valinet / valinet/ExplorerPatcher

Windows Defender found trojan "Wacatac.h!ml" during today's update

Open
#4,965 18 comments 5 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
C
Stars
33.9k
Forks
1.4k
PR merge metrics
No merged PRs in 30d

Description

Before reporting your issue
  • I have confirmed that this issue does not happen when ExplorerPatcher is not installed
  • I do not have "register as shell extension" enabled
  • I have tried my best to check existing issues
Repro ExplorerPatcher versions
Image

it's in polish language

Repro Windows Versions

Windows 11 Home 25H2

3rd party tweak software installed

none

Describe the bug

.

Expected outcome

.

Actual outcome

.

Additional info

No response

Crash Dumps

No response

Media

No response

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No source file, test, or entry point is named. Start by reading the 18-comment thread and inspecting the attached Windows Defender result for ExplorerPatcher on Windows 11 Home 25H2; done requires establishing whether the update triggers a detection and documenting or resolving the confirmed cause.

Written by the indexing model from the issue text.

Assessment

Tech stack
c
Domain
operating-systems, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.