Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised

9 posts · originally from https://geek.digit.in/community/threads/piriform-hacked-ccleaner-august-versions-v5-33-6162-injected-compromised.201552/

Specifically, hackers embedded remote administration tools on CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191, tools that then tried to connect to several unregistered web pages, looking to download additional unauthorized programs, according to Cisco's Talos security research unit. Users would have noticed nothing wrong on their systems, since the entire malicious string of code was run under CCleaner's authentic digital certificate.

CCleaner does not feature automatic updates, so if you make use of CCleaner, make sure to check your software version, and force an update through the app. Or better yet, make sure to uninstall the app and install the new, corrected version, which currently stands at 5.34.6207.

Source: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised

Isn't CCleaner snake oil software anyway?

It isn't snake oil, but its "registry cleaner" function is best avoided.

For cleaning temp files without manual search & delete it is one of the best around.

Even for that,I suggest using Tree Size free version & decide accordingly.Any software that decides for itself what to delete is not such a good idea in era of win 8.1/10.

CCleaner Malware Incident - What You Need to Know and How to Remove

There is BleachBit, which works well on Linux, if you need an alternative.

Clean Your System and Free Disk Space | BleachBit

Update it to 5.35 :emoji_relaxed:

Updating won't reverse any damage already done by malware,use good AV/AVs to scan entire system or preferably format & reinstall or restore from a system image backup made before installing the compromised version(hard to do unless one makes a system image regularly & keeps at least last 3 months of such images).

There was a guide by BleepingComputer which lists the steps to remove infected reg keys