Jump to content

nukecad

Moderators
  • Posts

    7,785
  • Joined

  • Last visited

Posts posted by nukecad

  1. 22 hours ago, billj9999 said:

    Screenshot showing Google Chrome no longer being shown as being cleaned. Still no response from "support".

    Actually that screenshot is showing that you have 'Old' Microsoft Edge Legacy (not the newer Edge Chromium), and even older Internet Explorer cookies that are being skipped.

    On 16/02/2024 at 08:17, billj9999 said:

     It is not like this is some rare program which only 1 person in outer Mongolia uses - this is Google Chrome !!!

    In fact you don't even appear to have Google Chrome on that machine at all.
    If you have then you do not seem to have CCleaner set to clear it, (unless it had already been fully cleaned before you took that screenshot).
    You appear to be using Edge Chromium as your browser.

    Having cookies from those two old and oudated browsers showing up on a home machine is unusual because Edge Legacy should no longer be on most machines, and Internet Explorer is even older and was removed years ago - Are you still using those outdated browsers for something?
    https://support.microsoft.com/en-gb/microsoft-edge/why-do-i-see-two-different-versions-of-microsoft-edge-on-my-device-07df04f1-6b44-5dc7-f991-180200dd1c0a

    If these are somehow left over from years ago then try running Windows built in Disk CleanUp with 'Clean up System Files' selected. (or simply run it as Administrator) to see if that will clear the Edge Legacy and old Internet Explorer cookies.

  2. 7 hours ago, JohnH said:

    I have this problem too!

    can any one confirm that the automated fixes really are safe...and that they work?  I am running CCleaner Browser. Thanks

    I cannot vouch for the automated fix in the link that I gave above, I have never had to try it.

    However as this Startpage hijack does now appear to be a growing problem I do advise these steps - which I can vouch for:

    I'd try first using AdwCleaner, it's free from Malwarebytes and can remove such browser hijacks.
    https://www.malwarebytes.com/adwcleaner

    If ADW does't clear it for you then I'd step it up the the Free (or paid) version of Malwarebytes itself and run a threat scan with that.
    A scan with Malwarebytes Free will not interfere with your usual antivirus.
    (If you want to run Malwarbytes Pro  in real time alongside another AV that can also be done but may need some settings changes).
    https://www.malwarebytes.com/mwb-download

    Note that the two can find different things, so you may want to run both ADW and a Malwarebytes Threat scan.
    (I run a Malwarebytes scan at least weekly and ADW about once a month, as part of my regular routine).

    If that still doesn't clear it from your machine then you can get free expert one-to-one help for malware removal.
    There are various web forums that offer the service, it's generally the same experts giving the help.
    Only use one at once, and follow their instructions carefully. If in doubt about any particular step the ask for clarification.
    As I have been giving Malwarebytes above I'll give the link to the malware removal help section on their forum first:
    https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/

    You will find similar help sections at:
    https://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-help/
    http://www.geekstogo.com/forum/forum/37-virus-spyware-malware-removal/
    https://forum.avast.com/index.php?topic=53253.0

    If you want/neeed to access their help then which one you choose to use is up to you.
    Again - Only use one help/removal service at once, trying to use 2 at once will interfere one with the other.

     

     

  3. There is also a support form here: https://support.ccleaner.com/s/contact-form?language=en_US&form=general

    You do get an automated ticket number and automated email response if you use the form, and then later someone will email you.
    However if you have already emailed them then making more than one support request can just slow the reply down.

    I'm not sure how quickly 'real people' are replying at the moment, it was taking over a week last year but does seem to have got quicker again with some saying they had an email from a support person within a couple of hours of contacting them.

  4. A 1970 'null' date simply indicates that the licence was cancelled, replaced, expired, (or was removed as pirated).

    If you believe that yours shouldn't have expired then the best course of action is to email the support team at support@ccleaner.com.

    However before doing that you should note that with Recuva the Free version works exactly the same as the Pro version.
    There are no function 'extras' in Recuva Pro. (Well apart from the ability to recover from a virtual drive, and who uses those nowadays?).
    With Recuva your payment for a licence is simply for automatic updates (there hasn't been a feature update needed to Recuva for years now) and for priority support.

  5. There appears to be a Startpage hijack campaign/attack ongoing, we have had a few users report the same thing happening.
    https://www.malwarebytes.com/blog/detections/hijack-startpage

    I'd try first using AdwCleaner, it's free from MalwareBytes and can remove such browser hijacks.
    https://www.malwarebytes.com/adwcleaner

    If ADW does't clear it for you then I'd step it up the the Free (or paid) version of Malwarebytes itself and run a threat scan with that.
    A scan with Malwarebytes Free will not interfere with your usual antivirus.
    (If you want to run Malwarbytes Pro  in real time alongside another AV that can also be done but may need some settings changes).
    https://www.malwarebytes.com/mwb-download

    Note that the two can find different things, so to be doubly sure run both ADW and a MB Threat scan.

    If that still doesn't clear it from your machine then see here for advice on how to clear it manually:
    https://www.pcrisk.com/removal-guides/28136-abstract-start-page-browser-hijacker
    (For CCleaner Browser use the 'Chrome' advice/options).
    That talks about "Abstract Start Page browser hijacker", but it sometimes calls itself "Perfect Start Page browser hijacker", and I wouldn't be surprised to see other name variants.

  6. CCleaner's Software Updater just fetches the update from the web and tells Windows to install it.

    So if/when you see something like that it's usually one of two things happening:

    1. The server hosting the update is not responding, or not downloading the requested update, so CCleaner is waiting for a response. (Agreed there should be a timeout on that if it happens).
    2. The update has been fetched but Windows is asking for some input during the install of the update, input which CCleaner can't give it.
      Something like the UAC asking you for Admin permission, or simply the update having finished and waiting for you to click 'Finish', or 'OK', or 'See release notes online'.
      Sometimes if that happens then if you minimise the CCleaner Window you will see a box that was hidden behind it and is waiting for you to click a button.

    Your screenshot shows 'Installing' so that would indicate the second one may have been the issue.
    As it seems that your Office was updated then I'm guessing it was probably just a button waiting for a click.

    There again Office 365 updates itself by default, so I'm not sure why CCleaner would be doing it unless you have updates turned off in Office?
     

  7. You are not showing a full screenshot there, is the CCleaner UI off the bottom of your screen?
    We do sometimes see that happen and  it's usually either because of a Windows resoultion setting, or because the user has manually moved the CCleaner window down.

    That pop-up does have a cancel button to close the popup when you have finished adding websites - but if it's off the bottom of the screen when the pop-up takes focus you won't be able to move it back up and get to the button.
     

    image.png

  8. Microsoft release updates on the 2nd Tuesday of every month, it commonly called 'Patch Tuesday'.
    Most peoples computers will the apply the updates when they are next switched on on the Wednesday.

    Those Windows updates include needed security updates, some MS app changes, and usually a run of the "Malicious Software Removal tool"
    Windows 10 and 11 will automatically apply the uptates unless you have told it not to.
    There are options to change and delay when the updates are delivered/installed.
    In Win 10 go to Settings>Update and Security>Windows Update,
    In Win 11 it's just Settings>Windows Update,

    See: https://support.microsoft.com/en-gb/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2

    In the past Windows Patch Tuesday updates the MSRT has been known to get overzelous and remove CCleaner, but it's been a few years since we have seen that happen. (and if it was happening again then more people would be shouting about it).
    So like you I would suspect that Lenovo Vantage is doing it.

    You can easily stop Vantage from running automatically at startup, this video shows you 2-ways to do that,

     

  9. Strange one,
    when you say 'automatic update' do you mean a CCleaner Update, Windows Update, or something Lenovo, Vantage maybe?

    If it's a Lenovo app doing it then you could try AdwCleaner from Malwarebytes which can find and get rid of such unwanted/uneeded manufacturers pre-installed software, although I'm not sure if Lenovo Vantage is one.
    https://www.malwarebytes.com/adwcleaner

    I'm not familiar with Lenovo Vantage but a quick look round online suggests that it may be difficult to get rid of once you have it on your machine.
    (If it won't uninstall as normal because of a permissions issue then there are ways round that, but not easy ones).

  10. The icon in the System Tray will ony show for a moment (and be flashing) if you have CCleaner set to do a clean on startup, CCleaner runs a clean in the background and the icon closes once the clean has been done.

    image.png

    I believe that is also what the /AUTO command line option now does, it's just a different way of triggering it on demand rather than at startup.
    (Originally it was /AUTOS for a 'silent' background run but I believe that got changed sometime ago and now /AUTO runs in the background)
    Because it's running in the background it has not loaded the user interface, so if you do click the (flashing) icon it will show an empty window.

    The CCleaner icon will remain in the tray (not flashing) if you have either or both Smart Cleaning or Automatically update CCleaner enabled.

  11. CCleaner Professional will work on your computer anyway.

    However when you have purchased a licence then that licence account is tied to the email that you used when purchasing.

    To change that you will have to contact support giving both the old email that you used when purchasing and the new email.

    Of course if you contact them from your new email it will not be registered as a purchaser, and so it will take longer to get a reply.

    The contact form is: https://support.ccleaner.com/s/contact-form?language=en_US&form=general

     

  12. @renevdlee You had posted this in an old thread, the Driver Updater has changed since then (and Dave no longer works at CCleaner).

    I have split it out into a new thread of your own,

    Hopefully someone who can help will be along soon.

    Alternatively you could raise a support ticket.
    You can contact CCleaner support by emailing: support@ccleaner.com
    Or by using the form here: https://support.ccleaner.com/s/contact-form?language=en_US&form=general
     

  13. Sorry I don't know exactly why that is, but I'd say it is Windows that is doing it.

    I can replicate it and see the same thing happening here.

    The Automatic Update is actually a scheduled task , so it should be shown in the Scheduled Task list along with Crash Reporter and Skip UAC.
    You can see that in Windows own Task Scheduler, but note that it does have one of it's triggers set to be 'At system startup'.
    So it may be Windows itself that is showing Smart Cleaning as a startup task for CCleaner, it's 'best guess' at a name because it's the only startup task it can find for CCleaner?
    Windows can often do odd things like that, as I'm sure you know.

    image.png


     

  14. I see.

    In that case I would first try the following:

    • Enable Smart Cleaning, for both Junk and Browsers.
    • Close CCleaner, restart the computer.
    • Disable Smart Cleaning, for both Junk and Browsers.
    • Close CCleaner, restart the computer.

    Sometimes task settings in Windows do get stuck in one state, and toggling the task on and off like that can unstick them again.

    If that still hasn't cleared it then, I'd make a note of your licence key and name, and you custom settings, uninstall CCleaner, restart the computer, reinstall CCleaner.

    I'm sure that you are doing this already, but just to note that it should be a 'Restart' and not a 'Shutdown/reboot).

  15. 54 minutes ago, Gjoksi said:

    So, my questions is: What is causing CCleaner to start running the same moment Windows starts to run on my device?

    Your screenshot shows that  you are asking about getting a CCleaner logo in the system tray.
    That is caused by either Smart Cleaning which you already have turned off, or by 'Keep CCleaner updated automatically' in Options>Updates.

    PS. It isn't a bug in CCleaner, it's just Windows doing what Windows does.

    Turn off  the automatic updating (as well as smart cleaning) and that icon should no longer appear in the tray.
    image.png

     

    For the other running tasks that you mention (these DON'T put an icon in the tray):

    The crash reporter task does run by default.
    It runs at a set time each day and checks if there are any CCleaner error logs to report.
    If there are then it sends them, if not then it waits until you next have your computer on at the same time.
    It does briefly flash a command window on screen when it runs, which can be puzzling/annoying.
    You can prevent seeing that flash window by going into Windows Task Scheduler and setting the trigger to 'Startup' rather than a set time each day.
    For how to do that see: https://community.ccleaner.com/topic/63929-ccleanercrashreporing-sheduled-task-issue/#comment-341743

     

    The SkipUAC task runs if you have set it in CCleaners Options>Advanced.
    image.png

     

  16. It does sound like an FP, but:

    It may just be possible if you have previously had a malware (a worm) that had been automatically removed/deleted by Windows Security. (or your antivirus if you run a different one).
    You may not have even noticed that when it happened.

    Recovery of deleted files might then bring that deleted malware's files back - and so Windows Security saw it again, warned you, and removed/deleted it again.
    Which is a reassurance that your Windows Security is working as it should do.

    ie. WS had at some time deleted the worm files, - you then recovered them, - so WS promptly deleted them again.
    The second two are just what you describe as happening.

    What is a computer worm? https://www.malwarebytes.com/computer-worm

    If you are still worried then the malware checking/removal experts at Malwarebytes can/will check your machine over for free.
    You need to start a topic on the Malwarebytes forum, provide them with some logs, and then follow their instructions carefully.
    If in doubt about anything they want you to do then ask for clarification before doing it, they won't mind.
    If you do want to do this then start here: https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/

    Other forum websites offer the same free checking and removal service, in fact it's often the same malware removal experts helping on multiple fora.
    Only work with one at once.

     

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.