TunSafe Forum

Welcome to the TunSafe Community Forum. This is open for discussions related to TunSafe and the WireGuard protocol.

You are not logged in.

#1 2018-04-01 00:20:52

farmwald
Member
Registered: 2018-03-12
Posts: 6

Windows defender blocks TunSafe as a virus.

I'm not sure why, but Windows Defender thinks that TunSafe contains a virus and blocks it.
I certainly hope this isn't true, as I'm using it and am reasonably happy.
Could someone address this issue? I'm sure most of your potential users are currently being blocked.
Mike

Offline

#2 2018-04-04 19:43:29

wiggo
Administrator
Registered: 2018-03-09
Posts: 98

Re: Windows defender blocks TunSafe as a virus.

That is not true, and if your TunSafe.exe still has the Ludvig Strigeus code signature it is not infected by any other virus. I tried the installer on a fresh Win 10 installation and got this message from Windows Defender when running the installer: https://imgur.com/a/mRpIf

Once installed I do not get any other warnings from Windows Defender.

Is this the same message that Windows Defender show you or does it say something else?

Last edited by wiggo (2018-04-04 19:47:24)

Offline

#3 2018-04-05 00:45:59

farmwald
Member
Registered: 2018-03-12
Posts: 6

Re: Windows defender blocks TunSafe as a virus.

No, that's not the message I'm getting.
I just tried it, and Edge still refuses to download TunSafe, with the message "TunSafe-1.0.exe is unsafe to download and was blocked by SmartScreen Filter.". This is the same message I got last time.
If you turn off SmartScreen, and download anyway, then Windows defender removes it a "dangerous" file. I added an exception to Windows Defender and it then it installed with no additional problems.
I also tried downloading with Chrome, and that works fine. Oddly, Windows Defender did not complain either. This is odd. Maybe Defender only deletes TunSafe if its downloaded with Edge?

Offline

#4 2018-04-08 06:00:46

Shiro
Member
Registered: 2018-04-06
Posts: 4

Re: Windows defender blocks TunSafe as a virus.

It's being reported as Trojan:Win32/Spursint.F!cl during Windows Defender scans.

You should report this to Microsoft as a false positive here.

Offline

#5 2018-04-08 19:51:33

MAC123
Member
Registered: 2018-04-08
Posts: 1

Re: Windows defender blocks TunSafe as a virus.

I have the same issue as previous users that TunSafe is being reported as being unsafe by Windows Defender Smartscreen filter. The author is Ludvig Strigeus. Can I suggest that a checksum be provided to verify the download.

Offline

#6 2018-04-29 20:33:10

ludde
Administrator
Registered: 2018-03-09
Posts: 128

Re: Windows defender blocks TunSafe as a virus.

There's already a built in signature check. If Windows displays Ludvig Strigeus then the checksum is correct.

Offline

#7 2018-05-03 22:09:00

Shiro
Member
Registered: 2018-04-06
Posts: 4

Re: Windows defender blocks TunSafe as a virus.

ludde wrote:

There's already a built in signature check. If Windows displays Ludvig Strigeus then the checksum is correct.

That doesn't solve the issue of windows defender false flagging it while in use and quarantining it.

Last edited by Shiro (2018-05-03 22:10:01)

Offline

Board footer

Powered by FluxBB