The software gets rid of temporary files that eat up disk space and invalid Windows registry keys. During the cleanup, malicious files buried in the system are also deleted. However, in September , CCleaner malware was discovered.
The software gets rid of temporary files that eat up disk space and invalid Windows registry keys. During the cleanup, malicious files buried in the system are also deleted.
However, in September , CCleaner malware was discovered. Hackers took the legitimate program and inserted malicious code that was designed to steal data from users. They turned a tool meant to scrub your computer clean of lurking malware into a serious threat to sensitive and personal information. Understanding the Threat The malware consisted of two Trojans, Trojan. Floxif and Trojan. Nyetya, inserted into the free versions of CCleaner version 5. It’s believed the hackers compromised CCleaner’s build environment to insert the malware.
According to different reports , the malware is capable of collecting specific data from an infected computer system, including IP addresses and information on installed and active software, and sending it to a third-party server located in the United States.
CCleaner’s parent company, Avast Piriform, found the malware on September 12, , and immediately took steps to remediate the problem. Initially, the company believed it was confined to the above versions running on a bit Windows systems and that downloading upgraded versions of the program would solve the problem.
It’s believed more than 2 million users were infected. Unfortunately, the company soon discovered the malware infection was more severe than originally believed. A second stage payload was discovered by Cisco Talos.
This payload targeted approximately 20 of the largest tech companies, including Google, Microsoft, Cisco, and Intel, and infected 40 computers. According to Wired , “Cisco says it obtained a digital copy of the hackers’ command-and-control server from an unnamed source involved in the CCleaner investigation.
The server contained a database of every backdoored computer that had ‘phoned home’ to the hackers’ machine between September 12 and 16″. Although there is no definitive evidence identifying the party responsible for the CCleaner malware, investigators discovered a link to a Chinese hacking group known as Axiom.
The CCleaner malware shares code with tools used by Axiom, and a time stamp on a compromised server matched a Chinese time zone; however, time stamps can be changed or modified, making it difficult to pinpoint origin. Combined with the choice of tech targets, this raised concerns that CCleaner malware could be part of a state-sponsored attack. As of late , the investigation into responsibility for the hack is ongoing.
When the CCleaner malware was first discovered, users were advised to upgrade to the newest version of the program based on the belief it was an isolated incident and later versions were safe.
However, the discovery of the second stage payload complicated removal and protection. Having a disaster recovery plan in place may be the only way to truly ensure your computer is free of the CCleaner malware. Investigators recommend restoring systems to backed-up versions dating before August 15, when the first infected tools were released.
The infected version of CCleaner should be uninstalled and antivirus scans initiated to ensure the system is clean. If you decide to reinstall CCleaner, it should be the most recent version available, or at least version 5. CCleaner is known to be an excellent tool for eliminating malicious programs that hide deep in computer systems, but as the CCleaner malware incident proves, even the programs created to protect our computers from threats are not immune to hackers.
The State of Windows Clean-up Tools
No, do NOT use CCleaner. Ever since it was bought by Piriform, it now has . View entire discussion (48 comments). More posts from the privacytoolsIO. Best alternative to Ccleaner (latest)?. ✓ Solved · 14 comments. share. save hide . View entire discussion (14 comments). More posts from the Windows r/technology: Subreddit dedicated to the news and discussions about the creation and use of technology and its surrounding issues.
What Are the Best CCleaner Alternatives?
Comments For a long time CCleaner has been the most popular system-cleaning tool for Windows, extending its reach to other platforms like macOS and Android phones. However since security giant Avast acquired it last year, it’s been a stormy ride that’s had many doubting how effective or trustworthy the tool really is. While CCleaner has certainly grown up since its “crap cleaner” days, it’s certainly gotten more bloated over the years as well. You may recall last summer two months after being acquired by Avast , it was disclosed that the tool had been infected with Floxif malware.
How to Get Rid of CCleaner Malware?
It contains all the needed features for performing many operations of this format. Besides, this Editor is much more straightforward than any simple document editor.
WATCH: What is CCleaner Malware and How to Remove It? | Kaspersky
r/technology: Subreddit dedicated to the news and discussions about the creation and use of technology and its surrounding issues. I have been aware that CCleaner got hacked lately and I want to know if it’s solved and if it’s safe to install CCleaner Make this a discussion thread I guess ?. Aug 14, Popular Alternatives to CCleaner for Windows, Mac, Android, Android Tablet, Linux and more. View app Screenshots, reviews and more.