That's what I read about Open Candy, it's sort of an adware thing. I did read an article about it, it confirmed this.
http://www.opencandy.com/faqs/#false-adware
The times that I saw the red flag, there was a warning about an IP address (or URL) that I was going to. I still use SIW, although it's not perfect either, it reports that I run DirectX 9, when I'm running DirectX 11. This, I verified by typing "dxdiag" into the Start Menu, and viewing the info.
It could be that the AV is interfering with SIW. It also interferes with the installation of Unlocker.
Still, the fact that MSE is intercepting something, is signs that it's doing it's job. Most AV's have a false positive every now & then. MSE has a large following too, this will make for an even more powerful solution as time passes, and more bad code is discovered.
More than likely, if it weren't for that very nasty incident that happened to me, I'd still be running MSE. I still do run part of the app in Windows Defender, it does a quick auto scan nightly.
Cat