Someone is this thread mentioned windows defender and I checked with virustotal where there are some others as well. These might all be false positives, even then it still seems wrong to run a random executable from some anon from the internet.

It absolutely is!

I'm going to work on signing the executables for all platforms.

Here's why I don't use Tox, the executable are provided by a bunch of anons and while I could compile the code myself I'm not really bothered, especially because I can't force everybody to do the same. I like my software to have some collateral, usually it's either someone's good name or their company. On the other hand, I can't find anything about you, your records show you live at Pobedi (victory) 112, 84, Moscow. Really?!

Thanks for pointing that out, I need to update whois data. I'm using an 8 year old throwaway name registrar account, because my primary registrar doesn't support .im domains.

I should get the code signing certificate by the end of the next week.