Update Control Desktop v4.2.2 - unresolved Defender report

Security notice — 2026-10-09: unresolved Defender report. A user reported Trojan:Win32/Sabsik.FL.A!ml (Severe) for a file named Update-Control 4.2.2.exe. The affected copy has not been hash-matched to this release, and no false-positive verdict has been established. Do not run or allow the reported build while this remains unresolved. The historical negative scan below is not clearance. The ZIP and older versions are not verified workarounds.

Read the current notice and containment steps. If Hard Block was applied, stop its separate watchdog and preserve the saved baseline; quarantining the downloaded EXE does not restore Windows Update settings. No Microsoft determination has been obtained.

The assets below are unchanged historical release artifacts. The feature notes describe the preview; they are not an instruction to run it during this investigation.

---

Update Control Desktop 4.2.2 makes the large mode cards selectable and separates choosing a mode from applying it.

Installation guidance is on hold pending resolution of the report above.

• Click anywhere on Store Friendly, Hard Block or Restore, including the heading and description.
• A radio marker and highlighted border show the pending selection. The Current mode panel still shows the saved Windows configuration.
• Use the single action button in the bottom bar to apply. The bar stays visible even in small windows.
• Hard Block shows a confirmation before changing anything; cancel preserves the current configuration.
• Read-only, busy, missing-status and unsupported-edition states explain why Apply is unavailable. Status refreshes preserve your choice.

The service/policy controller is unchanged.

Validation: Windows CI passed on the release commit, including card heading/body/padding hit targets, Apply visibility at normal/minimum sizes, accessibility-provider selection and invocation, no changes on selection/cancel, modal isolation, action routing, package integrity and isolated real Windows service/SYSTEM-task lifecycle tests. Physical input and live update/Store changes on the affected PC were not exercised by these automated tests.

The attached Defender report covers the exact release files and records their hashes and security-intelligence version. It is a point-in-time file scan, not a guarantee of future detections or SmartScreen reputation.

This preview remains unsigned, so unknown-publisher or reputation warnings may appear. Signing guidance.

Updated screenshots and instructions · Troubleshooting