Avast WEBforum

Business Products => Archive (Legacy) => Avast Business => Avast Endpoint Protection => Topic started by: KDibble on March 30, 2018, 04:24:05 PM

Title: CCleaner Suddenly Updated and Running on Boot-Up
Post by: KDibble on March 30, 2018, 04:24:05 PM
I am sure somebody will say this is the wrong forum. But avast! owns CCleaner and I did a search on all the forums and have not seen this topic show up.

This morning, March 29, 2018 in the USA at least three computers on my network suddenly had CCleaner starting on bootup. All of those computers also have avast! endpoint protection, controlled through the SOA.

A computer vendor that we use was in the habit of including CCleaner on new computers many years ago. So a lot of our machines have it installed. But it has NEVER been set to run on boot, and NEVER updated to a later version. I repeat, it was installed MANY YEARS AGO, and NEVER used. This morning it is suddenly updated to version 5.41.129.6446, with a copyright date of 2018.

I am guessing that avast! is using its Endpoint Protection software to retroactively clean up the mess that was created when criminals hijacked CCleaner last summer.

HOWEVER: It is VERY UNCOOL to suddenly and remotely cause a program to run on startup without the user's permission. I am quite sure that avast! could have updated the software by only inserting the update bits, without changing the program's start-up status to "on boot". They should have done that.

Yes, I can fix this on Win XP and Win 7 by, among other methods, unchecking the suddenly-added checkbox for CCleaner in MSConfig's start-up tab.

I am less sure whether any harm has been done, since I am not familiar with CCleaner's "phone home" activities and I don't know whether it stole any information from my computer and sent it back to the company.

Yes, I can uninstall CCleaner from our machines since we never use it, and that is now going to be a priority for me, but it adds work for my already overworked staff.

If my guess is correct, avast! should publicly admit to it, and promise never to do such a thing again.
Title: Re: CCleaner Suddenly Updated and Running on Boot-Up
Post by: DavidR on March 30, 2018, 05:24:10 PM
See https://forum.avast.com/index.php?topic=217752.0 (https://forum.avast.com/index.php?topic=217752.0).
Title: Re: CCleaner Suddenly Updated and Running on Boot-Up
Post by: KDibble on March 30, 2018, 05:58:20 PM
Thank you. However, as I said in my response in that other thread (which did NOT show up when I searched all of the avast! forums for "ccleaner" earlier today), there is NO "software updater" feature in my SOA console. The Endpoint Protection 8.x clients have it, but it is disabled. I can't access it it in the clients, and presumably if I could, whatever I did there would be instantly overridden by the SOA, as with all other client settings.
Title: Re: CCleaner Suddenly Updated and Running on Boot-Up
Post by: DavidR on March 30, 2018, 06:09:32 PM
Which makes me think that this is somehow outside the Software Updater, but makes me think under control of Avast, given that they now own Piriform and CCleaner.

It certainly needs feedback from Avast Software.