CCleaner hacked, Replaced by Malware!
ฝัง
- เผยแพร่เมื่อ 21 ต.ค. 2024
- CCleaner, the popular junk removal tool by Piriform, now under Avast, was hacked and replaced by malware! This supply chain attack is totally undetectable by normal users as the backdoor installs and activates silently. Strongly recommend checking your CCleaner version and scanning your system, as almost a million people are affected by this attack.
This hack was discovered by security researchers at Cisco Talos.
-------------------------------------------
Thanks for watching! If you like what you see, check out the links below.
Patreon: / tpsc
Forum: forum.thepcsec...
Twitter: / leotpsc
Facebook: / tpscyt
Wow. A lot of people in the comments are dumb. This video is from 2 years ago and is talking about a very specific version of the software. This issue has been fixed for a long time and the software is currently safe as of 11/26/2019. There’s people from like 3 days ago thinking that this issue is currently happening and freaking out. Please check the date of the videos you are watching before commenting like it’s current news or something.
The reason malware and viruses exist is because the people you mention exist. Some people derive all their functions from emotion rather than being logical and pragmatic.
I trust bob here
I’m with bob
blame youtube recommendations for recommending random videos
@@MycketTuff so if he died any virus would just delete itself?
I was blown away by this news. I've been using CC Cleaner for years.
Thank you so much for this video. It is the amazing people like you who keep others, like your viewers, informed, and safe. If it weren't for this very helpful video I would have clicked on that "Get Update" button, and have to give up my freedom on my pc. Thank you so much for staying active on this channel to help others.
This is why I always forget to update CCleaner :3
lol same here. I have version 5.23. A guy at my job had this version installed on his PC. Seems like I should wipe and reinstall windows on his PC
lol i use old version from like 2013 or something.
Same here - I'm using 5.22 right now
I just use Cleanup.exe
Free and doesn't have any annoying stuff
god is so hard to have a good software these days
bleachbit is superior to ccleaner
Cleanup.exe
I am so glad I have not updated ccleaner for months!
TH-cam, why you recommended me an obsolete video
Information is never obsolete. Just because it's no longer a current issue, doesn't mean it should be ignored. It makes people aware of the possibility that other threats could exist somewhere, and gives a resource to check them, such as VirusTotal in this case. Not saying this is a cure-all by any means, but is is something to pursue, should a person have problems with other software. As for recommendations, it follows the subject, not the date. You knew this video was two years old before you posted.
Emanuel Garses, why you click on 'obsolete' video
I never liked this app, I always felt fishy about it.
Abdrouf what are you using then
-Muhammad Hosny- I rarely use it, I just install clean Un install. or I manually delete temp files.
You are not alone
3060PlayZ does it make pc smoother
well its been patched and its okay now.
dude thanks so much for this alert. i will check my computer when i get home... hoping for the best...
turns out i have the 64 bit version, forgot which one i'd installed. malwarebytes didn't pick up anything and i don't see anything unusual. but i don't know anything about computers so not sure what else to look for
knight solaire
I have windows 10 and i have check it with virus total website, and i do not have any infections on my system
hey guys i'm sorry i forgot about this comment but thought i'd share an update. at the time i checked my systems everything was good, but a month later i powered on my laptop (secondary device), did a scan and turns out it had been infected by ccleaner. fortunately malwarebytes free was able to remove the infection, but it took forever (several days) and i'm still worried about what info might have been stolen.
so yeah... no more ccleaner for me >:\ shame bc i really liked that program.
Thank you Leo for uploading this when I thought about downloading this again after I fucking reset my computer and put Avast on my computer. Now I am not gonna use Avast anymore instead, I am gonna use Avira. Thank GOD I didn't get ccleaner and that I saw this video first before downloading it.
*Sigh* Twasn't Avast's fault. The hack happened before they acquired it.
oops
TNice tutorials might just be the first motivational comnt ive ever seen on a tutorial vid. ga thanks bro
Why is this getting reccomended to me two years after
I wonder too lmao
Guy selling some security (not sure service or software) and quacking nonsense for naive and computer illiterate, obviously hoping we all go: “OMG, OMG, Ccleaner is hacked! Its the end of the world as we know it! There is no choice, but we all need to run and buy this little Micky Mouse crapware (he must be selling)! 0:45 Quote: “now I indulge you take a look at this file and tell me its malware”. Well I WILL take a challenge! Feel free to send me and I tell you! Its called digital signature! Duh! Insulting part is he thinks we don't know!!! Go all through properties didn't even mentions certificate! What a quack! Hate people who feed on naive! Whatever this character sells don't buy it! He is not honest! Most quality security related products nowadays you can get for free and most IT professionals don't even use Anti Viruses. It's lame defense for totally illiterate which WILL NOT protect you against malware anyway. THE ONLY THING that really works is knowledge and this you can get for absolutely free. If starving for professional level academic knowledge presented in lay terms, listen to GRC's “Security NOW” podcasts, go check their website. They advocating free, open source, quality solutions. You will grasp many subjects on academic level, learn robust ways of protecting yourself, even learn how to hack lightweight on the way, without becoming software engineer. This guy here is for old retired ladies and people learning their ABC (not to offend seniors or whoever might be leaning read and write).
@@robertkoowalski1014 wow thats a long quote! I mean hopefully the creator dont remove it.
Its just a dumb thing ik
So that's what happened to my old pc
Discovering this after years... I feel dumb.
That is actually scary. CCleaner was a program that I used a lot until I switched to BleachBit not too long ago. I scanned my computer with Bitdefender and it blocked and killed the threat with no issues when I heard about this news. It's still scary that this went on as long as it did.
This tutorial is amazing and you are really good at teaching !! great job sir !
Respect to your good work, thanks a lot
Bro I really do appreciate you for this help, Thanks! I subscribed and Liked the video.
Thank you for informing us with important news. You're making great videos.
BROTHER, YOU ARE THE BEST!!! You oooh really helped me!! THANK YOU VERY
So, TH-cam disabled my alerts for your channel, and I had this version of CCleaner the entire time and never knew it was compromised why TH-cam turned my alerts off and un-subbed me from your channel I have no idea, but my OS is Windows 10 64 Bit and as far as I can tell the registry entry the virus makes is not in my registry, and I'm pretty sure by default my PC ran the 64bit exe from the recycle bin shortcut which was supposedly not compromised.
Hopefully Comodo was updated to detect these as I'm going to do a full scan now just in case.
No worries. Brother windows 10 even such a Noob malware cannot make a backdoor on your PC. No worries. Chill down just get a bought good total antivirus and clean off ccleaner which I know you had already done it. Well done acting amazing here. Byee
Oh your PC cannot be affected unless your window version is not good. Window 10 PC is rather good itself. And more or less you are safe from Noob malware like ccleaner. Well use a good av and check your PC again some useless malware are still inside running on your PC slowing or bugging your system out but relax they aren't used by any outsiders. 😂 chill.
only the 32 bit software was compromised anyways, if you downloaded the 64 bit version it's 100% safe.
Thank you for the information! I didn't know that happened. I will be informing my teacher about it, because he always shows the first grades what useful tools you can use to speed up your PC at my high school. He also told us about CCleaner back when it was actually legit so.. Thank you again! Keep it up bro!
1:25 Avast detected its own software :D
Oh so that's why I got a notification from avira about that last night, I was so confused.
Funny I almost updated this a few days ago..hopefully what I have is clean..thanks Leo!!
To be fair the icon and UI in general always looked pretty shady to me
Man, thank you very much for alerting me... I did not have checked my computer, but I have bitdefender TS, so I should be okay... If I saw it right, it does detect it :)
Avira saw it trying to auto-update. It locked. It was the Floxif infected version. Nice video. Now I installed the fixed version(latest update) and that seems to fix it.
Hi Leo, I think that Avast products may have been compromised as you mentioned even Comodo is recognizing CCleaner as not safe. As a safe guard I could use something like Bleachbit for the time being . The problem if you had this installed on your system may have already reported back to the hackers all your information about your system. You may have to restore you system back as a counter measure. Thanks for the information.
I remember having CCleaner on an old laptop, and already thought it was malware in the first place.
I've used CCleaner for years! Shame to see this happen to a reliable program, good thing my copy is safe
It would also surprise me if more than one percent of the users had any real need of a program like CCleaner to begin with. Good security also means dont have software installed that you don't need.
My current versions I have on my laptop and desktop are clean. I'm now too scared to update them because there's a new version out, haha. Thank you for the information.
So Leo, you didn't address the real question: *what else is on the Avast "supply chain" server that is the **_real_** malware payload?* :^) What if this was the decoy? Have you downloaded and checked *all* of the other app that they offer?
th-cam.com/video/ztVMib1T4T4/w-d-xo.html
Avast servers were not hacked | Priform servers were.
blog.avast.com/update-to-the-ccleaner-5.33.6162-security-incident
the breach preceded *(before)* the take-over of Piriform by Avast. [
Sorry, _my comment comes true,_ *read carefully:*
www.bleepingcomputer.com/news/security/ccleaner-hack-carried-out-in-order-to-target-big-tech-companies/
.33 was hacked right?
I had .32 so I am not infected right?
You are safe.
Sumedh Patil check it
99.9% safe
5.33 is the affected version. If you are using 5.32 or 5.34 and higher, the backdoor isn't there. Also, to be more specific, only certain versions were hit: the regular 32-bit version (5.33.6162) and the cloud version (1.07.3191).
electronicwiz1 julia
Really a highly rated work, sir.
I am still using CCleaner, I installed that program some months ago in 2019 (I think). So therefore, I don't think I need to uninstall it since you made that video in 2017.
Yep, the had been only one infected version, in 2019 we're fine with Ccleaner
Glad I kept an older version (3 something), just checked and all good!
This is a piece of important information. I don't really care if these issues are already fixed, but it is just good to uninstall because it is taking some of my space anyway.
Another excellent video, one of the best channels on youtube.
I checked - everything is clean
Leo, for a revealing experiment about Avast security, determine the date of the CCleaner hack, then run a contemporary (that is, an immediately post-hack) version of Avast security updates on an infected machine running CCleaner. Would Avast detect anything on the CCleaner-afflicted machine?
At this point, this video is 4 years old and, IMHO, should either be updated or deleted. Most software companies work hard to upgrade and improve their products; obviously, the same can't be said of reviewers.
I was hoping you would touch on this topic!
After replacing ccleaner with bleachbit in windows recently for annoying adds and seeing this video after using ccleaner for like more than 5years my feeling is -> I want to be a cyber security engineer :)
2:00 The funniest part is that avast detected the malware in ccleaner according to virustotal
Was it not only 32-bit systems that were affected by this?
Only 32-bit systems were affected, if you use a 64-bit you should be fine.
Dude, will you review SUNBURST? The malware that stroke SolarWinds?
First time I hear about this!
What about the latest version of/in March 2019? I have been using CCleaner for, like, ages, and I have never noticed any negative effects whatsoever (on the contrary - I assume).
Any news on this in 2019?
Only .33 has been infected
If you made the updates, you're fine
Avira got a new UI!
www.avira.com/en/free-antivirus-windows
Talk about timing.
It's about time.
Only took 10 years!
Checked a few installed programs and unfortunately, Macrium Reflect Chip Installer (German magazine) is infected. Would you recommend a clen new install?
P.s.: Kaspersky did not find any infection on my system ...
hello update 10/11/2018.
I did a scan with virustotal he would not have any virus for this application thank you very much to you A-P Racicot
thanks bro regards from Syria
So glad I saw this, I was just about to install this
I wouldn't say I have this super power.
I only download from source websites, now in events like this where the source file is infected will cause problems for me, but how often does this happen?
My copy of CCleaner is old though(5.30.6065), so it is still clean.
MalwareBuster.com removed it for me. Its crazy that CCleaner had malware.
Thanks TH-cam for giving me a heart attack.
Roxas The Nobody same
Guys this is from 2 years ago
@@disciple_of_brainrot indeed. That's why I thanked TH-cam for the heart attack thanks to this recommendation.
we know?
@Myles yas
The implications for Piriform? This company produces good software, but a security compromise can wreck that hard-earned reputation. Does Piriform use Avast servers for all its products?
Great video and very useful. Hope you could monetize it!
I'm still confused on what it actually does
Probably only really old systems were possibly affected since it's the 32-bits version of CCleaner that was infected...
how safe is to use CCleaner on 2022? or better alternatives?
But what about mobile version of CCleaner?
gregorix 14 should be safe apple/android are very careful k about those thinngs
always use another firewall. dont let anything access internet that can function without internet.
So, SO glad I don't update CCleaner this time.
I stopped using CCleaner years ago, but do they have some kind of premium version? Was billing info compromised?
I have not updated or ran CCleaner in a long time, but not taking any chances, I uninstalled it. Bitdefender cleaning tool is good enough.
So… 600 seconds… that's like… 10 minutes!
That's a lot of time for what most people do, unless they have it running on the background.
Nice TH-cam algorithm on it's shinanigens again.
Um i have this on my computer...
Gabe Gnuch
Go to the techspot malware forums
5-6 months ago ,i dont use it
Your computer has been compromised.... FOREVER!
Hmm it did not pop up as a virus i have the cracked version on my computer not the offical one and i have not updated it yet.
Bah Haha cracked. Lol
Should I keep using Avast or should I switch to something else ? What would be a better alternative ?
Thank You for information! :)
So does any internet security softwares would remove it ,or i need something else ?
I won't worry, I have the best antiviruses EVER! Cisco, Morphisec, and Avast/Piriform. wait...
Avast: Yay we have CCleaner
CCleaner: *gets hacked*
Avast: I think we are f***ed and our severs got hacked who the hell hacked CCleaner
you ever tried iolo's anti-malware program. I always wanted to know if it actually works.
lazy man here dude, iolo software is a scam
The truth is that Ccleaner is actually useless. All the cleaning tools are already present in the PC. Like disk defragment, disk cleanup and you can manually delete temp files.
Thanks, all good
Good thing my AV has most features of CCleaner built in ;-)
Avast servers didnt hot hacked!
It was be4 avast bought Ccleaner.
Leo will never pin this comment thread.
I uninstalled the ccleaner. Now how do I check if backdoor has been established? I used officially the McAfee.
Love your videos! Keep it up!
Well, looks like it only worked on 32 bit systems. Use 64 bit. Also it only worked if you were logged in as admin. But I have to say I am almost always logged in as admin myself.
the 32bit instable version is affected and not the portable version is not affected then the 5.33 is only affected
So should I get c Cleaner now or no?
Awesome, great video!
my files were clean. aside for the installation file appartently. that one had a single trojan. what do i do? i've shreded the installation file, but does this mean the whole program is no longer safe?
i've run AVG, Malwarebytes and ADW_Cleaner at at least one occasion after the last Ccleaner update i believe, should this be okay?
Yes but why does all the antiviruses detected different malwares???
Ironic. He could save others from malware, but not himself.
I got fed up of the CCleaner updates every single time I opened it always wanted me to update. I figured it was just to remind me that I can purchase the premium version so I turned check for updates off. I'm trying something different now anyway.
Some people think they are safe while they are not running any antivirus. Truth is they are not, neither are the ones who do.
Hey Lio I have a huge question u may never see this comment but if u do
IS AVAST STILL SAFE!!!???
Tuckowplayzzz dude, is a pain in the ass, for uninstall it you need to: disable all the process and go I uninstall, but all the processes are there, even firewall, so you need to go to avast directory and delete all! BUT, it won’t let you delete because it automatically set an administrator folder which cannot be deleted! So you need to download another avast software, go to safemode and delete all the shit avast made
That moment when you realize that every PC in your school has CCleaner...
Bruh
What about all the other Piriform products like Speccy, Recurva , and Defraggler 32 and 64 bit?
What about em?
So if you're not using your admin account it was essentially harmless? I only use my Admin account on a fresh install after setting everything up just how I like it and doing all my updates I then create my standard user account disable the password so windows logs right in and then create 3 system images on 3 separate external drives then disconnect two of the drives.
@XeNoX no your English is great I understood you fine and it's awesome you speak two languages I couldn't say the same.
haven't seen this video yet but my bitdefender notified me that BACK DOOR EAGLE GET / CCLEANER had been deleted if i want to recover the original file. and it also showed up when i ran the registry scan. i deleted both.
Hi. My c cleaner takes 8 to 10 hours to " clean " my pc . Do you think it's compromised?
I almost got lucky by not updating my CCleaner for 2 years and then God knows what made me update it recently
How do I get rid of anything having to do with cleaner? I just downloaded it like 2 weeks ago so I definitely have the virus then.. I don’t want it but I know I can’t just delete the .exe file and then it’s gone. There is files in my system directory that I have to get rid of to right?
limited to 32bit version i read. dont use install version. use portable.
Leo; what versions of Ccleaner were bad?