FreeFileSync Forum

search.php?keywords=CandyOpen Zenju, 28 Jul 2022, 16:40

Whoops. Forgot to search first. Thank you Zenju.
D

Please tell me this is a false positive and not some unexpected pack-in!

File: FreeFileSync\Uninstall\unins000.dat
Detected by: Windows Defender
Threat: PUABundler: Win32/CandyOpen

Hi!!

Windows defender started to detect one of the files from 11.13 & 11.18 version as a potential risk app. I had attached the message from this app

Is there any problem on it?

Thanks in advance

(Heh. Just got the same sort of warning on attempted install of an old version of Foxit Reader, EnterpriseFoxitReader545.0114_enu.msi, onto a Win10 system. [I don't really know Win10, & its message & antivirus or whatever it is, is beyond my capabilities, so I just stuck the current version of Foxit ...

https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=PUA:Win32/CandyOpen
It's basically a warning for users that have ZERO idea what they are doing, like with torrent clients and video rippers.

There is no such code there (CandyOpen). MS Defender is making it up. :>
unins000.dat is part of Inno Setup.

When I upgraded my FFS version to 11.14 this morning, Windows Defender (Win 10) complained about potentially dangerous code in uninstall.exe:
What is this piece of code actually needed for?