Handling Windows Security false positives
Some antivirus products may flag the proxy core as a potential risk — a common false positive for this class of tools. This guide explains why and what to do.
Why false positives happen
Proxy software intercepts network traffic and creates virtual network adapters — behavioral traits it shares with some malware, so heuristic engines misjudge it. As long as the installer came from the official Releases and its checksum matches, it is safe to use.
Add an exclusion
- Open “Windows Security” → “Virus & threat protection”.
- Go to “Virus & threat protection settings” → “Manage settings”, then scroll to “Exclusions”.
- Click “Add or remove exclusions” → “Add an exclusion” → “Folder”.
- Select the Clash Verge install directory (default: C:\Program Files\Clash Verge).
- If a file was already quarantined, find the entry under “Protection history” and choose “Restore”.