Question Wise Care 365 Blocked and Deleted by Microsoft Defender and after trying to reinstall Autorun Organizer show it as malware

Please provide comments and solutions that are helpful to the author of this topic.

lokamoka820

Level 37
Thread author
Verified
Well-known
Mar 1, 2024
2,654
3
7,887
3,569
Banana Republic
2024-04-21_03-38-491.jpg
 
  • Wow
  • Like
Reactions: Dave Russo and Jack
It seems like your security software identifies these programs as potential threats. This could be due to false positives. Try adding them to the whitelist/exclusion list in your antivirus software. However, always ensure that the software you're installing is from a trusted source.
 
  • Like
Reactions: Jack
It is common for some security vendors to classify these apps as unwanted. Over the years, optimisers reputation has been less than flawless. If you have downloaded the app from its official website, you can create an exclusion and ignore these messages.
If you’ve downloaded through other sources, something may have been bundled with the app. Use only the official website.
 
 
I've been using this program for years this is the first time I seen this and I know for a fact it does have the adware inside but it seems it can send information back to them but what type of info. When I installed this app I block the main exe inbound and outbound but now windows defender on 4/20 told me it detected win32/lodi and remove the program. I tried to install it back it but it removed the entire app and downloaded. I get the app directly from their download servers.
 
Version 6.7.1 is also detected on Virustotal by various security vendors... I have always used this software without any problems... My question is, aren't they boycotting it because it's Chinese?
 
Version 6.7.1 is also detected on Virustotal by various security vendors... I have always used this software without any problems... My question is, aren't they boycotting it because it's Chinese?
No the problem only with wise Care 365, but Wise Disk Cleaner and Wise Registry Cleaner have no problems at all.

I guess that because of the Bootup Booster Service included in Wise Care 365.
 
  • Like
Reactions: SpectraShadow83
My question is, aren't they boycotting it because it's Chinese?

No. Microsoft and other AV block or delete based upon the product reputation as scareware (misleading product messages). That is why the recent detection is:

Misleading:Win32/Lodi​

 
The most resent detection is: PUA:Win32/PCClean
It can be any of them:

- PUA: Win32/WiseCare (2017)
- Misleading: Win32/Lodi (2024)
- PUA: Win32/PCClean (2024)

These detections (signatures) are all still in Microsoft's active Defender signatures database. Sometimes you can get different detection signatures for the same file. There can be variations between Windows 10 and 11 and even between different build numbers of Windows or the Defender detection engine.

No matter what it is as a dedicated user of WiseCleaner it will be a PITA for you. Best just to create an Allow exception in Defender.

Microsoft Security is going to keep generating new signatures for programs such as Wise until the publisher joins their Partnership program and pays all the money and jumps through all the hoops to get Microsoft to leave them alone. Essentially that is an accurate characterization of it. Otherwise the development teams has contact Microsoft and submit infos every single time a new signature is created.

Most, if not all, of these detections are based upon Microsoft categorizing the product's reputation as "suspicious."
 
Last edited:
  • +Reputation
Reactions: lokamoka820
It can be any of them:

- PUA: Win32/WiseCare (2017)
- Misleading: Win32/Lodi (2024)
- PUA: Win32/PCClean (2024)

These detections (signatures) are all still in Microsoft's active Defender signatures database. Sometimes you can get different detection signatures for the same file. There can be variations between Windows 10 and 11 and even between different build numbers of Windows or the Defender detection engine.

No matter what it is as a dedicated user of WiseCleaner it will be a PITA for you. Best just to create an Allow exception in Defender.

Microsoft Security is going to keep generating new signatures for programs such as Wise until the publisher joins their Partnership program and pays all the money and jumps through all the hoops to get Microsoft to leave them alone. Essentially that is an accurate characterization of it. Otherwise the development teams has contact Microsoft and submit infos every single time a new signature is created.

Most, if not all, of these detections are based upon Microsoft categorizing the product's reputation as "suspicious."
If I understand you well, is Microsoft use MS Defender to get money by doing this?
 
If I understand you well, is Microsoft use MS Defender to get money by doing this?
Not directly. Some software publishers pay the money and go through the process of extended validation to obtain a permanent whitelisting by Microsoft of the Authenticode digital signature. Others join one of the various Microsoft industry initiatives.

Microsoft is average in its fight against PUA whereas Kaspersky essentially allows most any PUA to be installed. Each security software publisher has differences based upon those making the decisions to block PUAs. Some decision makers want to crack-down on software they think are not good for end users while others leave it to the end user to figure out a software is a problem.
 
Last edited:
  • +Reputation
Reactions: lokamoka820