CCleaner v5.33 32-bit compromised

spud17

Terry98 wrote: »

Thanks but I am running and have always run the 64 bit version of ccleaner and cannot understand why Malwarebytes picked up Floxit yesterday morning if the 32 bit version was only affected.

I don't think that you can chose which variant to install.
The download of CCleaner contains both 32bit and 64bit, it detects your bitness during installation.

GunJack

What he said ^^^^^^^^^

spud17

But it still doesn't explain why we have Defender and Malwarebytes detecting Floxif in the installation.
In my case Defender flagged both the installation and the downloaded installer.
Unless they are playing safe with the detection definitions and picking up anything with 5.33 installed.
But then this forum would be flooded from people who've missed the press releases, starting new threads about av's detecting trojans.

debitcardmayhem

spud17 wrote: »

But it still doesn't explain why we have Defender and Malwarebytes detecting Floxif in the installation.
In my case Defender flagged both the installation and the downloaded installer.
Unless they are playing safe with the detection definitions and picking up anything with 5.33 installed.
But then this forum would be flooded from people who've missed the press releases, starting new threads about av's detecting trojans.

They probably have updated their signatures spud, when I got my first email including the Floxif only 2 out of 57 on virustotal spotted it, just guessing of course
EDITED: Ooops re-ran the wrong one and have deleted the original ....now deleted the wrong info

donnajunkie

So I turn my pc on tonight for the first time in a few days and think I will update ccleaner as I heard there was a risk. I couldn’t even open it. My security stopped it telling me it was infected with some backdoor thing. It then proceeded to disinfect the system.
My question is can i feel confident all potential issues related to this have been resolved. Could this have been upto no good for a period before it got detected tonight?

Terry98

I think I have worked it out.

Malwayebytes quarantined the 5.33 file in the download folder.

I am not a techie but I would assume the exe file has both the 32 and 64bit versions.

Am I right in thinking the exe file is harmless until it loads?

I keep Ccleaner up to date but do not clear my downloads folder as much as I should!

donnajunkie

I decided to elbow ccleaner. Are there any decent alternatives that do a similar job? Deleted applications do have a habit of leaving behind registries and I used to use ccleaner to get rid.

esuhl

donnajunkie wrote: »

I decided to elbow ccleaner. Are there any decent alternatives that do a similar job? Deleted applications do have a habit of leaving behind registries and I used to use ccleaner to get rid.

You don't generally need to clean the registry. If you specifically want to remove old keys, I'd remove then manually.

spud17

Terry98 wrote: »

I think I have worked it out.

Malwayebytes quarantined the 5.33 file in the download folder.

I am not a techie but I would assume the exe file has both the 32 and 64bit versions.

Am I right in thinking the exe file is harmless until it loads?

I keep Ccleaner up to date but do not clear my downloads folder as much as I should!

If you look at my earlier post, it also deleted it out of my 'Download' folder.
Yes, .exe contains both 32bit and 64bit.

Terry98

spud17 wrote: »

If you look at my earlier post, it also deleted it out of my 'Download' folder.
Yes, .exe contains both 32bit and 64bit.

Thanks I must have been half asleep and missed your post completely :eek: