Summary

Description

When manually installing UV by extracting uv-i686-pc-windows-msvc.zip to a custom directory (e.g., D:\Software\uv), Windows Defender detects uvw.exe as a threat (e.g., "Trojan:Script/Phonzy.A!ml") and automatically deletes it. This does not occur when using the official PowerShell install script (irm astral.sh/uv/install.ps1 | iex).

Steps to Reproduce

1. Download uv-i686-pc-windows-msvc.zip from GitHub Releases.
2. Extract to a non-system drive (e.g., D:\Software\uv).
3. Windows Defender quarantines/deletes uvw.exe.

Expected Behavior

The executable should not be flagged as malicious, as it is part of the official release.

Workaround

• Add D:\Software\uv to Windows Defender exclusion list.
• Manually restore uvw.exe from Defender's quarantine.

Suggested Fix

• Sign the Windows binaries with a Microsoft-compatible code signing certificate to reduce false positives.
• Consider submitting uvw.exe to Microsoft for false positive analysis.

Platform

Windows 10 x64

Version

0.8.4

Python version

No response