Installer of 2.81 is detected by Windows Defender Smartscreen and weird installation #71784

Closed
opened 2019-11-22 16:34:04 +01:00 by Emmanuel LORANT · 33 comments

System Information
Operating system: Windows 10 x64 Pro
Graphics card: GTX 1060 6Gb

Blender Version
Broken: 2.81 release
Worked: (optional)

Short description of error

It's the first version where it happens. I donwloaded the blender-2.81-windows64.msi for Windows 10 x64 https://www.blender.org/download/, I executed it and Windows Defender Smartcreen warned me as it can be dangerous (it usually does this with the daily builds). I executed it anyway, let all by default as usual and instead
of overriding the previous version, it creates a new folder "Blender 2.81" in Programs/Blender Foundation and I have 2 Blender in Applications & Functionalities of Windows 10.

2 questions :

  • why is it detected by Windows Defender Smartscreen ?
  • is it a new way for the installation to work ?

Exact steps for others to reproduce the error
Based on the default startup or an attached .blend file (as simple as possible).

**System Information** Operating system: Windows 10 x64 Pro Graphics card: GTX 1060 6Gb **Blender Version** Broken: 2.81 release Worked: (optional) **Short description of error** It's the first version where it happens. I donwloaded the blender-2.81-windows64.msi for Windows 10 x64 https://www.blender.org/download/, I executed it and Windows Defender Smartcreen warned me as it can be dangerous (it usually does this with the daily builds). I executed it anyway, let all by default as usual and instead of overriding the previous version, it creates a new folder "Blender 2.81" in Programs/Blender Foundation and I have 2 Blender in Applications & Functionalities of Windows 10. 2 questions : - why is it detected by Windows Defender Smartscreen ? - is it a new way for the installation to work ? **Exact steps for others to reproduce the error** Based on the default startup or an attached .blend file (as simple as possible).

Added subscriber: @EmmanuelLORANT

Added subscriber: @EmmanuelLORANT

#73407 was marked as duplicate of this issue

#73407 was marked as duplicate of this issue

#72649 was marked as duplicate of this issue

#72649 was marked as duplicate of this issue

Added subscriber: @KeithGadberry

Added subscriber: @KeithGadberry

Added subscriber: @AnthonyEdlin

Added subscriber: @AnthonyEdlin

I think once there is data from a bunch of people accepting install past smartscreen warning it will eventually just allow it.

Not sure about installation directory but probably is intended because having multiple versions of blender is pretty common use case.

I think once there is data from a bunch of people accepting install past smartscreen warning it will eventually just allow it. Not sure about installation directory but probably is intended because having multiple versions of blender is pretty common use case.

Added subscriber: @ajlanaltug

Added subscriber: @ajlanaltug

In my case, it wouldn't even allow me to go past it. Had to turn smartscreen off temporarily :-/

In my case, it wouldn't even allow me to go past it. Had to turn smartscreen off temporarily :-/

Ajlan, you can choose "Warn" instead of "Block" in Windows Defender settings so you can execute the file after the warning : https://media.askvg.com/articles/images6/App_Browser_Control_Windows_Defender_Security_Center.png

Anthony, I always use installer and it has always used one directory "Programs/Blender Foundation/Blender".

I tried on another computer and same thing.

Ajlan, you can choose "Warn" instead of "Block" in Windows Defender settings so you can execute the file after the warning : https://media.askvg.com/articles/images6/App_Browser_Control_Windows_Defender_Security_Center.png Anthony, I always use installer and it has always used one directory "Programs/Blender Foundation/Blender". I tried on another computer and same thing.

I understand that previously the installer would replace the last version installed. I think with this release it is intended to be able to keep multiple versions installed. Let me check for commit...

Here is commit that changed behavior: https://developer.blender.org/rB50ad4428ac76705dc28e4cd85272a47118b6a654

Author: Lazydodo <github@lazydodo.com>
Date:   Thu Aug 15 13:43:27 2019 -0600

    Windows/MSI: Rework MSI installer.
    
    The installer always upgraded the last version installed and did not allow for two versions to be installed side by side.
    
    The reworked installer will allow side by side installs
    
    install order:
    
    2.81 -> 2.81a -> 2.82  : Allowed , will result in both 2.82 and 2.81a being installed
    2.82 -> 2.81  -> 2.81a : Allowed , will result in both 2.82 and 2.81a being installed
    2.82 -> 2.81a          : Allowed , will result in both 2.82 and 2.81a being installed
    2.82 -> 2.81a -> 2.81  : Not Allowed, 2.81 will only install if you manually remove 2.81a first.
    
    
    Do note though that this will not apply to any previously issued installers and even for 2.80a this is not something we can fix.
    
    This patch is for landing in 2.81 *only* and should be excluded from any possible 2.80a release.
I understand that previously the installer would replace the last version installed. I think with this release it is intended to be able to keep multiple versions installed. Let me check for commit... Here is commit that changed behavior: https://developer.blender.org/rB50ad4428ac76705dc28e4cd85272a47118b6a654 ``` Author: Lazydodo <github@lazydodo.com> Date: Thu Aug 15 13:43:27 2019 -0600 Windows/MSI: Rework MSI installer. The installer always upgraded the last version installed and did not allow for two versions to be installed side by side. The reworked installer will allow side by side installs install order: 2.81 -> 2.81a -> 2.82 : Allowed , will result in both 2.82 and 2.81a being installed 2.82 -> 2.81 -> 2.81a : Allowed , will result in both 2.82 and 2.81a being installed 2.82 -> 2.81a : Allowed , will result in both 2.82 and 2.81a being installed 2.82 -> 2.81a -> 2.81 : Not Allowed, 2.81 will only install if you manually remove 2.81a first. Do note though that this will not apply to any previously issued installers and even for 2.80a this is not something we can fix. This patch is for landing in 2.81 *only* and should be excluded from any possible 2.80a release. ```

Thanks Anthony for explanation. Strange for the Windows Defender Smartscreen warning as last times, even by installing Blender the day of release, no warning at all.

Thanks Anthony for explanation. Strange for the Windows Defender Smartscreen warning as last times, even by installing Blender the day of release, no warning at all.

Changed status from 'Open' to: 'Archived'

Changed status from 'Open' to: 'Archived'
Anthony Edlin self-assigned this 2019-11-23 17:56:12 +01:00

Closing for now, if many more people have problems with windows defender smartscreen we can reopen.

Closing for now, if many more people have problems with windows defender smartscreen we can reopen.

Added subscriber: @justintaddei

Added subscriber: @justintaddei

I had this problem too.

Windows 10 x64 (version 1903, build 18362.476)

I had this problem too. Windows 10 x64 (version 1903, build 18362.476)

Added subscriber: @RainerWahn

Added subscriber: @RainerWahn

Same for me. Have 2.80 installed wiith Windows 10 1903 : 18362.476. MSI installer for 2.81 is blocked as unknown app

Same for me. Have 2.80 installed wiith Windows 10 1903 : 18362.476. MSI installer for 2.81 is blocked as unknown app

Added subscriber: @srius

Added subscriber: @srius

Um, I used steam to install blender, it didn't give me an error then. THough I did get it when I tried to install through the msi file.

Um, I used steam to install blender, it didn't give me an error then. THough I did get it when I tried to install through the msi file.

Has anyone checked the hash to make sure we're actually getting the blender we think we are? I was lazy and didn't. I'll check it later today if nobody else does first.

Has anyone checked the hash to make sure we're actually getting the blender we think we are? I was lazy and didn't. I'll check it later today if nobody else does first.

In #71784#822653, @justintaddei wrote:
Has anyone checked the hash to make sure we're actually getting the blender we think we are? I was lazy and didn't. I'll check it later today if nobody else does first.

Just did, it checks out. https://i.imgur.com/sGY1JZn.png
I ran the copy I just downloaded and smartscreen blocked it again.

Maybe this issue should be reopened?

> In #71784#822653, @justintaddei wrote: > Has anyone checked the hash to make sure we're actually getting the blender we think we are? I was lazy and didn't. I'll check it later today if nobody else does first. Just did, it checks out. https://i.imgur.com/sGY1JZn.png I ran the copy I just downloaded and smartscreen blocked it again. Maybe this issue should be reopened?
Member

Added subscriber: @LazyDodo

Added subscriber: @LazyDodo
Member

Maybe this issue should be reopened?

it should not, there is nothing we can do on our side about smartscreen except wait for it to have enough data to trust us.

> Maybe this issue should be reopened? it should not, there is nothing we can do on our side about smartscreen except wait for it to have enough data to trust us.

In #71784#822661, @LazyDodo wrote:
it should not, there is nothing we can do on our side about smartscreen except wait for it to have enough data to trust us.

I just tested the installer on my partner's computer, smartscreen stepped in again. There has to be a reason this is an issue when it hasn't been in the past?

Looking under properties of the 2.81 installer there is a Digital Signatures tab which shows a signature from "Stichting Blender Foundation" that the 2.80 installer doesn't have.
This is probably why it's having issues but I don't understand why it's there in the first place. What's "Stichting Blender Foundation"?

Edit: As an American, I had to look up what a Stichting is and realize that the Blender Foundation is headquartered in the Netherlands. Still not sure why the signature is required or what it's not trusted by smartscreen. That seems like an issue that Blender Foundation should be able to remedy with Microsoft.

> In #71784#822661, @LazyDodo wrote: > it should not, there is nothing we can do on our side about smartscreen except wait for it to have enough data to trust us. I just tested the installer on my partner's computer, smartscreen stepped in again. There has to be a reason this is an issue when it hasn't been in the past? Looking under properties of the 2.81 installer there is a Digital Signatures tab which shows a signature from "Stichting Blender Foundation" that the 2.80 installer doesn't have. This is probably why it's having issues but I don't understand why it's there in the first place. ~~What's "Stichting Blender Foundation"?~~ Edit: As an American, I had to look up what a Stichting is and realize that the Blender Foundation is headquartered in the Netherlands. Still not sure why the signature is required or what it's not trusted by smartscreen. That seems like an issue that Blender Foundation should be able to remedy with Microsoft.
Member

Looking under properties of the 2.81 installer there is a Digital Signatures tab which shows a signature from "Stichting Blender Foundation" that the 2.80 installer doesn't have.

but yeah what happened is, we started signing all our code, so people will know the files have not been compromised and stop the 'unknown publisher: scary!' dialogs, but now smartscreen is throwing a fit, since we are a new publisher it has never seen before and will keep warning people until enough "trust is build" and naturally there is no way to check how any of that is going.... so yeah.. awesome system microsoft! top notch! loving it!

What's "Stichting Blender Foundation"?

It's the legal name of the blender foundation.

>Looking under properties of the 2.81 installer there is a Digital Signatures tab which shows a signature from "Stichting Blender Foundation" that the 2.80 installer doesn't have. but yeah what happened is, we started signing all our code, so people will know the files have not been compromised and stop the 'unknown publisher: scary!' dialogs, but now smartscreen is throwing a fit, since we are a new publisher it has never seen before and will keep warning people until enough "trust is build" and naturally there is no way to check how any of that is going.... so yeah.. awesome system microsoft! top notch! loving it! > What's "Stichting Blender Foundation"? It's the legal name of the blender foundation.

Added subscriber: @DrZeldaGlitch

Added subscriber: @DrZeldaGlitch

Added subscriber: @WorkHard_Laugh

Added subscriber: @WorkHard_Laugh

I had the same issue.

But then I went to Microsoft store and downloaded the windows 10 blender app from there and it went through with no problems.

image.png

I had the same issue. But then I went to Microsoft store and downloaded the windows 10 blender app from there and it went through with no problems. ![image.png](https://archive.blender.org/developer/F8292686/image.png)

Added subscriber: @JubberThe3PO

Added subscriber: @JubberThe3PO

Added subscriber: @hotohoto

Added subscriber: @hotohoto

For me, it's the same with 2.82. 😥

For me, it's the same with 2.82. 😥

Added subscriber: @k.pochwala

Added subscriber: @k.pochwala

Yep - happened to me too, 2.82 installer and Windows 10 1809 17763.973

Yep - happened to me too, 2.82 installer and Windows 10 1809 17763.973
Sign in to join this conversation.
No Label
Interest
Alembic
Interest
Animation & Rigging
Interest
Asset Browser
Interest
Asset Browser Project Overview
Interest
Audio
Interest
Automated Testing
Interest
Blender Asset Bundle
Interest
BlendFile
Interest
Collada
Interest
Compatibility
Interest
Compositing
Interest
Core
Interest
Cycles
Interest
Dependency Graph
Interest
Development Management
Interest
EEVEE
Interest
EEVEE & Viewport
Interest
Freestyle
Interest
Geometry Nodes
Interest
Grease Pencil
Interest
ID Management
Interest
Images & Movies
Interest
Import Export
Interest
Line Art
Interest
Masking
Interest
Metal
Interest
Modeling
Interest
Modifiers
Interest
Motion Tracking
Interest
Nodes & Physics
Interest
OpenGL
Interest
Overlay
Interest
Overrides
Interest
Performance
Interest
Physics
Interest
Pipeline, Assets & IO
Interest
Platforms, Builds & Tests
Interest
Python API
Interest
Render & Cycles
Interest
Render Pipeline
Interest
Sculpt, Paint & Texture
Interest
Text Editor
Interest
Translations
Interest
Triaging
Interest
Undo
Interest
USD
Interest
User Interface
Interest
UV Editing
Interest
VFX & Video
Interest
Video Sequencer
Interest
Virtual Reality
Interest
Vulkan
Interest
Wayland
Interest
Workbench
Interest: X11
Legacy
Blender 2.8 Project
Legacy
Milestone 1: Basic, Local Asset Browser
Legacy
OpenGL Error
Meta
Good First Issue
Meta
Papercut
Meta
Retrospective
Meta
Security
Module
Animation & Rigging
Module
Core
Module
Development Management
Module
EEVEE & Viewport
Module
Grease Pencil
Module
Modeling
Module
Nodes & Physics
Module
Pipeline, Assets & IO
Module
Platforms, Builds & Tests
Module
Python API
Module
Render & Cycles
Module
Sculpt, Paint & Texture
Module
Triaging
Module
User Interface
Module
VFX & Video
Platform
FreeBSD
Platform
Linux
Platform
macOS
Platform
Windows
Priority
High
Priority
Low
Priority
Normal
Priority
Unbreak Now!
Status
Archived
Status
Confirmed
Status
Duplicate
Status
Needs Info from Developers
Status
Needs Information from User
Status
Needs Triage
Status
Resolved
Type
Bug
Type
Design
Type
Known Issue
Type
Patch
Type
Report
Type
To Do
No Milestone
No project
No Assignees
13 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: blender/blender#71784
No description provided.