Skip to content

The “WinUtil.Ink” shortcut is detected as “Trojan:Script/Phonzy.B!ml” #2965

@FoxyLoon

Description

@FoxyLoon

Describe the bug

Today, Windows Defender said that the shortcut “WinUtil.Ink” was a trojan.

I've had this shortcut for a long time. To create the shortcut, I ran the tool from the “Launch Command - Stable Branch (Recommended)” on the homepage and then clicked the button to create the shortcut on the desktop.

To Reproduce

Steps to reproduce the behavior:
I haven't reproduced the bug. In fact, I haven't even opened the tool for a long time.

I suppose the closest thing to getting the same result is:

  1. Run the command “irm ‘https://christitus.com/win’ | iex” from the home page;
  2. Go to the “Config” category;
  3. Create the shortcut;
  4. Wait for Windows Defender to detect it as a virus? Or check with Windows Defender? I don't know...

Expected behavior

Not being caught as a Trojan and just existing in the desktop

Screenshots

(Note: The language below is Portuguese)

Quarantined:
imagem

Immediately after quarantine, it was deleted or blocked:
imagem

Additional context

I just opened the computer on a normal day and today it decided that the shortcut is a trojan. I didn't do anything special, it just happened. I didn't even open the shortcut.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions