VPN solutions under Windows 7

@ThomasMann Were you able to solve the problem?

I am now researching a few providers to see if they support Windows 7 and NordVPN is on my list.

Thank you.

PS: As I research additional providers, I contacted SurfShark over live chat and they gave me an installer which works on Windows 7. So that might be an alternative service.

My two cents.

 

I have been on Private Internet Access for the past 3 years without big problems always using OpenVPN and avoiding Wireguard. My subscription ends in 7 days and PIA's support does not ensure continued compatibility of the legacy 2.3.3 version from August 2021, so no point in me renewing for another 3 years.

I was able to install Surfshark 4.5.0 on Windows 7 x64, and then stopped all services, and replaced with files extracted from the special 5.8.3 setup, and the background service and GUI run. I honestly think the limitations are artificial.

Will be testing after xmas season and see. Will be updating this thread.

Thank you @ThomasMann

 

Now on their 30 day money-back trial. This may have changed with the Windows Updates or their client. What I noticed is the only way to enter my account is "Login with Google" or "Login with Code". Login with account credentials does not work within their application.

Latest installers - Insert https:// before the links: - Edit: Dec 29 20:28 GMT

Spoiler

- 4.5.0 (Official - Older OSes like Windows 7 and 8.1 - OpenVPN):
downloads.surfshark.com/windows/legacy/latest/SurfsharkSetup.exe
- 4.11.3 (Beta? - Older OSes like Windows 7 and 8.1 - WireGuard):
downloads2.surfshark.com/windows/stable/4.11.3/SurfsharkSetup.exe
- 5.8.3 (Windows 10 x86):
downloads2.surfshark.com/windows/stable/5.8.3/SurfsharkSetup.exe
- 5.12.1 (Windows 10 x64):
downloads.surfshark.com/windows/latest/SurfsharkSetup.exe

Kape Technologies, formerly known as Crossrider, acquired several providers. Some of the notable VPN companies include: ExpressVPN, CyberGhost, Private Internet Access (PIA), and ZenMate.

The Israelis have been taking over the business.

My two cents.

PS:

This works but you must set connection type to WireGuard.
OpenVPN only works with the official 4.5.0, for all newer versions there is some incompatibility.
I also found a special 4.11.3 setup where WireGuard and Windows 7 work together.

The WireGuard leaks network profiles on Windows 7 and 8.1 which is bad, so I reverted to v4.5.0 with OpenVPN on Windows 8.1 - Edit: Dec 31 18:36 GMT

 

You need to login to view this posts content.

 

Some notes I've been taking while testing many SurfShark versions under virtual environments:

• Version 4.5.0 on Windows 7 and 4.11.3 on Windows 8.1 - It is better to install .NET Framework 4.8 and to reboot before running the SurfShark's setup (OpenVPN works on both);
• Versions 4.5.0 and 4.11.3 bundle really old OpenSSL and OpenVPN binaries dated from 2018 and 2019, despite being digitally signed in 2022 and 2023, respectively;
• Notably, Private Internet Access, a competitor, has blocked these outdated OpenSSL and OpenVPN versions from connecting to their network due to security concerns;
• WireGuard on versions 4.11.3 (supported) and 5.8.3 (installed via workaround) both leak Network Profiles on Windows 8.1 ESU when disconnecting;
• Upgrading from 4.11.3 to 5.8.3 on Windows 10 LTSC 2019 results in a lost session, requiring a re-login using the code option;
• Versions 5.8.3 and 5.12.1 do not install the OpenVPN TAP driver on Windows 10 LTSC 2019 - a supported operating system!
• Version 5.12.1 does not leak WireGuard network profiles on Windows 10 LTSC 2019, but it does so on Windows 8.1 ESU when installed via a workaround.

I believe the behaviour under Windows 7 would be very similar to the one under Windows 8.1 ESU.

My two cents.

PS: - Edit: Dec 31 15:43 GMT

Patching OpenSSL on SurfShark 4.5.0 and 4.11.3

I installed OpenVPN 2.5.10 from the official amd64 distribution (OpenVPN-2.5.10-I601-amd64): openvpn.net/community-downloads

Their binaries are at: C:\Program Files\OpenVPN\bin
And copied these to: C:\Program Files (x86)\Surfshark\Resources\x64

Code:

libcrypto-1_1-x64.dll
libssl-1_1-x64.dll
openssl.exe

To allow replacement, disconnect the VPN, exit SurfShark and temporarily stop the Surfshark Service.
OpenVPN still works. Do not replace OpenVPN binary (keep original libpkcs11-helper-1.dll as well). Then it will show when you run: openvpn.exe --version

Code:

OpenVPN 2.4.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 30 2019
library versions: OpenSSL 1.1.1w  11 Sep 2023, LZO 2.10

 

Be aware that the installer needs to be executed while connected to the internet. Ultimately look in the Task Manager if the setup is doing something. You may need to use the arguments: /exebasicui /exenoupdates

And yes, it installs that update on Windows 7. It shouldn't do anything bad, as the servicing stack is clever enough to only replace outdated components: catalog.update.microsoft.com/Search.aspx?q=KB3033929

My two cents.

PS - Correct! OpenVPN by Surfshark is slow on Windows 7 - it could be their TAP network driver. - Edit: Dec 31 19:19 GMT

• Windows 7 - OpenVPN: Slow; Wireguard: Bug.
• Windows 8.1 - OpenVPN: OK; Wireguard: Bug.
• Windows 10 LTSC 2019 - OpenVPN okay (using v4.11.3); WireGuard the fastest (either v4 or v5).

 

Download link for version 4.12.0 (They locked it for Windows 10, but can be installed via workaround below):
downloads2.surfshark.com/windows/stable/4.12.0/SurfsharkSetup.exe

On Windows 7 updated to at least 2020 and with .NET Framework 4.8 - Important: Disable Aero as it causes problems with SurfShark's app.

1. Install version 4.5.0 by running the setup with the following arguments via cmd prompt:
/exebasicui /exenoupdates /noprereqs

2. Install version 4.11.3 by running the setup with the following arguments via cmd prompt:
/exebasicui /exenoupdates /noprereqs

3. Run version 4.12.0 setup, to unpack it, with the following argument via cmd prompt:
/extract

4. Go on the new folder "2240B10"

Delete contents of C:\Program Files (x86)\Surfshark
Replace with contents of "2240B10"

Note: WireGuard leaks network profiles on Windows 7, but you can clean them via the Windows Network and Sharing Center.
When you set the network as Public, you can click on the garden bench to manage all network profiles (while on 8.1 one must use registry editor as Microsoft removed that option).

The speed of OpenVPN UDP on Windows 7 is slow as snail / OpenVPN TCP is just slow / WireGuard is OK.

My two cents.

PS: - Edit: Jan 01 18:52 GMT

• Under no circumstance try this using version 5.12.1 on Windows 7 - It will leak memory (bug on legacy systems) which why they blocked the installation;
• Disabling NoBorders and using Multi-Hop with Fastest location as entry point sometimes fixes the speed problems of OpenVPN UDP on Windows 7.

I crafted this little batch for running the setup with custom arguments:

Spoiler

Code:

@echo off

IF "%~1"=="" (
    goto USAGE
)

"%~1" /extract
"%~1" /exebasicui /exenoupdates /noprereqs
goto :EOF


:USAGE
@echo.
echo Please specify the path to setup
GOTO :EOF

To use this script, you would save it to a file (e.g., install.bat) and then run it from the command line, providing the path to the setup executable as an argument. For example:
install.bat C:\Path\To\Setup.exe
This would run the setup executable with the specified options.
Tip: If you drag and drop the setup executable onto batch script file, the script will then run with the setup executable as the argument, and perform the installation as specified in the script.

 

AirVPN's pricing is slightly higher. According to their website: "You are not allowed to access AirVPN services if you are a resident of Italy".

Surfshark has a larger server network with servers in 100 countries, while Private Internet Access (PIA) has servers in 84 countries, and AirVPN has servers in 23 countries. Please note that this list is not exhaustive, and the number of countries may change over time.

Surfshark's security features are not as robust as some of its competitors, and its jurisdiction in the Netherlands may be a concern for certain individuals.

Some users have reported issues with PIA's customer support. There have been rumors and allegations about PIA being connected to the Mossad via Kape Technologies, which owns several other VPN services, including: CyberGhost VPN, ZenMate VPN, and ExpressVPN.

Then there are services owned by Avast, such as: AVG Secure VPN (formerly AVG VPN), HMA VPN (HideMyAss VPN), and Avast SecureLine VPN.

So, while this doesn't necessarily mean that Avast has connections with the Mossad, some speculate that the Czech Republic's friendly relations with Israel could facilitate collaboration between Czech companies, including Avast, and Israeli government agencies.

My two cents.

 

I had the same with PIA. Today it happened with Surfshark after many hours connected. Maybe they are restarting the VPN Server and that breaks the TAP Interface.

I like to stream TV and access other geo-located services so the number of and what countries is a factor for me.