Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Malware identified in CCleaner 5.33

blog.talosintelligence.com

Post reply on HN
Print view View original

151–160 of 229 posts

Re: Malware identified in CCleaner 5.33

#151

Post by Moter8 »

Cthulhu_ wrote: post #73
josefresco wrote: post #68

Earlier quoted context omitted.

CCleaner is not an Anti-Virus. It does not run in the background (at least the free version) and will not slow your PC. It helps users locate and remove temporary/cache files buried in the OS to free up disk space. It is very useful - even for pros. Defender will not do this.

CCleaner does sell a bit of FUD though - "your computer is slow, use us so it goes faster". I don't think "crap" is causing significant slowdowns anymore, maybe frees up some disk space but nothing that the OS can't do itself either.

Deactivating that programs start on boot, maybe?

Re: Malware identified in CCleaner 5.33

#152

Post by omginternets »

superasn wrote: post #107
omginternets wrote: post #60

Earlier quoted context omitted.

ElementaryOS [0] prides itself in it's UI. Granted, this is very much a matter of taste, but if you're into the whole Mac look-and-feel, you might like it. But frankly I find the Gnome-Shell desktop to be beautiful. Maybe try Ubuntu-Gnome? [1] [0] https://elementary.io/ [1] https://ubuntugnome.org/

Elementary os looks beautiful. This is exactly the kind of stuff i found missing, will definitely install it today.

Great! If Elementary ends up not being to your tastes, do try Gnome-Shell. The UI is a bit "different", in the sense that it tries to innovate in quite a few places, but it's definitely pretty.

Re: Malware identified in CCleaner 5.33

#153

Post by Crespyl »

0xabe wrote: post #58
julianj wrote: post #48

Earlier quoted context omitted.

Give Ubuntu desktop a try. The installer allows you to run the OS live without installation. You can use this to see if Ubuntu is something you may be interested in.

My experience with Ubuntu (xubuntu 16.04.x) is that you really need a modern Nvidia card to get high/native resolution. Especially for someone who wants to run 3 monitors.

I'll add the caveat that for HiDPI displays you're still likely to run into scaling issues, particularly if you have differently sized displays. I hear that for some specific cases Ubuntu/Gnome 3 handle things acceptably, but there's still a lot of rough edges (not that Windows doesn't still have problems here too).

Re: Malware identified in CCleaner 5.33

#154

Post by Crespyl »

floatboth wrote: post #119
ikurei wrote: post #115

Earlier quoted context omitted.

Don't you need an at-least-mediocre GPU to get high resolution on 3 monitors on any OS? I wouldn't connect 3 high resolution monitors to a Windows or Mac machine with no GPU.

Modern machines that seemingly have "no GPU" have an integrated GPU that's powerful enough for driving multiple monitors, desktop compositing and rendering some 3D (modern games at 720p, older games at higher resolution).

Does AMD do this or is that still just an Intel thing?

Re: Malware identified in CCleaner 5.33

#155

Post by dkarl »

josefresco wrote: post #68
happy-go-lucky wrote: post #23

As a kid, the only OS I was aware of was Windows. Once, my computer was infected to the point where it was almost unusable. A more experienced friend suggested a non-free antivirus and the CCleaner. After a lot of effort, I could get my machine back to working, but it became so slow that it led me to discover Linux. Now, on a Windows 10 machine, I’ve nothing but Defender, and since the aforementioned experience I’ve…

CCleaner is not an Anti-Virus. It does not run in the background (at least the free version) and will not slow your PC. It helps users locate and remove temporary/cache files buried in the OS to free up disk space. It is very useful - even for pros. Defender will not do this.

I have always assumed the vast majority of software meeting this description is malware. I don't know if I should feel silly or if it's a sensible assumption for end users to make.

Re: Malware identified in CCleaner 5.33

#156

Post by oneweekwonder »

ix-hispana wrote: post #75
superasn wrote: post #35

Earlier quoted context omitted.

> it led me to discover Linux As someone who is the same boat but hasn't discovered Linux yet, how hard would you say it would be to install a version of Linux that support 3 monitors (using an onboard ATI card and a PCIe card)? Last time I tried installing it this is the part I gave up at. Also as a person always been aware of Window I find the graphics in Ubuntu lacking some finesse, i.e. the scrollbars, window pan…

Don't go down that rabbit hole. Linux is not for desktop despite many years of efforts. Even the distro with the greatest focus on UI (elementaryOS) looks like a toy. That Linux is hugely successful everywhere EXCEPT in the desktop should tell us something. Just my honest opinion after 15 years of continuous use in university and work. XKCD still relevant today: https://xkcd.com/456/

> XKCD still relevant today

and I wish this to be true for any *nix system.

The ability to venture down the rabbit as far as you want, without black-boxes.

I think a lot of us sit here today because of that privilege.

Re: Malware identified in CCleaner 5.33

#157

Post by iza »

r1ch wrote: post #145
josefresco wrote: post #68

Earlier quoted context omitted.

CCleaner is not an Anti-Virus. It does not run in the background (at least the free version) and will not slow your PC. It helps users locate and remove temporary/cache files buried in the OS to free up disk space. It is very useful - even for pros. Defender will not do this.

The free version does load itself into the background these days to pop up messages reminding you to clean your PC.

You can turn it off in the options.

Re: Malware identified in CCleaner 5.33

#158

Post by paulmd »

Crespyl wrote: post #154
floatboth wrote: post #119

Earlier quoted context omitted.

Modern machines that seemingly have "no GPU" have an integrated GPU that's powerful enough for driving multiple monitors, desktop compositing and rendering some 3D (modern games at 720p, older games at higher resolution).

Does AMD do this or is that still just an Intel thing?

AMD's APUs are actually more powerful than almost all Intel iGPUs. The only one that's competitive is Iris Pro 580 with the eDRAM addon, known in a previous incarnation as Crystalwell (not all Iris Pro 580s have this).

The tradeoff is that the CPU half of AMD's processors is kinda bad - they are all derived from either Jaguar laptop processors or Bulldozer, they desperately need to be refreshed with Ryzen. So Intel has the better CPU but a mediocre GPU (unless you splash out for Crystalwell), and AMD has mediocre CPUs but a good GPU...

AMD's non-APU processors (FX, Ryzen, TR, Epyc) do not have iGPUs however, same goes for Intel's lines of server chips (X99/X299/etc). This is something that is only in "client" processors.

Re: Malware identified in CCleaner 5.33

#159

Post by iza »

TravelTechGuy wrote: post #135

Question: I get my CCLeaner installers through Chocolatey, so it always installs the 64 bit version. Obviously, this gave me quite a scare, so I downloaded and ran both MalwareBytes and Immunet - both came up negative. I checked my registry for the keys mentioned in the article, and found none of them. Can I assume I'm "safe" (well, one never is, but relatively speaking), or should I revert my system to an August ima…

Apparently only the 32 bit installer was compromised.

Re: Malware identified in CCleaner 5.33

#160

Post by srcmap »

0xfeba wrote: post #133
kevin_thibedeau wrote: post #83

Earlier quoted context omitted.

The culprit was the non-free AV. Gone are the days of simple passive signature scanners. Now they all sink their claws deeply into the OS intercepting filesystem operations, network packets, and any other privileged activity. Performance be damned.

Free and non-free AV are liabilities at this point (for Windows). Microsoft has never had an official way to let AV hook into the system calls needed, so they all relied on hacks and shifty stuff. Surprise, surprise, now there is more attack surface available since AV is kernel level. And so now we see attacks getting root or kernel level access via AV vulnerabilities.

Unfortunately attack surface on AV also includes Windows Defender itself:

https://arstechnica.com/information-technology/2017/06/lates...

Post reply on HN