Jump to content

Recommended Posts

Solution for Wise Registry Cleaner being reported as a PUP and blocked by Antivirus

Recently, we have received some feedback from users. Malwarebytes and his partner AdwCleaner consider some registry key, files, folders of WRC as threats and lead users to remove them. The threat is called PUP.Optional.WiseRC. Once you click the "Remove" button, Wise Registry Cleaner will be removed by them. You need to reinstall Wise Registry Cleaner and register it again (if you are using Pro version).

How to solve PUP.Optional.WiseRC?
If you are using Malwarebytes.
1, Download Wise Registry Cleaner from WiseCleaner Download Center.
If you have downloaded and installed Wise Registry Cleaner, but Malwarebytes quarantined Wise Registry Cleaner files automatically, please open Malwarebytes - History - Quarantine, select Wise Registry Cleaner, and click Restore.
quarantine.png

2, Open Malwarebytes - Settings - Malware Exclusions - Add File, browser and select Wise Registry Cleaner installation file
exclusion-installer.png

3, Install Wise Registry Cleaner, please remember to Uncheck Launch Wise Registry Cleaner.

4, Open Malwarebytes - Settings - Malware Exclusions - Add Folder
exclusion-folder.png
Please run Wise Registry Cleaner, then close it.

5, Open Malwarebytes, click Scan, then UNCHECK the boxes beside all the threats of WRC, then click "Next" and select "Ignore always".
uncheck.png
ignore.png
exclusion.png

6, If you are using Malwarebytes 3, same operation as Malwarebytes 2 to ignore/exclude Wise Registry Cleaner. Uncheck all Wise Registry Cleaner entries -> Click Next button, then you will see a popup window, you need to click Ignore always, then Wise Registry Cleaner will be added to Malwarebytes exclusion list.

m3-1.png

m3-2.png

 

7, Now, all Wise Registry Cleaner files have been added to exclusion list, you can run Wise Registry Cleaner as usual.

If you are using AdwCleaner, you need to uncheck the items of wisecleaner before cleaning.
uncheck2.png


What is PUP.Optional.WiseRC?
PUP is potentially unwanted software. We didn't find the explanation of PUP.Optional.WiseRC on Malwarebytes LABs. The Following is an example of another threat PUP.Optional.Wajam.

PUP.Optional.Wajam and all associated detection names refer to a type of Potentially Unwanted Program (PUP) that is a browser add-on marketed as a “social search.” It injects additional adverts into the websites you visit, making it possible to redirect traffic to potentially malicious websites, as well as collect personal information.


Is Wise Registry Cleaner malware?
No! We Guarantee Wise Registry Cleaner and other WiseCleaner products are NOT Malware/Trojan/Virus... All WiseCleaner Products are Safe!
 

Share this post


Link to post
Share on other sites

The reason of this detection is that the installer offers (or offered?) to download and install spyhunter.
I.e., Malwarebytes antimalware (aka MBAM) warns that the user could install a "Potentially Unwanted Program".
Another way to bypass the problem is to set MBAM to warn user about detection in settings, detection and protection, non-malware protection, PUP (Potentially Unwanted Program) detections:
When a MBAM user will scan (generic) installers with a PUP inside them, MBAM will show a window asking:

 

---------------------------
Remaining threats
---------------------------
What should Malwarebytes do with the unchecked item?
---------------------------
Ignore Once Ignore Always Cancel
---------------------------

 

Screenshot:

immagine.jpg

It is also possible to ignore detections.
 
By the way, I've downloaded and ran current WRC installer and it didn't offer me to download/install spyhunter.
Did you remove it?


If yes, MBAM should remove this detection.

Share this post


Link to post
Share on other sites

And what is the problem in your opinion?

They added WRC after WiseCare added "potentially unwanted programs/applications" in WRC installer (IIRC, also WiseDiskCleaner and WiseFolderHider...?).

 

On my opinion Wise company image woud be severely damaged. The same happens using Norton Power Eraser.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

×