Linked by Thom Holwerda on Tue 19th Sep 2017 09:58 UTC
Privacy, Security, Encryption

Talos recently observed a case where the download servers used by software vendor to distribute a legitimate software package were leveraged to deliver malware to unsuspecting victims. For a period of time, the legitimate signed version of CCleaner 5.33 being distributed by Avast also contained a multi-stage malware payload that rode on top of the installation of CCleaner. CCleaner boasted over 2 billion total downloads by November of 2016 with a growth rate of 5 million additional users per week. Given the potential damage that could be caused by a network of infected computers even a tiny fraction of this size we decided to move quickly. On September 13, 2017 Cisco Talos immediately notified Avast of our findings so that they could initiate appropriate response activities. The following sections will discuss the specific details regarding this attack.

Don't use registry cleaners. They serve no purpose.

Thread beginning with comment 648997
To read all comments associated with this story, please click here.
everything is broken
by project_2501 on Tue 19th Sep 2017 12:44 UTC
project_2501
Member since:
2006-03-20

Any OS that need crappy tools like ccleaner to (attempt to) run properly... is fundamentally broken.

Any OS that needs "antivirus" software to become a "normal" setup .. is fundamentally broken.

Reply Score: 3

RE: everything is broken
by Sauron on Tue 19th Sep 2017 14:08 in reply to "everything is broken"
Sauron Member since:
2005-08-02

Any OS that need crappy tools like ccleaner to (attempt to) run properly... is fundamentally broken.

Any OS that needs "antivirus" software to become a "normal" setup .. is fundamentally broken.

You had better switch to a Abacus then just to be safe. NO OS is safe from Virii or Malware, none, nada!

Reply Parent Score: 3

RE[2]: everything is broken
by shakeshuck on Tue 19th Sep 2017 22:23 in reply to "RE: everything is broken"
shakeshuck Member since:
2011-03-21

I think you might mean "viruses".

Reply Parent Score: 3

RE[2]: everything is broken
by UltraZelda64 on Wed 20th Sep 2017 04:15 in reply to "RE: everything is broken"
UltraZelda64 Member since:
2006-12-05

"Any OS that need crappy tools like ccleaner to (attempt to) run properly... is fundamentally broken.

Any OS that needs "antivirus" software to become a "normal" setup .. is fundamentally broken.

You had better switch to a Abacus then just to be safe. NO OS is safe from Virii or Malware, none, nada!
"
Singular: Virus.
Plural: Viruses.
Of or having to do with/relating to a virus: Viral
WTF is "Virii?"

Why is it so hard to get basic English spelling and grammar right? Normally I don't care about misspellings... but come on! Let's not make up words/plural versions here.

Edited 2017-09-20 04:21 UTC

Reply Parent Score: 4

RE: everything is broken
by vocivus on Tue 19th Sep 2017 14:26 in reply to "everything is broken"
vocivus Member since:
2010-03-13

Any OS that borks itself during an "upgrade" .. is fundamentally broken. I'm looking at *you* Ubuntu...

Reply Parent Score: 2

RE[2]: everything is broken
by Gone fishing on Fri 22nd Sep 2017 03:42 in reply to "RE: everything is broken"
Gone fishing Member since:
2006-02-22

Any OS that borks itself during an "upgrade" .. is fundamentally broken. I'm looking at *you* Ubuntu...


I've been using Ubuntu since Hoary or Breezy and haven't had an up grade problem since Dapper (6.04). I also administer numerous Ubuntu workstations and don't have this issue.

I'm calling bullshit on this one.

Edited 2017-09-22 03:49 UTC

Reply Parent Score: 1

RE: everything is broken
by project_2501 on Wed 20th Sep 2017 09:27 in reply to "everything is broken"
project_2501 Member since:
2006-03-20

Even Android doesn't need

(1) a cleaner app
(2) anti-virus app

Even Android.

Reply Parent Score: 1

RE[2]: everything is broken
by Kochise on Wed 20th Sep 2017 10:07 in reply to "RE: everything is broken"
Kochise Member since:
2006-03-03

Even Android have and need both. Why do you think Google introduced Play Protect ?

Reply Parent Score: 4