CCleaner v6

Discussion in 'other software & services' started by anon, May 12, 2022.

  1. wolfrun

    wolfrun Registered Member

    Joined:
    Jul 26, 2009
    Posts:
    708
    Location:
    North America
    ccleaner portable is signed the same way.
     
  2. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    6,294
    yes i did. and the slim from stapp in #219.

    now your links:
    Code:
    https://download.ccleaner.com/slim/ccsetup632_slim.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_SLIM/platform_WIN_PIR/installertype_ONLINE/build_RELEASE
    
    same as you: first has no signing, second gen digital again. same for the pro.
    seems that all files from ccleaner(dot)com are not signed, for what reason ever.

    my latest downloads were from ccleaner(dot)com, but i did not look for cert. my version has stuck months before because "piriform" has changed the menu left side i dont like. buts thats not important, very rare use.

    oh, this might important:
    https://duckduckgo.com/?q=avcdn&ia=web
    https://support.avg.com/answers?id=9065p000000kHARAA2

    avcdn belongs to AVG, that may be important. but why AVG when Avast has aquired piriform?
    it could be that avg servers auto-sign its files while ccleaner does not.
     
  3. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    Didn't know this functionality servers have.
    Perhaps this explains why stapp got a file signed by Piriform and a few minutes later I got the "same file" from the same link signed with an earlier date and by Gen Digital. It's still very strange for me, though.
     
  4. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    6,294
    servers can perfom a lot in background, eg. signing on upload in special designed folders/subfolders for upload.
     
  5. Azure Phoenix

    Azure Phoenix Registered Member

    Joined:
    Nov 22, 2014
    Posts:
    1,568
    Can anyone confirm this from their side?

    There are two exes one Ccleaner and Ccleaner64 on programs files

    I think it was the first one. I send VT and while it wasn't detected there a community message that stated it could be an info stealer
     
  6. lmacri

    lmacri Registered Member

    Joined:
    Jan 26, 2021
    Posts:
    174
    Location:
    Canada
    Hi Azure Phoneix:

    What is your Windows OS, CCleaner build and version (e.g., CCleaner Free Portable v6.32.11432, etc.) and antivirus, and did the comment on VirusTotal mention a specific "info stealer" detection or was this just an opinion / conjecture on someone's part?

    See my 18-Nov-2024 post # 206 about how my Microsoft Defender antivirus started quarantining my downloaded CCleaner Portable (ccsetup6xx.zip) files as Trojan:Win32/Sonbokli.A!cl starting with ccsetup629.zip (which, perhaps coincidentally, is also the first version of CCleaner v6.x that added forced upgrading of Cleaner versions older than one year to the latest version per my post # 209). There are also several recent posts in this topic about discrepancies in the signing of digital certificates for some CCleaner executables.

    A Piriform / Avast employee posted <here> in the CCleaner forum that they were investigating the Trojan:Win32/Sonbokli.A!cl detections and then never got back to affected users so I stopped using CCleaner.
    -----------
    Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.5371 * Firefox v134.0.2 * Microsoft Defender v4.18.24090.11-1.1.24090.11 * Malwarebytes Premium v5.2.5.158-1.0.5135 * Macrium Reflect Free v8.0.7783 * HDCleaner Portable 64-Bit v2.085 * ccPortable 6.31.11415
     
    Last edited: Jan 28, 2025
  7. Azure Phoenix

    Azure Phoenix Registered Member

    Joined:
    Nov 22, 2014
    Posts:
    1,568
    I already uninstalled it just in case. Just wanted to confirm if anyone that is using CCleaner got the same info if they check VT. Thanks
     
  8. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    Only one detection for CCleaner64.exe
    1.png
     
  9. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    @lmacri I saw your post on the CCleaner's forums. Have you checked any replacement?

    Also see my previous post above yours about digital signatures inconsistencies.
     
  10. lmacri

    lmacri Registered Member

    Joined:
    Jan 26, 2021
    Posts:
    174
    Location:
    Canada
    Hi Azure Phoneix:

    I asked for clarification because you said in your post # 230 that a "community message" stated that CCleaner could be an "info stealer". That sounds like a comment was posted on the Comments tab of a VirusTotal report, not an actual malicious/suspicious detection *** by one of the ~ 70 virus scan engines that VirusTotal used to inspect the uploaded file.

    Can you tell us what CCleaner build (Pro, Portable, etc.) build you installed, provide a link to the page on VirusTotal where this comment was made about an "infostealer" in CCleaner, or last tell us which CCleaner executable (e.g., the 32-bit CCleaner.exe for v6.32.11432) you uploaded?
    _________________________________

    *** NOTE: A low VirusTotal detection rate of 1/71 or 2/69 like the single detection shown in Mr.X's image in post # 233 by Skyhigh Security is typically a false-positive detection that can be safely ignored as long as well-known antivirus products like MS Defender, Bitdefender, Kaspersky, Norton, McAfee, etc. all report the file is safe.
    -----------
    Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.5371 * Firefox v134.0.2 * Microsoft Defender v4.18.24090.11-1.1.24090.11 * Malwarebytes Premium v5.2.5.158-1.0.5135 * Macrium Reflect Free v8.0.7783 * HDCleaner Portable 64-Bit v2.085 * ccPortable 6.31.11415
     
  11. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    6,294
    "artemis" is futile, unknow crap as a lot of the 60+ scanners. trust the most common known as microsoft, Kaspersky, Avast, Avira aso.

    but thats reason why i consider VT as fain/opium for the mass of users, they dont know how to read the result.

    ccleaner.exe is x86 while ccleaner 64 is x64 - prefer that on which fit your system. windows 64-bit has advantages with "64.exe". 32-Bit Programs are limited and cannot scan x64 places with tricks.

    and yes, ccleaner is an info stealer, it wants access to the web.
     
  12. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    Blocked here in WF by gpo since ages.
     
  13. digmor crusher

    digmor crusher Registered Member

    Joined:
    Jul 6, 2012
    Posts:
    1,277
    Location:
    Canada
    Ccleaner has been banished from my computer, I use Hibit now which I feel is better anyways.
     
  14. lmacri

    lmacri Registered Member

    Joined:
    Jan 26, 2021
    Posts:
    174
    Location:
    Canada
    Hi Mr.X:

    I tested a few CCleaner replacements (BleachBit, ccPortable, HDCleaner, Privacy Eraser, PriviZer, Wise Disk Cleaner) but I had very specific criteria (see the list of features I wanted in my 18-Nov-2024 post # 2718492 of Deanna McElveen's SCleaner — Stay ahead of the cleaning in the AskWoody.com forum), so most of those disk cleaners didn't meet my particular needs.

    I only used the Custom Clean feature of CCleaner v6.x to do basic disk cleaning like purging of System Temp Files and Recent Documents lists and cleaning of my MS Edge browser (which is not my default browser). Right now I'm doing some in-depth testing comparing ccPortable v6.x (basically a CCleaner Portable clone, which is not a good thing in my opinion) vs HDCleaner Portable v2.x and suspect I'll be sticking with HDCleaner. However, I do find that HDCleaner's Browser Cleaner and System Cleaner can be a bit more aggressive than CCleaner's Custom Clean if you use the default settings.
    -----------
    Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.5371 * Firefox v134.0.2 * Microsoft Defender v4.18.24090.11-1.1.24090.11 * Malwarebytes Premium v5.2.5.158-1.0.5135 * Macrium Reflect Free v8.0.7783 * HDCleaner Portable 64-Bit v2.085 * ccPortable 6.31.11415
     
  15. kaljukass

    kaljukass Registered Member

    Joined:
    Apr 27, 2011
    Posts:
    260
    What is the thing calling HiBit, about what you're talking? I see things like this on the www.hibitsoft.ir website: HiBit Uninstaller, HiBit Startup Manager, HiBit System Information. Are you talking about this or some other HiBit?
    When you talk about this, what or how can you compare them if they are something completely different than CCleaner?
     
  16. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
  17. digmor crusher

    digmor crusher Registered Member

    Joined:
    Jul 6, 2012
    Posts:
    1,277
    Location:
    Canada
    Yes, Hibit uninstaller, there are several other features included such as:
    Screenshot 2025-01-28 185102.png

    Not the same as Ccleaner but its all I need. To clean my browsers I just use their built in functions.
     
  18. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    106,601
    Location:
    U.S.A.
  19. Azure Phoenix

    Azure Phoenix Registered Member

    Joined:
    Nov 22, 2014
    Posts:
    1,568
    Yes. It wasn’t a detection from an engine. It was from the comment tab.
     
  20. lmacri

    lmacri Registered Member

    Joined:
    Jan 26, 2021
    Posts:
    174
    Location:
    Canada
    Hi Azure Phoneix:

    I couldn't find the exact comment on VirusTotal you are referring to but I would have to agree with Brummelchen's comment in post # 236 that "infostealer" is probably an apt description of CCleaner v6.x just based on the amount of data it collects from your system.

    When I was still using CCleaner v6.x I created inbound and outbound blocks in my Windows Defender Firewall to prevent traffic from CCleaner64.exe through my firewall (see the How-To Geek article How to Block An Application from Accessing the Internet with Windows Firewall). I also know of a few CCleaner users who have gone even further and edited their hosts file to block connections to and from backend Avast servers (e.g., shepherd.ff.avast.com, analytics.ff.avast.com, etc.) - see WiseWiz's 14-Jul-2023 post in Welcome back to CCleaner Professional in the CCleaner forum for one example.

    After the recent Trojan:Win32/Sonbokli.A!cl detections of my CCleaner Portable builds (ccsetup629.zip and later) I mentioned in post # 231 I finally decided to wipe CCleaner Portable v6.30 from my system per my 23-Dec-2024 topic How to Remove Last Traces of CCleaner Free Portable v6.x? in the CCleaner forum and look for a (hopefully) less intrusive replacement.
    -----------
    Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.5371 * Firefox v134.0.2 * Microsoft Defender v4.18.24090.11-1.1.24090.11 * Malwarebytes Premium v5.2.5.158-1.0.5135 * Macrium Reflect Free v8.0.7783 * HDCleaner Portable 64-Bit v2.085 * ccPortable 6.31.11415
     
  21. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    8,421
  22. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    CCleaner v6.33.11465

    Free
    https://download.ccleaner.com/ccsetup633.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_FREE/platform_WIN_PIR/installertype_ONLINE/build_RELEASE

    Slim
    https://download.ccleaner.com/slim/ccsetup633_slim.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_SLIM/platform_WIN_PIR/installertype_ONLINE/build_RELEASE

    Portable
    https://download.ccleaner.com/portable/ccsetup633.zip

    Professional
    https://download.ccleaner.com/professional/ccsetup633_pro.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_PRO/platform_WIN_PIR/installertype_ONLINE/build_RELEASE

    Technician
    https://download.ccleaner.com/te/ccsetup633_te.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_TECHNICIAN/platform_WIN_PIR/installertype_ONLINE/build_RELEASE

    Business
    https://download.ccleaner.com/be/ccsetup633_be.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_BUSINESS/platform_WIN_PIR/installertype_ONLINE/build_RELEASE
     
  23. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    8,421
    CCleaner v6.34.11482 (March 19, 2025)
    https://www.ccleaner.com/ccleaner/download

    Version history = https://www.ccleaner.com/ccleaner/version-history
     
  24. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    CCleaner v6.34.11482 (March 19, 2025)

    Free
    https://download.ccleaner.com/ccsetup634.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_FREE/platform_WIN_PIR/installertype_ONLINE/build_RELEASE

    Slim
    https://download.ccleaner.com/slim/ccsetup634_slim.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_SLIM/platform_WIN_PIR/installertype_ONLINE/build_RELEASE

    Portable
    https://download.ccleaner.com/portable/ccsetup634.zip

    Professional
    https://download.ccleaner.com/professional/ccsetup634_pro.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_PRO/platform_WIN_PIR/installertype_ONLINE/build_RELEASE

    Technician
    https://download.ccleaner.com/te/ccsetup634_te.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_TECHNICIAN/platform_WIN_PIR/installertype_ONLINE/build_RELEASE

    Business
    https://download.ccleaner.com/be/ccsetup634_be.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_BUSINESS/platform_WIN_PIR/installertype_ONLINE/build_RELEASE
     
  25. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    27,166
    Location:
    UK
    @Mr.X
    Your download link above for the slim version shows different properties than the one from the official builds page here.

    https://www.ccleaner.com/ccleaner/builds

    Your link shows that it was signed a week before the one on the official builds page.
    Screenshot 2025-03-19 142833.jpg Screenshot 2025-03-19 143006.jpg
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.