On September 18th, 2017, Cisco’s Talos announced that CCleaner, a popular utility with billions of worldwide users, had been compromised by hackers, and was used to unwittingly distribute hidden malware in its installer. Later in the day, Piriform, the publisher of CCleaner, confirmed the problem.
Undetected by all but 1 major antivirus including CCleaner’s own parent company, this occurred for over a month and impacted over 2.7 million users. Users of CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 for 32-bit Windows are affected. These downloads were live on CCleaner’s official site from August 15th to September 12th, 2017. Anyone who downloaded the program during this time could be affected.
The company claims that while the hackers set up the backdoor and many users were impacted, that the perpetrators have been arrested and that the malware never successfully performed its full task and compromised user’s PCs or sent out their data; in the wake of recent security breaches such as Equifax, users are understandably worried. Given the severity of the threat of hacking and data theft, users should take action immediately if they have CCleaner.
First reported by Talos, the malware, which was hidden in the CCleaner installer without the publisher noticing (despite them being owned by Avast, a massive Anti-virus company), modified a core program DLL file to evade detection, and creates several registry keys. Not only were these files not flagged by any major Anti-Virus, but they were also even digitally signed by Piriform via their Symantec certificate, meaning your PC and security program would likely whitelist and trust the malicious installer. The malware gathers personal information on a user’s PC, including IP address and running programs, and sends it to a remote server. In our testing, the program sent data to IP 216.126.225.148.
As of the publication of this article, there have been no assurances given that updating or even uninstalling CCleaner will remove the malware is installed. The only action thus far has been shutting down the remote server where user data was being sent has been shut down by authorities. For this reason, it is best to remove the underlying malware separately, as its presence represents a serious security threat. Unfortunately, as this could have been installed as far back as August 15th, 2017, your System Restore points may not go back that far, or even if they do, restoring to such an outdated point may cause unintended problems with other programs you use and potentially lost files and data. Manually backing up files and doing a full format or clean Windows installation would likely be successful in fully removing the malware, but is extremely time-consuming and can be difficult for many PC users. Unfortunately, this makes a PC Restore or format an unattainable option for many.
While CCleaner has told users to update to the latest version of the program. Prior to doing so, we recommend fully uninstall CCleaner, ensuring you check its program files folders and registry keys, manually deleting any remnants, and then re-downloading the latest version from the official site and reinstalling clean.

Error Causes
A few days ago we celebrated fixing of months-long PrintNightmare vulnerability by Microsoft, sadly a new bug and issue have been found.
Firstly discovered Microsoft stated:
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.A few days ago, Microsoft officially released a patch that was supposed to finally fix it. As you might recall this vulnerability was present for quite some time, Microsoft's solution after a long struggle was to elevate certain privileges to administrator account only and remove user accounts from managing printers. It complicated things a little bit but it was stated payoff was worth it. The new issue now is that on a system that already had accounts created and set, old accounts still can hijack the system, patch issues address only accounts that are created after the fix is administrated, old ones can still do whatever they want. Once again of course Microsoft has stated that until it is again resolved you should again disable the Print Spooler service as a temporary workaround.
“This policy setting allows you to hide the Switch User interface in the Logon UI, the Start menu, and the Task Manager. If you enable this policy setting, the Switch User interface is hidden from the user who is attempting to log on or is logged on to the computer that has this policy applied. The locations that the Switch User interface appears in the Logon UI, the Start menu, and the Task Manager. If you disable or do not configure this policy setting, the Switch User interface is accessible to the user in the three locations.”
BigTech platforms Google and Facebook were hit with a series of antitrust lawsuits by the US federal government and states on charges they are operating monopolies and abusing their power.
Below is the status of the cases, as well as government probes of Apple and Amazon in their current states
From the menu choose command prompt (admin)
In command prompt type sfc /scannow and press ENTER
Leave the computer for the operation to be completed and Reboot your computer
From the menu choose command prompt (admin)
in command prompt type: DISM.exe /Online /Cleanup-image /Restorehealth and press ENTER
wait for the process to be finished and Reboot your computer
Error Causes
Most of the time running applications with typical settings is fine but from time to time we might have some applications that will require running with administrator privilege in order to work properly. In this case, it is very easy to do it, you just right-click and choose run as administrator.
Although a very easy solution, it can be quite annoying if running the app is on a daily basis or even more times per day. If this is the case then right-clicking and choosing to run as administrator can be a daunting task, sometimes you can even forget to run it like this in heat of work and some unforeseen consequences might occur.
Luckily there is an easy hack so you can open the chosen application each time as an administrator with a simple double click each time.
“Component 'MSCOMCTL.OCX' or one of its dependencies not correctly registered: a file is missing or invalid”
Error CausesError Code 0xC004F00F can appear during the Windows 10 installation and activation process. It is a fairly straightforward error code that occurs when a product key is entered in that is unable to be used to complete the final activation of the new operating system. This error code is most commonly related to the installation of new pieces of hardware on a machine that was already running Windows 10 at a previous time.
Error Code 0xC004F00F can also appear on other versions of the Windows software, so if you are not specifically trying to install and activate Windows 10 when this message appears, you may want to contact a qualified Windows technician to help resolve your system error, as the error code has different causes and resolution methods on other versions of the Windows operating system.
Error CausesIn some cases, Error Code 0xC004F00F will show up if you are attempting to install Windows 10 on a computer in which the hard drive has been replaced or significantly altered. It can also appear when other major pieces of hardware, like the motherboard, have been changed out. These pieces may be changed as part of an upgrade to new or better hardware or be changed due to the malfunction of the original pieces of equipment. Because it may appear to the Windows activation servers that you are attempting to use the same product code that you have used before to activate what appears to be a new machine (even if the machine is the same one, just with some new parts), you may see Error Code 0xC004F00F arise.
Error Code 0xC004F00F can also come up if you have installed Windows 10 on your machine in the past and have already used the product key that you are attempting to use again.
Error Code 0xC004F00F most commonly appears for users who have made major hardware or software changes done on their machine. Because this error specifically arises from the Windows activation servers believing that your computer is a new one, you’ll need to get in touch with the Windows support team in order to resolve the error. From their database, they will be able to confirm that you are not using a new computer and will be able to bypass the error, allowing you to complete the Windows 10 Activation process.
If you haven’t installed or replaced any of the hardware on the computer, but are still seeing Error Code 0xC004F00F arise during your Windows 10 installation, you will still need to get in touch with the Windows support team to bypass the error code.
When you call into the Windows support team, you’ll want to specifically have a list of the following information readily available: Which pieces of hardware have been changed out on your computer prior to the installation and activation, what method you were using to install Windows 10, which version of Windows 10 that you were attempting to install, whether it was a single-use or multiple-use license, and basic details about your PC like its make, model, and age. You may also want to have the product key that you were attempting to use when Error Code 0xC004F00F first appeared.
By having all of this information ready and on hand ahead of time, you’ll have a greater likelihood that your error will be able to be resolved quickly and efficiently, avoiding long periods spent on the phone with customer service. Make sure that you specifically mention that you are experiencing Error Code 0xC004F00F during the Windows 10 activation process when you call into the Windows support team so that you can be connected to a representative who is equipped to help you resolve this specific problem.
If you are not comfortable in working with the Windows support team or have not been able to successfully resolve Error Code 0xC004F00F even after getting in touch with customer support, contact a qualified technician who is familiar with the Windows 10 activation process and can walk you through the things that you will need to communicate to the Windows support team in order to have them bypass or resolve the error code.
If you wish to always have at your disposal a utility tool to fix these Windows 10 and other related issues when they do arise, download and install a powerful automated tool.