# Syncthing.exe is detected as malware by Windows Defender

**URL:** https://forum.syncthing.net/t/syncthing-exe-is-detected-as-malware-by-windows-defender/8580
**Category:** Support
**Created:** [November 11, 2016, 9:12am UTC](https://forum.syncthing.net/t/syncthing-exe-is-detected-as-malware-by-windows-defender/8580 "2016-11-11T09:12:41Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![ingo.d](https://forum.syncthing.net/user_avatar/forum.syncthing.net/ingo.d/32/3111_2.png) [@ingo.d](https://forum.syncthing.net/u/ingo.d)
#### Post date: [November 11, 2016, 9:12am UTC](https://forum.syncthing.net/t/syncthing-exe-is-detected-as-malware-by-windows-defender/8580/1 "2016-11-11T09:12:41Z")

</div>

After scanning the hard disk with the latest version of Windows Defender, it found syncthing.exe (v0.14.10) to be a malware.

 ![](https://forum-uploads.syncthingcdn.net/original/2X/2/2a678cb914d738a65803a27d3f005ab85787bffb.png)

---

<div class="post-metadata">

### Author: ![uok](https://forum.syncthing.net/letter_avatar_proxy/v4/letter/u/e99b99/32.png) [@uok](https://forum.syncthing.net/u/uok)
#### Post date: [November 11, 2016, 9:22am UTC](https://forum.syncthing.net/t/syncthing-exe-is-detected-as-malware-by-windows-defender/8580/2 "2016-11-11T09:22:36Z")

</div>

Did you download the software from trusted sources, e.g. [Github](https://github.com/syncthing/syncthing/releases)? If you download it from there, does Defender also detect it? You can [submit](https://www.microsoft.com/en-us/security/portal/submission/submit.aspx) this file to Microsoft Security for further analysis

---

<div class="post-metadata">

### Author: ![ingo.d](https://forum.syncthing.net/user_avatar/forum.syncthing.net/ingo.d/32/3111_2.png) [@ingo.d](https://forum.syncthing.net/u/ingo.d)
#### Post date: [November 11, 2016, 10:08am UTC](https://forum.syncthing.net/t/syncthing-exe-is-detected-as-malware-by-windows-defender/8580/3 "2016-11-11T10:08:30Z")

</div>

I downloaded it from here: [https://github.com/syncthing/syncthing/releases/download/v0.14.10/syncthing-windows-386-v0.14.10.zip](https://github.com/syncthing/syncthing/releases/download/v0.14.10/syncthing-windows-386-v0.14.10.zip) I will submit it, but it probably doesn’t only affect me, it seems like a general false-positive detection.

---

<div class="post-metadata">

### Author: ![ingo.d](https://forum.syncthing.net/user_avatar/forum.syncthing.net/ingo.d/32/3111_2.png) [@ingo.d](https://forum.syncthing.net/u/ingo.d)
#### Post date: [November 14, 2016, 6:48am UTC](https://forum.syncthing.net/t/syncthing-exe-is-detected-as-malware-by-windows-defender/8580/4 "2016-11-14T06:48:06Z")

</div>

After submitting the sample and updating today to the latest definitions released (1.231.1895.0), I am happy to report that syncthing.exe is no longer detected as malware.

---

<div class="post-metadata">

### Author: ![system](https://forum-uploads.syncthingcdn.net/original/2X/0/0b50e0a202b22ae6a67190759e8c868805b8ed9f.png) [@system](https://forum.syncthing.net/u/system)
#### Post date: [December 14, 2016, 6:58am UTC](https://forum.syncthing.net/t/syncthing-exe-is-detected-as-malware-by-windows-defender/8580/5 "2016-12-14T06:58:20Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.