CCleaner hacked, Replaced by Malware!
HTML-код
- Опубликовано: 21 авг 2024
- CCleaner, the popular junk removal tool by Piriform, now under Avast, was hacked and replaced by malware! This supply chain attack is totally undetectable by normal users as the backdoor installs and activates silently. Strongly recommend checking your CCleaner version and scanning your system, as almost a million people are affected by this attack.
This hack was discovered by security researchers at Cisco Talos.
-------------------------------------------
Thanks for watching! If you like what you see, check out the links below.
Patreon: / tpsc
Forum: forum.thepcsec...
Twitter: / leotpsc
Facebook: / tpscyt
![[TF2] The Russian Bear Trap](http://i.ytimg.com/vi/YFNSwz2_rOA/mqdefault.jpg)
Wow. A lot of people in the comments are dumb. This video is from 2 years ago and is talking about a very specific version of the software. This issue has been fixed for a long time and the software is currently safe as of 11/26/2019. There’s people from like 3 days ago thinking that this issue is currently happening and freaking out. Please check the date of the videos you are watching before commenting like it’s current news or something.
The reason malware and viruses exist is because the people you mention exist. Some people derive all their functions from emotion rather than being logical and pragmatic.
I trust bob here
I’m with bob
blame youtube recommendations for recommending random videos
@@MycketTuff so if he died any virus would just delete itself?
I was blown away by this news. I've been using CC Cleaner for years.
Thank you so much for this video. It is the amazing people like you who keep others, like your viewers, informed, and safe. If it weren't for this very helpful video I would have clicked on that "Get Update" button, and have to give up my freedom on my pc. Thank you so much for staying active on this channel to help others.
god is so hard to have a good software these days
bleachbit is superior to ccleaner
Cleanup.exe
This is why I always forget to update CCleaner :3
lol same here. I have version 5.23. A guy at my job had this version installed on his PC. Seems like I should wipe and reinstall windows on his PC
lol i use old version from like 2013 or something.
Same here - I'm using 5.22 right now
I just use Cleanup.exe
Free and doesn't have any annoying stuff
RUclips, why you recommended me an obsolete video
Information is never obsolete. Just because it's no longer a current issue, doesn't mean it should be ignored. It makes people aware of the possibility that other threats could exist somewhere, and gives a resource to check them, such as VirusTotal in this case. Not saying this is a cure-all by any means, but is is something to pursue, should a person have problems with other software. As for recommendations, it follows the subject, not the date. You knew this video was two years old before you posted.
Emanuel Garses, why you click on 'obsolete' video
I am so glad I have not updated ccleaner for months!
Why is this getting reccomended to me two years after
I wonder too lmao
Guy selling some security (not sure service or software) and quacking nonsense for naive and computer illiterate, obviously hoping we all go: “OMG, OMG, Ccleaner is hacked! Its the end of the world as we know it! There is no choice, but we all need to run and buy this little Micky Mouse crapware (he must be selling)! 0:45 Quote: “now I indulge you take a look at this file and tell me its malware”. Well I WILL take a challenge! Feel free to send me and I tell you! Its called digital signature! Duh! Insulting part is he thinks we don't know!!! Go all through properties didn't even mentions certificate! What a quack! Hate people who feed on naive! Whatever this character sells don't buy it! He is not honest! Most quality security related products nowadays you can get for free and most IT professionals don't even use Anti Viruses. It's lame defense for totally illiterate which WILL NOT protect you against malware anyway. THE ONLY THING that really works is knowledge and this you can get for absolutely free. If starving for professional level academic knowledge presented in lay terms, listen to GRC's “Security NOW” podcasts, go check their website. They advocating free, open source, quality solutions. You will grasp many subjects on academic level, learn robust ways of protecting yourself, even learn how to hack lightweight on the way, without becoming software engineer. This guy here is for old retired ladies and people learning their ABC (not to offend seniors or whoever might be leaning read and write).
@@robertkoowalski1014 wow thats a long quote! I mean hopefully the creator dont remove it.
Its just a dumb thing ik
1:25 Avast detected its own software :D
I never liked this app, I always felt fishy about it.
Abdrouf what are you using then
-Muhammad Hosny- I rarely use it, I just install clean Un install. or I manually delete temp files.
You are not alone
3060PlayZ does it make pc smoother
well its been patched and its okay now.
So that's what happened to my old pc
Discovering this after years... I feel dumb.
TNice tutorials might just be the first motivational comnt ive ever seen on a tutorial vid. ga thanks bro
dude thanks so much for this alert. i will check my computer when i get home... hoping for the best...
turns out i have the 64 bit version, forgot which one i'd installed. malwarebytes didn't pick up anything and i don't see anything unusual. but i don't know anything about computers so not sure what else to look for
knight solaire
I have windows 10 and i have check it with virus total website, and i do not have any infections on my system
hey guys i'm sorry i forgot about this comment but thought i'd share an update. at the time i checked my systems everything was good, but a month later i powered on my laptop (secondary device), did a scan and turns out it had been infected by ccleaner. fortunately malwarebytes free was able to remove the infection, but it took forever (several days) and i'm still worried about what info might have been stolen.
so yeah... no more ccleaner for me >:\ shame bc i really liked that program.
That is actually scary. CCleaner was a program that I used a lot until I switched to BleachBit not too long ago. I scanned my computer with Bitdefender and it blocked and killed the threat with no issues when I heard about this news. It's still scary that this went on as long as it did.
Thank you Leo for uploading this when I thought about downloading this again after I fucking reset my computer and put Avast on my computer. Now I am not gonna use Avast anymore instead, I am gonna use Avira. Thank GOD I didn't get ccleaner and that I saw this video first before downloading it.
*Sigh* Twasn't Avast's fault. The hack happened before they acquired it.
oops
Thank you for informing us with important news. You're making great videos.
To be fair the icon and UI in general always looked pretty shady to me
This tutorial is amazing and you are really good at teaching !! great job sir !
Respect to your good work, thanks a lot
Thank you for the information! I didn't know that happened. I will be informing my teacher about it, because he always shows the first grades what useful tools you can use to speed up your PC at my high school. He also told us about CCleaner back when it was actually legit so.. Thank you again! Keep it up bro!
2:00 The funniest part is that avast detected the malware in ccleaner according to virustotal
I remember having CCleaner on an old laptop, and already thought it was malware in the first place.
So, RUclips disabled my alerts for your channel, and I had this version of CCleaner the entire time and never knew it was compromised why RUclips turned my alerts off and un-subbed me from your channel I have no idea, but my OS is Windows 10 64 Bit and as far as I can tell the registry entry the virus makes is not in my registry, and I'm pretty sure by default my PC ran the 64bit exe from the recycle bin shortcut which was supposedly not compromised.
Hopefully Comodo was updated to detect these as I'm going to do a full scan now just in case.
No worries. Brother windows 10 even such a Noob malware cannot make a backdoor on your PC. No worries. Chill down just get a bought good total antivirus and clean off ccleaner which I know you had already done it. Well done acting amazing here. Byee
Oh your PC cannot be affected unless your window version is not good. Window 10 PC is rather good itself. And more or less you are safe from Noob malware like ccleaner. Well use a good av and check your PC again some useless malware are still inside running on your PC slowing or bugging your system out but relax they aren't used by any outsiders. 😂 chill.
only the 32 bit software was compromised anyways, if you downloaded the 64 bit version it's 100% safe.
Bro I really do appreciate you for this help, Thanks! I subscribed and Liked the video.
I checked - everything is clean
BROTHER, YOU ARE THE BEST!!! You oooh really helped me!! THANK YOU VERY
Hi Leo, I think that Avast products may have been compromised as you mentioned even Comodo is recognizing CCleaner as not safe. As a safe guard I could use something like Bleachbit for the time being . The problem if you had this installed on your system may have already reported back to the hackers all your information about your system. You may have to restore you system back as a counter measure. Thanks for the information.
Really a highly rated work, sir.
At this point, this video is 4 years old and, IMHO, should either be updated or deleted. Most software companies work hard to upgrade and improve their products; obviously, the same can't be said of reviewers.
Oh so that's why I got a notification from avira about that last night, I was so confused.
Avira got a new UI!
www.avira.com/en/free-antivirus-windows
Talk about timing.
It's about time.
Only took 10 years!
.33 was hacked right?
I had .32 so I am not infected right?
You are safe.
Sumedh Patil check it
99.9% safe
5.33 is the affected version. If you are using 5.32 or 5.34 and higher, the backdoor isn't there. Also, to be more specific, only certain versions were hit: the regular 32-bit version (5.33.6162) and the cloud version (1.07.3191).
electronicwiz1 julia
Funny I almost updated this a few days ago..hopefully what I have is clean..thanks Leo!!
Guys, this video is 100% genuine.
Avira saw it trying to auto-update. It locked. It was the Floxif infected version. Nice video. Now I installed the fixed version(latest update) and that seems to fix it.
I've used CCleaner for years! Shame to see this happen to a reliable program, good thing my copy is safe
Thanks RUclips for giving me a heart attack.
Roxas The Nobody same
Guys this is from 2 years ago
@@swag_messiah345 indeed. That's why I thanked RUclips for the heart attack thanks to this recommendation.
we know?
@Myles yas
This is a piece of important information. I don't really care if these issues are already fixed, but it is just good to uninstall because it is taking some of my space anyway.
My current versions I have on my laptop and desktop are clean. I'm now too scared to update them because there's a new version out, haha. Thank you for the information.
thanks bro regards from Syria
I have not updated or ran CCleaner in a long time, but not taking any chances, I uninstalled it. Bitdefender cleaning tool is good enough.
Man, thank you very much for alerting me... I did not have checked my computer, but I have bitdefender TS, so I should be okay... If I saw it right, it does detect it :)
Some people think they are safe while they are not running any antivirus. Truth is they are not, neither are the ones who do.
I am still using CCleaner, I installed that program some months ago in 2019 (I think). So therefore, I don't think I need to uninstall it since you made that video in 2017.
Yep, the had been only one infected version, in 2019 we're fine with Ccleaner
After replacing ccleaner with bleachbit in windows recently for annoying adds and seeing this video after using ccleaner for like more than 5years my feeling is -> I want to be a cyber security engineer :)
Nice RUclips algorithm on it's shinanigens again.
Was it not only 32-bit systems that were affected by this?
Only 32-bit systems were affected, if you use a 64-bit you should be fine.
Another excellent video, one of the best channels on youtube.
My system got Crashed and missing dll files 😢 , RIP CCleaner.
So, SO glad I don't update CCleaner this time.
So Leo, you didn't address the real question: *what else is on the Avast "supply chain" server that is the **_real_** malware payload?* :^) What if this was the decoy? Have you downloaded and checked *all* of the other app that they offer?
ruclips.net/video/ztVMib1T4T4/видео.html
Avast servers were not hacked | Priform servers were.
blog.avast.com/update-to-the-ccleaner-5.33.6162-security-incident
the breach preceded *(before)* the take-over of Piriform by Avast. [
Sorry, _my comment comes true,_ *read carefully:*
www.bleepingcomputer.com/news/security/ccleaner-hack-carried-out-in-order-to-target-big-tech-companies/
obsessed with soft design now and more obsessed with cool scales Nd stuff.
Avast: Yay we have CCleaner
CCleaner: *gets hacked*
Avast: I think we are f***ed and our severs got hacked who the hell hacked CCleaner
But what about mobile version of CCleaner?
gregorix 14 should be safe apple/android are very careful k about those thinngs
Force stop it on task manager and delete it all. Or factory reset.
Um i have this on my computer...
Gabe Gnuch
Go to the techspot malware forums
5-6 months ago ,i dont use it
Your computer has been compromised.... FOREVER!
Hmm it did not pop up as a virus i have the cracked version on my computer not the offical one and i have not updated it yet.
Bah Haha cracked. Lol
Love your videos! Keep it up!
Glad I kept an older version (3 something), just checked and all good!
hello update 10/11/2018.
I did a scan with virustotal he would not have any virus for this application thank you very much to you A-P Racicot
if u read about it that happened before but they fixed it i cant stop using ccleaner lol i checked too just in case.
So glad I saw this, I was just about to install this
Lol. Plebs think: OHHH I CANT GET INFECTED! IM NOT STUPID!
before:
Shell explorer.exe
after:
Shell userinit.exe
That's how When You Open it CCleaner and restart.
The truth is that Ccleaner is actually useless. All the cleaning tools are already present in the PC. Like disk defragment, disk cleanup and you can manually delete temp files.
I won't worry, I have the best antiviruses EVER! Cisco, Morphisec, and Avast/Piriform. wait...
Thanks, all good
Leo, for a revealing experiment about Avast security, determine the date of the CCleaner hack, then run a contemporary (that is, an immediately post-hack) version of Avast security updates on an infected machine running CCleaner. Would Avast detect anything on the CCleaner-afflicted machine?
Good thing I stopped using Ccleaner
Thanks. I have C Cleaner but never have used it so I will be uninstalling it right away.
this video is outdated as fuck it was just one old version of it
this was in 2017 and was patched years ago
Awesome, great video!
Probably only really old systems were possibly affected since it's the 32-bits version of CCleaner that was infected...
I was hoping you would touch on this topic!
Thank You for information! :)
CCleaner 5.33.6162 32-bit version and CCleaner 1.07.3191 cloud version were affected.
Luckily i refuse to update ccleaner, i had 5.3 and i backed up the 5.3 file :D
the 32bit instable version is affected and not the portable version is not affected then the 5.33 is only affected
The flowchart says it only creates the backdoor if it detects you're an admin. Running as a standard user, which you'd be doing anyways if you cared about security, is all it would take to prevent being hacked.
I checked mine in this website and I found 0 malware. (Does this mean it’s legit?)
It's normal
The .33 version has been the only one infected
.34 version and nexts are safe
I almost got lucky by not updating my CCleaner for 2 years and then God knows what made me update it recently
That moment when you realize that every PC in your school has CCleaner...
Bruh
Hey Lio I have a huge question u may never see this comment but if u do
IS AVAST STILL SAFE!!!???
Tuckowplayzzz dude, is a pain in the ass, for uninstall it you need to: disable all the process and go I uninstall, but all the processes are there, even firewall, so you need to go to avast directory and delete all! BUT, it won’t let you delete because it automatically set an administrator folder which cannot be deleted! So you need to download another avast software, go to safemode and delete all the shit avast made
The implications for Piriform? This company produces good software, but a security compromise can wreck that hard-earned reputation. Does Piriform use Avast servers for all its products?
Glary soft utilities after the news 📈📈
I'm still confused on what it actually does
Just to let everyone know it's version 3.33 and before 3.34 and later are not affected. According to bleeping computer at least.
Probably the best app from iobit :)
Can anything that is convent these days be innocent?
always use another firewall. dont let anything access internet that can function without internet.
So… 600 seconds… that's like… 10 minutes!
That's a lot of time for what most people do, unless they have it running on the background.
haven't seen this video yet but my bitdefender notified me that BACK DOOR EAGLE GET / CCLEANER had been deleted if i want to recover the original file. and it also showed up when i ran the registry scan. i deleted both.
Ironic. He could save others from malware, but not himself.
It would also surprise me if more than one percent of the users had any real need of a program like CCleaner to begin with. Good security also means dont have software installed that you don't need.
I got fed up of the CCleaner updates every single time I opened it always wanted me to update. I figured it was just to remind me that I can purchase the premium version so I turned check for updates off. I'm trying something different now anyway.
Ive ran Malwerbites multiple times, nothing detected, but im still worried
So that's why there was a popup update on my ccleaner. Usually, you have to go to the website to update to the new version. Instead, it just updated on the spot. I have the 64 bit version, but I had issues updating so I had to uninstall and reinstall it.
The update pop up is nothing new, it is just a way to inform users of an update.
Yeah, there's a popup that tells the user of an update, but this time it was different because it started downloading and installing the update without having to visit the website.
MalwareBuster.com removed it for me. Its crazy that CCleaner had malware.
Great video and very useful. Hope you could monetize it!
brother thanks for share this best Crack
Have you informed CCleaner about this?
If not, then please do so
Imagine if it would of been a botnet. that shit would of been real dangerous with millions of slaves
I won’t trust it anymore, when I try to clear more space I notice it kept showing no response on every folder I click and then freezes