Security Notification for CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191

[hayc59]

Version 5.33 of the CCleaner app offered for download between August 15 and September 12 was modified to include the Floxif malware, according to a report published by Cisco Talos a few minutes ago.

More at CCleaner Compromised to Distribute Malware for Almost a Month.  Also see Piriform - Security Notification for CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 for 32-bit Windows users and Cisco's Talos Intelligence Group Blog: CCleanup: A Vast Number of Machines at Risk.

[biomembrain]

Should I reinstall my operating system. I think I installed this version. I did remove something the worm with Malwarebytes, however I feel that it's probably still hidden on my system somewhere.

What should I do?

[hayc59]

Bio, Hello I am ok but you may want to read some info:
 http://blog.talosintelligence.com/2017/09/avast-distributes-malware.html

Maybe uninstall that version run a few scans with MWB program and install the latest version

[hayc59]

Quote

Again, we would like to apologize for any inconvenience this incident could have caused to our clients; we are taking detailed steps internally so that this does not happen again, and to ensure your security while using any of our Piriform products. Users of our cloud version have received an automated update. For all other users, if you have not already done so, we encourage you to update your CCleaner software to version 5.34 or higher, the latest version is available for download

From this page and at the bottom of the page is a download link for the latest version

http://www.piriform.com/news/blog/2017/9/18/security-notification-for-ccleaner-v5336162-and-ccleaner-cloud-v1073191-for-32-bit-windows-users

[pondus]

Update to the CCleaner Security Incident  

https://blog.avast.com/update-to-the-ccleaner-5.33.1612-security-incident

https://forum.avast.com/index.php?topic=208612.msg1421249#msg1421249

 

Edited September 19, 2017 by pondus

[pondus]

Progress on CCleaner Investigation  >>  https://blog.avast.com/progress-on-ccleaner-investigation

 

 

[pondus]

Technical update and ongoing analysis of the APT security incident  >>  https://blog.avast.com/avast-threat-labs-analysis-of-ccleaner-incident