zen-browser
Windows AV blocking opening zen.exe due to virus/trojan found in the executable.
virus detection websites dont detect anything so I dont know why is windows AV complaining...
Update: Just tried again without adding an exception and it works flawlessly. TLDR: Windows is weird.
No worries! Found it on Reddit and was actually very impressed. I have my own browser but I'm not forking it off of anything, so it's cool to see an indie browser thriving like this!
In the last 30 minutes, while I was accessing a site, using version 1.0.0-a.29 (64-bit), Windows Defender terminated the App and deleted the core executable.
Same happened to me. Admittedly my Defender is very weird and Windows Security crashes when I try to open it, so I can't open the UI to add exclusions or inspect things that way, but a.28 works
It happened to me too, mine Zen was flagged by Kaspersky when I tried to import data from another browser.
Windows 11 Version 10.0.22631 Build 22631
Zen was installed directly from the website. https://www.zen-browser.app/
Windows Defender Picked it up as soon as I opened Zen.exe
Trojan Name = "Wacatac.B!ml"
I dont want to be excluding something with that name, a quick google search will show you this is a popular one.
I have the same problem, first the core executable was deleted and then a can't download the installer :/
Maybe it is an issue that will fade once Zen gets a signature, but as it stands, its normal operations are being flagged as Malware/Trojan like. I think I'll look into Zen again once it gets a little less alpha or beta-ish.
The Generic Version does not pick up as a Trojan. It's just the Optimized Version.
Virustotal is also showing it as some trojan script. Are all of these just false positives?
Check this information: https://virustotal.readme.io/docs/false-positive
and try also analyzing the file in other places like:
https://internxt.com/virus-scanner
https://opentip.kaspersky.com/
Exactly the same problem as others are having. Also the installer is detected as PUA:Win32/Packunwan. Idk but I'm not satisfied with the answer "Windows is weird". I guess we're going to wait until this exe and thing are going to be signed and stuff. Peace.
Same issue here, it worked just fine when I installed it on my desktop but my laptop refuses installing it.
Just wanted to report that this is still happening. System: Windows 11 Pro 22H2 Build: 22621.3880
I also get this same trojan script, this made me uninstall zen immediately
Could this maybe have a connection to the new windows defender update? 1.0.0-a.29 was released 2 days ago, but this problem only started about 9 hours ago.
EDIT: The latest update I've installed (defender version 1.417.317.0), doesn't include anything about Trojan:Script/Wacatac.B!ml.
Just tried to install the Zen browser on a Windows 10 and it blocks it claiming that there's a "PUA:Win32/Packunwan" virus
I am on Win 10 Pro, and after the core executable was annexed, I attempted to uninstall. The uninstall would not function, which did surprise me. Maybe the missing file was causing the uninstaller to fail. I just deleted the folder where the application had been stored. Judging from the previous posts on this thread, I will definitely consider carefully before any re-install before a signed binary is available.
Has anyone tried to build it from source to check if the issue still there?
What's the problem exactly? that it's not signed?
That is one of the theories (EDIT: or maybe the only one), but Windows is just very silent and gives no information about the trojan
From my experience as a Windows app developer there are two major things:
- The installer/exe at least should be signed to avoid any issues with SmartScreen. Having an EV certificate helps even more because the reputation in SmartScreen starts higher already.
- AV false positives in MSI files are quite common. Almost every MSI release I make on Windows has one or two false positives in VirusTotal (out of > 70 AV tools). I haven't found a way to prevent or a root cause for those false positives. Depending on the AV tool complaining you can submit/contact the AV vendor with a link to the VirusTotal page and report a false positive.
where do I get the license key though? Im very confused I cant find any docs about it
@mauro-balades what license key are you referring to? Couldn't find any mention of a license in this thread.