Check to see if CCleaner is installed (osquery)

Description: Check to see if CCleaner is installed

SQL:

SELECT * FROM registry 
WHERE path like 'HKEY_LOCAL_MACHINESOFTWAREPiriformAgomo%';

Operating Systems: Windows Only

Reference:

• https://raw.githubusercontent.com/osquery/osquery/master/packs/windows-attacks.confhttps://blog.talosintelligence.com/2017/09/avast-distributes-malware.html

#ccleaner #malware #trojan