Minitool Partition Wizard Triggers Defender Virus Alert

I just tried to upgrade to Partition Wizard v11 from MiniTool's web site, The file downloads OK but triggers a serious virus alert in Defender (see below).

I suspect this is a false positive but I've no wish to test that hypothesis.

Attachment 227387

Win32/InstallCore.E is an ad plugin of our partner. Our program is 100% safe, and you can choose to not install the advertised application, as the attached screenshot shows.

Hi folks
Be careful when downloading applications -- often websites deliberately obfuscate the real link to the download you want so if you just go click, click,click without reading carefully you could get all sorts of extra stuff installed.

I'm sure that for HOME computers this is probably the biggest way malware / viruses get installed rather than by security breaches of people logging on to your machines.

So when downloading ALWAYS READ EVERYTHING CAREFULLY before clicking link, green arrows etc etc.

Cheers
jimbo

A recent review on Gizmo's Freeware mentions 2 alerts the software triggered on VirusTotal:
Manage Partitions With This Terrific Free Program | Gizmo's Freeware

https://prnt.sc/my89gy

Silly question, but why not just use something like GParted as a liveCD or liveUSB to manage partitions?

A PUP is not the same as a real VIRUS. People are increasingly paranoid about viruses nowadays.

To OP: Do you have WD PUP detection enabled by chance?

Rubi said:

Silly question, but why not just use something like GParted as a liveCD or liveUSB to manage partitions?

MiniTool software is quite nice. Also, some people doesn't like Linux. I am not a big fan of it either. GParted is okay but you may prefer another interface. There are a lot of reasons. As Jimbo suggested be very careful when installing software; pay attention to those installation options.

eLPuSHeR said:

A PUP is not the same as a real VIRUS. People are increasingly paranoid about viruses nowadays.

To OP: Do you have WD PUP detection enabled by chance?

I'm unaware of a specific Defender PUP option but all the main options are enabled.

MiniToolSupport said:

Win32/InstallCore.E is an ad plugin of our partner. Our program is 100% safe, and you can choose to not install the advertised application, as the attached screenshot shows.

Most people have no wish to install the c**p bundled with free software. MiniTool should be supplying software which does't trigger a virus alert else they risk people not installing the software and losing sales.

Steve C said:

I'm unaware of a specific Defender PUP option but all the main options are enabled.

PUP detection is activated by adding an entry to Windows Registry.

eLPuSHeR said:

PUP detection is activated by adding an entry to Windows Registry.

If you mean PUA protection, then yes it is enabled according to the registry settings below:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
PUAProtection DWORD
0 or delete = Disable
1 = Enable
2 = Audit Mode

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\MpEngine
MpEnablePus DWORD
0 or delete = Disable
1 = Enable