Edge browser issue/ possible Ccleaner infection?

[fullinfusion]

On Friday I was on my system installing a new piece of hardware.

As always I check some of my programs for any updates. I just seen on the homepage about CCleaner and how they were hacked and I believe I installed that version.

I know before I installed CCleaner Microsoft had some updates for my system and I installed them.

I also installed A non public beta for my graphics card and when I opened up Edge the home screen looked weird. I had an extra search button and my frequently used links were cut off in half. I remove the beta driver did a restart and still have the same problem.

I then looked in my ADD remove programs thinking CCleaner snuck an extra search bar on my system.
And it came back clean.

So I'm not sure if it was the Microsoft update or if I've been infected with that CCleaner that we just found out about today. Take a look at the photo and tell me what you guys think. Where did that extra web search bar under the main search bar come from?

 

[Mindweaver]

Try running AdwCleaner. I would run Junkware Removal Tool as well. I would run JRT first then AdwCleaner.

 

[MrGenius]

I'm not a regular Edge user. But from what I can tell it's just a displacement of the normal search/address bar when opening a new tab. It goes away if you click on the place where the search/address bar would normally be.

Never mind. See post below.

 

[fullinfusion]

Thanks for the advice I really do appreciate it. I'm not at home at the moment but once I get home this week I'll definitely run those programs that you suggested and hopefully that fixes the problem.

 

[MrGenius]

Strike my previous post. I misunderstood what you were saying. Now I get it. You're talking about the web search bar below the one I was referring to. I have no clue what's up with that. They(as in MS) added something similar to IE recently(showed up in W10 with latest CU and W7 with a recent update I believe). I can get rid of it in IE by right clicking on the ribbon(I think that's what they call it?) at the top(where the address bar is) and unchecking "Show tabs on a separate row".

 

[95Viper]

It is a bug in the latest updates. Does not happen to all.

See here --> Microsoft Edge shows two search bars (bug) and --> Bing overlay "web search" on feed/topsites page in edge

 

[fullinfusion]

It is a bug in the latest updates. Does not happen to all.

See here --> Microsoft Edge shows two search bars (bug) and --> Bing overlay "web search" on feed/topsites page in edge

Thank you so much, you saved me half a day of reformatting my system.

 

[eidairaman1]

For now id remove all piriform software

 

[fullinfusion]

From posts it infected 32bit not 64 but I'll check the registry to be sure. I only use it for add/remove W10 crap apps that don't show up in Windows add/remove

 

[Ahhzz]

From posts it infected 32bit not 64 but I'll check the registry to be sure. I only use it for add/remove W10 crap apps that don't show up in Windows add/remove

stepped here to point exactly this out. 32-bit only. If something is going on with your PC, and you're on a 64-bit OS, it has nothing to do with the CC hack.

 

[erocker]

You could just use AdBlock for now and block that element. It might even tell you where it's located.

 

[dorsetknob]

Story and some info here and probably elswhere for those that may not heard of original story
http://www.theregister.co.uk/2017/09/18/tainted_ccleaner_downloads/

 

[Mindweaver]

You could just use AdBlock for now and block that element. It might even tell you where it's located.

That and Ghostery, and NoScript are good as well.

 

[fullinfusion]

Story and some info here and probably elswhere for those that may not heard of original story
http://www.theregister.co.uk/2017/09/18/tainted_ccleaner_downloads/

So now the question, I downloaded CCleaner on the 15th through their app to check for updates.

So am I safe?

 

[95Viper]

So am I safe?

Probably. However, for your peace of mind --> CCleaner Malware Incident - What You Need to Know and How to Remove

Info from CCleaner Compromised to Distribute Malware for Almost a Month:
Technical details about the Floxif malware's mode of operation, infection process, and indicators of compromise are available in a Cisco Talos report here, and a Morphisec report here.

 

[fullinfusion]

Well found out I got the Ccleaner infection.. I ran windows defender and it picked it up, but looking in the reg I never seen was I was suppose to see if it was infected..
Weird

 

[RejZoR]

The answer is, NO. Because you're running 64bit Windows. Only 32bit CCleaner was affected. Also, it was only the binary which was modified. The compromised installer didn't install anything else and the payload wasn't yet active. Meaning, if you removed affected CCleaner, there couldn't be anything left. Also, the situation with CCleaner included a trojan backdoor in the binary, not some adware that rams search bars into browsers...

 

[fullinfusion]

The answer is, NO. Because you're running 64bit Windows. Only 32bit CCleaner was affected. Also, it was only the binary which was modified. The compromised installer didn't install anything else and the payload wasn't yet active. Meaning, if you removed affected CCleaner, there couldn't be anything left. Also, the situation with CCleaner included a trojan backdoor in the binary, not some adware that rams search bars into browsers...

Format and changed my pass keys on a different device so I can relax now.

Thanks for the advise and help guys