Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Malware identified in CCleaner 5.33

blog.talosintelligence.com

Post reply on HN
Print view View original

171–180 of 229 posts

Re: Malware identified in CCleaner 5.33

#171

Post by [deleted] »

ix-hispana wrote: post #75
superasn wrote: post #35

Earlier quoted context omitted.

> it led me to discover Linux As someone who is the same boat but hasn't discovered Linux yet, how hard would you say it would be to install a version of Linux that support 3 monitors (using an onboard ATI card and a PCIe card)? Last time I tried installing it this is the part I gave up at. Also as a person always been aware of Window I find the graphics in Ubuntu lacking some finesse, i.e. the scrollbars, window pan…

Don't go down that rabbit hole. Linux is not for desktop despite many years of efforts. Even the distro with the greatest focus on UI (elementaryOS) looks like a toy. That Linux is hugely successful everywhere EXCEPT in the desktop should tell us something. Just my honest opinion after 15 years of continuous use in university and work. XKCD still relevant today: https://xkcd.com/456/

[deleted]

Re: Malware identified in CCleaner 5.33

#172

Post by happy-go-lucky »

jszymborski wrote: post #128
happy-go-lucky wrote: post #98

Earlier quoted context omitted.

I do, but I try to see if it's from a trustworthy source.

Pirform has been around for ages and has always been as "trustworthy" a software publisher as one could hope for. Supply-chain compromises are hard to completely mitigate, particularly with bundled windows installers.

Advertising never works for me. Linux and Windows are worlds apart.

Re: Malware identified in CCleaner 5.33

#173

Post by JohnTHaller »

It's also worth noting that the default installer for CCleaner automatically installs Chrome and sets it as the default browser with no notification in the default process. Unless you click "More..." from one of the screens, then it tells you. At least it was like this two weeks ago. Had to uninstall bundleware Chrome again from multiple family members' PCs.

Re: Malware identified in CCleaner 5.33

#174

Post by shaw00000 »

dkarl wrote: post #155
josefresco wrote: post #68

Earlier quoted context omitted.

CCleaner is not an Anti-Virus. It does not run in the background (at least the free version) and will not slow your PC. It helps users locate and remove temporary/cache files buried in the OS to free up disk space. It is very useful - even for pros. Defender will not do this.

I have always assumed the vast majority of software meeting this description is malware. I don't know if I should feel silly or if it's a sensible assumption for end users to make.

I never liked, nor used CCleaner. I always thought it was for lazy people or those who refused to do it the hard way.

Re: Malware identified in CCleaner 5.33

#175

Post by NiveaGeForce »

princekolt wrote: post #10

There has been a number of cases of installers from trusted developers being infected lately. (For example Transmission being infected twice...) On our side (developers) we need to be careful with this idea that "we will know" when something is wrong and be more careful when deploying software. It would also be nice if some form of tool could be used to test a binary to make sure it only contains what it should conta…

> There has been a number of cases of installers from trusted developers being infected lately.

Here a few other cases

* https://www.pcworld.com/article/3104180/software/pc-nuking-m...

* https://www.reddit.com/r/Windows10/comments/6hvzzt/psa_my_ch...

* https://lifehacker.com/many-browser-extensions-have-become-a...

* http://www.zdnet.com/article/android-malware-in-google-play-...

* https://arstechnica.com/security/2015/04/google-kills-200-ad...

* https://arstechnica.com/security/2017/01/ciscos-webex-chrome...

Re: Malware identified in CCleaner 5.33

#176

Post by justinclift »

superasn wrote: post #35
happy-go-lucky wrote: post #23

As a kid, the only OS I was aware of was Windows. Once, my computer was infected to the point where it was almost unusable. A more experienced friend suggested a non-free antivirus and the CCleaner. After a lot of effort, I could get my machine back to working, but it became so slow that it led me to discover Linux. Now, on a Windows 10 machine, I’ve nothing but Defender, and since the aforementioned experience I’ve…

> it led me to discover Linux As someone who is the same boat but hasn't discovered Linux yet, how hard would you say it would be to install a version of Linux that support 3 monitors (using an onboard ATI card and a PCIe card)? Last time I tried installing it this is the part I gave up at. Also as a person always been aware of Window I find the graphics in Ubuntu lacking some finesse, i.e. the scrollbars, window pan…

> how hard would you say it would be to install a version of Linux that support 3 monitors (using an onboard ATI card and a PCIe card)?

As a data point, the development desktop I'm using runs 3 monitors on Linux (Fedora 25). They're hooked into a single AMD R9 390 graphics card (overkill, but it was hanging around spare when putting together the pc).

The monitors are 1x Dell 30" in the middle, with 2x ASUS 24" monitors (one each side). No HiDPI stuff, and everything works fairly well. Using the "Xfce" spin of Fedora.

Didn't need to do any complicated setup. The monitors were all detected fine without mucking around, and I just needed to drag them into position in the Xfce4 gui tool so it knew which one was on the left, middle, right.

Re: Malware identified in CCleaner 5.33

#177

Post by happy-go-lucky »

JohnTHaller wrote: post #173

It's also worth noting that the default installer for CCleaner automatically installs Chrome and sets it as the default browser with no notification in the default process. Unless you click "More..." from one of the screens, then it tells you. At least it was like this two weeks ago. Had to uninstall bundleware Chrome again from multiple family members' PCs.

So, they fucked it. Thank you!

Re: Malware identified in CCleaner 5.33

#178

Post by dEnigma »

shaw00000 wrote: post #174
dkarl wrote: post #155

Earlier quoted context omitted.

I have always assumed the vast majority of software meeting this description is malware. I don't know if I should feel silly or if it's a sensible assumption for end users to make.

I never liked, nor used CCleaner. I always thought it was for lazy people or those who refused to do it the hard way.

Why would you do it the hard way, when there's an easy way. Especially when it's an unpleasant activity like deleting unnecessary files.

Re: Malware identified in CCleaner 5.33

#179

Post by Dylan16807 »

nugget wrote: post #165
srcmap wrote: post #160

Earlier quoted context omitted.

Unfortunately attack surface on AV also includes Windows Defender itself: https://arstechnica.com/information-technology/2017/06/lates...

This is why security mono-culture is dangerous and it's in our interest to maintain a diverse ecosystem of security vendors in every area. Security is hard and anyone can have a serious vulnerability.

I'll still take 1-2 vendors that actually have security as a top priority over a variety of vendors that care plenty about features and detection rates but not about actually hardening their code.

Re: Malware identified in CCleaner 5.33

#180

Post by NiveaGeForce »

WorldMaker wrote: post #167
madshiva wrote: post #53

CCleaner like Avast never make the job for me, I have always told people to stop using it.. but user need proof. Even with ton of subject "I have removed X with CCleaner and now I.."

While the malware-ification of Avast has been a relatively slow process, [1] I have never trusted CCleaner, and I also groan when I see friends/family still using CCleaner after all the times I've helped them get out of jams CCleaner caused. Anecdotally, I've seen CCleaner delete way too many false positives in the Registry, breaking applications, (and people have never heeded it's warning to properly backup the Regi…

Indeed, I explained some of the issues with cleaners here.

https://news.ycombinator.com/item?id=15277316

Post reply on HN