Malware found in official Ccleaner installers

Marko :)

Level 20
Verified
Top Poster
Well-known
Aug 12, 2015
954
Hello Malware Tips pals. I was away when this happened. I don't have to go through 13 pages of discussion. Could somebody catch me up?

[OOPS--a preliminary draft posted!]

I want to know just who were all the true heroes in this matter.(Obviously I don't include ClamAV doing its usual meaningless ritual of flagging everything.)

How did a wretched episode like this come about? How tainted do people feel Avast is by this?

I've had a long practice of running all my downloads past Virus Total. Would that have helped here?



I've been downloading and installing CCleaner regular installer updates for years without ever encountering any piggyback programs, despite what ESET has been saying.
Basically, CCleaner v5.33 was hacked by someone and before releasing the final product. Someone added the malicious line of code which sends user data to unknown server. Soon, when Piriform (Avast) crew found out, they shut down the server, they have updated the CCleaner and released a statment about the incident. In statement, they said, that CCleaner was hacked before Avast purchased Piriform and that they have strong evidence about it and, of course, that there's investigation going on.

Only 32-bit version of program was affected and it's recommended to make clean installation of OS.
 

JB007

Level 26
Verified
Top Poster
Well-known
May 19, 2016
1,574
Ah! Now that explains why. My installer does not include the Google Toolbar. :) So naturally no red/yellow flags by an AV/AM. But I do agree it may be considered by a PUP by not only an AV company but some users too.
Hello,
Where can I find this installer without the Google Toolbar ?
 

conceptualclarity

Level 21
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Aug 23, 2013
1,072
Only 32-bit version of program was affected and it's recommended to make clean installation of OS.

Fortunately I didn't download that particular update.

Hello,
Where can I find this installer without the Google Toolbar ?

Hey, Google Toolbar wasn't bad at all. But isn't it dead as a doornail? Google isn't interested in it because it was something they made for Internet Explorer and Firefox before they started up their own Chrome browser, at which point they lost interest in enhancing Internet Explorer and Firefox. IE especially needed it, with no extension store.

I have been downloading CCleaner from the Piriform site for a long time and have never encountered a bundled program.
 

TairikuOkami

Level 35
Verified
Top Poster
Content Creator
Well-known
May 13, 2017
2,452
Where can I find this installer without the Google Toolbar ?
CCleaner - Builds

Slim version is usually released 1-2 weeks after the standard version.

I have been downloading CCleaner from the Piriform site for a long time and have never encountered a bundled program.
Not sure, why it is sometimes offered and sometimes not. I have seen it, when I have upgraded, but not after uninstalling CCleaner and installing it again using the same installer. But if you unpack the standard version, you can see Chrome and Toolbar installers there, with the HTML offers in various languages.
 

Attachments

  • capture_11252017_184003.jpg
    capture_11252017_184003.jpg
    189 KB · Views: 287

JB007

Level 26
Verified
Top Poster
Well-known
May 19, 2016
1,574
Fortunately I didn't download that particular update.



Hey, Google Toolbar wasn't bad at all. But isn't it dead as a doornail? Google isn't interested in it because it was something they made for Internet Explorer and Firefox before they started up their own Chrome browser, at which point they lost interest in enhancing Internet Explorer and Firefox. IE especially needed it, with no extension store.

I have been downloading CCleaner from the Piriform site for a long time and have never encountered a bundled program.

CCleaner - Builds

Slim version is usually released 1-2 weeks after the standard version.


Not sure, why it is sometimes offered and sometimes not. I have seen it, when I have upgraded, but not after uninstalling CCleaner and installing it again using the same installer. But if you unpack the standard version, you can see Chrome and Toolbar installers there, with the HTML offers in various languages.

Thanks @conceptualclarity and @TairikuOkami for your help:)
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top