Not for the first time, Sophos anti virus is reporting CCleaner as a virus "Mal/VB-K".
The last time this happened, they cleared it up within a day or so.
Can whoever told them about this last time please try again. And encourage them to be a bit more careful in their testing of new signatures.
Another user in another post had this reply form sophos:
From Sophos Today 12th July 10:41am BST:This False Positive was addressed yesterday evening.
dlo-bby.ide contains the fix...
If you have that installed (listed within the product information window within SAV) and it is still detected then please send us some samples of the files to samples@sophos.com for analysis by our labs.
All the best,
Cheers
Stuart