MiniTools Partition Wizard offical download now flagged as dangerous

Page 1 of 3 123 LastLast
  1. Bree's Avatar
    Posts : 18,794
    10 Home x64 (20H2) (10 Pro on 2nd pc)
       #1

    MiniTools Partition Wizard offical download now flagged as dangerous


    The download of MiniTools Partition Wizard Free version 11 from the official MiniTools site is detected as containing PUA:Win32/FusionCore. I have PUA detection enabled in Defender and it immediately detected it on download.
    MiniTools Partition Wizard offical download now flagged as dangerous-image.png

    This application is a bundling software that is known to install other potentially unwanted application (PUA), such as PUA:Win32/ByteFence. It may sometimes install unwanted software such as BrowserModifier:Win32/Prifou.
    https://www.microsoft.com/en-us/wdsi...hreatid=229442

    This does not appear to be a false positive, as this post reported problems after installing it.
    Hey, thanks for recommending a program that is filled with bloatware, hijacks my home page and triggered Malwarebytes to quarantining registry entries. Appreciate it.
    Any idea why my BIOS takes so long to load?
      My Computers

  2. f14tomcat's Avatar
    Posts : 53,228
    Multi-boot Windows 10 - RTM, RP, Beta, and Insider
       #2

    Bree said:
    The download of MiniTools Partition Wizard Free version 11 from the official MiniTools site is detected as containing PUA:Win32/FusionCore. I have PUA detection enabled in Defender and it immediately detected it on download.
    MiniTools Partition Wizard offical download now flagged as dangerous-image.png

    https://www.microsoft.com/en-us/wdsi...hreatid=229442

    This does not appear to be a false positive, as this post reported problems after installing it.
    Any idea why my BIOS takes so long to load?

    MS link must have been taken down:

    MiniTools Partition Wizard offical download now flagged as dangerous-2020-03-14_16h51_22.png
      My Computers

  3. Bree's Avatar
    Posts : 18,794
    10 Home x64 (20H2) (10 Pro on 2nd pc)
    Thread Starter
       #3

    f14tomcat said:
    MS link must have been taken down:
    Sorry, I posted a bad link. Corrected the link in post #1 now.
      My Computers

  4. f14tomcat's Avatar
    Posts : 53,228
    Multi-boot Windows 10 - RTM, RP, Beta, and Insider
       #4

    Virus Total results. 4/72.

    MiniTools Partition Wizard offical download now flagged as dangerous-2020-03-14_17h01_11.png


    VirusTotal
      My Computers

  5. f14tomcat's Avatar
    Posts : 53,228
    Multi-boot Windows 10 - RTM, RP, Beta, and Insider
       #5

    This:

    Enable or Disable Windows Defender PUA Protection in Windows 10

    looks totally different in my Security Center, option #1, the GUI.

    I'm not getting MiniTool blocked at all, Firefox or Edge or any other browser. All my App and Browser Controls are set to "Warn". Set them to "Block", still did not stop it.

    Something is different.
      My Computers

  6. Bree's Avatar
    Posts : 18,794
    10 Home x64 (20H2) (10 Pro on 2nd pc)
    Thread Starter
       #6

    f14tomcat said:
    This:
    Enable or Disable Windows Defender PUA Protection in Windows 10
    looks totally different in my Security Center, option #1, the GUI.
    Option One has apparently been updated to reflect the GUI that will be coming when 20H1 is released (W10 version 2004). Option Four works in all versions of W10.
      My Computers

  7. f14tomcat's Avatar
    Posts : 53,228
    Multi-boot Windows 10 - RTM, RP, Beta, and Insider
       #7

    Thanks, but I don't want to gray out my options. Anyhow, when set to Block, it is not blocked. When set to Warn, there is no warning. After download, a scan with Defender shows clean. (FWIW, so des a scan with MBAM...clean) The only place it shows a PUA (not virus) is in Virus Total, and there it's only Microsoft and that first one I've never heard of.

    Maybe there is a chance it's a false positive, or maybe an "overzealous" positive?
      My Computers

  8. f14tomcat's Avatar
    Posts : 53,228
    Multi-boot Windows 10 - RTM, RP, Beta, and Insider
       #8

    Ah, ok @Bree, I see some of the confusion. It's basically a hidden option unless you are running Enterprise. Available on Home/Pro with some behind the curtain tweaks.

    "By default, PUA protection is not enabled in Windows Defender, and would need to be enabled if wanted.

    The Potentially Unwanted Application protection feature is available only for enterprise customers. If you are already one of Microsoft's existing enterprise customers, you need to opt-in to enable and use PUA protection.


    While Microsoft announced the new PUA feature as only available for the Enterprise edition of Windows 10, Home and Pro editions can also enable it on their Windows 10 PCs to block the deployment of adware during software installations."
      My Computers

  9. Bree's Avatar
    Posts : 18,794
    10 Home x64 (20H2) (10 Pro on 2nd pc)
    Thread Starter
       #9

    f14tomcat said:
    Ah, ok @Bree, I see some of the confusion. It's basically a hidden option unless you are running Enterprise. Available on Home/Pro with some behind the curtain tweaks.
    Yes, I first enabled it in Home using the registry entries back in 2017. Since then I have always enabled it in all my Home and Pro systems.
      My Computers

  10. f14tomcat's Avatar
    Posts : 53,228
    Multi-boot Windows 10 - RTM, RP, Beta, and Insider
       #10

    Well, I can't get the download of MiniTool to trigger a PUP like you did, no matter what settings I use. It scans clean. Only shows in Virus Total from MS (basically in the last 2 days). It's the Installer it's flagging, not the app itself. It's a PUP (PUA) not a virus/worm, etc. Lots of apps' installers have the "extra" stuff, that's how they make money. Smartscreen tells me if something sick is downloaded. These "reputation" class hits are based on somewhat subjective criteria, and can vary from scan to scan. Common sense when clicking and installing is the best medicine.
      My Computers


 
Page 1 of 3 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Đ Designer Media Ltd
All times are GMT -5. The time now is 08:35.
Find Us




Windows 10 Forums