Nero Start - Defender showing a PUP when launching

BrianInEngland · Mar 6, 2026

I've used Nero software for years, and pay an annual sub for Nero 365.
Nero Start launcher app last updated on 10th Feb, but since today I've been getting a security warning when launching the app

A .NODE file is created in the user temp folders which Defender flags as a PUA/PUP

Doing a folder search the earliest one is dated 23rd Feb. The security warning only started today every time I launch Nero Start.

Launching Nero apps manually from their own shortcuts doesn't flag anything in Defender

Checked another PC, same problem.

Nero Start will launch and run even if I use Defender to remove the file

Ghot · Mar 6, 2026

BrianInEngland said:
I've used Nero software for years, and pay an annual sub for Nero 365.
Nero Start launcher app last updated on 10th Feb, but since today I've been getting a security warning when launching the app

A .NODE file is created in the user temp folders which Defender flags as a PUA/PUP

Doing a folder search the earliest one is dated 23rd Feb. The security warning only started today every time I launch Nero Start.

Launching Nero apps manually from their own shortcuts doesn't flag anything in Defender

Checked another PC, same problem.

Nero Start will launch and run even if I use Defender to remove the file

Use REVO to completely remove NERO, which is bloatware, and use this instead...

AnyBurn - awesome software

AnyBurn is software like the old days. Free, no ads, excellent GUI, does... everything. https://www.anyburn.com/ Also comes in a portable version. TUTORIALS Burn CD, DVD, and Bluray disc Burn ISO file Burn NRG file Burn DMG file Burn image file Burn files and folders to CD, DVD...

www.elevenforum.com

Try3 · Mar 6, 2026

Or contact Nero and tell them what is happening to you.
They ought to fix it speedily.
If not, use the suggested AnyBurn [I use that for ripping CDs]. Download AnyBurn - incl Portable

Denis

antspants · Mar 6, 2026

Reads like a Definition update as apposed to anything done by Nero.
Defender seems to be on the warpath, Winaero Tweaker also just got hit with warnings.

Make sure your Defender is updated with any definitions available. From what I understand, Windows checks every day.
Also, if it is defender, enough people will probably flag it for query.

antspants · Mar 6, 2026

Does this shortcut open Nero to run as admin?
You might want to find the .exe location and right click, look for and set “Run As Administrator” just as a hail Mary.

BrianInEngland · Mar 6, 2026

I won't be uninstalling as Nero doesn't just burn discs - I use other features of the software.

Looks like a Defender issue as it started yesterday.
All definitions are up to date

win11raider · Mar 7, 2026

I also use the NERO suite (although an older version than yours) and it’s not the first time an antivirus has notified me with a warning when using NERO START, which for those who don’t know it is like a startup menu that includes all the NERO applications. That’s why I always run each application from its individual shortcut.

Although I agree that NERO has often been distributed as bloatware, it has some utilities that are too good and that few people know about (the video editor and compressor is impressive, not to mention the classic burning program and all its functions).

I also think it could be a false positive from the Windows antivirus. In recent weeks it hasn’t stopped warning me about suspicions with software that isn’t exactly new. I suppose the antivirus detects behaviors that aren’t usual in current software.

In any case, taking advantage of the fact that you have a subscription with NERO, I would write to them and notify them about what happened to you. In the meantime, run each application through its individual shortcut.

BrianInEngland · Mar 7, 2026

win11raider said:
I also use the NERO suite (although an older version than yours) and it’s not the first time an antivirus has notified me with a warning when using NERO START, which for those who don’t know it is like a startup menu that includes all the NERO applications. That’s why I always run each application from its individual shortcut.

Although I agree that NERO has often been distributed as bloatware, it has some utilities that are too good and that few people know about (the video editor and compressor is impressive, not to mention the classic burning program and all its functions).

I also think it could be a false positive from the Windows antivirus. In recent weeks it hasn’t stopped warning me about suspicions with software that isn’t exactly new. I suppose the antivirus detects behaviors that aren’t usual in current software.

In any case, taking advantage of the fact that you have a subscription with NERO, I would write to them and notify them about what happened to you. In the meantime, run each application through its individual shortcut.

Yes I use the image upscaler a lot, it's very good.
I only use Nero Start to check for updates

TairikuOkami · Mar 7, 2026

Nero, just like Google, can display rotating ADs, it has zero control over them.
While most ADs are clean, some can be malicious, so Nero is definitely PUP.

BrianInEngland said:
I only use Nero Start to check for updates

You can use winget or winget GUI apps to check for updates.

Djweb74 · Mar 8, 2026

Today it happened to me too, defender with definitions 1.445.422.0 detects Nero Start as a threat (PUA:Win32/Packunwan)

BrianInEngland · Mar 8, 2026

Djweb74 said:
Today it happened to me too, defender with definitions 1.445.422.0 detects Nero Start as a threat (PUA:Win32/Packunwan)

Seems to be a Defender issue more than anything.

I've raised a ticket with Nero support.

Djweb74 · Mar 8, 2026

BrianInEngland said:
Seems to be a Defender issue more than anything.

I've raised a ticket with Nero support.

I think the same as you... I also opened a ticket in Nero support

Ghot · Mar 8, 2026

BrianInEngland said:
I won't be uninstalling as Nero doesn't just burn discs - I use other features of the software.

Did you read about AnyBurn in post #2?

BrianInEngland · Mar 8, 2026

Ghot said:
Did you read about AnyBurn in post #2?

Yes but it doesn't do all that Nero does - it basically handles reading and writing of discs

Nero has an image upscaler which I use a lot, and other useful features
I just renewed my sub for Nero as well

Nero hasn't *just* been burning software for some years

andrew129260 · Mar 9, 2026

TairikuOkami said:
Nero, just like Google, can display rotating ADs, it has zero control over them.
While most ADs are clean, some can be malicious, so Nero is definitely PUP.

You can use winget or winget GUI apps to check for updates.

I would think the paid version which they have would not have ads. But if it does, there are multiple other utilities that I would think would be better.

BrianInEngland · Mar 9, 2026

andrew129260 said:
I would think the paid version which they have would not have ads. But if it does, there are multiple other utilities that I would think would be better.

It doesn't have ads

Djweb74 · Mar 9, 2026

BrianInEngland said:
I've raised a ticket with Nero support.

Have you received a response from Nero support? I haven't yet.

BrianInEngland · Mar 9, 2026

Djweb74 said:
Have you received a response from Nero support? I haven't yet.

Still waiting

Djweb74 · Mar 10, 2026

BrianInEngland said:
Still waiting

Support responded to you with two emails within a few hours today.

First Email

Hi ********,

We apologize for the inconvenience.
This issue is caused by a recent Windows 11 update that imposes stricter requirements for Node.js files generated during program execution. We're working on a fix and will release a new version soon.

In the meantime, if you've already launched Nero applications like Nero Burning ROM or Nero Video, you can still run them from the Windows Start menu.

We apologize again for the inconvenience.

Second Email

Hi **********,

Good news!
The new version is out. Simply download and install the latest Nero Core from https://www.nero.com/download.php?id=nerocore_full_installer, then launch Nero Start 28.5.61.0 and everything will work perfectly again!

... now I just have to try and see if it works

BrianInEngland · Mar 10, 2026

Djweb74 said:
Support responded to you with two emails within a few hours today.

First Email
Hi ********,

We apologize for the inconvenience.
This issue is caused by a recent Windows 11 update that imposes stricter requirements for Node.js files generated during program execution. We're working on a fix and will release a new version soon.

In the meantime, if you've already launched Nero applications like Nero Burning ROM or Nero Video, you can still run them from the Windows Start menu.

We apologize again for the inconvenience.

Second Email
Hi **********,

Good news!
The new version is out. Simply download and install the latest Nero Core from https://www.nero.com/download.php?id=nerocore_full_installer, then launch Nero Start 28.5.61.0 and everything will work perfectly again!

... now I just have to try and see if it works

I had the first email, I'm sure I'll have the other one when I check

Nero Start - Defender showing a PUP when launching

Well-known member

Attachments

My Computer

Well-known member

My Computers

Well-known member

My Computer

Like a rolling drone.

My Computers

Like a rolling drone.

My Computers

Well-known member

My Computer

Active member

My Computer

Well-known member

My Computer

Microsoft 365 Basic

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer