After updating to CCleaner 5 my firewall says CCleaner needs Restore privileges. Which feature or part of CCleaner needs this privilege?
What is your firewall software?
Comodo.
Is there just one account on this machine?
Which operating system?
Can you give a screenshot of this Comodo message?
There are other accounts on the machine.
The operating system is Windows 7.
The message says:
CCleaner64.exe is trying to obtain an elevated privilege.
CCleaner64.exe could not be recognized and it is about to obtain Backup privilege. If CCleaner64.exe is one of your everyday applications, you can allow this request.
The alert from Comodo pops up when I run "ccleaner.exe /auto"
Why not just allow the request (and whitelist ccleaner) if you trust ccleaner. Comodo is an ultra-aggressive security. It usually requires re-permission when apps are updated. Ccleaner has the ability to copy part of a registry (the backup made before removal) so it's probably detecting that feature.
Thanks for the replies and suggestions. From Piriform's documentation, CCleaner does not touch the registry when run with the auto option. I'm still wondering what CCleaner needs the restore privilege for.
https://www.piriform.com/docs/ccleaner/advanced-usage/command-line-parameters
Note: When you run CCleaner.exe using the /AUTO parameter, CCleaner does not run the Registry cleaner. You cannot currently run the Registry cleaner through a command-line parameter
Because Comodo is looking at the program (ccleaner in this case) as a whole thing (at least any thing the process ccleaner.exe is capable of) and not just the action it is currently taking.
Comodo asks for specific privilegs as an application needs it. Why doesn't CCleaner need the restore privilege when run interactively, but need it when run with the auto command line option?
No reason I can think of except maybe comodo care more about programs which have unseen or no GUI as opposed to those you call up. That's really more of a question for them as I've had no experience with comodo firewalls for about 7 years.
The cleaning via /auto is the exact cleaning that you receive by opening Ccleaner and pressing "Run Cleaner"