WiseCare 365

fixer · Apr 25, 2024

I've been using this for years on both Win 10 and Win 11 systems without issues of any sort but yesterday the the program failed to start on both of my systems. Seems the shortcuts have overnight been rendered inoperative. Tried redownloading but Windows (Defender) won't allow the exe to run and deletes the download.

I've always been amazed at how much stuff it finds and deletes - often 2-3Gb daily, but it has never caused me any issues. I know there are other cleanup programs available but if possible this is the one I would like to stay with. Anyone have any info on this?

x BlueRobot · Apr 25, 2024

fixer said:
Tried redownloading but Windows (Defender) won't allow the exe to run and deletes the download.

Are you downloading this through Edge? I take it that the .exe isn't signed or has a signature which isn't trusted? Could you please provide a screenshot of which message you're seeing when you attempt to download?

fixer · Apr 25, 2024

Downloading with Firefox. When I run the exe Defender gives -

x BlueRobot · Apr 25, 2024

Have you tried excluding that file?

Virus and Threat Protection in the Windows Security App - Microsoft Support

Learn how to use virus and threat protection options in Windows Security to scan your device for threats and view the results.

support.microsoft.com

Does WiseCare 365 provide a hash on their website which you can verify the .exe against?

fixer · Apr 25, 2024

No, haven't tried excluding the file until clearer on any risk it may present. There is no way to verify the download.

x BlueRobot · Apr 25, 2024

You could upload the file and the URL to VirusTotal: VirusTotal

Obviously, this isn't a guarantee that the file is safe but it might at least give you an indication of what other malware scanners have reported the file as. It doesn't surprise me that the file is being reported as a PUP, Microsoft have recommended against third-party cleaning software for a while now: Microsoft support policy for the use of registry cleaning utilities - Microsoft Support

Have you considered just using disk cleanup instead of WiseCare 365?

If you haven't already, then have you scanned the one with something like Malwarebytes?

fixer · Apr 25, 2024

x BlueRobot said:
You could upload the file and the URL to VirusTotal: VirusTotal

Yes, first thing I did. It is not infected.

x BlueRobot said:
Have you considered just using disk cleanup instead of WiseCare 365?

I do use it from time to time but nowhere near as thorough as WiseCare, so no, not instead of.

x BlueRobot said:
If you haven't already, then have you scanned the one with something like Malwarebytes?

Scan with Malwarebytes about weekly. Always clean.

antspants · Apr 25, 2024

Reads like wisecare is registering as a false positive in defender, maybe recent changes to defender?.
Any comments around the web of this?

x BlueRobot · Apr 25, 2024

I agree with @antspants, if Malwarebytes returns an all clear and there is nothing on VT, then it is likely a false positive from Windows Defender. If you're confident that it is a genuine .exe then you can try and add it to exclusion list.

fixer · Apr 25, 2024

Thanks guys, I'll see if it can be added to the exclusions list. No too bothered if that turns out to be a bad move, there's nothing like a Macrium image for seeing off malware

fixer · Apr 25, 2024

Defender is finding and deleting the download before I'm able to add it to the exclusions. I'll see if I can find it some other way.

Birk · Apr 25, 2024

You can temporarily stop Defender from doing anything by opening Windows Security/Virus & Threat Protection settings/Manage settings and then turning Real-time protection off.

Be sure to turn it back on right after you finish downloading. That way it will be active when you install and should tell you if the installation file is bad or not.

fixer · Apr 25, 2024

Birk said:
You can temporarily stop Defender from doing anything by opening Windows Security/Virus & Threat Protection settings/Manage settings and then turning Real-time protection off.

Be sure to turn it back on right after you finish downloading. That way it will be active when you install and should tell you if the installation file is bad or not.

This did enable me to get the file and add it to the exceptions but unsurprisingly Defender still killed it when I tried to run it. Might have to forget it but I will have a look around first to see if there's anything out there from others.

Porthos · Apr 25, 2024

fixer said:
Yes, first thing I did. It is not infected.

VirusTotal

www.virustotal.com

fixer · Apr 25, 2024

When this started, 8am yesterday morning, very few AV sites showed it as a PUP. Rather different today though the vast majority, including many majors like BitDefender, say it's clean.

TairikuOkami · Apr 25, 2024

One of the reasons I do not run AV, 99% time it marks legitimate files as a virus a 1% of the time it allows malware to run free.
It seems that WiseCare is on the blocklist now, bad AVs even named it personally, like Malwarebytes/ESET and they shared it.

VirusTotal

www.virustotal.com

Buckley · May 6, 2024

fixer said:
I've been using this for years on both Win 10 and Win 11 systems without issues of any sort but yesterday the the program failed to start on both of my systems. Seems the shortcuts have overnight been rendered inoperative. Tried redownloading but Windows (Defender) won't allow the exe to run and deletes the download.

I've always been amazed at how much stuff it finds and deletes - often 2-3Gb daily, but it has never caused me any issues. I know there are other cleanup programs available but if possible this is the one I would like to stay with. Anyone have any info on this?

It happened to me, too. But I fixed it. A few antivirus software blocks Wise Care 365, which has been confirmed to be a false positive.
You could refer to this guide to fix it:
1. Temporarily disable the real-time protection of your antivirus.
2. Restore Wise Care 365 from its quarantine area.
3. Add Wise Care 365 to the exclusion list.
4. Turn on the real-time protection.

kelper · May 6, 2024

I use Webroot AV and downloaded and installed Wise Care 365 with no issues. It must be a false positive.

I could double zip the exe and send it to you?

fixer · May 6, 2024

Thanks guys, it was false positive, now sorted

Porthos · May 6, 2024

fixer said:
Scan with Malwarebytes about weekly. Always clean.

Malwarebytes considers it a PUP. PUP. | Malwarebytes Labs

Personally, I would use another cleaner.

File: 1
PUP.Optional.WiseCare, C:\MALWARE TEST NO WD\WISECARE365_6.6.5.635.EXE, No Action By User, 12162, 1241370, 1.0.84327, , ame, , 17290AD74CC9BE3B00CCC8C7945BF0A7, 00C436ABEECD3FED64F48306EA9F4CE1F735A3299DE5A3B761D9CBD96A69D36D

This is why I would not use it.

WiseCare 365

Well-known member

My Computers

Account Closed

My Computer

Well-known member

My Computers

Account Closed

My Computer

Well-known member

My Computers

Account Closed

My Computer

Well-known member

My Computers

Like a rolling drone.

My Computers

Account Closed

My Computer

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Microsoft 365 Basic

My Computer

Member

My Computer

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computer

Similar threads