Need to research: Nirlauncher v1.23.42 to 1.23.43 upgrade through Chocolatey fails with “Operation did not complete successfully because the file contains a virus or potentially unwanted software.”
Posted by jpluimers on 2021/04/23
I had a curious error despite the build not having any failures on VirusTotal:
You have nirlauncher v1.23.42 installed. Version 1.23.43 is available based on your source(s). nirlauncher not upgraded. An error occurred during installation: Operation did not complete successfully because the file contains a virus or potentially unwanted software. nirlauncher package files upgrade completed. Performing other installation steps. The upgrade of nirlauncher was NOT successful. nirlauncher not upgraded. An error occurred during installation: Operation did not complete successfully because the file contains a virus or potentially unwanted software.choco upgrade throwing virus error during nirsoft 1.23.43 update
When upgrading, this briefly is visible in the Windows Security view “Virus & thread protection”:
[Archive.is] “HackTool:Win32/Passview!MSR” threat explained very thinly by Microsoft as [Archive.is] HackTool:Win32/Passview!MSR.
So I need to figure out a few things before I can upgrade Nirsoft:
- Where choco upgrade downloads temporary files
- Where these temporary files store their intermediate and final files during installation
- How to temporarily exclude the locations of 1. and 2 in Microsoft Defender.
–jeroen
The Wiert Corner - irregular stream of stuff 
Leave a comment