Helper service
Windows TUN mode uses a privileged CheezyHelperService that starts Mihomo with the rights needed for the virtual adapter.
Install
Section titled “Install”- NSIS installer — registers and starts the service automatically.
- Portable / dev — click Install helper on Home (UAC prompt).
Service name: CheezyHelperService. Default HTTP control: 127.0.0.1 (app verifies identity before use).
Verify status
Section titled “Verify status”Home footer shows VPN helper: running / installed / not installed and Setup: ready / needs setup.
Core allowlist
Section titled “Core allowlist”The helper only runs Mihomo binaries whose SHA256 matches allowed_core.sha256 beside the helper. The app syncs this on connect and when using Ensure helper.
Build / reinstall fails with “Access denied”
Section titled “Build / reinstall fails with “Access denied””Windows locks the service .exe while the service is Running. The service binPath points at the installed helper binary (often under Program Files or a previous release/win-unpacked path if you ran an unpacked build).
Before rebuilding or overwriting helper files:
sc stop CheezyHelperServiceThen rebuild or reinstall. Start again after install:
sc start CheezyHelperServiceUpgrade
Section titled “Upgrade”The NSIS installer stops, deletes, and recreates the service so the binary path and allowlist stay in sync.