Ccleaner - weird re...
 
Notifications
Clear all

Ccleaner - weird readings

SkyDave92
(@skydave92)
New Member

Hi, an expert I know searched a PC that had ccleaner installed on it, the forensic sofware he was using registered that ccleaner was used to erase things every day for the past months, but we know that can't be right due to other information he got, plus the owner says he only used it 2-3 times in the past months when the PC was being sluggish. So any idea what activity could his software wrongly register as erasing?

Does ccleaner run some actions in the background that the user was not aware of?

Thanks for your time!

Quote
Topic starter Posted : 19/09/2021 3:06 am
Topic Tags
armresl
(@armresl)
Community Legend
Posted by: @skydave92

Hi, an expert I know searched a PC that had ccleaner installed on it, the forensic sofware he was using registered that ccleaner was used to erase things every day for the past months, but we know that can't be right due to other information he got, plus the owner says he only used it 2-3 times in the past months when the PC was being sluggish. So any idea what activity could his software wrongly register as erasing?

Does ccleaner run some actions in the background that the user was not aware of?

Thanks for your time!

Did you extract and view any scheduled maintenance settings?

Run on startup, run on full recycle bin, start every day at 2:30AM?

 

ReplyQuote
Posted : 22/09/2021 9:47 pm
SkyDave92
(@skydave92)
New Member

@armresl 
Thanks! I'm not in forensics myself, so sadly I don't know. I assume it picked up the PC restart times, since every day it's at a different time. I'm just wondering what caused the confusion / wrong report.

I'll forward your suggestion to him. Any other tips on how he could check if the ccleaner was set to clean something by the user or if it was just running smart clean, maintenance, update or whatever else it does?

ReplyQuote
Topic starter Posted : 22/09/2021 10:18 pm
Share: