WiseCare 365

I've been using this for years on both Win 10 and Win 11 systems without issues of any sort but yesterday the the program failed to start on both of my systems. Seems the shortcuts have overnight been rendered inoperative. Tried redownloading but Windows (Defender) won't allow the exe to run and deletes the download.

I've always been amazed at how much stuff it finds and deletes - often 2-3Gb daily, but it has never caused me any issues. I know there are other cleanup programs available but if possible this is the one I would like to stay with. Anyone have any info on this?

fixer said:

Tried redownloading but Windows (Defender) won't allow the exe to run and deletes the download.

Click to expand...

Are you downloading this through Edge? I take it that the .exe isn't signed or has a signature which isn't trusted? Could you please provide a screenshot of which message you're seeing when you attempt to download?

Downloading with Firefox. When I run the exe Defender gives -

Have you tried excluding that file?


Does WiseCare 365 provide a hash on their website which you can verify the .exe against?

No, haven't tried excluding the file until clearer on any risk it may present. There is no way to verify the download.

You could upload the file and the URL to VirusTotal: VirusTotal

Obviously, this isn't a guarantee that the file is safe but it might at least give you an indication of what other malware scanners have reported the file as. It doesn't surprise me that the file is being reported as a PUP, Microsoft have recommended against third-party cleaning software for a while now: Microsoft support policy for the use of registry cleaning utilities - Microsoft Support

Have you considered just using disk cleanup instead of WiseCare 365?

If you haven't already, then have you scanned the one with something like Malwarebytes?

x BlueRobot said:

You could upload the file and the URL to VirusTotal: VirusTotal

Click to expand...

Yes, first thing I did. It is not infected.

x BlueRobot said:

Have you considered just using disk cleanup instead of WiseCare 365?

Click to expand...

I do use it from time to time but nowhere near as thorough as WiseCare, so no, not instead of.

x BlueRobot said:

If you haven't already, then have you scanned the one with something like Malwarebytes?

Click to expand...

Scan with Malwarebytes about weekly. Always clean.

Reads like wisecare is registering as a false positive in defender, maybe recent changes to defender?.
Any comments around the web of this?

I agree with @antspants, if Malwarebytes returns an all clear and there is nothing on VT, then it is likely a false positive from Windows Defender. If you're confident that it is a genuine .exe then you can try and add it to exclusion list.

Thanks guys, I'll see if it can be added to the exclusions list. No too bothered if that turns out to be a bad move, there's nothing like a Macrium image for seeing off malware

Defender is finding and deleting the download before I'm able to add it to the exclusions. I'll see if I can find it some other way.

You can temporarily stop Defender from doing anything by opening Windows Security/Virus & Threat Protection settings/Manage settings and then turning Real-time protection off.

Be sure to turn it back on right after you finish downloading. That way it will be active when you install and should tell you if the installation file is bad or not.

Birk said:

You can temporarily stop Defender from doing anything by opening Windows Security/Virus & Threat Protection settings/Manage settings and then turning Real-time protection off.

Be sure to turn it back on right after you finish downloading. That way it will be active when you install and should tell you if the installation file is bad or not.

Click to expand...

This did enable me to get the file and add it to the exceptions but unsurprisingly Defender still killed it when I tried to run it. Might have to forget it but I will have a look around first to see if there's anything out there from others.

fixer said:

Yes, first thing I did. It is not infected.

Click to expand...

When this started, 8am yesterday morning, very few AV sites showed it as a PUP. Rather different today though the vast majority, including many majors like BitDefender, say it's clean.

One of the reasons I do not run AV, 99% time it marks legitimate files as a virus a 1% of the time it allows malware to run free.
It seems that WiseCare is on the blocklist now, bad AVs even named it personally, like Malwarebytes/ESET and they shared it.