Romanitho/Winget-AutoUpdate

[Bug]: WAU-Configurator triggering anti-virus products (various)

Quitch opened this issue · 4 comments

The problem

Attempting to open the WAU-Configurator zip on Windows 11 with the latest definition files causes Windows Defender to block it, detecting it as Trojan:AndroidOS/ZkarletFlash.

VirusTotal shows that the following products also detect it as a trojan:

Aracit
BitDefender
Emsisoft
Fortinet
GData
Google
Ikarus
Lionic
MAX
Rising
SentinelOne (Static ML)
Trellix (FireEye)
VIPRE
Zoner

I also replicated this on Windows 10 using the latest definition files.

What version of WAU has the issue?

1.19.1

What version of Windows are you using (ex. Windows 11 22H2)?

11 23H2

What version of winget are you using?

1.7.10661

Log information

No response

Additional information

No response

Yep, same issue here.

This issue is stale because it has been open for 30 days with no activity.

This issue was closed because it has been inactive for 14 days since being marked as stale.

This issue persists. It is still being detected as a Trojan virus (A serious threat) and automatically removed by Microsoft Defender.