Description: Check to see if CCleaner is installed SQL: SELECT * FROM registry WHERE path like 'HKEY_LOCAL_MACHINESOFTWAREPiriformAgomo%'; Operating Systems: Windows Only Reference: https://raw.githubusercontent.com/osquery/osquery/master/packs/windows-attacks.confhttps://blog.talosintelligence.com/2017/09/avast-distributes-malware.html #ccleaner #malware #trojan