How To Remove CCleaner Malware

CCleaner is a popular clean-up tool used to optimize system performance. CCleaner got infected with malware in 2017, 2019, and yet again in 2021. If you're concerned that you may have an infection, there are steps you can take to remove a virus.

The most recent cyber attack happened when malware spread to users of the version of CCleaner for 32-bit Windows. Hackers injected malware into the app and infected computers by accessing a backdoor to download servers used by Avast, which owns CCleaner and also offers antivirus software programs.

What’s happening with this utility tool, and how can you know your devices are free of malware if you use CCleaner? Keep reading to find out and learn what you should do if your device is compromised, including info on the best antivirus program to get rid of this malware.

How do I tell if I have CCleaner malware?

If you’ve noticed your device has become slow to respond, you may have an infection. You can also run your antivirus software to check for viruses or malware.

At the time of writing, the latest version of CCleaner that’s safe to use is v6. 28.11297.^[1]

If you have any of the versions in the following list, they’re the products infected with malware. You may not have an infection, but it’s best to remove these versions to avoid any potential malware:

• CCleaner 5.33.6162 or CCleaner Cloud 1.07.3191 — both released in August 2017
• The Windows 32-bit version of the 2017 release
• CCleaner 5.52.6967 — released in January 2019

Finding out which CCleaner version you have is simple and can be done by following a few steps.

1. Open the CCleaner app on your device.
2. The version you have now will show in the upper left corner next to the CCleaner logo.
3. If you don’t have the latest safe version, you’ll need to update your app. You may also see a message letting you know an update is available.

What is CCleaner software?

With multiple malware infections discovered, you may wonder why anyone would use this product. Unfortunately, the CCleaner malware issues came after many users found great potential in the service.

Piriform made the utility tool CCleaner in 2004, which was later acquired by Avast in 2017. CCleaner is a cleaning tool designed to scrub files for device optimization. Years before the malware problem, CCleaner was the gold standard for computer users wanting to optimize device performance.

The popularity of CCleaner comes from its many features. Many people like the ease of use and the fact that it is free.

CCleaner has a registry cleaner that goes through out-of-date or invalid files. It looks for entries that could slow down your device and, once found, erases the files.

You can also manually clean junk files. The app allows you to see a list of files it deems unnecessary. Then, you can clean out those files from the internet cache, browsing history, and temporary files folder. Once that finishes, your device should offer optimized performance.

Regarding performance, some of the most avid users of CCleaner love the Disk Analyzer function. It scans your files to see which ones take the most space. Once you know what impacts performance, you can choose how to proceed and whether you want to keep or remove the files. Either way, the feature offers insight into how your device is performing.

If you do any web browsing, you may already know that your device captures and stores temporary files from websites. We frequently forget these files exist, and they may stack up over time, blocking space on your device. A product like CCleaner will look through your temporary files and show you how much space might be wasted storing them.

You can also use CCleaner's Duplicate Finder feature. That function will search your device for duplicate files you can delete. You may want to save some modified versions of files while deleting the rest to free up space.

How to remove CCleaner malware

Life happens, and there’s no shortage of malware ready to invade when given the opportunity. When that’s the case, knowing how to remove malware will help you clean your device and get it ready to use again.

If you know you’ve received CCleaner malware, you can remove it from your device. You’ll need to uninstall the CCleaner app first, but you’ll have the option to reinstall a later version.

1. Uninstall CCleaner

This step depends on your operating system, but with Microsoft Windows 10 and later, you go to your Start menu, choose Settings (the cogwheel), and click Apps.

If you’re using a previous version of Windows, you can go to the Control Panel and click Programs. Find the CCleaner program and select Uninstall. You may need to confirm that you wish to uninstall the program.

For Mac users, you can simply search for the CCleaner app or locate it in the Applications tab of your Finder window. Then select the app and choose Move to Trash. Don’t forget to Empty Trash afterward.

2. Run an antivirus or anti-malware scan

Removing the CCleaner program may not clean your device if you’ve got malware. You should run a full scan of your antivirus software to catch any malware that could be present on your machine.

There are many antivirus programs, and some offer more customized plans with features tailored to specific needs. Here are a few that we recommend for the value they offer based on advanced security features, reliability, and user experience. 

• McAfee: This antivirus can protect every device in your house. It also offers on-demand malware scans so you can check your device at any time, and built-in parental controls help you keep kids out of trouble.
  
  
  Online Protection With VPN Access and Identity Monitoring

  

  4.8

  AllAboutCookies writers and editors score products based on a number of objective features as well as our expert editorial assessment. Our partners do not influence how we rate products.

  Editorial Rating

  Learn More

  On McAfee's website

  Antivirus Software

  McAfee

  Save up to $110 on annual plans

  • Premium antivirus, scam, and web protection, plus a VPN, identity monitoring, and secure password manager
  • Added peace of mind with 24/7 expert online support and McAfee’s Virus Protection Pledge
  • Compatible with Windows, Mac, Android, iOS, and ChromeOS on up to 5 devices
  
  See McAfee Plans | Read Our McAfee Review
• Bitdefender: Bitdefender antivirus checks for existing malware and guards against new malware threats. It also offers a full range of security tools, such as a virtual private network (VPN), ransomware protection, a password manager, and parental controls.
  
  
  

  5.0

  AllAboutCookies writers and editors score products based on a number of objective features as well as our expert editorial assessment. Our partners do not influence how we rate products.

  Editorial Rating

  Learn More

  On Bitdefender's website

  Antivirus Software

  Bitdefender

  • Super reliable antivirus software with a non-intrusive free version
  • Simple yet powerful interface tools
  • Perfect protection score in third-party tests
  • Slow scans compared to other options
  
  See Bitdefender Plans | Read Our Bitdefender Review
• Norton: With Norton, you get the Data Protector feature that foils ransomware attacks. It also includes a password manager and offers on-demand malware scanning plus excellent real-time defense against future malware attacks.
  
  
  Enjoy Norton’s 100% Virus Protection Promise

  

  4.8

  AllAboutCookies writers and editors score products based on a number of objective features as well as our expert editorial assessment. Our partners do not influence how we rate products.

  Editorial Rating

  Learn More

  On Norton 360 Antivirus's website

  Antivirus Software

  Norton 360 Antivirus

  Save up to 58% your first year

  • Excellent protection against malware, ransomware, and hacking with perfect test results
  • Full security suite available to protect every aspect of your digital life
  • Protect with confidence thanks to their 100% virus removal guarantee
  
  See Norton Antivirus Plans | Read Our Norton Review

3. Remove any remaining malware

The compromised 5.3 version of CCleaner produced two malware payloads. The first spread installed spyware called Floxif on the computers. The spyware gathered the data of all running processes.

The second payload brought in Trojan.Nyeta, which was installed to modify the Windows Registry. That Trojan malware could send saved passwords and user keystrokes to the hacker’s server. It could also send financial data.

When removing malware, check for both of these payloads. Leaving either one would make your device vulnerable to future cyber attacks.

4. Set up malware protection

If you haven’t already done this, arm your device with malware protection. The best way to secure your online activity is to have an antivirus or anti-malware installed and ready to scan. The best malware protection locates the malicious software that compromises your device’s security, and we recommended a few of these programs in step two.

To continuously protect your device from malware, make sure your antivirus is up to date and set to automatically scan at least once a month. (Once a week is better if you can.)

CCleaner malware FAQs

Bottom line

In terms of safety, CCleaner has been around for almost two decades, and during that time, we know about three malware instances. That’s still quite a secure record for a tool that packs in so much worth.

Although CCleaner is not a perfect product, it could be worthwhile for performance optimization alone. If you depend on your computer for work or play, chances are you want to keep it as healthy as possible. CCleaner still provides a ton of value with its features. As a utility tool, you would be hard-pressed to find other products that offer all the combined functions of CCleaner.

The 5.33 and 5.52 versions of CCleaner that became compromised have been addressed, and later versions have been updated. It’s safe to use CCleaner as long as you keep your antivirus software updated and run periodic full scans. If you don't have antivirus installed on your device yet, check out our guide to the best antivirus programs for top-tested recommendations.