CCleaner is infected

[fightingfi]

https://www.yahoo.com/finance/news/hackers-slipped-malware-popular-pc-142300993.html
Im safe but check yours plz everyone if you use it..........

 

[michalrz]

From the bits and pieces I've read in the article in the other of our threads, apparently only 1/64 engines (on virustotal) detected it at the time of discovery. Clam has received the signature though.
It's a sign of a much bigger problem - the cert issuer is possibly compromised.

Edit: linky to the other thread: https://hardforum.com/threads/ccleaner-compromised.1944121/#post-1043221563

 

[xorbe]

If a PC had the bad version, does the PC need to be redone, or can CCleaner be upgraded to a fixed version. I read somewhere that the payload didn't trigger. (Not mine, but a relative's PC, which I do not want to waste time on.)

 

[FatalError11]

thanks I will check mine for sure. going to just uninstall don't really need it.

 

[muz_j]

If a PC had the bad version, does the PC need to be redone, or can CCleaner be upgraded to a fixed version. I read somewhere that the payload didn't trigger. (Not mine, but a relative's PC, which I do not want to waste time on.)

the official notification about it on the piriform blog advises to update to the current version:
https://www.piriform.com/news/blog/...eaner-cloud-v1073191-for-32-bit-windows-users

some additional information is also in a posting by avast if you're interested:
https://blog.avast.com/additional-information-regarding-the-recent-ccleaner-apt-security-incident

 

[Larry Gilmore]

Thanks for sharing friend I will definitely check mine also.