What to do when Windows Defender detects VAIO Care incorrectly

SC2 2018-02-08

2021-08-31

Atom | RSS

このサイトを検索 | Search this site

,Japan

to japanese

Target: VAIO, Windows 10

VAIO Care is removed

Windows Defender included with Windows 10 threatens (undesired software) the registry regarding VAIO Care and VAIO Care.

If you proceed without reading messages carefully, Windows Defender will delete VAIO Care related files including the registry.

You can find notes written by people who encountered similar damage overseas.

As I pressed the delete button without thinking about anything, VAIO Care seems to be at a loss as it does not work.

And I was also deleted ...

Luckily, it was not completely removed, so it was possible to recover using the Windows Defender restore function.

Windows Defender has a button to completely delete quarantined files, but please note that it will not be recoverable if it is run.

False positive message

The false positive messages for Windows Defender are:

Windows Defender Messages

This program makes misleading or false claims about files, registry entries, or other items on your PC.

Category: Potentially Unwanted Software
Details: This program displays a false product message.

List of quarantined files and registry

Post files quarantined by Windows Defender.

Because Windows Defender excludes files that have been restored once from threat assessment, it will not be threat assessment in the next scan.

The following files will be restored to their original state when the restoration process is executed.

Quarantined file

file: C:\Windows\System32\iolorgdf64.exe
file: C:\Program Files\Sony\VAIO Care\Iolo\ioloTools.exe
file: C:\Program Files\Sony\VAIO Care\Iolo\iolorgdf64.exe
file: C:\Program Files\Sony\VAIO Care\Iolo\ioloToolsRes.dll
file: C:\Program Files\Sony\VAIO Care\Iolo\x64\iolorgdf64.exe
file: C:\PROGRA ~ 1\Sony\VAIOCA ~ 1\Iolo\IOLOTO ~ 1.EXE

clsid: HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{2A090754-16A6-407D-883D-A5C0F8CF9992}
clsid: HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{C9480 C5A-8921-4C96-BAB1-3D56AE999B70}

interface: HKLM\SOFTWARE\CLASSES\INTERFACE\{0033698F-1332-4963-99F3-7BC36ABFE13E}
interface: HKLM\SOFTWARE\CLASSES\INTERFACE\{0F8A26B3-2B10-4AAB-A97F-393333B9D5C9}
interface: HKLM\SOFTWARE\CLASSES\INTERFACE\{28637 EB 6-7 F 05-40 C 6-BD 96-1850 B 9 E 8603 F}
interface: HKLM\SOFTWARE\CLASSES\INTERFACE\{2B 721EEB-BDA2-4F5A-AF5E-56213 EB47BFD}
interface: HKLM\SOFTWARE\CLASSES\INTERFACE\{3D74091E-BA60-40EC-A09D-81DF16A7EC12}
interface: HKLM\SOFTWARE\CLASSES\INTERFACE\{40D797FB-1418-4689-8C47-634A8E21E77F}
interface: HKLM\SOFTWARE\CLASSES\INTERFACE\{57EED195-35A3-4425-A3DA-9638746A0F78}
interface: HKLM\SOFTWARE\CLASSES\INTERFACE\{816D649C-F0ED-41FF-956C-6568609F4570}
interface: HKLM\SOFTWARE\CLASSES\INTERFACE\{935 B 5 B 76-ABBD-407 D-B 5 E 1-AAAC ADF 50 45 E 6}

regkey: HKLM\SOFTWARE\CLASSES\INTERFACE\{0033698F-1332-4963-99F3-7BC36ABFE13E}
regkey: HKLM\SOFTWARE\CLASSES\INTERFACE\{0F8A26B3-2B10-4AAB-A97F-393333B9D5C9}
regkey: HKLM\SOFTWARE\CLASSES\INTERFACE\{28637 EB 6-7 F 05-40 C 6-BD 96-1850 B 9 E 8603 F}
regkey: HKLM\SOFTWARE\CLASSES\INTERFACE\{2B 721EEB-BDA2-4F5A-AF5E-56213 EB47BFD}
regkey: HKLM\SOFTWARE\CLASSES\INTERFACE\{3D74091E-BA60-40EC-A09D-81DF16A7EC12}
regkey: HKLM\SOFTWARE\CLASSES\INTERFACE\{40D797FB-1418-4689-8C47-634A8E21E77F}
regkey: HKLM\SOFTWARE\CLASSES\INTERFACE\{57 EED 195-35 A3-4425-A3DA-9638746 A 0 F 78}
regkey: HKLM\SOFTWARE\CLASSES\INTERFACE\{816D649C-F0ED-41FF-956C-6568609F4570}
regkey: HKLM\SOFTWARE\CLASSES\INTERFACE\{935 B 5 B 76-ABBD-407 D-B 5 E 1-AAAC ADF 50 45 E 6}
regkey: HKLM\SOFTWARE\CLASSES\TYPELIB\{1BE26DDD-B9B9-464D-9EDA-7415E53F2B58}\1.1
regkey: HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{2A090754-16A6-407D-883D-A5C0F8CF9992}
regkey: HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{C9480 C5A-8921-4C96-BAB1-3D56AE999B70}
regkey: HKLM\SOFTWARE\Wow6432Node\CLASSES\TYPELIB\{1BE26DDD-B9B9-464D-9EDA-7415E53F2B58}\1.1

typelibversion: HKLM\SOFTWARE\CLASSES\TYPELIB\{1BE26DDD-B9B9-464D-9EDA-7415E53F2B58}\1.1

Afterword

I will reprint the writing of those who are in need of removing VAIO Care.

According to the following information, it seems that you are in a disastrous situation where you can not restore the quarantined files that you deleted.

VAIO CARE FILE REMOVED BY WINDOWS DEFENDER, VAIO CARE NO LONGER WORKS

Google Translate

~ ~
Unfortunately, I mistakenly pressed 'Remove' before reading the whole thing. Since that time, VAIO Care will not work.

I tried to restore my computer at an earlier time when I used restore points for only a few days, but I couldn't because I couldn't find the file.

I assume that Windows Defender deleted the above file
~ ~
us.community.sony.com

External link