Malware found in official Ccleaner installers

[Marko :)]

Hello Malware Tips pals. I was away when this happened. I don't have to go through 13 pages of discussion. Could somebody catch me up?

[OOPS--a preliminary draft posted!]

I want to know just who were all the true heroes in this matter.(Obviously I don't include ClamAV doing its usual meaningless ritual of flagging everything.)

How did a wretched episode like this come about? How tainted do people feel Avast is by this?

I've had a long practice of running all my downloads past Virus Total. Would that have helped here?



I've been downloading and installing CCleaner regular installer updates for years without ever encountering any piggyback programs, despite what ESET has been saying.

Basically, CCleaner v5.33 was hacked by someone and before releasing the final product. Someone added the malicious line of code which sends user data to unknown server. Soon, when Piriform (Avast) crew found out, they shut down the server, they have updated the CCleaner and released a statment about the incident. In statement, they said, that CCleaner was hacked before Avast purchased Piriform and that they have strong evidence about it and, of course, that there's investigation going on.

Only 32-bit version of program was affected and it's recommended to make clean installation of OS.

 

[JB007]

Ah! Now that explains why. My installer does not include the Google Toolbar. So naturally no red/yellow flags by an AV/AM. But I do agree it may be considered by a PUP by not only an AV company but some users too.

Hello,
Where can I find this installer without the Google Toolbar ?

 

[conceptualclarity]

Only 32-bit version of program was affected and it's recommended to make clean installation of OS.

Fortunately I didn't download that particular update.

Hello,
Where can I find this installer without the Google Toolbar ?

Hey, Google Toolbar wasn't bad at all. But isn't it dead as a doornail? Google isn't interested in it because it was something they made for Internet Explorer and Firefox before they started up their own Chrome browser, at which point they lost interest in enhancing Internet Explorer and Firefox. IE especially needed it, with no extension store.

I have been downloading CCleaner from the Piriform site for a long time and have never encountered a bundled program.

 

[TairikuOkami]

Where can I find this installer without the Google Toolbar ?

CCleaner - Builds

Slim version is usually released 1-2 weeks after the standard version.

I have been downloading CCleaner from the Piriform site for a long time and have never encountered a bundled program.

Not sure, why it is sometimes offered and sometimes not. I have seen it, when I have upgraded, but not after uninstalling CCleaner and installing it again using the same installer. But if you unpack the standard version, you can see Chrome and Toolbar installers there, with the HTML offers in various languages.

 

[JB007]

Fortunately I didn't download that particular update.



Hey, Google Toolbar wasn't bad at all. But isn't it dead as a doornail? Google isn't interested in it because it was something they made for Internet Explorer and Firefox before they started up their own Chrome browser, at which point they lost interest in enhancing Internet Explorer and Firefox. IE especially needed it, with no extension store.

I have been downloading CCleaner from the Piriform site for a long time and have never encountered a bundled program.

CCleaner - Builds

Slim version is usually released 1-2 weeks after the standard version.


Not sure, why it is sometimes offered and sometimes not. I have seen it, when I have upgraded, but not after uninstalling CCleaner and installing it again using the same installer. But if you unpack the standard version, you can see Chrome and Toolbar installers there, with the HTML offers in various languages.

Thanks @conceptualclarity and @TairikuOkami for your help