Avast is ruining CCleaner -- malware, bundled software, popup ads... what's next?

Discussion in 'Windows OS and Software' started by Papusan, Jul 13, 2018.

?

Will you continue use CCLEANER?

  1. YEES

    5 vote(s)
    17.2%
  2. NOPE

    15 vote(s)
    51.7%
  3. Don't know yet

    9 vote(s)
    31.0%
  1. Spartan@HIDevolution

    Spartan@HIDevolution Company Representative

    Reputations:
    29,091
    Messages:
    22,541
    Likes Received:
    34,541
    Trophy Points:
    931
    Add these entries to your HOSTS file to block CCleaner slow startup due to connectivity checking and also block Piriform/Avast Telemetry:

    Code:
    0.0.0.0 ncc.avast.com
    0.0.0.0 ncc.avast.com.edgesuite.net
    0.0.0.0 ipm-provider.ff.avast.com
    0.0.0.0 shepherd.ff.avast.com
    0.0.0.0 ip-info.ff.avast.com
    0.0.0.0 analytics.ff.avast.com
    FW limitation mentioned here.

    This is the same reason why if you block the latest CCleaner from the Firewall rules only, then try to launch it, it will take a long time before it starts as it is still trying to establish a connection with Piriform and Avast to spy on you so the way around that is to add those entries into your HOSTS file.
     
    Last edited: Jun 6, 2020
    Vasudev, Papusan and Fire Tiger like this.
  2. epguy3

    epguy3 Notebook Consultant

    Reputations:
    159
    Messages:
    292
    Likes Received:
    197
    Trophy Points:
    56
    joluke and Papusan like this.
  3. Papusan

    Papusan JOKEBOOKs Sucks! Dont waste your $$$ on FILTHY

    Reputations:
    31,141
    Messages:
    26,379
    Likes Received:
    48,448
    Trophy Points:
    931
    Need "seeker" aka guinea pig. Avast have released CCleaner v5.68.7820 (23 June 2020)

    This version of CCleaner brings improved cleaning to Firefox and Chromium browsers.

    Cleaning
    - Fixed browser extensions not being shown in Firefox and Chrome
    - Fixed cleaning of ‘Last Download Location’ in Chromium browsers

    Health Check
    - Users can now provide a comment with their rating

    Software Updater
    - Software Updater displays a message when offline and a ‘Try Again’ button

    Please report if you see something nasty running in the background pushed from Avast Malware Group. Hence the need for guinea pig:D Thanks.
     
    Vasudev likes this.
  4. Vasudev

    Vasudev Notebook Nobel Laureate

    Reputations:
    8,765
    Messages:
    10,790
    Likes Received:
    8,098
    Trophy Points:
    931
    You still use it? I have started using Hibit Uninstaller, bleachbit and Wise disk cleaner.
     
    saturnotaku likes this.
  5. Spartan@HIDevolution

    Spartan@HIDevolution Company Representative

    Reputations:
    29,091
    Messages:
    22,541
    Likes Received:
    34,541
    Trophy Points:
    931
    CCleaner Portable 5.69.7865

    Make sure you right click on the ZIP file, go to Properties, and ensure it doesn't say that it is blocked before extracting it.

    Block CCleaner from Windows Firewall > Advanced Settings for both incoming and outgoing connections.

    Also add these entries to your HOSTS file otherwise CCleaner launching will be delayed as it is trying to connect to the internet and spy on you

    # Copyright (c) 1993-2009 Microsoft Corp.
    #
    # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
    #
    # This file contains the mappings of IP addresses to host names. Each
    # entry should be kept on an individual line. The IP address should
    # be placed in the first column followed by the corresponding host name.
    # The IP address and the host name should be separated by at least one
    # space.
    #
    # Additionally, comments (such as these) may be inserted on individual
    # lines or following the machine name denoted by a '#' symbol.
    #
    # For example:
    #
    # 102.54.94.97 rhino.acme.com # source server
    # 38.25.63.10 x.acme.com # x client host

    # localhost name resolution is handled within DNS itself.
    # 0.0.0.0 localhost
    # ::1 localhost

    0.0.0.0 localhost

    ::1 localhost #[IPv6]
    0.0.0.0 ncc.avast.com
    0.0.0.0 ncc.avast.com.edgesuite.net
    0.0.0.0 license.piriform.com
    0.0.0.0 ipm-provider.ff.avast.com
    0.0.0.0 shepherd.ff.avast.com
    0.0.0.0 ip-info.ff.avast.com
    0.0.0.0 analytics.ff.avast.com
    0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
    0.0.0.0 media.opencandy.com
    0.0.0.0 cdn.opencandy.com
    0.0.0.0 tracking.opencandy.com
    0.0.0.0 offer.alibaba.com
    0.0.0.0 deloplen.com
    0.0.0.0 api.opencandy.com
    0.0.0.0 fixmypcfree.com
    0.0.0.0 1-1ads.com
    0.0.0.0 a.ads1.msn.com
    0.0.0.0 a.ads2.msads.net
    0.0.0.0 a.ads2.msn.com
    0.0.0.0 ads.msn.com
    0.0.0.0 ads1.msads.net
    0.0.0.0 ads1.msn.com
    0.0.0.0 b.ads1.msn.com
    0.0.0.0 b.ads2.msads.net


    This version of CCleaner brings all-new cleaning for Opera GX browser and bug fixes.

    Cleaning

    • Added cleaning support for Opera GX gaming browser
    General

    • Minor UI improvements
    • Fixed DetectOS from|to syntax functionality in WinApp2
    • Fixed occasional missing information in the Licence Information screen
     
    steberg and Papusan like this.
  6. Spartan@HIDevolution

    Spartan@HIDevolution Company Representative

    Reputations:
    29,091
    Messages:
    22,541
    Likes Received:
    34,541
    Trophy Points:
    931
    Microsoft now detects CCleaner as a Potentially Unwanted Application

    https://www.bleepingcomputer.com/ne...leaner-as-a-potentially-unwanted-application/

    PUA:Win32/CCleaner

     
    Papusan likes this.
  7. epguy3

    epguy3 Notebook Consultant

    Reputations:
    159
    Messages:
    292
    Likes Received:
    197
    Trophy Points:
    56
    FWWAAA-HAHA - MS's windows defender app detecting CCleaner as a PUA - priceless :D
     
    Papusan and Spartan@HIDevolution like this.
  8. TreeTops Ranch

    TreeTops Ranch Notebook Deity

    Reputations:
    301
    Messages:
    864
    Likes Received:
    99
    Trophy Points:
    41
    "detects and removes this threat." Did it really get removed?
     
  9. Papusan

    Papusan JOKEBOOKs Sucks! Dont waste your $$$ on FILTHY

    Reputations:
    31,141
    Messages:
    26,379
    Likes Received:
    48,448
    Trophy Points:
    931
    inm8#2 likes this.
  10. TreeTops Ranch

    TreeTops Ranch Notebook Deity

    Reputations:
    301
    Messages:
    864
    Likes Received:
    99
    Trophy Points:
    41
    Thanks for that info Papusan, I was just going by the alert message in post 136 where it says "detects and removes this threat." Nothing about blocking.
     
    Papusan likes this.

Share This Page