How To Remove CCleaner Malware

CCleaner remains a popular device optimizer, despite being repeatedly hacked by cybercriminals. Here's what to do if you think you have CCleaner malware.
We receive compensation from the products and services mentioned in this story, but the opinions are the author's own. Compensation may impact where offers appear. We have not included all available products or offers. Learn more about how we make money and our editorial policies.

CCleaner is a popular clean-up tool used to optimize system performance. CCleaner got infected with malware in 2017, 2019, and yet again in 2021. If you're concerned that you may have an infection, there are steps you can take to remove a virus.

The most recent cyber attack happened when malware spread to users of the version of CCleaner for 32-bit Windows. Hackers injected malware into the app and infected computers by accessing a backdoor to download servers used by Avast, which owns CCleaner and also offers antivirus software programs.

What’s happening with this utility tool, and how can you know your devices are free of malware if you use CCleaner? Keep reading to find out and learn what you should do if your device is compromised, including info on the best antivirus program to get rid of this malware.

In this article
How do I tell if I have CCleaner malware?
How to remove CCleaner malware
CCleaner malware FAQs
Bottom line

How do I tell if I have CCleaner malware?

If you’ve noticed your device has become slow to respond, you may have an infection. You can also run your antivirus software to check for viruses or malware.

At the time of writing, the latest version of CCleaner that’s safe to use is v6. 28.11297.[1]

If you have any of the versions in the following list, they’re the products infected with malware. You may not have an infection, but it’s best to remove these versions to avoid any potential malware:

  • CCleaner 5.33.6162 or CCleaner Cloud 1.07.3191 — both released in August 2017
  • The Windows 32-bit version of the 2017 release
  • CCleaner 5.52.6967 — released in January 2019

Finding out which CCleaner version you have is simple and can be done by following a few steps.

  1. Open the CCleaner app on your device.
  2. The version you have now will show in the upper left corner next to the CCleaner logo.
  3. If you don’t have the latest safe version, you’ll need to update your app. You may also see a message letting you know an update is available.

What is CCleaner software?

With multiple malware infections discovered, you may wonder why anyone would use this product. Unfortunately, the CCleaner malware issues came after many users found great potential in the service.

Piriform made the utility tool CCleaner in 2004, which was later acquired by Avast in 2017. CCleaner is a cleaning tool designed to scrub files for device optimization. Years before the malware problem, CCleaner was the gold standard for computer users wanting to optimize device performance.

The popularity of CCleaner comes from its many features. Many people like the ease of use and the fact that it is free.

CCleaner has a registry cleaner that goes through out-of-date or invalid files. It looks for entries that could slow down your device and, once found, erases the files.

You can also manually clean junk files. The app allows you to see a list of files it deems unnecessary. Then, you can clean out those files from the internet cache, browsing history, and temporary files folder. Once that finishes, your device should offer optimized performance.

Regarding performance, some of the most avid users of CCleaner love the Disk Analyzer function. It scans your files to see which ones take the most space. Once you know what impacts performance, you can choose how to proceed and whether you want to keep or remove the files. Either way, the feature offers insight into how your device is performing.

If you do any web browsing, you may already know that your device captures and stores temporary files from websites. We frequently forget these files exist, and they may stack up over time, blocking space on your device. A product like CCleaner will look through your temporary files and show you how much space might be wasted storing them.

You can also use CCleaner's Duplicate Finder feature. That function will search your device for duplicate files you can delete. You may want to save some modified versions of files while deleting the rest to free up space.

How to remove CCleaner malware

Life happens, and there’s no shortage of malware ready to invade when given the opportunity. When that’s the case, knowing how to remove malware will help you clean your device and get it ready to use again.

If you know you’ve received CCleaner malware, you can remove it from your device. You’ll need to uninstall the CCleaner app first, but you’ll have the option to reinstall a later version.

1. Uninstall CCleaner

This step depends on your operating system, but with Microsoft Windows 10 and later, you go to your Start menu, choose Settings (the cogwheel), and click Apps.

If you’re using a previous version of Windows, you can go to the Control Panel and click Programs. Find the CCleaner program and select Uninstall. You may need to confirm that you wish to uninstall the program.

For Mac users, you can simply search for the CCleaner app or locate it in the Applications tab of your Finder window. Then select the app and choose Move to Trash. Don’t forget to Empty Trash afterward.

2. Run an antivirus or anti-malware scan

Removing the CCleaner program may not clean your device if you’ve got malware. You should run a full scan of your antivirus software to catch any malware that could be present on your machine.

There are many antivirus programs, and some offer more customized plans with features tailored to specific needs. Here are a few that we recommend for the value they offer based on advanced security features, reliability, and user experience. 

  • McAfee: This antivirus can protect every device in your house. It also offers on-demand malware scans so you can check your device at any time, and built-in parental controls help you keep kids out of trouble.

    Online Protection With VPN Access and Identity Monitoring
    4.8
    Editorial Rating
    Learn More
    On McAfee's website
    Antivirus Software
    McAfee
    Save $90 on a 2-year plan
    • Premium antivirus, scam, and web protection, plus a VPN, identity monitoring, and secure password manager
    • Added peace of mind with 24/7 expert online support and McAfee’s Virus Protection Pledge
    • Compatible with Windows, Mac, Android, iOS, and ChromeOS on up to 5 devices

    See McAfee Plans | Read Our McAfee Review
  • Bitdefender: Bitdefender antivirus checks for existing malware and guards against new malware threats. It also offers a full range of security tools, such as a virtual private network (VPN), ransomware protection, a password manager, and parental controls.

    5.0
    Editorial Rating
    Learn More
    On Bitdefender's website
    Antivirus Software
    Bitdefender
    BLACK FRIDAY: Up to 59% off
    • Super reliable antivirus software with a non-intrusive free version
    • Simple yet powerful interface tools
    • Perfect protection score in third-party tests
    • Slow scans compared to other options

    See Bitdefender Plans | Read Our Bitdefender Review
  • Norton: With Norton, you get the Data Protector feature that foils ransomware attacks. It also includes a password manager and offers on-demand malware scanning plus excellent real-time defense against future malware attacks.

    Enjoy Norton’s 100% Virus Protection Promise
    4.8
    Editorial Rating
    Learn More
    On Norton 360 Antivirus's website
    Antivirus Software
    Norton 360 Antivirus
    Save up to 58% your first year
    • 4 plans available, all including antivirus, malware, ransomware, and hacking protection, Cloud backup, and a secure password manager
    • Option to add VPN connection, dark web monitoring, privacy monitoring, and more
    • Compatible with Windows, Mac, Android, and iOS on up to 10 devices depending on plan

    See Norton Antivirus Plans | Read Our Norton Review

3. Remove any remaining malware

The compromised 5.3 version of CCleaner produced two malware payloads. The first spread installed spyware called Floxif on the computers. The spyware gathered the data of all running processes.

The second payload brought in Trojan.Nyeta, which was installed to modify the Windows Registry. That Trojan malware could send saved passwords and user keystrokes to the hacker’s server. It could also send financial data.

When removing malware, check for both of these payloads. Leaving either one would make your device vulnerable to future cyber attacks.

4. Set up malware protection

If you haven’t already done this, arm your device with malware protection. The best way to secure your online activity is to have an antivirus or anti-malware installed and ready to scan. The best malware protection locates the malicious software that compromises your device’s security, and we recommended a few of these programs in step two.

To continuously protect your device from malware, make sure your antivirus is up to date and set to automatically scan at least once a month. (Once a week is better if you can.)

CCleaner malware FAQs


+

What’s the name of the malware included in CCleaner?

The malware included in the 2017 and 2019 CCleaner hacks were Floxif, a type of spyware, and Trojan.Nyetya, a Trojan horse.


+

What versions of CCleaner were infected with malware?

Infected versions of CCleaner include:

  • 2019: Version 5.52.6967
  • 2017: Version 5.33.6162 or the CCleaner Cloud 1.07.3191

+

Does CCleaner still have malware?

No, at this time there are no reports of CCleaner malware for 2022. But that can always change with the creation of new cyber infections being so abundant.

It’s crucial to note that some users were looking for a “cracked” version of CCleaner. That version is a pirated copy of the premium software version. You should never obtain a pirated version of any program, as doing so puts you at risk of breaking the law.

Because a “cracked” version is a stolen copy, you put yourself at greater risk for malware since it does not come directly from the manufacturer.


+

Is CCleaner safe?

In general terms, yes, CCleaner is still a safe tool you can use to clean up your device. As with any software, there are risks that come along with it. Still, when CCleaner sees these infringements, it reports the version issues and addresses concerns in the updates. You can always check the CCleaner site for updated reports. The company is fast to respond to any malware threats and consistently updates its versions for improved device performance.

Bottom line

In terms of safety, CCleaner has been around for almost two decades, and during that time, we know about three malware instances. That’s still quite a secure record for a tool that packs in so much worth.

Although CCleaner is not a perfect product, it could be worthwhile for performance optimization alone. If you depend on your computer for work or play, chances are you want to keep it as healthy as possible. CCleaner still provides a ton of value with its features. As a utility tool, you would be hard-pressed to find other products that offer all the combined functions of CCleaner.

The 5.33 and 5.52 versions of CCleaner that became compromised have been addressed, and later versions have been updated. It’s safe to use CCleaner as long as you keep your antivirus software updated and run periodic full scans. If you don't have antivirus installed on your device yet, check out our guide to the best antivirus programs for top-tested recommendations.

Comprehensive Protection With Database Updates Every 3 Hours
4.7
Editorial Rating
Learn More
On Surfshark Antivirus's website
Antivirus Software
Surfshark Antivirus
BLACK FRIDAY: Up to 86% off + 4 months extra
  • Powerful app that offers 24/7 virus and malware protection that won’t hog your CPU or RAM
  • Includes webcam protection, fully customizable security, full or quick scans, and more
  • Compatible with Windows, Mac, and Android on unlimited devices

Author Details
Patti Croft is a seasoned writer specializing in technology, with three years of experience. With a B.S. in Computer Science and a background as a technical analyst and security specialist, she covers a range of topics like data security and parental control software.

Citations

[1] "Update CCleaner to the latest version"