Skip to content

Why antivirus complain about some alienfx tools components?

T-Troll edited this page Jun 27, 2022 · 1 revision

Why it happened?

Being short, Microsoft is not friendly to open-source developers. From Windows 10 release 1907, they require sign for every driver, and it's hard (and not cheap) to obtain (it's a high-grade license cost some hundred dollars every year).
There is no free or cheap way to obtain it.

I need low-level ACPI methods access to control fans and powers, so i use hack-method to load my unsigned driver (working on the top of standard acpi.sys).

Why antivirus complain in this case?

Modern antivirus not only complain about dangerous software, but often complain about "unwanted" (especially Microsoft one). Like game cheats, cracks, etc. This is this case.

Is it dangerous?

This method never used by viruses, but some game cheats share it, so no, it's not dangerous.

Additionally, i share all source code (both for driver and loader) here, so you can check what it's doing and build yourself to be sure.

Can i stop this?

Yes, if you don't plan to use fan control functions and applications.
Just remove kdl.dll, and antivirus stop to complain. But all fan-control functions stop working, so you can also remove hwacc.sys, AlienFan-CLI and AlienFan-GUI as useless. Light control applications continue working after this.

Is it any alternatives?

Yes. At the starting of development, i debug all in Test Mode. I Still can publish driver working in Test Mode, but... This is dangerous - any software can start any kernel driver in case Test Mode enabled!
Also, you should enable it again at any system start (it's a one-time setting).

I know how to solve it the other way!

You are welcome to open issue/contact me in Discord server and discuss!