• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Edge browser issue/ possible Ccleaner infection?

Status
Not open for further replies.

fullinfusion

Vanguard Beta Tester
Joined
Jan 11, 2008
Messages
9,678 (2.62/day)
Likes
3,459
Processor I7-7700K
Motherboard Asus Z270 Maximus IX Code
Cooling Custom water plus another cooler
Memory Corsair Vengeance LED Red 4x8GB 32GB 3200MHz kit
Video Card(s) 2 x MSI RX Vega 56 and a single MSI RX Vega 64 in test rig
Storage 960 Pro M.2 nvme 250, Samsumg 850 evo 256/ WD 1TB blue
Display(s) Nexius 32" freesync 2 HDR
Case Corsair Obsidion 650D/ cardboard box
Audio Device(s) Onboard
Power Supply EVGA Supernova G2 1300W
Mouse Mionix Naos 7000
Keyboard G15
Software Windows 10 Home
#1
On Friday I was on my system installing a new piece of hardware.

As always I check some of my programs for any updates. I just seen on the homepage about CCleaner and how they were hacked and I believe I installed that version.

I know before I installed CCleaner Microsoft had some updates for my system and I installed them.

I also installed A non public beta for my graphics card and when I opened up Edge the home screen looked weird. I had an extra search button and my frequently used links were cut off in half. I remove the beta driver did a restart and still have the same problem.

I then looked in my ADD remove programs thinking CCleaner snuck an extra search bar on my system.
And it came back clean.

So I'm not sure if it was the Microsoft update or if I've been infected with that CCleaner that we just found out about today. Take a look at the photo and tell me what you guys think. Where did that extra web search bar under the main search bar come from?

 
Last edited:

Mindweaver

Moderato®™
Staff member
Joined
Apr 16, 2009
Messages
6,631 (2.05/day)
Likes
3,950
Location
Charleston, SC
System Name Sechs / EyeSeven
Processor i7 5820k @ 4.5ghz / i7 2600k @ 4.0Ghz
Motherboard X99S GAMING 7 / ASRock Z68 Extreme3 Gen3
Cooling CORSAIR Hydro Series H100i Extreme / Stock cooler... H50 leaked!..
Memory G.Skill DDR4 2800 16GB 4x4GB / G.Skill DDR3 1600 8gb 2x4GB
Video Card(s) PNY Quadro K2000 / MSI GTX 970 GAMING 4Gb
Storage Samsung 850 PRO 256GB SSD /Intel 240gb, corsair 120gb SSD, 3x 1 tb s storage
Display(s) 2x Acer G276HL 27" 1080p / 3x Acer 22" Nvidia surround
Case Phanteks “Enthoo Pro series”/ Cooler Master Storm Scout
Audio Device(s) Azalia Realtek ALC1150 / SB X-Fi Gamer
Power Supply Corsair CXM CX600M / Corsair 600w
Mouse Razer DeathAdder Chroma / Razer DeathAdder
Keyboard Razer BlackWidow Ultimate /
Software Windows 10 Pro x64 / Windows 10 Pro x64
#2
Joined
Feb 2, 2015
Messages
1,429 (1.28/day)
Likes
1,121
Location
On The Highway To Hell \m/
#3
I'm not a regular Edge user. But from what I can tell it's just a displacement of the normal search/address bar when opening a new tab. It goes away if you click on the place where the search/address bar would normally be.

Never mind. See post below.
 
Last edited:

fullinfusion

Vanguard Beta Tester
Joined
Jan 11, 2008
Messages
9,678 (2.62/day)
Likes
3,459
Processor I7-7700K
Motherboard Asus Z270 Maximus IX Code
Cooling Custom water plus another cooler
Memory Corsair Vengeance LED Red 4x8GB 32GB 3200MHz kit
Video Card(s) 2 x MSI RX Vega 56 and a single MSI RX Vega 64 in test rig
Storage 960 Pro M.2 nvme 250, Samsumg 850 evo 256/ WD 1TB blue
Display(s) Nexius 32" freesync 2 HDR
Case Corsair Obsidion 650D/ cardboard box
Audio Device(s) Onboard
Power Supply EVGA Supernova G2 1300W
Mouse Mionix Naos 7000
Keyboard G15
Software Windows 10 Home
#4
Thanks for the advice I really do appreciate it. I'm not at home at the moment but once I get home this week I'll definitely run those programs that you suggested and hopefully that fixes the problem.
 
Joined
Feb 2, 2015
Messages
1,429 (1.28/day)
Likes
1,121
Location
On The Highway To Hell \m/
#5
Strike my previous post. I misunderstood what you were saying. Now I get it. You're talking about the web search bar below the one I was referring to. I have no clue what's up with that. They(as in MS) added something similar to IE recently(showed up in W10 with latest CU and W7 with a recent update I believe). I can get rid of it in IE by right clicking on the ribbon(I think that's what they call it?) at the top(where the address bar is) and unchecking "Show tabs on a separate row".

IE Search bar.PNG

No IE search bar.PNG
 
Last edited:
Joined
Oct 12, 2008
Messages
5,678 (1.66/day)
Likes
2,624
Location
στο άλφα έως ωμέγα
System Name Ha/AhHa/Dell
Processor QX9650 SLAWN C1/i7-980x/i7-6700K
Motherboard GA-X48_DS4 (F3B bios)/Gigabyte x58A-UDR3 v 2.0(modded FH bios)/Dell Foxconn 0XJ8C4 Z170
Cooling CNPS9900 LED/H60/ 3 pipe-center fan-air
Memory 8 Gig of G.Skill F2-8800CL5D/24 Gb Corsair Vengence/ 24Gb Samsung DDR4 2133
Video Card(s) Galaxy NVIDIA GeForce GTX 960/PowerColor R9 280/ASUS R9 380X Strix G1
Storage All have SSDs with HDDs for extra storage and backup/Dell-M.2 Samsung 850 EVO PCIe
Display(s) Asus 266H/Viewsonic 1080p/HP ZR24W
Case CM-690/CM-690 II adv/Dell 8900 series
Audio Device(s) All use on board (Realtek) w/2.1 speakers
Power Supply PC P&C 750/PC P&C Silencer 950/CM 700 Extreme
Mouse Logitech
Keyboard Logitech
Software Windows 10 Pro - 64 bit/Windows 10 Pro - 64bit/Windows 10 Pro - 64bit
#6

fullinfusion

Vanguard Beta Tester
Joined
Jan 11, 2008
Messages
9,678 (2.62/day)
Likes
3,459
Processor I7-7700K
Motherboard Asus Z270 Maximus IX Code
Cooling Custom water plus another cooler
Memory Corsair Vengeance LED Red 4x8GB 32GB 3200MHz kit
Video Card(s) 2 x MSI RX Vega 56 and a single MSI RX Vega 64 in test rig
Storage 960 Pro M.2 nvme 250, Samsumg 850 evo 256/ WD 1TB blue
Display(s) Nexius 32" freesync 2 HDR
Case Corsair Obsidion 650D/ cardboard box
Audio Device(s) Onboard
Power Supply EVGA Supernova G2 1300W
Mouse Mionix Naos 7000
Keyboard G15
Software Windows 10 Home
#7

eidairaman1

The Exiled Airman
Joined
Jul 2, 2007
Messages
20,182 (5.19/day)
Likes
5,484
System Name PCGOD
Processor AMD FX 8350@ 5.0GHz
Motherboard Asus TUF 990FX Sabertooth R2 2901 Bios
Cooling Scythe Ashura, 2×BitFenix 230mm Spectre Pro LED (Blue,Green), 2x BitFenix 140mm Spectre Pro LED
Memory 16 GB Gskill Ripjaws X 2133 (2400 OC, 10-10-12-20-20, 1T, 1.65V)
Video Card(s) AMD Radeon 290 Sapphire Vapor-X
Storage Samsung 840 Pro 256GB, WD Velociraptor 1TB
Display(s) NEC Multisync LCD 1700V (Display Port Adapter)
Case AeroCool Xpredator Evil Blue Edition
Audio Device(s) Creative Labs Sound Blaster ZxR
Power Supply Seasonic 1250 XM2 Series (XP3)
Mouse Roccat Kone XTD
Keyboard Roccat Ryos MK Pro
Software Windows 7 Pro 64
#8
For now id remove all piriform software
 

fullinfusion

Vanguard Beta Tester
Joined
Jan 11, 2008
Messages
9,678 (2.62/day)
Likes
3,459
Processor I7-7700K
Motherboard Asus Z270 Maximus IX Code
Cooling Custom water plus another cooler
Memory Corsair Vengeance LED Red 4x8GB 32GB 3200MHz kit
Video Card(s) 2 x MSI RX Vega 56 and a single MSI RX Vega 64 in test rig
Storage 960 Pro M.2 nvme 250, Samsumg 850 evo 256/ WD 1TB blue
Display(s) Nexius 32" freesync 2 HDR
Case Corsair Obsidion 650D/ cardboard box
Audio Device(s) Onboard
Power Supply EVGA Supernova G2 1300W
Mouse Mionix Naos 7000
Keyboard G15
Software Windows 10 Home
#9
From posts it infected 32bit not 64 but I'll check the registry to be sure. I only use it for add/remove W10 crap apps that don't show up in Windows add/remove
 
Joined
Feb 27, 2008
Messages
4,339 (1.19/day)
Likes
3,684
System Name Ironic
Processor Intel 2500k 4.4Ghz
Motherboard ASROCK|Z68 PROFESSIONAL Gen 3
Cooling Corsair H60
Memory 32GB GSkill Ripjaw X 1866
Video Card(s) Sapphire R9 290 Vapor-X 4Gb
Storage Western Digital Caviar Black 2TB SATA 3 (6G/s)
Display(s) 22" Dell Wide/ 22" Acer wide/24" Asus
Case Antec Lanboy Air Black & Blue
Audio Device(s) SB Audigy 7.1
Power Supply Corsair Enthusiast TX750
Mouse Logitech G9x, custom frame
Keyboard Roccat Ryos MK
Software Win 7 Ult 64 bit (with a side of XP64)
#10
From posts it infected 32bit not 64 but I'll check the registry to be sure. I only use it for add/remove W10 crap apps that don't show up in Windows add/remove
stepped here to point exactly this out. 32-bit only. If something is going on with your PC, and you're on a 64-bit OS, it has nothing to do with the CC hack.
 

erocker

Senior Moderator
Staff member
Joined
Jul 19, 2006
Messages
42,563 (10.05/day)
Likes
18,322
Processor i7 8700K
Motherboard Asus Maximus Hero X WiFi
Cooling Water
Memory 16GB G.Skill 3200Mhz CL14
Video Card(s) GTX 1080
Storage SSD's
Display(s) Nixeus EDG27
Case Thermaltake Core X5
Audio Device(s) Soundblaster Zx
Power Supply Corsair H1000i
Mouse Zowie EC1-B
#11
You could just use AdBlock for now and block that element. It might even tell you where it's located.
 

Mindweaver

Moderato®™
Staff member
Joined
Apr 16, 2009
Messages
6,631 (2.05/day)
Likes
3,950
Location
Charleston, SC
System Name Sechs / EyeSeven
Processor i7 5820k @ 4.5ghz / i7 2600k @ 4.0Ghz
Motherboard X99S GAMING 7 / ASRock Z68 Extreme3 Gen3
Cooling CORSAIR Hydro Series H100i Extreme / Stock cooler... H50 leaked!..
Memory G.Skill DDR4 2800 16GB 4x4GB / G.Skill DDR3 1600 8gb 2x4GB
Video Card(s) PNY Quadro K2000 / MSI GTX 970 GAMING 4Gb
Storage Samsung 850 PRO 256GB SSD /Intel 240gb, corsair 120gb SSD, 3x 1 tb s storage
Display(s) 2x Acer G276HL 27" 1080p / 3x Acer 22" Nvidia surround
Case Phanteks “Enthoo Pro series”/ Cooler Master Storm Scout
Audio Device(s) Azalia Realtek ALC1150 / SB X-Fi Gamer
Power Supply Corsair CXM CX600M / Corsair 600w
Mouse Razer DeathAdder Chroma / Razer DeathAdder
Keyboard Razer BlackWidow Ultimate /
Software Windows 10 Pro x64 / Windows 10 Pro x64
#13
You could just use AdBlock for now and block that element. It might even tell you where it's located.
That and Ghostery, and NoScript are good as well.
 

fullinfusion

Vanguard Beta Tester
Joined
Jan 11, 2008
Messages
9,678 (2.62/day)
Likes
3,459
Processor I7-7700K
Motherboard Asus Z270 Maximus IX Code
Cooling Custom water plus another cooler
Memory Corsair Vengeance LED Red 4x8GB 32GB 3200MHz kit
Video Card(s) 2 x MSI RX Vega 56 and a single MSI RX Vega 64 in test rig
Storage 960 Pro M.2 nvme 250, Samsumg 850 evo 256/ WD 1TB blue
Display(s) Nexius 32" freesync 2 HDR
Case Corsair Obsidion 650D/ cardboard box
Audio Device(s) Onboard
Power Supply EVGA Supernova G2 1300W
Mouse Mionix Naos 7000
Keyboard G15
Software Windows 10 Home
#14
Joined
Oct 12, 2008
Messages
5,678 (1.66/day)
Likes
2,624
Location
στο άλφα έως ωμέγα
System Name Ha/AhHa/Dell
Processor QX9650 SLAWN C1/i7-980x/i7-6700K
Motherboard GA-X48_DS4 (F3B bios)/Gigabyte x58A-UDR3 v 2.0(modded FH bios)/Dell Foxconn 0XJ8C4 Z170
Cooling CNPS9900 LED/H60/ 3 pipe-center fan-air
Memory 8 Gig of G.Skill F2-8800CL5D/24 Gb Corsair Vengence/ 24Gb Samsung DDR4 2133
Video Card(s) Galaxy NVIDIA GeForce GTX 960/PowerColor R9 280/ASUS R9 380X Strix G1
Storage All have SSDs with HDDs for extra storage and backup/Dell-M.2 Samsung 850 EVO PCIe
Display(s) Asus 266H/Viewsonic 1080p/HP ZR24W
Case CM-690/CM-690 II adv/Dell 8900 series
Audio Device(s) All use on board (Realtek) w/2.1 speakers
Power Supply PC P&C 750/PC P&C Silencer 950/CM 700 Extreme
Mouse Logitech
Keyboard Logitech
Software Windows 10 Pro - 64 bit/Windows 10 Pro - 64bit/Windows 10 Pro - 64bit
#15

fullinfusion

Vanguard Beta Tester
Joined
Jan 11, 2008
Messages
9,678 (2.62/day)
Likes
3,459
Processor I7-7700K
Motherboard Asus Z270 Maximus IX Code
Cooling Custom water plus another cooler
Memory Corsair Vengeance LED Red 4x8GB 32GB 3200MHz kit
Video Card(s) 2 x MSI RX Vega 56 and a single MSI RX Vega 64 in test rig
Storage 960 Pro M.2 nvme 250, Samsumg 850 evo 256/ WD 1TB blue
Display(s) Nexius 32" freesync 2 HDR
Case Corsair Obsidion 650D/ cardboard box
Audio Device(s) Onboard
Power Supply EVGA Supernova G2 1300W
Mouse Mionix Naos 7000
Keyboard G15
Software Windows 10 Home
#16
Well found out I got the Ccleaner infection.. I ran windows defender and it picked it up, but looking in the reg I never seen was I was suppose to see if it was infected..
Weird
 
Joined
Oct 2, 2004
Messages
12,736 (2.60/day)
Likes
6,084
Location
Europe\Slovenia
System Name Dark Silence 2
Processor Intel Core i7 5820K @ 4.5 GHz (1.15V)
Motherboard MSI X99A Gaming 7
Cooling Cooler Master Nepton 120XL
Memory 32 GB DDR4 Kingston HyperX Fury 2400 MHz @ 2666 MHz
Video Card(s) AORUS GeForce GTX 1080Ti 11GB (2000/11100)
Storage Samsung 850 Pro 2TB SSD (3D V-NAND)
Display(s) ASUS VG248QE 144Hz 1ms (DisplayPort)
Case Corsair Carbide 330R Titanium
Audio Device(s) Creative Sound BlasterX AE-5 + Altec Lansing MX5021 (HiFi capacitors and OPAMP upgrade)
Power Supply BeQuiet! Dark Power Pro 11 750W
Mouse Logitech G502 Proteus Spectrum
Keyboard Cherry Stream XT Black
Software Windows 10 Pro 64-bit (Fall Creators Update)
#17
The answer is, NO. Because you're running 64bit Windows. Only 32bit CCleaner was affected. Also, it was only the binary which was modified. The compromised installer didn't install anything else and the payload wasn't yet active. Meaning, if you removed affected CCleaner, there couldn't be anything left. Also, the situation with CCleaner included a trojan backdoor in the binary, not some adware that rams search bars into browsers...
 

fullinfusion

Vanguard Beta Tester
Joined
Jan 11, 2008
Messages
9,678 (2.62/day)
Likes
3,459
Processor I7-7700K
Motherboard Asus Z270 Maximus IX Code
Cooling Custom water plus another cooler
Memory Corsair Vengeance LED Red 4x8GB 32GB 3200MHz kit
Video Card(s) 2 x MSI RX Vega 56 and a single MSI RX Vega 64 in test rig
Storage 960 Pro M.2 nvme 250, Samsumg 850 evo 256/ WD 1TB blue
Display(s) Nexius 32" freesync 2 HDR
Case Corsair Obsidion 650D/ cardboard box
Audio Device(s) Onboard
Power Supply EVGA Supernova G2 1300W
Mouse Mionix Naos 7000
Keyboard G15
Software Windows 10 Home
#18
The answer is, NO. Because you're running 64bit Windows. Only 32bit CCleaner was affected. Also, it was only the binary which was modified. The compromised installer didn't install anything else and the payload wasn't yet active. Meaning, if you removed affected CCleaner, there couldn't be anything left. Also, the situation with CCleaner included a trojan backdoor in the binary, not some adware that rams search bars into browsers...
Format and changed my pass keys on a different device so I can relax now.

Thanks for the advise and help guys :toast:
 
Status
Not open for further replies.