[Bug]: How come your app is installed on my computer?

[codekoriko]

The problem

How can you guys explain to me that your app

1. Installed itself on my computer
2. Not listed in my store library
3. Can't be found with a Get-AppxPackage

I had to lose a considerable amount of my time investigate who was updating my powershell to the latest version 7.5.0 which is still not supported by Conda.

And your app is not even published under Microsoft Windows?

What version of WAU has the issue?

can't even tell you cause your app is a ghost

What version of Windows are you using (ex. Windows 11 22H2)?

Windows 11 23H2

What version of winget are you using?

1.9.25200

Log information

Additional information

No response

[Weatherlights]

You may ask the device administrator of your company. It is likely that you enrolled (by accident or on purpose) your device with your organization and they pushed the application on your device using their Device Management solution. This app is intended to be used on managed devices and therefore it is likely installed by a solution like that.

The only "public" sources for the app is this github page and the Microsoft Store and none of these install the app by "themselves".

[codekoriko]

I have not no Device Management solution, it's of-the-shelf MSI laptop that I use as freelance developer. Could it be linked to KB5050021 update?

• On the Jan 16, I installed the update KB5050021
• On Jan 17 at 9:06AM the computer boots
• 9:07AM Winget-AutoUpdate gets installed

[Weatherlights]

Unlikely :). CUs from Microsoft do not contain any third party software. Can you check the installed apps in the control panel what is actually installed (and when).

But just to be clear: There is no shady source I use to deploy apps but I am just curious what happend :).

[codekoriko]

As I said in my first message it showed up nowhere (control panel, Get-AppxPackage, App store).

It's only after clicking on the link 'View in store' on the Winget-AutoUpdate-aaS page that I could see that it's indeed installed but with the button greyed-out. It's that last part that made me think it was a Microsoft protected package. (sorry if the tones of my first message was a bit rude but I was a bit fed up)

Since then I saw it listed by winget which is how I installed must of my software this days.

May be I installed by mistake mistyping something? 🤔

i recently did an upgrade --all

winget upgrade --all --accept-package-agreements --accept-source-agreements --include-unknown

[Weatherlights]

This is how it is looking on my end. My setup usually leaves a trace :).

[codekoriko]

Nope didn't had that for sure. And I wouldn't have run an .msi file by "accident" may be a winget install Winget-AutoUpdate a little less likely but both scenario don't match with the fact that it got installed less then a minute after the first boot on that day.

[Weatherlights]

I see but then you are wrong here anyhow since without that app installed it is not the app from this project.

[codekoriko]

Actually I looked at the wrong location it was not listed on Apps > Installed apps but it was indeed listed on Control Panel\All Control Panel Items\Programs and Features and I could uninstall it.

The package you forked Romanitho.Winget-AutoUpdate was also installed I had to remove with:

winget remove --id Romanitho.Winget-AutoUpdate

It remains a mystery how both app got there