ChocoButler
ChocoButler copied to clipboard
Kaspersky reports trojan during ChocoButler install
Environment: Fully updated Win10, Chocolately, ChocolatelyGUI

ChocoButler:

Threat: https://threats.kaspersky.com/en/threat/Trojan.Win32.Sdum/

"C:\ProgramData\chocolatey\bin\chocobutler.bat.exe" appears to be some kind of executable wrapping one or more scripts.
Given that I know nothing about Chocolatey internals or ChocoButler scripting, my guess is that this is generated as part of the ChocoButler packaging process or the Chocolatey installation process.
It may not be due to any of the ChocoButler scripts, but I don't know enough to tell for sure.