Question Wise Care 365 Blocked and Deleted by Microsoft Defender and after trying to reinstall Autorun Organizer show it as malware

[lokamoka820]

 

[Bot]

It seems like your security software identifies these programs as potential threats. This could be due to false positives. Try adding them to the whitelist/exclusion list in your antivirus software. However, always ensure that the software you're installing is from a trusted source.

 

[Trident]

It is common for some security vendors to classify these apps as unwanted. Over the years, optimisers reputation has been less than flawless. If you have downloaded the app from its official website, you can create an exclusion and ignore these messages.
If you’ve downloaded through other sources, something may have been bundled with the app. Use only the official website.

 

[TairikuOkami]

Enable or Disable Microsoft Defender PUA Protection in Windows 11 Tutorial

This tutorial will show you how to enable or disable Microsoft Defender Antivirus Potentially unwanted applications (PUA) protection in Windows 11. Potentially unwanted apps (PUA) aren't malware, but they might display advertising, use your PC for cryptomining, or do other things you'd prefer...

www.elevenforum.com

 

[lokamoka820]

Here is the Windows Security details about the block.

 

[ALBERTSVOICE TECH]

I've been using this program for years this is the first time I seen this and I know for a fact it does have the adware inside but it seems it can send information back to them but what type of info. When I installed this app I block the main exe inbound and outbound but now windows defender on 4/20 told me it detected win32/lodi and remove the program. I tried to install it back it but it removed the entire app and downloaded. I get the app directly from their download servers.

 

[lokamoka820]

Wise Care 365 website back to older version on the download page Version Wise Care 365 v6.6.5 which is released in Feb to avoid more detection on the Current Version Wsie Care 365 V6.6.6, but if you download the portable version it will still get the malware.

More antiviruses detect it now including Avast.

 

[Pat MacKnife]

Also using wise disk cleaner for years here, no issue right now with MS defender.

 

[lokamoka820]

Also using wise disk cleaner for years here, no issue right now with MS defender.

The issue is just with Wsie Care 365 V6.6.6, older versions have no issue.

 

[SpectraShadow83]

Version 6.7.1 is also detected on Virustotal by various security vendors... I have always used this software without any problems... My question is, aren't they boycotting it because it's Chinese?

 

[SpectraShadow83]

 

[lokamoka820]

Version 6.7.1 is also detected on Virustotal by various security vendors... I have always used this software without any problems... My question is, aren't they boycotting it because it's Chinese?

No the problem only with wise Care 365, but Wise Disk Cleaner and Wise Registry Cleaner have no problems at all.

I guess that because of the Bootup Booster Service included in Wise Care 365.

 

[SpectraShadow83]

 

[lokamoka820]

Here we go again, MS Defender blocks Wise Care 365 again as PUA, but this time it asks about the action instead of remove by default, awesome.

 

[bazang]

My question is, aren't they boycotting it because it's Chinese?

No. Microsoft and other AV block or delete based upon the product reputation as scareware (misleading product messages). That is why the recent detection is:​

Misleading:Win32/Lodi​

​

 

[lokamoka820]

No. Microsoft and other AV block or delete based upon the product reputation as scareware (misleading product messages). That is why the recent detection is:​

Misleading:Win32/Lodi​

​

The most resent detection is: PUA:Win32/PCClean

 

[bazang]

The most resent detection is: PUA:Win32/PCClean

It can be any of them:

- PUA: Win32/WiseCare (2017)
- Misleading: Win32/Lodi (2024)
- PUA: Win32/PCClean (2024)

These detections (signatures) are all still in Microsoft's active Defender signatures database. Sometimes you can get different detection signatures for the same file. There can be variations between Windows 10 and 11 and even between different build numbers of Windows or the Defender detection engine.

No matter what it is as a dedicated user of WiseCleaner it will be a PITA for you. Best just to create an Allow exception in Defender.

Microsoft Security is going to keep generating new signatures for programs such as Wise until the publisher joins their Partnership program and pays all the money and jumps through all the hoops to get Microsoft to leave them alone. Essentially that is an accurate characterization of it. Otherwise the development teams has contact Microsoft and submit infos every single time a new signature is created.

Most, if not all, of these detections are based upon Microsoft categorizing the product's reputation as "suspicious."

 

[lokamoka820]

It can be any of them:

- PUA: Win32/WiseCare (2017)
- Misleading: Win32/Lodi (2024)
- PUA: Win32/PCClean (2024)

These detections (signatures) are all still in Microsoft's active Defender signatures database. Sometimes you can get different detection signatures for the same file. There can be variations between Windows 10 and 11 and even between different build numbers of Windows or the Defender detection engine.

No matter what it is as a dedicated user of WiseCleaner it will be a PITA for you. Best just to create an Allow exception in Defender.

Microsoft Security is going to keep generating new signatures for programs such as Wise until the publisher joins their Partnership program and pays all the money and jumps through all the hoops to get Microsoft to leave them alone. Essentially that is an accurate characterization of it. Otherwise the development teams has contact Microsoft and submit infos every single time a new signature is created.

Most, if not all, of these detections are based upon Microsoft categorizing the product's reputation as "suspicious."

If I understand you well, is Microsoft use MS Defender to get money by doing this?

 

[bazang]

If I understand you well, is Microsoft use MS Defender to get money by doing this?

Not directly. Some software publishers pay the money and go through the process of extended validation to obtain a permanent whitelisting by Microsoft of the Authenticode digital signature. Others join one of the various Microsoft industry initiatives.

Microsoft is average in its fight against PUA whereas Kaspersky essentially allows most any PUA to be installed. Each security software publisher has differences based upon those making the decisions to block PUAs. Some decision makers want to crack-down on software they think are not good for end users while others leave it to the end user to figure out a software is a problem.