Windows Defender / MiniTool Partition Wizard Free 10.3

For a week or so, Malwarebytes 3.5.1 (Paid) has been going off when opening MinTool Partition Wizard Free (10.2) and I wasn't to concerned about it. Today MiniTool Partition Wizard Free tried to update to 10.3 and Windows Defender went off on it, so not to sure what to think about it now

Windows Defender - Behavior:Win32/InstallCore.E threat description - Windows Defender Security Intelligence
Virus Total shows it flagged as well on a couple of AVs - https://www.virustotal.com/#/file/3c...3eb8/detection


UPDATE:
1. Decided to allow it and see what happens. McAfee Web Advisor is now included and you can opt out of installing
2. Updated Malwarebytes just now to 3.6.1 (paid) and it's still flagging it.
Malwarebytes
Free Antivirus Replacement & Anti-Malware Tool | Malwarebytes

-Log Details-
Protection Event Date: 9/19/18
Protection Event Time: 6:29 PM
Log File: 86e93df0-bc5b-11e8-b8af-000000000000.json

-Software Information-
Version: 3.6.1.2711
Components Version: 1.0.463
Update Package Version: 1.0.6917
License: Premium

-System Information-
OS: Windows 10 (Build 17134.286)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Category: RiskWare
Domain: tracking.minitool.com
IP Address: 50.87.234.221
Port: [49256]
Type: Outbound
File: C:\Program Files\MiniTool Partition Wizard 10\partitionwizard.exe



(end)

FWIW ...
I'm guessing that Windows Defender is going off on MT Partition Wizard 10.3 due to the bundled McAfee Web Advisor. So after allowing MT Partition Wizard 10.3 (opting out of Web Advisor) in Windows Defender and getting MT Partition Wizard 10.3 installed.

... I've done a full scan with ...
1. Windows Defender - didn't find anything
2. Malwarebytes (3.6.1) - didn't find anything, but is still going off on opening MT Partition Wizard
3. AdWareScanner (7.2.3.1) - found a couple of PUPs for Wise Stuff (which I was aware of) and a couple of PUPS for Ask & AOL (I wasn't aware of these and can't say if they came from MT Partition Wizard 10.3 or not)

I can breath a little easier now ... as it appears it's not a serious threat. Just another company bundling stuff with their apps

Eagle51 said:

FWIW ...
I'm guessing that Windows Defender is going off on MT Partition Wizard 10.3 due to the bundled McAfee Web Advisor. So after allowing MT Partition Wizard 10.3 (opting out of Web Advisor) in Windows Defender and getting MT Partition Wizard 10.3 installed.

... I've done a full scan with ...
1. Windows Defender - didn't find anything
2. Malwarebytes (3.6.1) - didn't find anything, but is still going off on opening MT Partition Wizard
3. AdWareScanner (7.2.3.1) - found a couple of PUPs for Wise Stuff (which I was aware of) and a couple of PUPS for Ask & AOL (I wasn't aware of these and can't say if they came from MT Partition Wizard 10.3 or not)

I can breath a little easier now ... as it appears it's not a serious threat. Just another company bundling stuff with their apps

couple of PUPS for Ask & AOL

Chrome. They always add them back in on an update. Always....... d u m b !!!!!

To avoid the re-boot, just go into Chrome, search engines, and remove them. Done.

MiniToolSupport said:

It is a false positive, and you can feel safe to add the program to the whitelist of windows defender or other security software.

@MiniToolSupport

Thanks. FWIW --- as of a couple days ago, Wednesday 9/26 I believe, the pop-up block when opening MiniTool and MBAM running has stopped. Either MBAM fixed their defs, or MiniTool fixed the trigger..... I tend to believe the former.

Steve C said:

Defender just blocked the 10.3 update for me. I downloaded the full installer and said no to the McAfee licence terms then Partition Wizard installed. I've told MiniTool what I think of their lousy software update.

Well i just updated from 10.2 to 10.3 and no complaints from Defender.

I then total uninstalled it and clean installed it making sure I turned off the crapware linkto Mcafee, as I always do and it installed fine, So it is not a Defender issue or even really a big issue if you do not click the link.

I doubt minitool will do anything to remove the crapware link as they get revenue from it.

No matter how much of a PITA it is, the tool itself does not have any malware.