Jump to content


Photo

Weird permissions in CCleaner


  • Please log in to reply
7 replies to this topic

#1 Assassin7772

Assassin7772

    Regular Member

  • Honorary Members
  • PipPip
  • 95 posts
  • Gender:Not Telling
  • Location:Earth

Posted 04 August 2012 - 01:55 PM

Hey guys, I just found some really weird permissions in CCleaner. I don't know if this is malware related or not. There are about 6 of them and they all have checks next to "Special permissions". I uploaded a pic, let's see if it shows up :
Posted Image

Please click on the pic to enlarge it!!

And these are only 3 of them, if I scroll down, there are three more, all with a check to "Special permissions". I'd really appreciate it if you guys would check your CCleaner (if you have it) and tell me if this is present on all CCleaner installations. I've checked my other icons (Avira, MBAM, HItman Pro) and they are all normal. I've just noticed this after updating CCleaner to it's latest version. What happened was, I downloaded the latest CCleaner and tried to install it over the previous (like it says), but it started acting weird and not opening. So, I uninstalled it all together, downloaded it again (the installer), scanned it with VirusTotal and it got a 2/40 (Jiangmin & Trend Micro HouseCall). I read the comments and they all said that it was #goodware and that Trend Micro is known for false positives. The vote was 22/0 saying that it was clean (the green smily face had 22 votes). So, I know that I don't have an infected CCleaner. I always download from Piriform (the official site). Hope you guys can help!

Also, if this helps at all, CCleaner has stopped asking me for confirmation when I open it. Like, Windows doesn't say "Would you like this program to make changed to your computer". This has all started happening yesterday (after downloading the latest version and the mishap that happened). Really weird.



Assassin7772

Malware Analyst

Posted Image

You can follow Malwarebytes on Facebook and Twitter

Don't forget to check out the Malwarebytes YouTube Channel!


#2 daledoc1

daledoc1

    Forum Deity

  • Spam Hunters
  • PipPipPipPipPipPip
  • 7,950 posts
  • Gender:Not Telling

Posted 04 August 2012 - 01:58 PM

Hi:

I've not seen that - v3.21 updated and running fine here on both rigs, although the program DOES require certain permissions in order to run. :(
Perhaps cleanly uninstall it, reboot, and try a clean reinstall from a fresh download from here: http://www.piriform....cleaner/builds?

Until one of the more expert folks with detailed knowledge of Windows permissions arrives, you might consider the CCleaner forum?

<just a thought>

Here is the link to the forum:
http://forum.piriform.com/index.php?showforum=4"]http://forum.pirifor...php?showforum=4
Here is the link to their support page:
http://www.piriform.com/support

HTH,

daledoc1
Just a home user & forum volunteer
DT1: Win7/Ult/64 SP1; Intel Core i7-3770 @3.4 GHz; 16 GB RAM; NVidia GeForce GT620; IE9; Fx 21.0; TB 17.0.6; Cable HSI; MBAM PRO 1.75.0.1300; KIS2013; SAS Free; CCleaner
DT2: Win7 Ult/64 SP1; Intel Core i7-860 @2.8 GHz; 8 GB RAM; ATI Radeon HD 5770; IE 9, Fx 21.0; TB 17.0.6; Cable HSI; MBAM PRO 1.75.0.1300; KIS2013; SAS Free; CCleaner.
LT: Win7 Pro/32 SP1; Intel Core 2 Duo @2.8 GHz; 4 GB RAM; NVIDIA Quadro NVS 160M; IE 9; Fx 21.0; TB 17.0.6; WLAN; MBAM PRO 1.75.0.1300; KIS2013; SAS Free; CCleaner.

#3 Firefox

Firefox

    Forum Deity

  • Trusted Advisors
  • PipPipPipPipPipPip
  • 7,891 posts
  • Gender:Male
  • Location:USA

Posted 04 August 2012 - 02:47 PM

My shortcut does not show those permissions, just the one for my account, administrators, and the system.

Posted Image


Dell Precision T7500, Win7 Ultimate 64bit fully updated, McAfee Corp Edition v8.8,
Watchguard Firewall, Intel Xeon E5606CPU, Dual Quad Core Processors, 16GB Ram,
E5606 @ 2.13GHz, Nvidia Quadro NVS420, Raid-1 Dual 1TB Sata 10000 rpm Hard Drives
Dual DVD Burners, IE10, Opera, MBAM


#4 daledoc1

daledoc1

    Forum Deity

  • Spam Hunters
  • PipPipPipPipPipPip
  • 7,950 posts
  • Gender:Not Telling

Posted 04 August 2012 - 02:59 PM

View PostFirefox, on 04 August 2012 - 02:47 PM, said:

My shortcut does not show those permissions, just the one for my account, administrators, and the system.

Same with mine (IOW I don't have any "account unknown" listings).
Just a home user & forum volunteer
DT1: Win7/Ult/64 SP1; Intel Core i7-3770 @3.4 GHz; 16 GB RAM; NVidia GeForce GT620; IE9; Fx 21.0; TB 17.0.6; Cable HSI; MBAM PRO 1.75.0.1300; KIS2013; SAS Free; CCleaner
DT2: Win7 Ult/64 SP1; Intel Core i7-860 @2.8 GHz; 8 GB RAM; ATI Radeon HD 5770; IE 9, Fx 21.0; TB 17.0.6; Cable HSI; MBAM PRO 1.75.0.1300; KIS2013; SAS Free; CCleaner.
LT: Win7 Pro/32 SP1; Intel Core 2 Duo @2.8 GHz; 4 GB RAM; NVIDIA Quadro NVS 160M; IE 9; Fx 21.0; TB 17.0.6; WLAN; MBAM PRO 1.75.0.1300; KIS2013; SAS Free; CCleaner.

#5 DarkSnakeKobra

DarkSnakeKobra

    May the penguin be with you!

  • Honorary Members
  • PipPipPipPipPipPip
  • 5,180 posts
  • Gender:Male
  • Location:~
  • Interests:Security, scripting, GNU/Linux, photography

Posted 04 August 2012 - 10:43 PM

Same for mine except that mine has an additional one called INTERACTIVE. :huh:

Computer Specs given when asked.
Bleeping Computer Malware Study Hall Junior


Advice: Hug your dog, cat etc everyday! :)


#6 mona7865

mona7865

    Elite Member

  • Honorary Members
  • PipPipPipPipPip
  • 938 posts
  • Gender:Female
  • Location:Merksem-Antwerp, Belgium

Posted 05 August 2012 - 01:33 AM

Same as DSK here (with interactive).
Kindly Regards.

Mona.



#7 Assassin7772

Assassin7772

    Regular Member

  • Honorary Members
  • PipPip
  • 95 posts
  • Gender:Not Telling
  • Location:Earth

Posted 05 August 2012 - 05:42 AM

Wow, this is getting weirder by the minute. Well, let's hope some MBAM staff arrive and tell me what's happening. I'm kinda getting worried. I'll do a google search in the mean time.



Assassin7772

Malware Analyst

Posted Image

You can follow Malwarebytes on Facebook and Twitter

Don't forget to check out the Malwarebytes YouTube Channel!


#8 fivealive

fivealive

    Elite Member

  • Honorary Members
  • PipPipPipPipPip
  • 796 posts
  • Gender:Male
  • Location:canada

Posted 05 August 2012 - 03:28 PM

why not contact the company who makes the program and ask them about it?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users