WeChat

[Bill_Cox]

Why is Malwarebytes (Premium) blocking my WeChat installation?

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes 3 Help forum.

 

If you are having technical issues with our Windows product, please do the following: 

Spoiler

If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

1. Download Malwarebytes Support Tool
2. Once the file is downloaded, open your Downloads folder/location of the downloaded file
3. Double-click mb-support-X.X.X.XXXX.exe to run the program
   • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
4. Place a checkmark next to Accept License Agreement and click Next
5. You will be presented with a page stating, "Get Started!"
6. Click the Advanced tab on the left column
   
7. Click the Gather Logs button
   
8. A progress bar will appear and the program will proceed with getting logs from your computer
   
9. Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. Click OK
10. Please attach the file in your next reply. Before submitting your reply, be sure to enable "Notify me of replies" like so:
       

Click "Reveal Hidden Contents" below for details on how to attach a file:
 

Spoiler

To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.

 

One of our experts will be able to assist you shortly.

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

• Renewals
• Refunds (including double billing)
• Cancellations
• Update Billing Info
• Multiple Transactions
• Consumer Purchases
• Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/community/consumer/pages/contact-us to get help

If you need help looking up your license details, please head here: https://support.malwarebytes.com/docs/DOC-1264 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

 

[exile360]

Greetings,

What alert/notification or error(s) are you seeing from Malwarebytes when you attempt to install it?  Also, please do the following so that we may take a closer look at what is going on with your Malwarebytes installation:

1. Download and run the Malwarebytes Support Tool
2. Accept the EULA and click Advanced tab on the left (not Start Repair)
3. Click the Gather Logs button, and once it completes, attach the zip file it creates on your desktop to your next reply
   

 

Thanks

[Bill_Cox]

Please find the requested logs attached to this message.

mbst-grab-results.zip

[AdvancedSetup]

Hello @Bill_Cox

Can you please zip and upload that WeChat program installer.  The reason it was blocked was due to the installer it uses Adware.InstallCore

Did you rename the program? From the vendor it has a different name.

Vendor: WeChat_C1018.exe
Your download: WeChat_C1018_0893416720.exe

The vendor download is not detected on my system. A check on VirusTotal shows that 2/66 detect the installer
https://www.virustotal.com/gui/file/396ae997ec1bdb9ef781d269e2a8ca48b1fdb233be84c66057e0cbcdb461accb/detection

Where did you download your version of the file?

Thanks

Ron

 

Edited August 20, 2019 by AdvancedSetup
updated information

[Bill_Cox]

Hi Ron

Thanks for your message.  I've sent two notes to you but must have used a wrong link, so they bounced.  Anyway, this is what I wrote:

 -------------------

I searched for the WeChat installer using Bing.  I searched for “WeChat for Windows 10 64 bit.

At the top of the list there was the Tencent Inc link.  However, when I clicked it I got a plain page with ‘Not Found’ in small text on the top right-hand corner.

So I looked further down and I actually tried a couple of the links. 

The first was

https://wechat-for-windows-10.en.softonic.com

 

The link appeared to work and the download appeared to start OK, but when I went to the download directory and looked for the installer, the file I’d set up was empty.

So I then tried the link under “WeChat for PC Windows 10 (64/32 bit) 2019 – Latest Version”,

which was

https://windowsprores.com/wechat-for-pc-windows-10-64-32bit-2019-latest-version

 

This downloaded OK, but when I went to the directory to click on the installer, Malwarebytes identified it as being infected in some way (I can’t remember the message now, it was only on for a second) and then moved the installer to quarantine, so the directory was empty again.

----------------

OK, I had another try.  This time I went for the ‘official’ WeChat download page, and although it majored on Android or iPhone (which I had seen before, but thought that didn’t address the PC version), I noticed that there were some smaller icons under the two major ones and one of those related to ‘PC’.  So I clicked on that and got the download, and it was WeChat_C1018.exe as you’d indicated.  So I saved that to my Downloads file and then ran it, and it has installed just fine.

So, thanks very much for sorting me out.  What I’d say is that the PC version of WeChat isn’t so easy to spot on the main web page and evidently a bunch of pirates have realized that and hence they’re catching the unwary – such as me.  If you don’t know what the official file name is it’s hard to know if you’ve been palmed off with something else.

-----------------

Thanks very much for your help.  I think we're all done.

Regards

Bill

Edited August 21, 2019 by AdvancedSetup
Removed live hyperlinks

[AdvancedSetup]

Thanks for the update Bill, that makes more sense now. Those were not false positive detections.

Yes, the official website has downloads for 3 different versions as well as links for smart phones

https://www.wechat.com/en

 

 

Unfortunately most if not all downloads from Softonic are wrapped in their own installer that can add different types of marketing programs or functions.

 

A bit off-topic but you may find the following information useful for helping to keep your computer and data safe.

 

 

Let's get real. If you're not backing up your data and you're still using Google Chrome then you're just not serious about Privacy, Safety, and protecting your data. Malwarebytes is a fantastic program but you still need to back up your data and you still need to block scripts and Ads in your browser. 
If you're still using Google Chrome I would highly suggest you consider using Firefox instead. For more advanced users you might consider installing NoScript as well (it does have a higher learning curve though)

Help Secure your browsers
 
Please install uBlock Origin for your browsers to better protect your system

FireFox, Chrome, Opera , Safari, Microsoft Edge
AdBlock for Internet Explorer
How to use uBlock Origin to protect your online privacy and security | uBlock Origin tutorial 2018

This video tutorial above explains how to use uBlock Origin in advanced user mode and all the advanced settings to protect your online privacy and help prevent unwanted sites from changing your browser settings

Delete Cookies Automatically

Cookie AutoDelete plugin
Chrome  | Firefox 

Browser push notifications: a feature asking to be abused
HTTPS Everywhere
NOTHING TO HIDE documentary

Review your email and Office choices

Quit Gmail for free encrypted email - Tutanota
Why ProtonMail Is More Secure Than Gmail
LibreOffice - Free and open source office suite

Use Password Management software

Bitwarden
KeePass Password Safe

Encrypted Instant Messenger and Voice Calls

Riot
Signal
Wickr Me

Follow-up Reading

Everything you need to know about cybercrime
10 easy ways to prevent malware infection 
Keep your data backed up

Thank you for choosing Malwarebytes  as your preferred security protection software and tell your friends and family too. We're here to help.

Ron