CCleaner: A Vast Number of Machines at Risk

I submitted the detection to Piraform and to Malwarebytes. Just hoping it's a false positive but too many circumstances lead me to believe this may just be an another attack on CCleaner. Had that program many, many years, now I am wondering about keeping it.

Turns out that was Ransomware. Deep Scanning that machine with WD now. 32 bit machine scanned and found nothing devious.

I don't know what triggers ransomware, but I have not cold started the machine in several days and use hibernate at night. It is also Bit Lockered if that mattered.

Holy cruft! All copies of the ccsetup533 on all of my PCs were infected. I just blogged about this here with some specific remediation advice. Ouch! CCleaner 5.33 32-bit Carries Malicious Payload - Windows Enterprise Desktop
Thanks again for passing this along, Swarfega/Tweakhound/Talos.
--Ed--

EdTittel said:

Holy cruft! All copies of the ccsetup533 on all of my PCs were infected. I just blogged about this here with some specific remediation advice. Ouch! CCleaner 5.33 32-bit Carries Malicious Payload - Windows Enterprise Desktop
Thanks again for passing this along, Swarfega/Tweakhound/Talos.
--Ed--

Unlucky Ed

This is disturbing as this could happen to any common third party app that's free and widely distributed. Guess we need to be extra cautious when downloading such apps now. This is why I also do a manual scan before opening anything. Still...

Frozenoem1 said:

...It's a good day for paranoia...[emoji849].

Ran a Defender full scan, MBAM & AdwCleaner all came up clean. Even did the Registry search as mentioned above with no hits. This is making me paranoid for sure.

Edit:

2 hours later and I've scanned this thing with everything but a cat and it still comes up clean. This usually isn't the way my luck runs, but I'll take it.