CCleaner v6

Discussion in 'other software & services' started by anon, May 12, 2022.

  1. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    27,166
    Location:
    UK
  2. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    CCleaner v6.30.11385

    Free
    https://download.ccleaner.com/ccsetup630.exe

    Slim
    https://download.ccleaner.com/slim/ccsetup630_slim.exe

    Portable
    https://download.ccleaner.com/portable/ccsetup630.zip

    Professional
    https://download.ccleaner.com/professional/ccsetup630_pro.exe

    Technician
    https://download.ccleaner.com/te/ccsetup630_te.exe

    Business
    https://download.ccleaner.com/be/ccsetup630_be.exe
     
  3. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    8,421
    CCleaner Pro =
    C:\Program Files\CCleaner\wa_3rd_party_host_32
    C:\Program Files\CCleaner\wa_3rd_party_host_64
    -------
    Company: OPSWAT
    MDES SDK V4 3rd Party Host
    Version: 4.3.4074.0

    ;)
     
  4. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    27,166
    Location:
    UK
  5. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    8,421
    Thanks stapp, I already read it before.
     
  6. lmacri

    lmacri Registered Member

    Joined:
    Jan 26, 2021
    Posts:
    174
    Location:
    Canada
    Hi anon:

    Is there anything unusual about the latest v4.3.4074.0 of those files that led you to post about them, or were you just curious about their purpose? They have been included in all editions of CCleaner (including CCleaner Free Portable) since the "new" Software Updater tool started rolling out with CCleaner v6.18 in Nov 2023, and the general consensus in the CCleaner forum is that these OPSWAT files are associated with the software updater now used by many Gen Digital programs. See TheOwner's 23-Nov-2023 What is wa_3rd_party_host_64.exe in CCleaner folder? as well as my 10-May-2024 post in Anony2000's How to disable ‘Software Updater’.

    I only ask because I use CCleaner Free Portable, and the last two ccsetup629.zip (rel. 16-Oct-2024) and ccsetup630.zip (rel. 13-Nov-2024) files have been quarantined by my Microsoft Defender antivirus (see my 20-Oct-2024 MS Defender Detects Portable ccsetup629.zip as Trojan:Win32/Sonbokli.A!cl in the CCleaner forum). I'm wondering now if the latest OPSWAT v4.3.4074.0 executables bundled inside those .zip files could be triggering (hopefully) false positive detections.
    -----------
    Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.5131 * Firefox v132.0.2 * Microsoft Defender v4.18.24090.11-1.1.24090.11 * Malwarebytes Premium v5.2.1.144-1.0.5088 * Macrium Reflect Free v8.0.7783 * CCleaner Free Portable v6.30.11385
     
    Last edited: Nov 18, 2024
  7. kronckew

    kronckew Registered Member

    Joined:
    Aug 27, 2006
    Posts:
    480
    Location:
    CSA Consulate, Glos., UK
    Did you scan the installer with Malwarebytes AV? if it says it's OK, I'd tell windows defender to take it out of quarantine and exclude it in future. If you have some reason to NOT upgrade your PC to win 11 and wish to remain on an unsupported OS, I'd recommend biting the bullet and paying for the win10 extended support, or you'll be having troubles like this in future. Optimum would be to update to win 11 23h2 or, better, 24h2. (I've always liked MBAM better than Defender, but my VPN (Surfshark) has its own AV that plays nice with defender but not MBAM)
    I also have ccleaner pro's latest upgrade installed - it did not trip my AVs when it upgraded.
     
  8. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    8,421
    ^ This.

    Thanks for the info.
     
  9. lmacri

    lmacri Registered Member

    Joined:
    Jan 26, 2021
    Posts:
    174
    Location:
    Canada
    Hi kronkew:

    My Malwarebytes Premium scans do not detect ccsetup30.zip as a threat and the VirusTotal report at https://www.virustotal.com/gui/file...99911651a96e410e6be99720dc11d7c75bb/detection currently shows a detection rate of only 1/68 (BScope.Trojan.Penguish for antivirus VBA32), but my Firefox browser (which uses Google’s Safe Browsing service for its built-in phishing and malware protection) will flag ccsetup30.zip as a possible threat and block the download unless I choose to ignore the warning.

    I agree it's likely a false positive (I've submitted FP reports at https://www.microsoft.com/en-us/wdsi/filesubmission), but I'd still like to know why multiple CCleaner Portable users have seen MS Defender quarantine the portable .zip files as Trojan:Win32/Sonbokli.A!cl since ccsetup629.zip was released on 16-Oct-2024. The CCleaner v6.29.11342 release notes at https://www.ccleaner.com/ccleaner/version-history state in part ...

    ... so perhaps some bundled executable or task associated with those forced updates is sending off alarm bells in MS Defender for the Portable build. Regardless, it's something Avast/Piriform needs to fix on their end so CCleaner Portable users don't have to deal with these detections every time a new version is released.
    -----------
    Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.5131 * Firefox v132.0.2 * Microsoft Defender v4.18.24090.11-1.1.24090.11 * Malwarebytes Premium v5.2.1.144-1.0.5088 * Macrium Reflect Free v8.0.7783 * CCleaner Free Portable v6.30.11385
     
    Last edited: Nov 18, 2024
  10. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    8,421
    CCleaner v6.31.11415
    https://www.ccleaner.com/ccleaner/download

    Version history = https://www.ccleaner.com/ccleaner/version-history
     
  11. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    CCleaner v6.31.11415

    Free
    https://download.ccleaner.com/ccsetup631.exe

    Slim
    https://download.ccleaner.com/slim/ccsetup631_slim.exe

    Portable
    https://download.ccleaner.com/portable/ccsetup631.zip

    Professional
    https://download.ccleaner.com/professional/ccsetup631_pro.exe

    Technician
    https://download.ccleaner.com/te/ccsetup631_te.exe

    Business
    https://download.ccleaner.com/be/ccsetup631_be.exe
     
  12. The Seeker

    The Seeker Registered Member

    Joined:
    Oct 24, 2005
    Posts:
    1,349
    Location:
    Adelaide
    anon's post directly above yours already mentions this version.
     
  13. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    Does he mention direct download links for different flavors?
    No he doesn't, right?
    You're welcome.
     
  14. The Seeker

    The Seeker Registered Member

    Joined:
    Oct 24, 2005
    Posts:
    1,349
    Location:
    Adelaide
    Charming :)
     
  15. Cloudcroft

    Cloudcroft Registered Member

    Joined:
    Feb 29, 2004
    Posts:
    473
    Location:
    The Hill Country of Texas
    I appreciate those download links, as I use the portable version.
     
  16. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    8,421
    Cleaner v6.32.11432
    https://www.ccleaner.com/ccleaner/download

    Version history = https://www.ccleaner.com/ccleaner/version-history
     
  17. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    CCleaner v6.32.11432

    Free
    https://download.ccleaner.com/ccsetup632.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_FREE/platform_WIN_PIR/installertype_ONLINE/build_RELEASE

    Slim
    https://download.ccleaner.com/slim/ccsetup632_slim.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_SLIM/platform_WIN_PIR/installertype_ONLINE/build_RELEASE

    Portable
    https://download.ccleaner.com/portable/ccsetup632.zip

    Professional
    https://download.ccleaner.com/professional/ccsetup632_pro.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_PRO/platform_WIN_PIR/installertype_ONLINE/build_RELEASE

    Technician
    https://download.ccleaner.com/te/ccsetup632_te.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_TECHNICIAN/platform_WIN_PIR/installertype_ONLINE/build_RELEASE

    Business
    https://download.ccleaner.com/be/ccsetup632_be.exe
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_BUSINESS/platform_WIN_PIR/installertype_ONLINE/build_RELEASE
     
    Last edited: Jan 22, 2025
  18. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    All installers downloaded from the links above came out unsigned, odd.
    1.png
     
  19. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    27,166
    Location:
    UK
  20. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    This is getting weirder, ccsetup632_slim.exe file downloaded from the same link you posted stapp, it's signed on January 14th, 2025 and by Gen Digital Inc. (we already know it's legit)...
    2.png

    I'd rather wait til there's more info about it.
     
    Last edited: Jan 22, 2025
  21. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    @stapp could you do me a favor please?
    Download this file from an alternate link (it's similar to the one is created when you click on the slim version). Out of curiosity I want to see the digital signature.
    Code:
    https://bits.avcdn.net/productfamily_CCLEANER/insttype_TECHNICIAN/platform_WIN_PIR/installertype_ONLINE/build_RELEASE
    
     
  22. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    6,291
    "gen digital" is former known as "Norton Lifelock" which is the follower of "Symantec."
    they burned the market name "Symantec" with the certificate desaster, then LifeLock for similar reason, now its called Gen Digital and own not only Norton/Symantec, also Avast, AVG with TuneUp, Bullguard and a dozen more companies they bought and incorporated to death.

    cert date from "gen digital" of TE build
    ‎Dienstag, ‎14. ‎Januar ‎2025 14:18:05
    cert signed from Sectigo Public Time Stamping Signer R35

    differences between slim and te:

    70da799199206226909cdca511e120d8|uninst.exe

    b92e5955b49c586a0daf1efdef460cb1|branding.dll
    417f7aa73351754362e04026acadffe6|uninst.exe

     
  23. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
  24. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    27,166
    Location:
    UK
    @Mr.X
    CCleaner is still signed by Gen Digital.
    Sectigo is a Certificate Authority (CA) that is used to countersign it as an extra layer of validity..
    The first version of CCleaner where Sectigo was mentioned is 6.27
     
  25. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    5,257
    Location:
    .
    Yes, I'm aware of that since ages.

    My doubt is why your ccsetup632_slim.exe file is signed differently:
    PIRIFORM SOFTWARE LIMITED / 22 January 25,
    whereas my ccsetup632_slim.exe file is
    Gen Digital Inc. / 14 January 25.

    In my knowledge, all files should be the same for every user in the world.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.