CCleaner Trojans

[GrahamE]

Still, thanks to Avast for sorting them out.  I expect HAI will come up as false soon enough.

Yes, many thanks to Avast for getting on to this. It's taken a while, but then they do have one or two other things to do as well, I suppose...

Hopefully, if we all continue to email every instance of these FP's to them, they will soon be able to sort this out completely.

[Dangerman]

On my new comp, I moved the temp files that were detected while cleaning with ccleaner (over the course of a few days) to the virus chest, and the strange thing is, right after i moved each one into the chest, I scanned each one in the chest and it reported "no virus".  That's very strange considering that avast! JUST said less than a minute ago with its on-access scanner that these files were infected.

I guess these are false positives.  It sure seems like it anyway.

Yes, it has been very strange even if they are false positives.  On my pc these have only ever been found when cleaning Firefox/documents and settings.  If I use Opera or the dreaded IE, nothing was ever picked up.  GrahamE seems to have found them in different places.  It's a strange false positive alright.

[Lisandro]

It's becoming an endless story 
Right now, if you (all users with CCleaner problems) submit the suspect files to Virustotal will any of them appear to be infected?

If you run full computer on-line scanning:

Kaspersky
Trendmicro housecall
Ewido
F-Secure
Panda ActiveScan
BitDefender (free removal of the malware)

will anything be detected?

[Dangerman]

It's becoming an endless story 

Actually, I hope we are getting close to the end.  I now only have one trojan as previously mentioned and that has only been picked up once since this all began.  We will have to see how we go from here, but all the "no virus" responses to the "G" series of trojans was good to see yesterday.

[GrahamE]

Right now, if you (all users with CCleaner problems) submit the suspect files to Virustotal will any of them appear to be infected?

If you run full computer on-line scanning will anything be detected?

I, as you know, have already done that, and the answer is 'no', nothing else comes up with a detection.

What we all want now is for Avast to recognise these as false positives and update the definitions accordingly. Thankfully, they have made a major attempt to do this now, with all of the 'G' series now showing 'no virus', as Dangerman pointed out. Hopefully they'll soon deal with the 'H' series, and the endless story, again misquoting Dangerman, will be at an end. 

[Gabriele 08]

Hi,
I've just scanned all files in my chest and now there is only one recognized as virus, while all series of '-G' now aren't more.
Thanks to Alwil's team

What we all want now is for Avast to recognise these as false positives and update the definitions accordingly. Thankfully, they have made a major attempt to do this now, with all of the 'G' series now showing 'no virus', as Dangerman pointed out. Hopefully they'll soon deal with the 'H' series, and the endless story, again misquoting Dangerman, will be at an end. 

I agree of course, but I want to join that I hope in the future will be found the heart's matter regarding avast's alerts during CCleaner's job. And now I'm optimist about this day will be not so far 

[Lisandro]

What we all want now is for Avast to recognise these as false positives and update the definitions accordingly.

Me too...

while all series of '-G' now aren't more.

Seems they're answering silently...

[GrahamE]

I agree of course, but I want to join that I hope in the future will be found the heart's matter regarding avast's alerts during CCleaner's job. And now I'm optimist about this day will be not so far 

While it's hopeful that, for the time being at least, the problem seems to be calming down, it's difficult to see the definitions updates as an explanation of why this has been happening. The fact that the new definitions stop the alerts points towards a problem with the definitions in the first place, but if that's the case, why haven't there been more people than us few having a problem with it? Surely you would expect everyone who uses CCleaner and Avast to have experienced the same thing, and as we know from Tech, that isn't the case. 

This has certainly been a weird one!

[Lisandro]

Why haven't there been more people than us few having a problem with it? Surely you would expect everyone who uses CCleaner and Avast to have experienced the same thing, and as we know from Tech, that isn't the case. 

I won't expect that... each computer, one behavior...
By the way, which is your file system, NTFS or FAT32?

[GrahamE]

By the way, which is your file system, NTFS or FAT32?

NTFS

[Lisandro]

NTFS

Same here... It was just a guess...
I'm still jumping in the dark with your problem. It will be good if at anytime Alwil team jump here, and read at least the last posts and help us...

[jet-doc]

I need a little help here and from reading this forum it looks like people who have installed avast are getting hit hard with these viruses does anyone know what is going on what was described here is exactly what just started happeneing on my nieces computer shortly after the AVAST install. She got her home page changed and tons of porn on the screen and she is only 10 so I am not a happy camper about all of this I need some help I have Avast, Super Spyware Detector, Spybot and Adaware in the computer with this combination she should be on easy street however it appears she is on 42nd street instead.

Thank You
Jet

Oh well that's really great! I'm infested with traces of Trojans and I'm a pervert!! 

[Lisandro]

jet-doc, it will be good if you start a new thread and not use CCleaner one as your (her) problem does not seem related to this one. Anyway, please post more info about the problem and her computer, helping us to help you:

We will need more information to be able to help you:
- Which OS are you using? Is it up to date?
- What avast! version and VPS file (virus database) number?
- What was the filename and path where the virus was found?
- Which actions have you taken to try solving the problem?
- Do you use a firewall? Which one?

Oh, don't forget to start a new thread.

[Gabriele 08]

Why haven't there been more people than us few having a problem with it? Surely you would expect everyone who uses CCleaner and Avast to have experienced the same thing, and as we know from Tech, that isn't the case. 

I won't expect that... each computer, one behavior...

Like humans...there are not two absolutely alike 

I think (or I suppose) that also other people may have experienced same situation, but without come here and partecipate. After you and me, for instance we have seen Dangerman-Thomas (then disappeared)-Philly.
Well, not enormous numbers...but there are! And I suppose that "in background" there are more.
By the way, if now things are changing about files in our chests, I believe that avast is working at this regard (otherwise...? ? ?), and if the matter was not to ascribe in some way or other, to avast OR to CCleaner OR to a combination of the two mentioned, I think we should never seen this changes!

Aah GrahamE, another thing I'm thinking is, that you and me we have habit to clean temp-cache-etc. daily. How many people do you know making the same?
Example: if I run CCleaner only one time a month (and I know people...) and avast give me a warning for trojans, I may see the situation from a different prospective, thinking that avast works good, and no more. So viewing situation like an absolutely normal situation. (Just an idea, an hypothesis, of course)

NTFS me too.

P.S. Tomorrow I have to go away from my city, for some days. So please, no bad news on my return 
Greetings

[GrahamE]

It will be good if at anytime Alwil team jump here, and read at least the last posts and help us...

Well I'll certainly second that!

Example: if I run CCleaner only one time a month (and I know people...) and avast give me a warning for trojans, I may see the situation from a different prospective, thinking that avast works good, and no more. So viewing situation like an absolutely normal situation. (Just an idea, an hypothesis, of course)

Yeah, you could well be right. And as you also say, others have appeared with the same problem, so there will probably be others as well.

Tomorrow I have to go away from my city, for some days. So please, no bad news on my return 

We'll have it all sorted out by the time you get back!  Have a good trip.