ccleaner.exe
CCleaner by Piriform Ltd (Signed)
Warning 3 antivirus scanners has detected malware in various versions of ccleaner.exe.
Overview
ccleaner.exe has 38 known versions, the most recent one is 4, 15, 00, 4725. ccleaner.exe is run as a standard windows process with the logged in user's account privileges. By adding a startup entry to the run registry key, the file will be executed when the user logs into Windows. The average file size is about 3.23 MB. It is an authenticode code-signed executable issued to Piriform Ltd by the certification authority VeriSign. The programs CCleaner, CCleaner 2.13.720 and Skype™ 6.11 have been observed as installing specific variations of ccleaner.exe. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 9.3 MB with the maximum memory reaching around 15.08 MB. Addionally, typically read and write I/O disk operations is about 104.44 MB per minute for reads and 29.73 KB per minute for writes.
What is ccleaner.exe?
CCleaner (formerly Crap Cleaner), developed by Piriform, is a utility program used to clean potentially unwanted files and invalid Windows Registry entries from a computer. CCleaner supports the cleaning of temporary or potentially unwanted files left by certain programs. CCleaner can be employed to uninstall programs. In addition, CCleaner allows the alteration of start-up programs.
About ccleaner.exe (from Piriform Ltd)
“CCleaner is our system optimization, privacy and cleaning tool. It removes unused files from your system - allowing Windows to run faster and freeing up valuable hard disk space. It also cleans traces”
 Details
|
| File name: | ccleaner.exe |
| Publisher: | Piriform Ltd |
| Product name: | CCleaner |
| Typical file path: | C:\Program Files\ccleaner\ccleaner.exe |
| Certificate |
| Issued to: | Piriform Ltd |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, July 5, 2011 |
| Expiration date: | Thursday, August 22, 2013 |
Programs installed in
(Note, the programs listed below are for all versions of CCleaner.)
ACDSee Pro is an image organizer, viewer, and RAW / image editor programs for Microsoft Windows. ACDSee's main features are speed, lossless RAW/image editing, image batch processing, metadata (Exif/IP...
LAME is a library that allows some programs to encode MP3 files. LAME is free, but in some countries you may need to pay a license fee in order to legally encode MP3 files.
Vuze is a BitTorrent client used to transfer files via the BitTorrent protocol. Vuze is written in Java, and uses the Azureus Engine. In addition to downloading data linked to .torrent files, Azureus...
µTorrent is a is a free, ad-supported, lighter-weight BitTorrent client designed to consume less resources then the full BitTorrent version. Some uTorrent installs include potentially unwanted program...
“Calibre(64-bit) is program to manage your eBook collection. It acts as an e-library and also allows for format conversion, news feeds to eBook conversion, as well as e-book reader sync features and an...”
“calibre is a free and open source e-book library management application developed by users of e-books for users of e-books. It has a cornucopia of features divided into Library Management, E-book conv...”
“Cobian Backup is a multi-threaded program that can be used to schedule and backup your files and directories from their original location to other directories/drives in the same computer or other comp...”
“MAGIX Audio Cleaning Lab features all the audio tools you need to get the absolute most out of your audio files! In just a few easy steps you can digitize, edit and optimize your audio files and recor...”
Firefox has established a reputation as one of the most innovative web browsers in the market. Its advanced features include built-in spell checking, tabbed browsing, live bookmarking which allows you...
Firefox 25 features include, the inspector now features autocompletion for css names and values.. If away from Firefox for months, you now will be offered the option to reset it to its default state w...
Firefox has established a reputation as one of the most innovative web browsers in the market. Its advanced features include built-in spell checking, tabbed browsing, live bookmarking which allows you...
“Bringing together all kinds of awesomeness to make browsing better for you. Get to your favorite sites quickly – even if you don’t remember the URLs. Type your term into the location bar (aka the Awes...”
CCleaner developed by Piriform, is a utility program used to clean potentially unwanted files and invalid Windows Registry entries from a computer. CCleaner supports the cleaning of temporary or poten...
Defraggler is a defragmentation utility which allows users to defragment individual files on their computer system. Defraggler can defragment individual files, groups of files (in a folder) or an enti...
Recuva is a data recovery program and is able to recover files that have been "permanently" deleted and marked by the operating system as free space. As with other file recovery programs Recuva works ...
Behaviors
(Note, the behaviors below are for all versions of ccleaner.exe, select a unique version for details.)
Scheduled tasks
- The task 'CCleanerSkipUAC' runs in the path '\CCleanerSkipUAC'
- Entry path '\CCleanerSkipUAC'
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'ccleaner' → "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Program Files\CCleaner\CCleaner.exe'
- Firewall exception for 'C:\Programmer\CCleaner\CCleaner.exe'
Malware detections
Based on 40+ industry antivirus scanners, 3 of them detected the following malware.
| Antivirus engine | Engine version | Detection | File version |
| Bkav Security |
1.3.0.4246 |
HW32.Laneul.nmui |
4, 01, 00, 4093 |
| Bkav Security |
1.3.0.4246 |
HW32.Laneul.siki |
4, 03, 00, 4151 |
| Jiangmin |
16.0.100 |
Win32/Virut.bn |
1.34.0407 |
All file variations of ccleaner.exe
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
36.50% |
|
| Windows 7 Ultimate |
17.25% |
|
| Windows 7 Professional |
8.75% |
|
| Windows 8 Pro |
7.50% |
|
| Windows 8 |
6.00% |
|
| Windows Vista Home Premium |
4.75% |
|
| Windows 8.1 |
3.50% |
|
| Windows 8.1 Pro |
2.50% |
|
| Windows Vista Home Basic |
1.75% |
|
| Microsoft Windows XP |
1.75% |
|
| Windows 7 Home Basic |
1.25% |
|
| Windows 8 Single Language |
1.00% |
|
| Windows 7 Starter |
1.00% |
|
| Windows 8 Pro with Media Center |
1.00% |
|
| Windows Vista Business |
1.00% |
|
| Windows 8 Enterprise |
1.00% |
|
| Windows 8.1 Single Language |
0.75% |
|
| Windows 8 Enterprise N |
0.50% |
|
| Windows 8.1 Pro with Media Center |
0.50% |
|
| Windows Vista Ultimate |
0.50% |
|
| Windows 7 Ultimate N |
0.50% |
|
| 24 other Windows OS version |
Distribution by country
United States installs about 40.40% of CCleaner.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
20.49% |
|
| Hewlett-Packard |
16.39% |
|
| ASUS |
15.16% |
|
| Toshiba |
14.34% |
|
| Acer |
12.70% |
|
| Lenovo |
6.15% |
|
| Sony |
5.33% |
|
| Intel |
3.28% |
|
| GIGABYTE |
1.84% |
|
| Samsung |
1.23% |
|
| MSI |
0.82% |
|
| American Megatrends |
0.41% |
|
| Compaq |
0.41% |
|
| Apple |
0.41% |
|
| Medion |
0.41% |
|
| Gateway |
0.41% |
|
| Alienware |
0.20% |
|
