Creality Print v7.0.0.4127 - Adware:Win32/Tnega Detected in "Remove-Edge.exe" by Windows Defender

I’m trying to download the latest Creality Print version 7.0.0.

(CrealityPrint_7.0.0.4127_Release.exe)

As soon as it’s downloaded to windows, I’m getting a threat detection from Windows security and it’s instantly deleted.

Anyone else?

Well, I see a lot of people. I had posted this in a new thread and it was pulled into here.
Ah yes, yet another Creality issue.

1 Like

This has also been reported as a bug on the “CrealityOfficial” GitHub page…

Creality’s silence here is deafening.

@CREALITY @CREALITYSTORE
You updated your slicer software but something in the software package is not right (see attached screenshot). I am not the only one that is reporting here that security software is flagging Creality Print 7 for security issues. This needs to be fixed ASAP as we should not be subject to download software with security issues. I know there is a way to override the error I am getting, but we should not have to and I would hope that @CREALITY @CREALITYSTORE would provide us with a safe product.

Has anyone noticed a problem with the 7 release for MacOS. I have downloaded on my machine and then scanned it with Avast. So far no indication of any problems. :crossed_fingers:

1 Like

I figured this was just a false positive.

Submitted to virustotal and eset among others dont flag it as dangerous, so I would say its safe.

The name remove_edge indicates it likely makes some changes to microsoft edge webview that interferes with the API in the creality software.

Windows security is indicating to me its classed as a settings modifier, likely disabling some settings in edge webview or something that affects some settings microsoft likely want enabled to track you or send you targets ads. Its funny how it mentions ads, but i highly doubt there is anything to be concerned about here.

Perhaps some adware messes around with such settings also, so is likely why some AV has flagged it perhaps?

Windows 11 is more of a security risk, heres hoping that Creality print is available for Linux someday.

Here is a response I just received (Fri 1/2/2026 8:38 PM EST) from Creality Tech Support:

We’ve confirmed with the R&D team that there’s an EXE file in the software that might be falsely detected.

This EXE file is an open-source application used to resolve issues with webview installation, and it’s generally not executed. The antivirus software is giving it a false positive. We will remove it in the next version.

If you’re concerned, you can wait for the next version. If you still want to use the latest version of the slicing software, you can disable the security center before downloading.

Not happy with this at all. As Gozmon said and I agree, don’t disable your security. That’s number one. Number two, “wait till the next version” is bull. Fix the current one immediately.

3 Likes

Exactly my thought, some apps using edge webview can encounter trouble at times.

Creality support gave me a different URL to download from. That version behaved as you described. Windows security deleted it immediately before I could even unpack the file.

That’s is really bad advice and extremely irresponsible. Never disable your security center unless you are operating in a disposable virtual machine that is completely isolated. I especially would not take security advice from someone who thinks it is O.K. to include an open source library known to trigger virus protection (false or otherwise) I am retired now, but when I managed software groups, using risky open source libraries was a firing offense.

1 Like

Totally agree. And “wait for the next release” is some bull. They should immediately fix the current release.

The odds of me ever purchasing another Creality product is dwindling rapidly.

Do they even read the forum posts? Have you ever seen them respond?

I pointed to this thread in my support ticket. I do not know if support reads them, but I’ve never seen any posts from Creality support here.

1 Like

Seriously? Creality needs to upgrade their R&D team. edge webview is not an issue for an experienced software engineer. Creality is basically confessing that they do not have the software talent needed to write this software. I am guessing that is why they open sourced it. They dont’ appear to have the staff needed to write or support Creality Print.

1 Like

The virus we are discussing is Windows specific. There is another thread where some OSX users report blocked downloads, but all that you read here is windows specific.

There is no need to disable your security software, just add it as an exception.

I work in IT and I deal with all these false positives all the time.

There is no reason not to use an open source library, if anything its a good thing because people can examine the code to evaluate it, i doubt their staff were aware of the issue. Its only a small percentage of antivirus products that even flag this on virustotal when I checked.

If anything, its the antivirus companies that should be stepping up their game to not detect such false positives in the first place.

I dont know all the ins and outs with the specific workaround Creality are trying to address here, but I would say that the majority of apps in the windows store make use of it, and I see many with various issues.

My advice would be for Creality to move away from the webview API in the long term, that being said, i cant complain about the performance of their software, version 7 is a big jump from v5 and seems to perform rather well.

Well, if you want to throw down resume’s, I’m a retired Electrical Engineer with 40+ years of experience managing software teams. The reason you banish software that pulls a virus trigger (false or otherwise) is it indicates bad software design. Even if this was a false positive, the fact that the software engineer did not know how to code with out triggering a virus detection indicates unstable software that will cause chaos in a complex system.

I agree there is no reason to avoid open-source software and I agree that there is value in many eyes viewing the code that you get in an open source environment. However, the lack of specifics that Creality sent to me and PBusardo is void of specifics and really sounds like marketing spin to me. They did not tell us what this open-source software was so that we could do our own research. As wonderful as open-source software and libraries can be, they must be vetted. Since Crealitys e-mail to PBusardo indicated that the R&D team was aware of the fact that this software could trigger a false positive means ether they did know about it and used it anyway or the e-mail to PBusardo was a cover-up. Ether way, this is bad. I’ve blacklisted companies for less. I regret my K2 purchase and will not be buying anything else from this company.

1 Like

Perhaps one of the reasons we have such differing opinions is that I do not consider the Windows store a repository of quality software.

1 Like

That assumes a lot. I was looking through the gethub repositories, trying to find the “open-source” of Remove-Edge.exe. So far no luck. Does anyone know where this open source software came from? All I find on gethub (besides the bug report about Creality Print v7.0.0…) it that there is a library providing the command remove_edge in #C and Rust. There are 158 outstanding issues with this library. Who would use that in release software?

An interesting comment in Creality’s gethub repo:
DigitalWarrior

6 hours ago

Detected: Adware:Win32/Tnega
file: C:\Program Files\Creality\Creality Print 7.0\Remove-Edge.exe

Submitted from Repo to Virus Total at the time of this post.
https://www.virustotal.com/gui/file/4237ebb8cfe72b0d2835c456f91bc1ba59da37573f637f32717a41a3aa7f5c27

Looks like it was introduced 5 days ago by hemiao2023 under Commit 9abfbad
File is located package/runtime/Remove-Edge.exe”

And from Virus total: “22/72 security vendors flagged this file as malicious”

I ran a code search in Creality Print repository and it appears that we are looking at the problematic library that contains the remove_edge command. It is a GUI graphics command unrelated to Windows Edge browser. If you have access to gethub, you can find the C+ code snippets here:

1 Like

Im not sure how a program equates to instability if it gets detected by AV software or do you mean that the AV kicks in and removes the component creating the instability?

Im no dev, but did not think that avoiding AV positives was that much of a problem that devs have to address.

Certain app behaviors that are intentional may be impossible to avoid if the AV flags it.

Wouldn’t surprise me, given that it interacts with webview.

If this is indeed open source, then others working on it should have noticed it i would have thought.

Anyway, according to creality, they dont appear to implement this in every nstallation, it appears its some kind of patch or workaround that’s used in certain instances.

From what they are saying, its used during installation to address installation problems with webview, should a system encounter this. I see the webview package files are also included with this, so that would make sense.

Whether their approach with this patch remains to be seen, but are you suggesting that the creality print code is making calls to this library?

The icon on this app has a grey edge icon, but doesn’t appear to have any publisher listed under properties.

I will take a look on github and see what i can make out.

Edit:

An interesting read here on the reddit, not sure how accurate it is, but it reads:

“It’s a false positive, the remove-edge.exe is included in the installer because some versions of edge break webview (used to code the UI in creality print), you may need to allow it. Remove-edge.exe is a 3rd party tool to allow you to remove edge, then reinstall a version that won’t break the UI. It doesn’t get run at all unless you choose to run it.”

Now i have no idea if this is accurate or not, but if it does indeed remove edge, then i thought it would potentially cause alot of complaints.

Not that too many use edge, but im keen to test this out on my computer since I dont use edge.

The poster also claims here that some versions of edge break webview, again if this is true, this fault lies with Microsoft.

Now I run various tools to block edge on clients computers, but im not aware of any way to fully remove edge entirely (unless its windows 7 or 8)

Perhaps this is used on older systems? I know when I run edge blocker, it has an option to also block webview, I typically leave this enabled as a number of programs these days rely on it.

Edit:

OK, so i found the name of the certificate issuer on the program (shadowWhisperer) and i found the very program here, yes its indeed there to remove edge, presumably for addressing installation issues.

I also see the MS edge install package is included in the creality print installer, so presumably it reinstalls it afterwards.

Etither way, i tried running the tool and doesnt appear to remove edge on my system, it still shows version 143.0.3650.96 and it runs perfectly.

Klopt hier hetzelfde probleem na installatie update eergisteren. Uitgebreide windows scan gedaan ca 7 uur. alles gecontroleerd en de adware is verwijderd door windows 11 securitie. Volgens mij geen verdere actie nodig.