Ccleaner compromised - check what version you're using!

[van p]

Thanks to John connor and helloimustbegoing. I'll look into both those products.

[Tomaso]

CCleaner malware outbreak is much worse than it first appeared:
https://arstechnica.com/information-tec ... -appeared/

Now that it's known the CCleaner backdoor actively installed a payload that went largely undetected for more than a month, Williams renewed his advice that people who installed the 32-bit version of CCleaner 5.33.6162 or CCleaner Cloud 1.07.3191 reformat their hard drives.
He said simply removing the stage-one infection is insufficient given the proof now available that the second stage can survive and remain stealthy.

[satrow]

CCleaner malware outbreak is much worse than it first appeared:...

Sure it is, for at least 20 computers all belonging to 8 of those 20 companies listed, over the last 4 days out of the 31 that the server was active. No computers from outside of that select group of companies are known to have been infected.

So for some 2-300, maybe more, maybe less, out of the ~3,000,000 machines that visited, most likely all from those same 20 companies, it's much worse.

For the vast majority of infected x86 machines, they're in exactly the same position as they were in before these latest revelations - they don't have the secondary infection.

Eye-catching headline though.

[Tomaso]

Don't install or upgrade to CCleaner 5.45:
https://www.ghacks.net/2018/08/01/cclea ... t-install/

CCleaner users who run the new release may notice two changes immediately: It is nearly impossible to disable the monitoring part of CCleaner (Active Monitoring), and there are not any privacy settings anymore in the free version of the program.

[back2themoon]

Yes, I'm done with CCleaner. Switched to BleachBit, not as fancy but does the job and is not a data collector.