Cannot install Chocolatey due to Windows Defender AMSI (Anti-Malware Scan Interfaces) blocking installation - "This script contains malicious content and has been blocked by your antivirus software"

[santhosh-john]

I am using the Licenced version of McAfee AV on my licenced Windows 10 Home Edition. Not sure what is interfering with Chocolatey, but it is not letting me install even being an Administrator.

Please note: I have already followed your documents for setting the ExecutionPolicies and all okay from my end.

Also, attached the error as per the below screengrab: -

[vexx32]

You might want to check your AV settings and make sure they allow signed scripts, at least while you run the installation. I'm not familiar enough with McAfee itself to know exactly where that's at, though.

[santhosh-john]

Okay. I will check the same. The only concern I have is after installing Chocolatey, will it do the same for every software install through its CLI. Also unsure, about being compromising with my System's Security too. So for now, will drop the plan to go ahead with Chocolatey; even though its a great package/concept/thought. Will check and explore WinGet.

[ferventcoder]

I would love to know what it thinks is malicious?

[ferventcoder]

Looks like Windows Defender AMSI - https://evotec.xyz/import-module-this-script-contains-malicious-content-and-has-been-blocked-by-your-antivirus-software/

[ferventcoder]

https://acloud.guru/forums/python-for-beginners/discussion/-MBzMjt-giG46LHJjxwv/chocolatey%20won't%20install

[ferventcoder]

https://superuser.com/q/1503345

[vexx32]

It's possible simple Invoke-Expression / iex usage is enough to trigger Defender at this point tbh. 🤔

[TanishqPal]

Hi! I was also facing the same problem but I was able to install chocolatey by opening McAfee app and disabling Real Time scanning and Firewall

[navaneethavarier]

@TanishqPal Thanks! I was also facing the same issue and now it is working fine!

[santhosh-john]

@TanishqPal, @navaneethavarier: There is no point using Antivirus then! Though I know this works, it is not what is expected to be solution. Thanks!

[TanishqPal]

Can you please close this issue ?

[pauby]

@TanishqPal The issue is not yet resolved, so we should keep it open.

[Liegia]

you have to re launch the shell after disabling real-time scan and firewall for the install to work if you have McAffe

[santhosh-john]

@Liegia: This isn't a solution! There should be a way like we usually have with other programs.

@ferventcoder: How is this an invalid issue (as per the marked label)?

[pauby]

@nimpossible The issue is invalid as the problem lies with McAfee and not Chocolatey.

And with all due respect, if the solution @Liegia posted works, then it is the solution.

There should be a way like we usually have with other programs.

What did you have in mind?

[pauby]

There has been no response to this so I'm going to go ahead and close it.

[elouem7]

you have to re launch the shell after disabling real-time scan and firewall for the install to work if you have McAffe

THANK YOU

[msharp19]

Run as admin.

[Sdrp2021]

Ty so much guys. I was enable to install chocolatey. I have McAfee and I disable Firewall + Real-Time scan and then I launch PowerShell as admin and it works! Ty ty ty

[rejithnair]

The issue is due to downloading the scripts from URL. I would suggest to download the chocolatey installation script from https://chocolatey.org/install.ps1 to a folder and edit the command

Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object System.Net.WebClient).DownloadString('<full local downloaded path>/install.ps1'))

[SA-Commit]

@TanishqPal Thanks! I was also facing the same issue and now it is working fine!

Thanks a lot, it worked!

[vmj]

The issue is due to downloading the scripts from URL. I would suggest to download the chocolatey installation script from https://chocolatey.org/install.ps1 to a folder and edit the command

Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object System.Net.WebClient).DownloadString('<full local downloaded path>/install.ps1'))

Thanks @rejithnair! This works without tampering with security settings in McAcfee.