Windows Defender flags CCleaner as PUP – Part 1

[German]Microsoft's Defender integrated into Windows marks Piriform's CCleaner software as a potentially unwanted program (PUP, Potential Unwanted Program or Potential Unwanted App, PUA).

In September 2019, I had mentioned in the German blog post Microsoft setzt CCleaner-Domain [im MS Answers-Forum] auf die Black-List that Microsoft had put Pirifom's optimization and cleaning software CCleaner on the list of unwanted programs. Specifically, the entire domain of Piriform was put on the blacklist. A few days later there was the back rowing when Microsoft removed the entry again..

They did it again: Defender blocks CCleaner

Various media have noticed – Microsoft has once again pulled the rip cord and classified the cleaner as a potentially unwanted program (PUP) via Windows Defender.

Microsoft Flags CCleaner as Potentially Unwanted Application, Deletes Its Files https://t.co/8AdYBIxOkE #Microsoft #PUA #antivirus #CCleaner #Avast

— Bogdan Popa (@bgdftw) July 29, 2020

On this Microsoft page there is a note that Windows Defender now detects an unwanted program PUA:Win32/CCleaner. The reason for this is as follows:

Certain installers for free and 14-day trial versions of CCleaner come with bundled applications, including applications that are not required by CCleaner or produced by the same publisher Piriform. While the bundled applications themselves are legitimate, bundling of software, especially products from other providers, can result in unexpected software activity that can negatively impact user experiences. To protect Windows users, Microsoft Defender Antivirus detects CCleaner installers that exhibit this behavior as potentially unwanted applications (PUA).

Martin Brinkhaus of ghacks.net put it in a nutshell in his tweet with the image of the installer: Piriform, which belong to Avast, also deliver the Avast antivirus software in a bundle with the test program.

CCleaner lagged as potentially unwanted by Windows Defender #ccleaner #windows #securityhttps://t.co/hec6TqtlQc pic.twitter.com/edijcBk6aD

— ghacksnews (@ghacks) July 30, 2020

Avast's attempt to bring its free antivirus solution with the Ccleaner to the user community has backfired. Microsoft then also writes:

PUA include CCleaner installers that have been found bundling the following applications. Note that these are normal applications that are not detected by Microsoft Defender Antivirus.

• Google Chrome
• Google Toolbar
• Avast Free Antivirus
• AVG Antivirus Free

While the CCleaner installers do provide an option to opt out, some users can easily inadvertently install these bundled applications.

So the Google Toolbar and the Chrome browser are also installed with the CCleaner. Bleeping Computer has probably covered the story for the first time in this article. There are statements from Microsoft and Piriform. Piriform writes that the free version and Recuva are affected, but not the paid version. Let's see how long this ban lasts.

Background to the CCleaner

Cleaner is a free tool for cleaning up Windows – Wikipedia writes here about 'optimization'. Some hints on what is 'cleaned and optimized' can be found under Askvg. I don't like this part (I've met too many people in forums who have used it to clean their systems to the breaking point) and see CCleaner more as a kind of snake oil (not really necessary, but the tool is very popular among users).

(Source: Talos)

In my blog posts about the CCleaner (see link list at the end of the article), I advise you to keep your hands off this tool. But every user makes his own decision.

Similar articles
Chromium edge can prevent PUP downloads
Update to CCleaner 5.59.7230 installs CCleaner Browser PUP
CCleaner comes with AVAST PUP
PUP: AVIRA adds Aviara Launcher to paid versionCCleaner v5.64.7613 released

Windows Defender flags CCleaner as PUP – Part 1
Defender flags Windows Hosts file as malicious – Part 2
Defender blocks redirected Microsoft hosts entries – Part 3

CCleaner has been infected with malware
CCleaner comes mit AVAST PUP
CCleaner forces update from v5.38 to v5.46
AVAST CCleaner 5.45 and the telemetry thing
CCleaner 5.45 pulled and other peculiarities
CCleaner V 5.46 with improved data settings
CCleaner forces update from v5.38 to v5.46
CCleaner v5.52.6967 released
Update to CCleaner 5.59.7230 installs CCleaner Browser PUP
CCleaner v5.60.7307 released
CCleaner v5.64.7613 released