More than two million people downloaded a compromised version of Avast’s CCleaner software.