Malware identified in CCleaner 5.33

Re:Malware identified in CCleaner 5.33 by danieldk on Monday September 18, 2017 @10:19AM (#15276159)

Gone are the days of simple passive signature scanners. Now they all sink their claws deeply into the OS intercepting filesystem operations, network packets, and any other privileged activity.

Well, things have been like that for a long time already. E.g. Thunderbyte used an ISA card in the early 90ies to insert itself before and outside the operating system [1].

Old anti-virus programs also used Terminate and Stay Resident (TSR) [2]

[1] https://en.wikipedia.org/wiki/ThunderByte_Antivirus

[2] https://en.wikipedia.org/wiki/MSAV

[ Parent | on HN ]

Re:Malware identified in CCleaner 5.33 by digi_owl on Monday September 18, 2017 @06:02PM (#15280078)

On the note of ISA cards, i once helped install a card on some school computers that inserted itself before the OS loaded and split the HDD in half. This so that on certain conditions a clean version of the OS etc could be loaded from the half that was hidden during normal use.

[ Parent | on HN ]

Re:Malware identified in CCleaner 5.33 by voltagex_ on Monday September 18, 2017 @08:32PM (#15280888)

DeepFreeze? I thought it was all software.

[ Parent | on HN ]

Re:Malware identified in CCleaner 5.33 by digi_owl on Tuesday September 19, 2017 @12:58PM (#15286406)

Do not recall the brand, i just helped install them and set up the initial install of OS and software.

[ Parent | on HN ]