Godlike Productions - Discussion Forum
Users Online Now: 1,535 (Who's On?)Visitors Today: 689,138
Pageviews Today: 1,471,673Threads Today: 718Posts Today: 12,364
07:17 PM


Rate this Thread

Absolute BS Crap Reasonable Nice Amazing
 

Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised

 
Cartel™
Offer Upgrade

User ID: 27282716
Canada
09/18/2017 08:12 AM
Report Abusive Post
Report Copyright Violation
Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
In another large-scale attack that's bound to increase users' awareness on heir systems' security, news have broken out that Piriform, creators of the popular CCleaner software tool (estimated to be instaled in some 130 million devices), have suffered a hack on their servers that compromised some installer packages of the software. Piriform, which was purchased by popular security software company Avast last July, was hacked last August, and the changes to the installer packages could potentially allow hackers to control the devices of more than two million users, the company and independent researchers said on Monday.

Specifically, hackers embedded remote administration tools on CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191, tools that then tried to connect to several unregistered web pages, looking to download additional unauthorized programs, according to Cisco's Talos security research unit.

[link to www.techpowerup.com (secure)]

dont uninstall..I dunno about other os but windows I'd just go to the program files and delete everything except maybe custom ini's.
Otherwise nuke the folder.
sometimes running uninstall triggers more damage cause the uninstaller is infected too.


The malicious payload creates the Registry key HKLM\SOFTWARE\Piriform\Agomo: and used it to store various information.

Last Edited by Cartel™ on 09/18/2017 10:01 AM
Imagine a group of people so disgusting they have to make laws preventing you from hating them
:candp2:
streetsahead

User ID: 75230517
United States
09/18/2017 08:16 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
Thanks for the post. Been using this for over a decade. I don't think I've updated all summer though. Lucky me :)
You'll never know where its at until you learn where its from.
Anonymous Coward
User ID: 72322921
United States
09/18/2017 08:20 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
piece of shit program
Cartel™  (OP)

User ID: 27282716
Canada
09/18/2017 08:22 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
piece of shit program
 Quoting: Anonymous Coward 72322921


syar
Imagine a group of people so disgusting they have to make laws preventing you from hating them
:candp2:
Cartel™  (OP)

User ID: 27282716
Canada
09/18/2017 08:24 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
Thanks for the post. Been using this for over a decade. I don't think I've updated all summer though. Lucky me :)
 Quoting: streetsahead


I'm still using a 2014 version on purpose.
Soon as version 4.15 came out it went to shit.

Last Edited by Cartel™ on 09/18/2017 08:28 AM
Imagine a group of people so disgusting they have to make laws preventing you from hating them
:candp2:
Face Palmer

User ID: 43285854
Germany
09/18/2017 08:25 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
thanks.
"The world will soon wake up to the reality that everyone is broke and can collect nothing from the bankrupt, who are owed unlimited amounts by the insolvent, who are attempting to make late payments on a bank holiday in the wrong country, with an unacceptable currency, against defaulted collateral, of which nobody is sure who holds title."

Never attribute to malice that which is adequately explained by stupidity.

The woman who is not pursued sets up the doctrine that pursuit is offensive to her sex, and wants to make it a felony. No genuinely attractive woman has any such desire. - H.L. Mencken, In Defense Of Women
Anonymous Coward
User ID: 75473710
United Kingdom
09/18/2017 08:28 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
Wow, my version was actually the hacked version. Thanks for the heads up, OP.
Anonymous Coward
User ID: 75544799
United States
09/18/2017 08:29 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
Running v5.32.6129
Keep rejecting updates.
Has this version been compromised?
Anonymous Coward
User ID: 72322921
United States
09/18/2017 08:32 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
piece of shit program
 Quoting: Anonymous Coward 72322921


:syar:
 Quoting: Cartel™


2 million ppl now infected, most will never know. shit app. tens of apps can do the same thing, their popularity is stupid group think mob rule.
Anonymous Coward
User ID: 75544573
Australia
09/18/2017 08:36 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
I mainly use linux, but i still have a windows partion on another pc - I always used ccleaner, thank god i havent updated it in a few yrs- found another program called ccenhancer which adds heaps of other stuff to ccleaner..

[link to singularlabs.com (secure)]

its pretty sweet- but not by piriform-

Also tried Singularlabs 'system ninja' which is cool too.
Anonymous Coward
User ID: 70831727
Canada
09/18/2017 08:45 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
In another large-scale attack that's bound to increase users' awareness on heir systems' security, news have broken out that Piriform, creators of the popular CCleaner software tool (estimated to be instaled in some 130 million devices), have suffered a hack on their servers that compromised some installer packages of the software. Piriform, which was purchased by popular security software company Avast last July, was hacked last August, and the changes to the installer packages could potentially allow hackers to control the devices of more than two million users, the company and independent researchers said on Monday.

Specifically, hackers embedded remote administration tools on CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191, tools that then tried to connect to several unregistered web pages, looking to download additional unauthorized programs, according to Cisco's Talos security research unit.

[link to www.techpowerup.com (secure)]
 Quoting: Cartel™


Great find! Thanks for the info.
redhed6971

User ID: 72089733
United States
09/18/2017 08:46 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
Running v5.32.6129
Keep rejecting updates.
Has this version been compromised?
 Quoting: Anonymous Coward 75544799


Same one i'm running. According to the article it is CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191, tools
“Quite an experience to live in fear, isn't it? That's what it is to be a slave.”
"Hello, I need a replacement filter for a Hoover Max Extract 60 Pressure Pro."
“You actually slaughter each other over affairs of the spirit.” Da’an Earth-Final Conflict
Anonymous Coward
User ID: 56915284
United States
09/18/2017 08:47 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
So besides uninstalling the program what should be done? Is the updated version now safe?
Anonymous Coward
User ID: 29523052
United States
09/18/2017 08:52 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
Great post OP

:pineit:
LunaFlora

User ID: 75321606
Canada
09/18/2017 08:55 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
bump following
LunaFlora
Always Looking

User ID: 56915284
United States
09/18/2017 08:58 AM

Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
Good article here on PC cleaning tools.

[link to www.howtogeek.com (secure)]
Truth and Facts - The two words liberals hate most!

Suffering is burning emotional energy on the uncontrollable!

The architect of the universe did not build a stairway to nowhere!
Cartel™  (OP)

User ID: 27282716
Canada
09/18/2017 09:31 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
bump

Last Edited by Cartel™ on 09/18/2017 09:32 AM
Imagine a group of people so disgusting they have to make laws preventing you from hating them
:candp2:
TheLordsServant

User ID: 63572364
United States
09/18/2017 09:32 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
So besides uninstalling the program what should be done? Is the updated version now safe?
 Quoting: Anonymous Coward 56915284


[link to blog.talosintelligence.com]
I am a humble Servant of the one True Living God.
Anonymous Coward
User ID: 75545328
United States
09/18/2017 09:57 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
piece of shit program
 Quoting: Anonymous Coward 72322921


:syar:
 Quoting: Cartel™


2 million ppl now infected, most will never know. shit app. tens of apps can do the same thing, their popularity is stupid group think mob rule.
 Quoting: Anonymous Coward 72322921

firefox is another communist piece of shit program.

Shit from day 1.
Anonymous Coward
User ID: 74915389
United States
09/18/2017 10:07 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
Thanks for the post. Been using this for over a decade. I don't think I've updated all summer though. Lucky me :)
 Quoting: streetsahead


I'm still using a 2014 version on purpose.
Soon as version 4.15 came out it went to shit.
 Quoting: Cartel™


Given a choice I always opt for the older "tried and true" versions.

There is hardly ever any reason to install the latest versions unless you like beta testing.

For example I've used Acronis 2011 backup software for years, but I got a new hard drive and I installed the 2017 version and it's all messed up. It insists on running all the time and now it'll only format my new 4TB as a 2TB!
Skeeter Barnes

User ID: 73617375
United States
09/18/2017 10:09 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
this program sucks. i installed it and it added a spam ad extension on my browser.
That little girl from Salt Lake City. Two quart legs and two rubber titties. Loves electricity, but she burns off gas. Got a V8 pussy and a Cadillac ass.
Anonymous Coward
User ID: 75431784
United Kingdom
09/18/2017 10:11 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
Got the latest version and checked the registry, nothing there....
Anonymous Coward
User ID: 40169223
United States
09/18/2017 10:11 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
I'm running version v5.34.6207

I'm guessing my version is safe, I hope?
Anonymous Coward
User ID: 75431784
United Kingdom
09/18/2017 10:12 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
this program sucks. i installed it and it added a spam ad extension on my browser.
 Quoting: Skeeter Barnes


untick stuff instead of clicking next like a loon....
Anonymous Coward
User ID: 73697154
United States
09/18/2017 10:13 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
Mine is v5.34.6207 (64-BIT)
Concorde Warrior F-BVFA

User ID: 75002812
France
09/18/2017 10:14 AM

Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
In another large-scale attack that's bound to increase users' awareness on heir systems' security, news have broken out that Piriform, creators of the popular CCleaner software tool (estimated to be instaled in some 130 million devices), have suffered a hack on their servers that compromised some installer packages of the software. Piriform, which was purchased by popular security software company Avast last July, was hacked last August, and the changes to the installer packages could potentially allow hackers to control the devices of more than two million users, the company and independent researchers said on Monday.
 Quoting: Cartel™


I have an old version.

Version 3.12

I always refused to update each time I receive the update boxes.

I should still be safe with the old version? I am running my puter on XP Pro SP3.

Viva XP

hf

Last Edited by Concorde Warrior F-BVFA on 09/18/2017 10:15 AM
I came. I saw. I Concorde.

For once you have tasted Concorde you will walk the earth with your eyes turned skywards, for there you have been and there you will long to return.

"I would say today we can integrate all religions and races EXCEPT ISLAM."
Singapore's founding father Lee Kuan Y ew
The Comedian :D

User ID: 75390242
United States
09/18/2017 10:36 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
Ubuntu doesn't need a CCleaner!
5a

tuxjoker
Saint Comedian, Patron Saint of Bringing the Butthurt to Dipshits

‘There are some assholes in the world that just need to be shot.’ - General Mattis, USMC, Secretary of Defense

[link to www.godlikeproductions.com]

"Subterfuge and social pressure are the wheel and fire of the 21st century" - Some asshole

Legal Disclaimer: All comments are intended as humor and/or fiction and not advice, and not to be confused with any event or person, living or dead.
The Comedian :D

User ID: 75390242
United States
09/18/2017 10:37 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
this program sucks. i installed it and it added a spam ad extension on my browser.
 Quoting: Skeeter Barnes


Read the prompts, noob.
Saint Comedian, Patron Saint of Bringing the Butthurt to Dipshits

‘There are some assholes in the world that just need to be shot.’ - General Mattis, USMC, Secretary of Defense

[link to www.godlikeproductions.com]

"Subterfuge and social pressure are the wheel and fire of the 21st century" - Some asshole

Legal Disclaimer: All comments are intended as humor and/or fiction and not advice, and not to be confused with any event or person, living or dead.
Anonymous Coward
User ID: 75494923
United Kingdom
09/18/2017 10:39 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
no warning on their twitter account at all...
Anonymous Coward
User ID: 67929928
United States
09/18/2017 10:44 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
5.33.6162 here and nothing in my registry
Skeeter Barnes

User ID: 73617375
United States
09/18/2017 10:47 AM
Report Abusive Post
Report Copyright Violation
Re: Piriform Hacked, CCleaner August Versions (v5.33.6162) Injected, Compromised
this program sucks. i installed it and it added a spam ad extension on my browser.
 Quoting: Skeeter Barnes


Read the prompts, noob.
 Quoting: The Comedian :D


I installed the app to my android phone that ran chrome. It installed the extension by itself on my computer browers since they are both using the same chrome account, cuck
That little girl from Salt Lake City. Two quart legs and two rubber titties. Loves electricity, but she burns off gas. Got a V8 pussy and a Cadillac ass.





GLP