SUBSIM Radio Room Forums - Warning: CCleaner is malware-infested

Page 2 of 2

Show 20 post(s) from this thread on one page

SUBSIM Radio Room Forums (https://www.subsim.com/radioroom/index.php)

- PC Hardware/Software forum (https://www.subsim.com/radioroom/forumdisplay.php?f=235)

- - Warning: CCleaner is malware-infested (https://www.subsim.com/radioroom/showthread.php?t=233443)

propbeanie

09-19-17 04:01 PM

It's definitely a scary world out there RR... I checked my "System - Remote" settings, and that crap was turned back on, for an unanswered 6 hour session, with "allow this computer to be controlled remotely" set to 6 hours... so, this is "harmless"?... :lol: - I also found, after removal, a registry entries file in My Documents, so stuff was gathered and moved on the computer, and probably exported... Some one is covering butt at Avast saying it was innocent... I am not updating. No more CCCleaner, no more Avast anything.

STEED

09-20-17 05:07 AM

I understand Avast now owns Ccleaner and reading comments under the news articles about this mess some people have been saying Avast has gone south as well, is there any real proof or is it here say?

Skybird

09-20-17 07:02 AM

Quote:

Originally Posted by Rockin Robbins (Post 2513679)

Yay! Ubuntu for the win again. I never had to deal with this.

If Linux would become more successful, as you claim, this will change. ;) :)

I have gone with Eset Node32 since some time. No measurable taxation of my system performance, none, also none on two other notebooks I installed it on, one of which being very old. But the best combination of all such suites (in last test autumn 2015) of both Windows- and Linux-aimed malware recognition rates.

Reason demands it to use AV under Linux as well, because there is Windows-malware transported and spread by Linux servers and Linux system as well, and there is a growing number of Linux malware as well. Times are changing. . The mainstream gang claiming Linux needs no security, simply are wrong.

One Windows malware on a USB stick got found already. The investment already paid off.

STEED

09-20-17 07:07 AM

Quote:

SOFTWARE HAS A SERIOUS SUPPLY-CHAIN SECURITY PROBLEM

https://www.wired.com/story/ccleaner...ware-security/

propbeanie

09-20-17 09:24 AM

A most interesting article STEED... Wired magazine, which I used to read back in my computer schooling days.

Skybird

09-20-17 09:36 AM

Quote:

Originally Posted by STEED (Post 2513800)

https://www.wired.com/story/ccleaner...ware-security/

Lets go digital, everybody's digital, lets celebrate with digital money in a digital world.

Banking apps - yes for me! :yeah:

Credit card transactions - yes for me! :yeah: :yeah:

Portfolio managment via smartphone - yes for me! :yeah: :yeah: :yeah:

I'm so happy that I managed to eject from all that already some time ago without getting hit by major issues before.

Defend cash money. Boycott shops and services that make payment by credit card mandatory. There is so much more at stakle than just that little something that you call "comfort" and "feels so cool".

Rockin Robbins

09-20-17 03:48 PM

Quote:

Originally Posted by Skybird (Post 2513851)

Defend cash money. Boycott shops and services that make payment by credit card mandatory. There is so much more at stakle than just that little something that you call "comfort" and "feels so cool".

It's interesting that on cash American money are the words "legal tender for all debts, public and private" and business are rushing to stop accepting cash. What part of "all debts" don't they understand. I agree. Boycott anybody not accepting cash for a personal transaction.

Platapus

09-24-17 07:18 PM

Quote:

Originally Posted by Rockin Robbins (Post 2513935)

From https://www.treasury.gov/resource-ce...al-tender.aspx

Quote:

The pertinent portion of law that applies to your question is the Coinage Act of 1965, specifically Section 31 U.S.C. 5103, entitled "Legal tender," which states: "United States coins and currency (including Federal reserve notes and circulating notes of Federal reserve banks and national banks) are legal tender for all debts, public charges, taxes, and dues."

This statute means that all United States money as identified above are a valid and legal offer of payment for debts when tendered to a creditor. There is, however, no Federal statute mandating that a private business, a person or an organization must accept currency or coins as for payment for goods and/or services. Private businesses are free to develop their own policies on whether or not to accept cash unless there is a State law which says otherwise.

This and other related laws state that our Legal Tender CAN be used for all debts, but does not mandate that it be used for all debts. A subtle, but important, difference.

Businesses can still operate on the barter system also. If you have ever traded in a used car when purchasing a newer car, you have used something other than legal tender as part of the deal. As long as both the customer and the business agree, it is Kosher.

Rockin Robbins

09-24-17 07:54 PM

If the seller's offer constitutes a price to be paid in dollars, such as the rental of an automobile, that price should be required to be taken in specie if the buyer wishes to conduct the transaction that way, lacking any previous agreement between the parties.

When you say "Flowers! $1.00" it is implied that you will take $1.00 cash money unless you go out of your way to require otherwise before the buyer agrees to pay.

Rockin Robbins

09-25-17 07:14 AM

Hey, it looks like the Ccleaner issue is worse than was initially thought and that there is still malware in the thing. And I think it's a symptom of more mayhem to come.

You see when giant mega-companies gobble up their competition, often it isn't to make them better. Often as not, they do it to DESTROY their competition. Avast bought Piriform, the trusted and reliable publisher of Ccleaner earlier this year. THAT's when the trouble began with malware.

It looks like after Avast announced that the malware had been removed, independent testing reveals that malware is still nestled safely in Ccleaner. It's time to avoid or use an old version, before the last two published by Avast.

This is only the beginning. Things are going to get worse as these commercial companies play cloak and dagger (with emphasis on the dagger) with our trusted security programs. Only open source and new smaller commercial companies care about anything other than dollars or equivalent currency. These large gobbler corporations are not serving their customers, they are separating them from their cash.

I'm putting Avast antivirus on my black list too. Too much good competition to feel I have to use Avast anywhere.

STEED

09-25-17 07:33 AM

I have dumped Ccleaner and just use the widows disk cleaner now. I have been thinking about dumping my Avast anti virus now, So any other good ones out there that don't dump Malware on you or sell your data like AVG.

aanker

09-25-17 11:46 AM

What do you guys think of Avira?

Before Avast went down the chutes I used to use Avast & Avira as my emergency AV's to double check I was clean if I ever had any doubts.

If this keeps up I'm going to miss Ccleaner, a utility I have used since its icon was a yellow circle and it would just delete cookies.

I found a copy & key from Mar 2017: ccsetup528_pro in a backup folder.

Skybird

09-25-17 05:12 PM

https://www.av-test.org/en/antivirus/home-windows/

I used to use Avira's suite, until some years ago their scanner fell into a reliability crisis of some kind, I then left them two, three years ago, but since then they seem to be on a path of recovering.

Currently using G-Data.

Aktungbby

10-02-17 12:57 AM

welcome aboard!

Pop Alexandra!:Kaleun_Salute:

CTU_Clay

08-20-18 08:22 AM

Quote:

Originally Posted by Skybird (Post 2513384)

http://blog.talosintelligence.com/20...s-malware.html

http://www.piriform.com/news/blog/20...-windows-users

My cold-hearted advise if you are affected: system reinstall. A system that got compromised, must still be considered to be compromised after any "cleanings", "repairs", or whatever. The only way to deal with a bug and be certain, is to nuke the whole system from orbit.

Note that Talos (first link) disagrees with Piri (second link) on the ammount of damage done. Talos says it potentially could be an immense number of users, Piri says the threat was tackled before it could do damage. Of cpourse, Piri has its own reputation to protect here, Talos is a neutral third party.

I believe I understood it like this: a completely infested version of CCleaner was spread via a manipulated servers of theirs, and so the malware must have reached millions and millionsn of users, see the link for affected version and date. The malware scanned the infested systems, extracted data and downloaded additional malware, which was probbaöly the intended "warhead" to detonate. But if Piri is right, then this malware never got activated, they switched off the rogue server fast. Which means that affected people have downloaded-for-sure, but non-activated malware on their machines now. Their systems probably got scanned and data was extracted. The additonal downloaded malware, the warhead, is still there.

Well, believing is not knowing. So expect the worst. Nuke it. From orbit. :yeah:

P.S. Note that the critical version of CCleaner was distributed for almost a full month. Thats damn many systems affected.

Is CCleaner still infected as earlier reported?

Skybird

08-20-18 08:34 AM

Don't know, don't care, I just use a very old version to easily delete temp files, and do no updates anymore.

Updates to Windows 10 and software runnign under Windows seem to be a bigger and bigger risk in temselves. I do not even use a dedicated security suite for my Windows 10 machine anymore, just the Windows 10 Defender onboard thing. But then, my W10 machine is exclusively a game console.

Compared to what the rules were 5 and 10 years ago, upsides have been turned down, and things were u-turned. Who would claim he saw it coming in this excessive level of distortion? Not before W8 was released I understood where things were heading.

THEBERBSTER

08-20-18 12:43 PM

Hi CTU
No, as soon as it became known they updated to a clean application.
Peter

All times are GMT -5. The time now is 08:04 AM.

Page 2 of 2

Show 20 post(s) from this thread on one page