[BUG] Cannot install because AntiVirus blocks registry access

[treysis]

Please confirm these before moving forward

• I have searched for my issue and have not found a work-in-progress/duplicate/resolved issue.
• I have tested that this issue has not been fixed in the latest (beta or stable) release.
• I have checked the FAQ section for solutions.
• This issue is about a bug (if it is not, please use the correct template).

UniGetUI Version

3.3.6

Windows version, edition, and architecture

Windows 11 Pro 26100.4349

Describe your issue

The installer requires writing to the HKCU autorun registry key. However, many antivirus solutions block access to this key, and if you're not admin you cannot do much about it.

Maybe don't try to enable auto-startup by default to circumvent this issue?

Steps to reproduce the issue

No response

UniGetUI Log

Log is on computer, not smartphone.

Error: RegSetValueEx schlug fehl; Code 5.
Zugriff verweigert.

Package Managers Logs

Log on computer, don't have access to the log on the smartphone.

Relevant information

No response

Screenshots and videos

No response

[marticliment]

Which AV are you using?

[treysis]

Trellix (I believe former McAffee). Not me, but my employer forces this on us.

[marticliment]

Can you please report a false positive? I will still try to get this fixed, but sometimes it is hard with AVs

[treysis]

It's not a false positive. The security settings just prevent apps to create new autostart entries (to prevent malware from running automatically each startup).

The installer just shouldn't fail hard if it can't set the autostart entry in registry. I think it should fallback to installation without autostart instead of aborting.

[marticliment]

In this case, you can disable autostart on the installer, as explained here: https://github.com/marticliment/UniGetUI/blob/main/cli-arguments.md#installer-command-line-parameters

[treysis]

Ah, good, that helps. I couldn't find this before.

However, I still think this shouldn't break the installation. Not sure how much control Inno setup provides.

Or, just don't have autostart as default and ask users after first run of Unigetui?

[treysis]

Maybe adjust the innoSetup script to contain the "noerror" flag:

Flags

This parameter is a set of extra options. Multiple options may be used by separating them by spaces. The following options are supported:
...
noerror
Don't display an error message if Setup fails to create the key or value for any reason.

[treysis]

Just an addition to complete some information:

The /NoRunOnStartup installer option alone does not solve this. This option will just set the value for the key in HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run' to 03which tells Windows to disable autorun. It will still try to create the other key inHKCU\Software\Microsoft\Windows\CurrentVersion\Run` which fails. My PR fixed that.