17 replies to this topic

[kkennyb711]

hi

i run ccleaner (latest version) every night, i use secure delete and have everything checked that can be wiped (including freespace)

i downloaded a piece of software and in its searchbox suggestion place came up an URL that i had not visited for a few days.

what i want to know is why ccleaner has not deleted this URL and is their any software available to search my HD for files that contain search terms URL's ect so that i can delete them?

TIA

regards

ken.

[Andavari]

Make sure you also have Adobe Flash Player ticked, that remaining left-over could be Flash related.

As for always having Wipe Free Space enabled you need to realize that you're just going to wear your hard disk out quicker, and it's only useful if you're selling your computer - just search the forum for more valid reasons.

[kkennyb711]

thanks for the reply,

i have adobe flash player ticked.

regards

ken

[nodles]

CCleaner version?
Which OS?
Which browser are you using and which version of it?

[DennisD]

You don't happen to have your browser "sync" feature set up do you?

This feature stores bookmarks, history, passwords etc in the cloud, and can't be removed by CCleaner.

Just a thought.


EDIT: Ninja'd me nodles.

[Nergal]

Quote

i downloaded a piece of software and in its searchbox suggestion place came up an URL that i had not visited for a few days.

too vague.  Is this search box in the software? What is the software, if so. The URL, I assume, is the issue. Is this software a browser (chrome Firefox opera) or something else
ccleaner works on a definition based clean Which tells it where to look for specific programs.  See the Winapp2.ini thread for examples as to how this works

also vague is "latest version" please type the actual version (listed at the top of ccleaner)

[kkennyb711]

nodles, on 24 September 2012 - 09:35 AM, said:

CCleaner version?
Which OS?
Which browser are you using and which version of it?

ccleaner v3.22.1800 (64 bit)

win 7 home premium 64 bit sp1

firefox 15.0.1

internet explorer  v 9.0.8112.16421ic

thanks for the help,

ken

[kkennyb711]

DennisD, on 24 September 2012 - 09:36 AM, said:

You don't happen to have your browser "sync" feature set up do you?

This feature stores bookmarks, history, passwords etc in the cloud, and can't be removed by CCleaner.

Just a thought.


EDIT: Ninja'd me nodles.

i have not got sync set up on firefox but can't find anything about sync on internet explorer  (don't think it's got the feature)

thanks

ken

[kkennyb711]

Nergal, on 24 September 2012 - 04:43 PM, said:

too vague.  Is this search box in the software? What is the software, if so. The URL, I assume, is the issue. Is this software a browser (chrome Firefox opera) or something else
ccleaner works on a definition based clean Which tells it where to look for specific programs.  See the Winapp2.ini thread for examples as to how this works

also vague is "latest version" please type the actual version (listed at the top of ccleaner)

i was downloading a few pieces of software to get jpegs from a dvd. i cannot remember what the actual software was that listed the URL, but it was not as it claimed to be (or i downloaded from the wrong link)

it is not that ccleaner did not clean this piece of software and failed it's just that i had cleaned everything the night before and i had not been to websites URL for a couple of days so it should not have shown up in the search bar of this software.

i am using ccleaner v3.22.1800 (64 bit)

thanks,

ken

[Alan_B]

You have software that is not what it claimed to be.
That sounds like malware.
I suggest you look at
http://forum.pirifor...showtopic=34786

If you cannot tell us the name of the software we cannot tell you how to clean it - but first you need to eliminate malware.

[Nergal]

Quote

before and i had not been to websites URL for a couple of days so it should not have shown up in the search bar of this software.

still kinda unclear.  The URL shows in the searchbox of the DVD to jpg program?

[kkennyb711]

Alan_B, on 25 September 2012 - 09:51 AM, said:

You have software that is not what it claimed to be.
That sounds like malware.
I suggest you look at
http://forum.pirifor...showtopic=34786

If you cannot tell us the name of the software we cannot tell you how to clean it - but first you need to eliminate malware.

i run norton 360 ,update it at system upstart, i scan everything that i download but i have used software called osforensics and it has located lots of data that shouldn't be on my HD -web site names search terms ect. the data is on unallocated clusters(not in files) that should have been wiped by the free space wipe.

the data is quite old so if the program was malware it never had anything to do with it-i have done a full system scan and it was ok but i found a lot of text refering to trojans- i dont know whether it's something that norton has dumped but i'm going to go on a symantec forum and list some of the text. i will also check out the link you gave.

thanks

ken.

[kkennyb711]

Nergal, on 25 September 2012 - 12:05 PM, said:

still kinda unclear.  The URL shows in the searchbox of the DVD to jpg program?

yes it should have been a DVD to jpg program, but it did not work properly -it did not have the facility to load DVD's- the offending URL was the only one displayed in the search box.

thanks

ken

[DennisD]

I have to say that when you are getting into the realms of using stuff like OSForensics, then you're getting into areas that we don't handle, or really want to get into discussions about.

OSForensics - Digital investigation for a new era by PassMark:

Quote

OSForensics is a new computer forensics solution which lets you discover and extract hidden forensic material on computers with reliability and ease.

If you're worried about forensic recovery, then we definitely don't get involved with either assistance or advice I'm afraid.

[kkennyb711]

DennisD, on 26 September 2012 - 03:44 PM, said:

I have to say that when you are getting into the realms of using stuff like OSForensics, then you're getting into areas that we don't handle, or really want to get into discussions about.

OSForensics - Digital investigation for a new era by PassMark:



If you're worried about forensic recovery, then we definitely don't get involved with either assistance or advice I'm afraid.

i am not bothered about forensic recovery,i only used osforensics to find where the offending files where -it came up on a google search that i did to find software to find the  hidden text that i couldn't find with windows explorer- i didn't spend $500 i used the free version and it worked very well.!

the only problem is that it's made me very paranoid because of the stuff i've found regarding trojans . i have done a virus scan and it's come up ok but i'm still convinced that there is a virus.!

so you couldn't give me advice as to why ccleaner is not cleaning all the freespace?

ken.

[DennisD]

A virus scan by your resident software may not be enough to find some of the current types of malware, which means your best bet, if you have doubts, is to follow Alans link above to have your computer checked out for free for the latest viruses, root kits etc..

Also, if the URL was found by that forensics program, then that program may be looking at areas standard software doesn't access.

When you did the WFS, did you check the check the various boxes shown here ...

 2012-09-26_222125.jpg   218.72K   1 downloads

Apart from the wipe MFT Free Space, I have no idea what the others do exactly.

But again, there are all sorts of stuff deposited on your hard drive from many different locations, such as the file and URL history of just about any software you have installed. Most of them store file and URL history if they're set up that way in their various options.

If you run, or have ever ran, a hosts file, you will find all the addresses blocked by a hosts file laying somewhere on your hard drive, usually somewhere in the registry. And there are some pretty awful places in that list.

And it goes on. Neither Wipe Free Space nor CCleaner can get rid of stuff that's part of some software on your computer. Which is a possibility here IMO.

Again, if you're finding stuff with OSForensics, then it could be somewhere WFS and CCleaner can't touch.

[kkennyb711]

DennisD, on 26 September 2012 - 04:31 PM, said:

A virus scan by your resident software may not be enough to find some of the current types of malware, which means your best bet, if you have doubts, is to follow Alans link above to have your computer checked out for free for the latest viruses, root kits etc..

Also, if the URL was found by that forensics program, then that program may be looking at areas standard software doesn't access.

When you did the WFS, did you check the check the various boxes shown here ...

2012-09-26_222125.jpg

Apart from the wipe MFT Free Space, I have no idea what the others do exactly.

But again, there are all sorts of stuff deposited on your hard drive from many different locations, such as the file and URL history of just about any software you have installed. Most of them store file and URL history if they're set up that way in their various options.

If you run, or have ever ran, a hosts file, you will find all the addresses blocked by a hosts file laying somewhere on your hard drive, usually somewhere in the registry. And there are some pretty awful places in that list.

And it goes on. Neither Wipe Free Space nor CCleaner can get rid of stuff that's part of some software on your computer. Which is a possibility here IMO.

Again, if you're finding stuff with OSForensics, then it could be somewhere WFS and CCleaner can't touch.

thanks a lot,

ido have all of the boxes ticked.

my computer has definetely been infected (found this out due to Alans link-thank you Alan) i contacted my email provider and my email account had been accessed by someone trying to send out nigerian scam emails, when i found this out i panicked and suspended all my online banking (nothing touched thank god) and other organizations that hold my credit card details. they would have got my address from some of my inbox emails,which is worrying. the worst thing is i had lots of personal photos of my kids-they wont be very happy if they have been copied and put on the web! but i don,t think a criminal would be interested in those.

i will not use any norton product again (i will use avg and zone alam free-i have been told these are just as good as norton 360 but without the yearly subscriptions.i thought n360 would protect me i always have it updated at system startup and scan any downloads-without fail somehow that rouge program foiled it.

anyway forum thanks very much for the help.

i'm out of here,

regards,

ken

[DennisD]

Good to hear you're getting things sorted, and use the Norton Removal Tool to remove Norton 360 correctly ...

https://www-secure.s...0071130124653EN