Logo

Malware in Popular CCleaner

On September 18th, 2017, Cisco’s Talos announced that CCleaner, a popular utility with billions of worldwide users, had been compromised by hackers, and was used to unwittingly distribute hidden malware in its installer. Later in the day, Piriform, the publisher of CCleaner, confirmed the problem.

Undetected by all but 1 major antivirus including CCleaner’s own parent company, this occurred for over a month and impacted over 2.7 million users. Users of CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 for 32-bit Windows are affected. These downloads were live on CCleaner’s official site from August 15th to September 12th, 2017. Anyone who downloaded the program during this time could be affected.

The company claims that while the hackers set up the backdoor and many users were impacted, that the perpetrators have been arrested and that the malware never successfully performed its full task and compromised user’s PCs or sent out their data; in the wake of recent security breaches such as Equifax, users are understandably worried. Given the severity of the threat of hacking and data theft, users should take action immediately if they have CCleaner.

Technical Details of CCleaner Malware Injection

First reported by Talos, the malware, which was hidden in the CCleaner installer without the publisher noticing (despite them being owned by Avast, a massive Anti-virus company), modified a core program DLL file to evade detection, and creates several registry keys. Not only were these files not flagged by any major Anti-Virus, but they were also even digitally signed by Piriform via their Symantec certificate, meaning your PC and security program would likely whitelist and trust the malicious installer. The malware gathers personal information on a user’s PC, including IP address and running programs, and sends it to a remote server. In our testing, the program sent data to IP 216.126.225.148.

Restore Your PC (If Possible)

As of the publication of this article, there have been no assurances given that updating or even uninstalling CCleaner will remove the malware is installed. The only action thus far has been shutting down the remote server where user data was being sent has been shut down by authorities. For this reason, it is best to remove the underlying malware separately, as its presence represents a serious security threat. Unfortunately, as this could have been installed as far back as August 15th, 2017, your System Restore points may not go back that far, or even if they do, restoring to such an outdated point may cause unintended problems with other programs you use and potentially lost files and data. Manually backing up files and doing a full format or clean Windows installation would likely be successful in fully removing the malware, but is extremely time-consuming and can be difficult for many PC users. Unfortunately, this makes a PC Restore or format an unattainable option for many.

Update CCleaner to the Latest Version

While CCleaner has told users to update to the latest version of the program. Prior to doing so, we recommend fully uninstall CCleaner, ensuring you check its program files folders and registry keys, manually deleting any remnants, and then re-downloading the latest version from the official site and reinstalling clean.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

Troubleshooting Error 1722

What is Error 1722?

Error 1722 is a type of Windows Installer error. Developed by Microsoft, Windows Installer is a software component used for the installation, maintenance, and removal of software on Windows systems. This is basically an .MSI file that contains explicit instructions about installing and removing specific applications that are supported by this file for example JAVA and ArcGIS. The error 1722 occurs when there is a problem with the Windows Installer package. And because of this the program supported by Windows Installer Package fails to set up and install. This error message is displayed in the following format:
“Error 1722. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support or package vendor.”

Solution

Restoro box imageError Causes

You may encounter error 1722 due to multiple reasons such as:
  • Windows Installer Package corruption
  • Improper Windows Installer Package installation
  • Windows Script Hosting permission issues
  • Viral Infection
It is advisable to fix error 1722 to ensure the application supported by the Windows Installer Package that you are trying to set up on your PC, installs successfully.

Further Information and Manual Repair

To resolve Windows Installer Package error 1722 on your PC, try the methods given below:

Method 1

Sometimes the error 1722 may pop up if the Windows Installer Package is not installed properly. In such an event, it is advisable to uninstall Windows Installer Package and then reinstall it. To do so, click on start, then control panel, program, and features and then choose the Add/Remove Program option to uninstall the Windows Installer Package on your system. Once it is removed, click OK to save changes. Then reboot your PC. Now download the Installer package and reinstall. After the installation is complete, now try installing the application supported by the Installer package you wished to install. However, first, it is suggested that you remove any traces of the failed application first. For example, if you previously received the error while installing Java, then remove all traces of failed Java installation.

Method 2

The alternative method is to change Window Script Hosting settings. To do this, go to the start menu, open Run and then type ‘Regedit’ in the command line and then press OK to continue. Check for either or both of the following registry keys HKEY_CURRENT_USERSoftwareMicrosoftWindows Script HostSettingsEnabled HKEY_LOCAL_MACHINESoftwareMicrosoftWindows Script HostSettingsEnabled If either of these has a DWORD value of ‘0’, then scripting is disabled. Change the values to ‘1’ will enable scripting and resolve the issue.

Method 3

There can be two reasons for Windows Installer Package corruption, viruses or registry overloaded with bad entries and obsolete files. If the error is triggered by viruses, then run an antivirus program to remove viruses and restore your PC. However, if the error is related to registry issues, then download Restoro. This is an easy-to-use PC Fixer with a powerful registry cleaner. The registry cleaner wipes out all the obsolete files cluttering the registry and repairs the damaged and the corrupt important files thereby repairing all errors including error 1722 on your system. Click here to download Restoro.
Read More
New Snipping tool redesigned in Windows 11
Windows 11 Snipping toolThe latest update from Panos Panay on Twitter is including New and redesigned Snipping tool inside Windows 11. From the shared video, we can see that it includes modern Windows 11 UI redesign and it looks and feels like a part of Windows 11. More things that can be seen from the shared video is that it looks like the new snipping tool is a merged version of the old with snip & sketch. It is good to see that it is still possible to capture screen with easier way natively inside Windows 11 but some more functionality would be more welcome I guess. Users were asking for added functions for a long time like adding simple text for example but from shared video, no new features were presented so for some users 3rd party solutions will still be the way to go. The new and redesigned Snipping tool will roll out with the next update and we will see then about all new features inside it firsthand. Until then, take care.
Read More
How to Repair BSOD Stop Error code 0xc000021a in Windows 10

Error code 0xc000021a - What is it?

Error code 0xc000021a occurs when the system is unable to start or there’s a failure in critical system processes. Normally, it would take about several seconds for the system to boot and while on the startup process, error code 0xc000021a may take place to block the system to boot up. Users will get a blue screen of death (BOSD) when this error occurs. When upgrading to Windows 10, be careful; you might encounter other error messages such as error code 8007002c

Solution

Restoro box imageError Causes

There are several reasons why error code 0xc000021a occurs. It is important to have a full understanding of what caused the blue screen of death before attempting to fix the error by yourself. See below for a few common causes:

Computer malware has infiltrated your device.

• Important files such as Winlogon.exe and Csrss.exe are damaged. Winlogon.exe file is responsible for handling the login and logout processes while Csrss.exe is a vital part of Microsoft Client or Server ‘Runtime Server Subsystem’. Once one of these files is damaged or deleted, a stop error will occur.

• When there are mismatched system files installed or system upgrading process failed or still incomplete.

• Premature unloading of Wbemprox.dll

• Newly installed third-party software is not compatible with the operating system.

• There are corrupted, outdated, or incorrectly configured device drivers.

• There’s insufficient space in the system partition. Once the system partition is full, certain errors such as error code 0xc000021a will manifest.

• Windows registry is corrupted or damaged due to a software or system change. This means there are registry entries that are not cleared after uninstalling an application.

Further Information and Manual Repair

In fixing error code 0xc000021a, you might want to try and manually do so. Manual repair methods can give users effective and efficient solutions, addressing the root problems in relation to Windows error codes. Once the manual repair method is correctly implemented, users will be able to resolve issues immediately. However, there might be instances when a Windows professional is needed. In such cases, seek help from a certified Windows expert or you might want to consider using an automated tool whenever necessary.

Method One: Convert the Drive or Partition from NTFS to GPT

In order to fix Error code 0xc000021a in Windows 10, you might need to convert the partition or drive from NTFS to GPT. See below for the procedure: 1. Shut down your device then put in the Windows installation USB key or DVD. 2. Boot your device to the USB key or DVD in UEFI mode. 3. Inside the Windows Setup, open a Command Prompt window by pressing Shift + F10. 4. Type diskpart in the Command Prompt window to open the diskpart tool. 5. Type list disk to identify which drive to reformat. 6. Select which drive to reformat by typing select disk in the command prompt. Afterward, type clean then hit Enter. Once done, type convert gpt to be able to convert the drive from NTFS to GPT. Finally, type exit and press Enter. You can now close the Command Prompt window. 7. Once the partition or drive is converted from NTFS to GPT, the user can now continue the Windows Setup installation. NOTE: Select Custom in choosing which installation type to use. The drive will then appear as a single area of unallocated space. Choose that unallocated space then select Next. At this point, Windows will now begin the installation.

Method Two: Fix System File Errors

There are times when system files get corrupted or damaged which will result in system failure. If this is the case, you can use a Windows free tool to repair corrupted or damaged system files. 1. Right-click on the Start button then selects Command Prompt (Admin) from the list to open a Command Prompt window. 2. Once the Command Prompt appears, type sfc /scannow then hit Enter. Wait until the process completes. If the process is completed and it doesn’t report any error or issues that remain unsolved, you might want to employ the next method.

Method Three: Reset Windows 10

Resetting Windows will delete all software and user accounts installed in the operating system and will reinstall a fresh Windows. 1. Boot your device using a Windows installation USB key or DVD. Select Repair your computer to locate the Troubleshoot option. Afterward, choose Reset this PC. NOTE: If the device is able to boot the system, you can reset Windows without using a Windows installation USB key or DVD. You just have to boot the device then navigate to Settings in the Start button. Choose Update & Recovery then select Recovery found on the left pane. Choose Reset this PC option then select Go back to an earlier build and Advanced startup. Select Get Started button found in the Reset this PC tab. 2. Depending on your device’s condition, you can either select Keep my files or Remove everything. Both options will remove all applications installed in the device and will revert to default settings. 3. Choose either Just remove my files or Remove files and clean the drive depending on the situation. If you choose the Remove files and clean the drive option, the procedure will take longer as it will erase all the files permanently. In this case, deleted files cannot be recovered. However, if you don’t want to remove files permanently, select Just remove my files. 4. Once you’ve decided how to reset your system, click on Next once the Warning screen appears. Afterward, choose Reset once prompted. When the process completed, click on Continue.

Method Four: Download an Automated Tool

Can’t seem to put up with the long and technical manual repair process? You can still fix this error by downloading and installing a powerful automated tool that will surely get the job done in a jiffy!
Read More
Fix Error 0164, Memory size decreased
Computer upgrades are the most common and most efficient ones. RAM upgrade is one of the easiest ones you can do and the most common ones but even as simple an upgrade as this one can cause certain issues. If you are experiencing error 0164, memory size decreased after RAM upgrade we are offering you solutions on how to fix this particular error and get your computer back in working order.
  1. Change BIOS settings

    Enter your motherboard BIOS (usually by pressing the del key on startup) Load BIOS defaults Save changes and exit If the Error 0164: Memory size decreased issue persists even after loading setup defaults, then it must be configured manually inside the BIOS.
  2. Clear CMOS

    Follow the instructions precisely:
    • Turn off all peripheral devices connected to the computer.
    • Disconnect the power cord from the AC power source.
    • Remove the computer cover.
    • Find the battery on the board. The battery may be in a horizontal or vertical battery holder or connected to an onboard header with a wire.
    If the battery is in a holder, note the orientation of the + and – on the battery. With a medium flat-blade screwdriver, gently pry the battery-free from its connector. If the battery is connected to an onboard header with a wire, disconnect the wire from the onboard header.
    • Wait one hour, then reconnect the battery.
    • Put the computer cover back on.
    • Plug the computer and all devices back in.
    • Power on the computer.
Read More
Restore default Display Color settings in Windows 10
The color settings in a Windows computer certainly matter a lot especially when it comes to printing pictures. Users who are found or edit photos for a living change their computer’s color settings in order to ensure that the printout looks like the actual colors. However, those settings might not be appropriate for computer display and you can really tell right away that there something’s not right in the display. You might also notice some weird tint which isn’t easy to get rid of. You can’t actually tell the difference at first, not until you look at some other computers and then wonder what’s wrong with yours so, in this guide, you will know how to restore the display color settings back to their default state on your Windows 10 PC. Make sure to follow each one of the steps laid out below carefully to restore the default Display Color settings.

Step 1: Set the Color Management Settings to default.

  • In the Start search box, type in “color management”. Once you see it in the search results, open it.
  • Once you’ve pulled up the Color Management window, go to the Advanced tab. From there, make sure that every single option is set to default – from all the options in both the “Windows Color System” and “ICC rendering intent to WCS gamut mapping”.
Note: You also have the option to reset it for everyone by simply clicking on the “Change system defaults” button.
  • Finally, you can also try to calibrate your display.

Step 2: Set the Graphics Properties to default.

After making changes in the Color Management settings, you need to also set the Graphics Properties to default.
  • Start by right-clicking on any empty space on your desktop.
  • Then select the Graphics properties from the context menu. From the Graphics properties window, you will see that most sections have to restore defaults.

Step 3: Try using Nvidia Color Settings for Desktop

The next thing you can try is using the Nvidia Color Settings if you have Nvidia graphics installed on your Windows 10 PC. Just the Control Panel to reset the color settings.
  • From the system tray, launch the Nvidia control panel.
  • Next, go to Display > adjust desktop color settings.
  • From there, select the display and then select the Nvidia Settings.
  • After that, change the options accordingly in order to get the correct combination though you can always leave them to default.
Read More
Fix Error 0x800F0923 in Windows 10
In trying to upgrade your Windows 10 computer, you might have come across the error 0x800F0923. This kind of Windows upgrade/update error is caused by an incompatible driver or software that’s installed on your computer. Thus, to fix the problem, you need a working fix which you can choose from below. As mentioned, you can try updating the concerned application or software to its latest version to resolve the compatibility issue and in turn, fix error 0x800F0923. Note that depending on where you had installed the application, your steps will change. So if you have it installed directly from the website, refer to these steps:
  • Look for the built-in option to check the updates since the most application has this option.
  • You also have the option to go to the website of the application and check if there is a new version available. If there is, download and update the app.
On the other hand, if you have downloaded the app from the Microsoft Store, here’s what you have to do:
  • Open the Store and click on the three dots located at the top-right of the window.
  • Next, click the Download and Updates option.
  • From there, check if there is an update available for the store. If there is, update it.

Option 2 – Try to uninstall the application or software

If updating the app or software to its latest version didn’t help and you’re still getting the error 0x800F0923 every time you attempt to install the Windows Updates, you may have to uninstall it. You will need to use the usual Program and Features to uninstall it if you have downloaded it from the website.
  • In the search box, type in “control” and then click on Control Panel (desktop app) among the search results.
  • After that, select Programs and Features from the list which will give you a list of all the programs installed on your computer.
  • From there, look for the concerned program and select it and then uninstall it.
Note: If you have downloaded the app from the Windows Store, you can simply right-click on it from the application list and then uninstall it.

Option 3 – Try to disable your antivirus program

Disabling the antivirus program or any security software installed in your computer is always a good idea you can try when the Windows Update process does not go smoothly. So before you try updating your computer again, make sure to disable the antivirus or security program and once the Windows Update is done, don’t forget to enable the antivirus program back again.

Option 4 – Try to run the Windows Update Troubleshooter

Running the built-in Windows Update troubleshooter could also help you resolve the Windows Update error 0x80073712. To run it, go to Settings and then select Troubleshoot from the options. From there, click on Windows Update and then click the “Run the troubleshooter” button.

Option 5 – Try to do the Update in a Clean Boot state

Putting your PC in a Clean Boot state can also help you install Windows Updates or Upgrades without any trouble because, during this state, you can start the system with a minimum number of drivers and startup programs that will surely help you in isolating the root cause of the issue.
  • Log onto your PC as an administrator.
  • Type in MSConfig in the Start Search to open the System Configuration utility.
  • From there, go to the General tab and click “Selective startup”.
  • Clear the “Load Startup items” checkbox and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
  • Next, click the Services tab and select the “Hide All Microsoft Services” checkbox.
  • Click Disable all.
  • Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
  • After that, try to install the Windows Updates or upgrade again.

Option 6 – Try running Microsoft’s online troubleshooter

You also have the option to run Microsoft’s online troubleshooter which could help you fix Windows Update errors including the error 0x800F0923.
Read More
Fix GDI32.DLL error in Windows 10
The GDI32.DLL is a DLL (Dynamic Link Library) file that was developed by Microsoft. It is an essential file of the Windows OS as it contains instructions and information for exe files to follow. These DLL files also use to store the various procedures and codes for the Windows programs. It is considered an essential component of Windows because it ensures that all the programs on Windows are operating properly. So, if the gdi32.dll not found on your computer, then it can negatively impact your computer and the associated programs. Though DLL files used to be so efficient and convenient, they are extremely vulnerable to errors and issues.
  1. Perform SFC scan

    Press ⊞ WINDOWS + X to open the Windows menu keyboard with windows and x marked From the menu choose command prompt (admin) Windows menu command prompt adminIn command prompt type sfc /scannow and press ENTER Leave the computer for the operation to be completed and Reboot your computer
  2. Run DISM

    Press ⊞ WINDOWS + X to open the Windows menu keyboard with windows and x markedFrom the menu choose command prompt (admin) Windows menu command prompt adminin command prompt type: DISM.exe /Online /Cleanup-image /Restorehealth and press ENTER wait for the process to be finished and Reboot your computer
  3. Update device driver

    Go to your manufacturer's website and update drivers for your components with the latest versions.
  4. Update Windows

    If you have an update ready for Windows, update it and see if this will remove the error
  5. Scan computer for malware

    Perform a full PC scan for malware to see if this is causing issues with the GDI32.DLL error.
  6. Download file

    One solution is to download a file from the official site and place it in the corresponding folder.
  7. Perform System restore

    Rollback system restore before the issue happened and your Windows will be working as intended
Read More
MS Edge, autoplay video blocking coming
Microsoft Edge may be about to win a lot of fans by introducing a new feature that it says could prevent one of the most annoying things about being online. A new update to the browser suggests it is looking at a way to block auto-playing videos by default when a user navigates to a website. People spotted a new entry to the Microsoft Edge Canary browser where the company tries out its in-progress updates, that suggests auto-playing videos may have had their day at last. The new addition, for Mac, Windows, and Linux systems, is called “Autoplay Limit Default Setting”, with the description suggesting that Microsoft Edge would set the media autoplay setting to "Limit" as a default - stopping videos from starting up when a user lands on a website. Currently, Edge offers two options for users to control media autoplay - "Allow" (the current default setting), where all videos on a website will play automatically with sound, and "Limit", where media won’t be autoplayed on sites that a user has previously visited. It appears that Microsoft is looking to test the feature in Canary before rolling it out to a wider user base - as blocking autoplaying videos can cause issues for some websites. The same Canary entry also hints at a future "Block" option, which would presumably stop any videos or media from playing when a user lands on a website. However, this feature, which is also listed as being available for Mac, Windows, and Linux systems, doesn't appear to be enabled as yet. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.
Read More
How to add Windows Store games to Steam
  1. Open the Steam app and select Add a Game.
  2. Click Add a Non-Steam Game and choose Browse.
  3. Access: C:\Windows\
  4. Then, scroll down, open explorer.exe, and click Add Selected Programs.
  5. Hold Windows + R keyboard shortcut, type shell:AppsFolder, then press Enter.
  6. Select the game you want to add, right-click on it, and choose Create Shortcut.
  7. Right-click on the desktop shortcut, go to Properties, type in Target Type or Target, delete the shortcut.
  8. Go to Steam, access Library, select Games, right-click on the game explorer, choose Properties, choose the name of the game you want to add.
  9. Choose Select Launch Options, write: shell:AppsFolder\<Target Type or Target Here>
  10. Click OK, then Close.
If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.
Read More
Internet disconnected when VPN is connected
If your VPN software blocks and disconnects the Internet or Wi-Fi connection as soon as it is connected, read on as this post will give you fixes to resolve the problem. This kind of issue is odd but not unheard of. Many users use VPN for privacy and security but if it causes internet connection problems, you have to pin down the root cause of the problem and fix it in order to continue browsing the internet with privacy and security. Here are some suggestions you need to check out to resolve the issue between your VPN software and network.

Option 1 – Try installing the latest version of the TAP adapter

Since all VPN software uses a TAP adapter which is mostly from OpenVPN, you might want to download and install the TAP adapter driver to resolve the problem.

Option 2 – Run the Network Adapter Troubleshooter

  • Open the Search bar on your computer and type in “troubleshoot” to open the Troubleshoot settings.
  • Next, scroll down and select the “Network Adapter” option from the right pane.
  • Then click on the Run Troubleshooter” button.
  • After that, your computer will check for any possible errors and will pinpoint the root cause of the problem if possible.

Option 3 – Configure the client computer to use the default gateway

This kind of connection problem can occur when you configure the VPN connection as the default gateway on the remote network. In such a case, the VPN settings override the default gateway settings (TCP/IP settings). Thus, you have to configure the client computers in order to use the default gateway setting on your local network for internet traffic as well as a static route on the remote network for VPN-based traffic.

Option 4 – Try to use the Google Public DNS

You might want to change your DNS to Google Public DNS as it could help you resolve the internet connection problem caused by your VPN. To do so, follow the steps below.
  • The first thing you have to do is right-click on the network icon in the Taskbar and select Network and Sharing Center.
  • Next, click on the “Change Adapter Settings” option.
  • After that, search for the network connection that you are using to connect to the internet. Note that the option might be “Wireless Connection” or “Local Area Connection”.
  • Right-click on your network connection and click on Properties.
  • Then select the new window to choose the “Internet Protocol 4 (TCP/IPv4)” option.
  • After that, click on the Properties button and click the checkbox in the new window for the option “Use the following DNS server addresses”.
  • Type in “8.8.8.8” and “8.8.4.4” and click OK and exit.

Option 5 – Try checking the settings of your VPN software

If your VPN software has a built-in “kill switch” it prevents any internet usage every time there is a problem in connecting with the VPN server which explains why your internet connection is disconnected when your VPN software is connected. In addition, you could also try to change your VPN software’s protocol since all VPNs support multiple protocols. It could be that the protocol your VPN uses is blocked so try changing to another protocol and see if it fixes the problem.

Option 6 – Update the Network Adapter drivers

You might also want to update the Network Adapter drivers by following these steps:

  • Tap the Win + R keys to launch the Run window and then type in the “devmgmt.msc” command and hit Enter to open the Device Manager window.
  • Under the Device Manager, you will see a list of drivers. From there, look for the Network Adapters and expand it.
  • Then right-click on each one of the Network drivers and update them all.
  • Restart your PC and see if it helped in fixing the BSOD error.
Note: If updating the network drivers didn’t help in fixing the “Windows could not find a driver for your network adapter” error, you can also try to uninstall the very same drivers and restart your Windows 10 PC. After that, the system itself will reinstall the drivers you just uninstalled. Alternatively, you can also download and install the drivers from the manufacturer’s website directly.

To reinstall the network adapter driver, refer to these steps:

  • Open the Devices Manager from the Win X Menu.
  • Then locate the device drivers and right-click on them to open the Properties.
  • After that, switch to the Driver tab and click on the Uninstall Device button.
  • Follow the screen option to completely uninstall it.
  • Finally, restart your computer. It will just reinstall the device drivers automatically.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status