has a feature to submit a false positive or suspicious file perhaps go that route so they can remedy it, <em>that is if they can</em> since they use online scanning, and only have a small definition file installed locally.
Yes they can sort out false detections --I have told them of one or two in the past and received very prompt email acknowledgement. I am perfectly satisfied that this was a 'false' detection and have emailed them. I should emphasise Zemana is only promoted as a second line of defense.
7 hours ago, markmark said:<div class="ipsQuote_contents"> <p> Yes they can sort out false detections --I have told them of one or two in the past and received very prompt email acknowledgement. I am perfectly satisfied that this was a 'false' detection and have emailed them. I should emphasise Zemana is only promoted as a second line of defense. </p> </div>
Yes ofc. I use several different scanners to be sure. JRT, Malwarebytes, Kaspersky, HitmanPro, and Zemana.
Even if said to be f/p i don't like to see anything detecting anything. So that is why i delete ccleaner.exe and use ccleaner64.exe instead.
I can confirm that latest SLIM CC is reported by Zemana... Own both of them and It's sad... kinda...
ccsetup553.exe shows positive on VirusTotal
Today's version.
While ccsetup553_slim.exe shows no positives in VirusTotal.
Curious, does Zemana detect it if you move CCleaner.exe elsewhere to another folder, such as C:\Temp. Only curious because in the past some anti-malware would only trigger an alert if a file was in a specific path, i.e.; generic detection.
It certainly does not...