[False Positives] Microsoft Defender

[Belim]

The current version 2.5 of Flyby11 is once again being flagged by Microsoft Defender as a hack tool (“HackTool:Win32/Tnega!MTB”), and Microsoft Defender SmartScreen is completely blocking it as well.

This isn’t new. We've seen this behavior before, but I had hoped Microsoft had relaxed their detection rules. Unfortunately, the official response from Microsoft’s False Positive Submission Center has now arrived, and it confirms that the classification as a “HackTool” is intentional:
"We have determined that the files meet our criteria for malware. At this time the detection will remain in place."

Frankly, this is disappointing. The software is 100% clean and does not exploit any vulnerabilities or hidden backdoors. In fact, the bypass mechanism used relies entirely on open functionality provided by Microsoft itself.

Flyby11 has helped hundreds of thousands of PCs upgrade to Windows 11, and its understandable that its drawn attention. Still, it's frustrating to see a helpful tool treated this way, especially when older versions like 2.4 remain completely unaffected.

You can safely ignore the warning. There's nothing malicious in the software, just a tool that empowers users where Microsofts own restrictions fall short.