Share via

i cannot remove the hereunder unwanted application by Microsoft defender

Adel Tolba 0 Reputation points
2026-06-03T16:21:55.4766667+00:00

User's image

Windows for home | Windows 11 | Security and privacy
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ferdinand Nanalig 30,320 Reputation points Independent Advisor
    2026-06-03T16:56:58.5833333+00:00

    Hi! Let me help you.

    Please follow the steps below on how to scan your machine further.

    Please also try Microsoft Safety Scanner - https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/safety-scanner-download?view=o365-worldwide

    And follow these additional steps.

    Uninstall an unwanted application in Programs and Features.

    Go to Start, type in Control Panel, then go to Programs and then Programs and Features, then go to the list of programs, look for anything unusual or any application that you are not aware of, right-click, then uninstall it.

    Delete Temporary files on Windows 11.

    Tap the Windows Key, then R on your keyboard, in the Run box type in %temp%, then press Enter.

    Once it is up, highlight all then delete, if there is a filé open that can't be deleted, just skip it.

    I hope this helps.

    If the above scanner did not detect any, please use these 3rd party tools.

    Let's try downloading the free version of Malwarebytes, it is a freeware that you can use to scan, detect, and delete viruses like the one you currently have.

    You can download the free version from this link

    https://www.malwarebytes.com/

    Once installed, please make a full scan. You may remove this software once you are done with it.

    You can also try an online malware scanner - https://www.eset.com/int/home/online-scanner/

    URL Disclaimer: Please read.

    Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-06-03T16:22:17.6933333+00:00

    The message indicates Microsoft Defender detected a potentially unwanted application (PUA) PUABundler:Win32/CandyOpen inside an ISO file and cannot fully remove it. To clean it, remove the source files and then rescan.

    Follow these steps on Windows 11:

    1. Uninstall any related app
      1. Select Start > Settings > Apps > Installed apps.
      2. Sort by Install date and look for any app related to the ISO or setup just installed (for example, SolidWorks or any unknown installer/bundler).
      3. Select the app, choose More > Uninstall, and complete the removal.
    2. Delete the infected ISO and extracted files
      1. In File Explorer, browse to the paths shown in the Defender details (for example, the D:\...SolidWorks...ISO and any folders where it was extracted).
      2. Delete the ISO file and any extracted setup folders that contain the flagged CAB file.
      3. Empty the Recycle Bin.
    3. Run a full Microsoft Defender Antivirus scan
      1. Open Windows Security.
      2. Go to Virus & threat protection.
      3. Make sure security intelligence is up to date, then select Scan options > Full scan and run it.
      4. If Defender still shows the same PUA, choose Remove on the Protection History entry.
    4. If removal still fails
      1. Run Microsoft Defender Offline from Windows Security > Virus & threat protection > Scan options > Microsoft Defender Offline scan.
      2. After the offline scan, check Protection History again and remove any remaining items.
      3. If the item persists, submit the file to Microsoft for analysis using the submission link in the alert.
    5. Prevent future unwanted software
      • Download software only from official sources or Microsoft Store.
      • Keep Microsoft Defender Antivirus and Tamper Protection enabled.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.