Windows Defender / MiniTool Partition Wizard Free 10.3 Solved

  1.    #1

    Windows Defender / MiniTool Partition Wizard Free 10.3


    For a week or so, Malwarebytes 3.5.1 (Paid) has been going off when opening MinTool Partition Wizard Free (10.2) and I wasn't to concerned about it. Today MiniTool Partition Wizard Free tried to update to 10.3 and Windows Defender went off on it, so not to sure what to think about it now

    Windows Defender - Behavior:Win32/InstallCore.E threat description - Windows Defender Security Intelligence
    Virus Total shows it flagged as well on a couple of AVs - https://www.virustotal.com/#/file/3c...3eb8/detection


    UPDATE:
    1. Decided to allow it and see what happens. McAfee Web Advisor is now included and you can opt out of installing
    2. Updated Malwarebytes just now to 3.6.1 (paid) and it's still flagging it.
    Malwarebytes
    Free Antivirus Replacement & Anti-Malware Tool | Malwarebytes

    -Log Details-
    Protection Event Date: 9/19/18
    Protection Event Time: 6:29 PM
    Log File: 86e93df0-bc5b-11e8-b8af-000000000000.json

    -Software Information-
    Version: 3.6.1.2711
    Components Version: 1.0.463
    Update Package Version: 1.0.6917
    License: Premium

    -System Information-
    OS: Windows 10 (Build 17134.286)
    CPU: x64
    File System: NTFS
    User: System

    -Blocked Website Details-
    Malicious Website: 1
    , , Blocked, [-1], [-1],0.0.0

    -Website Data-
    Category: RiskWare
    Domain: tracking.minitool.com
    IP Address: 50.87.234.221
    Port: [49256]
    Type: Outbound
    File: C:\Program Files\MiniTool Partition Wizard 10\partitionwizard.exe



    (end)
      My ComputersSystem Spec

  2.    #2

    FWIW ...
    I'm guessing that Windows Defender is going off on MT Partition Wizard 10.3 due to the bundled McAfee Web Advisor. So after allowing MT Partition Wizard 10.3 (opting out of Web Advisor) in Windows Defender and getting MT Partition Wizard 10.3 installed.

    ... I've done a full scan with ...
    1. Windows Defender - didn't find anything
    2. Malwarebytes (3.6.1) - didn't find anything, but is still going off on opening MT Partition Wizard
    3. AdWareScanner (7.2.3.1) - found a couple of PUPs for Wise Stuff (which I was aware of) and a couple of PUPS for Ask & AOL (I wasn't aware of these and can't say if they came from MT Partition Wizard 10.3 or not)

    I can breath a little easier now ... as it appears it's not a serious threat. Just another company bundling stuff with their apps
      My ComputersSystem Spec

  3. f14tomcat's Avatar
    Posts : 41,056
    Triple boot - Win 10 Pro, Win 10 Pro Insider (2) - (and a sprinkling of VMs)
       #3

    Eagle51 said: View Post
    FWIW ...
    I'm guessing that Windows Defender is going off on MT Partition Wizard 10.3 due to the bundled McAfee Web Advisor. So after allowing MT Partition Wizard 10.3 (opting out of Web Advisor) in Windows Defender and getting MT Partition Wizard 10.3 installed.

    ... I've done a full scan with ...
    1. Windows Defender - didn't find anything
    2. Malwarebytes (3.6.1) - didn't find anything, but is still going off on opening MT Partition Wizard
    3. AdWareScanner (7.2.3.1) - found a couple of PUPs for Wise Stuff (which I was aware of) and a couple of PUPS for Ask & AOL (I wasn't aware of these and can't say if they came from MT Partition Wizard 10.3 or not)

    I can breath a little easier now ... as it appears it's not a serious threat. Just another company bundling stuff with their apps
    couple of PUPS for Ask & AOL

    Chrome. They always add them back in on an update. Always....... d u m b !!!!!

    To avoid the re-boot, just go into Chrome, search engines, and remove them. Done.
      My ComputersSystem Spec

  4.    #4

    It is a false positive, and you can feel safe to add the program to the whitelist of windows defender or other security software.
      My ComputerSystem Spec

  5. f14tomcat's Avatar
    Posts : 41,056
    Triple boot - Win 10 Pro, Win 10 Pro Insider (2) - (and a sprinkling of VMs)
       #5

    MiniToolSupport said: View Post
    It is a false positive, and you can feel safe to add the program to the whitelist of windows defender or other security software.
    @MiniToolSupport

    Thanks. FWIW --- as of a couple days ago, Wednesday 9/26 I believe, the pop-up block when opening MiniTool and MBAM running has stopped. Either MBAM fixed their defs, or MiniTool fixed the trigger..... I tend to believe the former.
      My ComputersSystem Spec

  6.    #6

    Defender just blocked the 10.3 update for me. I downloaded the full installer and said no to the McAfee licence terms then Partition Wizard installed. I've told MiniTool what I think of their lousy software update.
      My ComputersSystem Spec

  7.    #7

    Steve C said: View Post
    Defender just blocked the 10.3 update for me. I downloaded the full installer and said no to the McAfee licence terms then Partition Wizard installed. I've told MiniTool what I think of their lousy software update.
    Well i just updated from 10.2 to 10.3 and no complaints from Defender.

    I then total uninstalled it and clean installed it making sure I turned off the crapware linkto Mcafee, as I always do and it installed fine, So it is not a Defender issue or even really a big issue if you do not click the link.

    I doubt minitool will do anything to remove the crapware link as they get revenue from it.

    No matter how much of a PITA it is, the tool itself does not have any malware.
      My ComputerSystem Spec


 

Related Threads
Special offer on minitool partition wizrd professional - normally $39 but free. Main advantage over free version is ability to handle dynamic disks. Hurry offer ends on 27/11/16 MiniTool 2016 Happy Thanksgiving - Software Giveaway & Sales
MiniTool Partition Wizard 9.1 Pro (100% Discount) Free Activation code http://www.topsoftbargains.com/w/minitool-partition-wizard-professional-edition-discount-coupon-code/
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 07:59.
Find Us