CCleaner and Micrsoft Security Essentials

[PCezar]

Olá!

Tenho instalado e em uso o Micrsoft Security Essentials.

Quando rodo o CCleaner 'free', ele está apagando alguma informação

usada pelo MSE, pois o mesmo 'entra' em estado de alerta,

mudando o status para 'amarelo', dizendo:

"Status do computador: Potencialmente desprotegido" e

" Faz muito tempo que você não roda o MSE".

Creio que está sendo apagada alguma informção, como por

exemplo data de último processamento do MSE.

Seria interessante vocês verificarem com a Microsoft e

corrigirem tal fato.

Na esperança de estar contribuindo, atenciosamente,

Paulo Cezar.

[kroozer]

My casual translation . . .

 

CCleaner is deleting pertinent info in MSE, as MSE warns: "Computer Status: Potentially unprotected cos you haven't used MSE in ages."

I presume CCleaner is deleting the Last Run timestamp.

Please investigate (with Microsoft?) and correct this.

[Winapp2.ini]

No harm comes from this process, it simply makes the program believe it has never scanned.

[Andavari]

Untick in CCleaner:

MS AntiMalware, and MS Security Client

 

Screenshot:

 

Note:

MS Security Client does not delete any of the scan logs, it can therefore remain ticked.

[PCezar]

Thanks, you all !!!

 

"Translated By Google"

 

Hello!

I have installed and use the Micrsoft Security Essentials.

When I run CCleaner 'free', it is erasing some information

used by MSE, because it 'goes' on alert,

changing the status to 'yellow', saying:

"Computer Status: Potentially unprotected" and

"A long time ago you do not turn the MSE."

I believe that any specific information is being erased, for

date of last processed sample MSE.

It would be interesting to you check with Microsoft and

correct this fact.

Hoping to be contributing, regards,

Paulo Cezar.

 

Hi Megan!

 

I'll use your suggestion, but it would be great be corrected.

[Andavari]

It's been reported allot, and Microsoft are aware of it and without doubt Piriform are as well. The one instance where it is actually helpful is after you've had MSE installed for a long time, cleaning those logs after a long period of time can really regain allot of free disk space.

 

Who on earth is Megan? There was no Megan who posted in here.

[Winapp2.ini]

Maybe he's from the future, and Megan hasn't yet posted.

[pwillener]

Who on earth is Megan? There was no Megan who posted in here.

Maybe s/he means Teagan, who has previously reported the same problem: http://forum.piriform.com/index.php?showtopic=35577

 

I find this problem also quite annoying; we shouldn't have to uncheck programs because CCleaner removes something that it shouldn't.

 

Perhaps someone should post this in the Bugs subforum.

[Andavari]

I find this problem also quite annoying; we shouldn't have to uncheck programs because CCleaner removes something that it shouldn't.

 

Perhaps someone should post this in the Bugs subforum.

 

A bit annoying yes, especially for new users who don't know to use Analyze first to get a temporary report.

 

I wouldn't necessarily call it a "bug" myself since like I mentioned in my previous post it can really help regain allot of MB from old scan logs after MSE has been installed and used for a long amount of time. Although it's really one of those things that needs to be off by default, and also when someone enables it a warning box needs to be shown.

 

The funny thing is when using it myself it didn't always cause MSE to prompt for a system scan immediately afterwards.

[Winapp2.ini]

I never had that happen either, and to this day don't.

[Andavari]

I wonder if there's at least one file (maybe more) to exclude which would stop MSE thinking it hasn't scanned? Maybe some important main file or whatever, whereas the logs themselves could be removed.

[Winapp2.ini]

Not sure- probably just one of the log files.

[mta]

or maybe a feature where log files are 'emptied' instead of deleted, controlled by an option or preset to do that to certain log files, like MSE ones.

but wiping a file instead of deleting it would have a higher resource overhead.

[Nergal]

program would need to provide log emptying API for that to work. And I don't want a world where my antivirus is presenting, to malware, exploitable hooks into itself on purpose

[pwillener]

I will do some testing over the next few days; erasing the MSE files manually, but let the latest one stand. See if this will correct MSE's behaviour of complaining that no scan had been run lately.

[Alan_B]

I never had that happen either, and to this day don't.

Perhaps there is a difference in how your system is set up.

 

I suggest the possibility that MSE wants to see its last scan log.

It might want this log to be continuously present,

or it might just need to see it when it is started up / launched / used / whatever.

 

If it is continuously running for real-time protection then it may create a new log file as part of "business as normal" subsequent to CCleaner removing old log files,

hence the latest log will be present upon the next system power up hence MSE will not complain.

If real-time protection is not active then there will be no new log file to detect upon the next scan-on-demand, and the warning is issued.

 

Another possibility might be that whilst MSE is active it may still retain write/append authority over the latest log file so that Windows will protect against deletion because the file is "in use".

 

Finally, could the "... older than 24 hours" option be protecting the latest log file for those who have no MSE warning ?

Perhaps this MSE problem only exists for those that have not enabled this protection.

I believe "Windows Temp folders" includes more than %TEMP% so wonder if MSE log files are in a folder that qualifies for such protection.

I remember discussions in the past about whether 24 hours had a duration of 23 hours 59 minutes or all of today plus yesterday,

[Andavari]

Well I get a mixed behaviour using it regardless if MSE's real-time protection is on/off. I also never use that 24 hour rule.

 

It would be nice if Piriform moved the MS AntiMalware cleaner into the Advanced area and have it unticked by default, and have a warning on it when enabled - it's really about time they do something about it because there's always topics like this being started.

[hazelnut]

I wonder if having 'run a scheduled scan' in settings ticked makes MSE look for logs.

[Winapp2.ini]

I have mine set to scan every sunday morning, no errors on my machine though.

[Alan_B]

I have mine set to scan every sunday morning, no errors on my machine though.

Do you also have it provide real-time protection ?

 

If so I suspect that it may either,

keep a log file protected from deletion,

or fairly quickly create a new log file.

[Andavari]

I wonder if having 'run a scheduled scan' in settings ticked makes MSE look for logs.

 

I never use that "Run a scheduled scan" option, and I'd had the mixed behaviour on XP at least of it:

A: Not complaining about CCleaner cleaning it.

B: Quickly complaining about being cleaned; it could be either nearly immediate or take a few minutes.

[hazelnut]

I don't run a scheduled scan either, I just wondered if it was running it that caused MSE to complain when ccleaner cleaned the logs.

[Super Fast]

If it's just a log file, couldn't you run Pete Romainges File Attribute Changer to mark the log as a system, hidden, & read only file, so it cannot be deleted?

[hazelnut]

If it's just a log file, couldn't you run Pete Romainges File Attribute Changer to mark the log as a system, hidden, & read only file, so it cannot be deleted?

 

Nobody should have to jump through hoops to protect av logs from ccleaner.

[Andavari]

Just use that cleaner once per week/month to regain some hard disk space, then untick it, and scan with MSE. It's definitely not something to leave enabled all the time.