Jump to content
paulderdash

HKLM\SOFTWARE\WOW6432NODE\PIRIFORM\AGOMO

Recommended Posts

I have Windows x64 and (now) CCleaner 5.34 - and up-to-date CCleaner Cloud(!) - and do not have the HKLM/SOFTWARE/Piriform/Agomo key.

But MB3 scan now picks up the following threats:

Registry Key: 1
Trojan.Floxif.Trace, HKLM\SOFTWARE\WOW6432NODE\PIRIFORM\AGOMO

Registry Value: 1
Trojan.Floxif.Trace, HKLM\SOFTWARE\WOW6432NODE\PIRIFORM\AGOMO|TCID


But these appear to be related to CCleaner Cloud (previously Agomo) account, because after quarantining these, I had to re-sign in to my account, so I suspect these may be FPs.

MB3.txt

Share this post


Link to post
Share on other sites

Hi,

Did you have the compromised version before? Because this detection was only added since very recently to deal with registry traces of the compromised version.

Share this post


Link to post
Share on other sites

I did have CCleaner 5.33 installed, but x64 version so I do not believe I was compromised.

These keys seem to be due to CCleaner Cloud. I presume I did have the compromised version of that, but it has been auto-updated to clean version.

If I quarantine these keys, after a restart I have to login to CCleaner Cloud account again and looks like keys are recreated.

I will run scan again to see if it gets picked up again.

 

 

 

Share this post


Link to post
Share on other sites

Hmm, I'll do some more investigation about those keys. Could indeed be possible these are created by default by Ccleaner Cloud.

 

Share this post


Link to post
Share on other sites

Scanned again and now it's not detected, so cleanup was good. Seems to be picked up during memory scan.

Well done MB3. Thanks Ms Moes.

Share this post


Link to post
Share on other sites

Ok, we should be good. I verified myself with latest version of the Ccleaner Cloud and the value TCID is indeed not created under that key.

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.