opencode-windows-x64.zip file contains virus #783

Open
opened 2026-02-16 17:28:16 -05:00 by yindo · 8 comments
Owner

Originally created by @varun86 on GitHub (Jul 17, 2025).

Originally assigned to: @thdxr on GitHub.

while downloading opencode-windows-x64.zip file its detecting a virus in windows 11 from firewall ,please have a look.

Originally created by @varun86 on GitHub (Jul 17, 2025). Originally assigned to: @thdxr on GitHub. while downloading opencode-windows-x64.zip file its detecting a virus in windows 11 from firewall ,please have a look.
yindo added the windowshelp-wanted labels 2026-02-16 17:28:16 -05:00
Author
Owner

@ejarmand commented on GitHub (Jul 17, 2025):

Hi Varun, I recommend searching issues before opening a new one. There are relevant discussions in issue 885

It does seem like version 0.38 has had this issue resolved, according to this comment in issue 631.

@ejarmand commented on GitHub (Jul 17, 2025): Hi Varun, I recommend searching issues before opening a new one. There are relevant discussions in issue [885](https://github.com/sst/opencode/issues/885) It does seem like version 0.38 has had this issue resolved, according to [this comment in issue 631](https://github.com/sst/opencode/issues/631#issuecomment-3074459348).
Author
Owner

@varun86 commented on GitHub (Jul 18, 2025):

Thanks Ethan for pointing that out , i was able to download from version 0.38 .but its still there are issues as already discussed in previous threads ,so you have anyone success with that let me know or please try yourself ,would love to see its working in windows 11.

@varun86 commented on GitHub (Jul 18, 2025): Thanks Ethan for pointing that out , i was able to download from version 0.38 .but its still there are issues as already discussed in previous threads ,so you have anyone success with that let me know or please try yourself ,would love to see its working in windows 11.
Author
Owner

@albertso commented on GitHub (Jul 26, 2025):

I just downloaded the latest (v0.3.78) opencode-windows-x64.zip from github releases and windows detected it contains a virus.

Image
@albertso commented on GitHub (Jul 26, 2025): I just downloaded the latest (v0.3.78) opencode-windows-x64.zip from github releases and windows detected it contains a virus. <img width="325" height="165" alt="Image" src="https://github.com/user-attachments/assets/aa20c5c8-281f-4848-83df-7af9e4df16bf" />
Author
Owner

@Slach commented on GitHub (Jul 26, 2025):

@albertso looks weird, virus total don't see this file as virus
https://www.virustotal.com/gui/url/3be28bdaf857e07850a1c67a19d677edefe04850231d96da350bdad23b1d8dd7?nocache=1

@Slach commented on GitHub (Jul 26, 2025): @albertso looks weird, virus total don't see this file as virus https://www.virustotal.com/gui/url/3be28bdaf857e07850a1c67a19d677edefe04850231d96da350bdad23b1d8dd7?nocache=1
Author
Owner

@abdidaudpropel commented on GitHub (Aug 6, 2025):

I can confirm getting virus warnings on Windows Defender and AVG. This could negatively affect the adoption of this great tool. Whoever created the exe might already be affected by a virus. It's best to remove this file and encourage people in the docs to build from the source.

@abdidaudpropel commented on GitHub (Aug 6, 2025): I can confirm getting virus warnings on Windows Defender and AVG. This could negatively affect the adoption of this great tool. Whoever created the exe might already be affected by a virus. It's best to remove this file and encourage people in the docs to build from the source.
Author
Owner

@Haadka commented on GitHub (Aug 7, 2025):

Hi! 👋

I've reproduced this issue running the app locally on Windows and can confirm the antivirus blocking behavior described here. The IDPHELIJ.PSE46 - Command line detection error causes opencode to be blocked/deleted, preventing browser opening during authentication.

I've created PR #1673 that resolves this issue by:

  • Adding Windows-specific fallback methods for opening URLs
  • Using multiple Windows-native commands (start, rundll32, explorer) to avoid antivirus triggers
  • Providing helpful error messages when all methods fail
  • Maintaining existing behavior on non-Windows platforms

Testing: I've verified locally that these changes resolve the authentication blocking issue and the fallback methods work correctly when antivirus software interferes with the primary browser opening mechanism.

The fix is ready for review!

@Haadka commented on GitHub (Aug 7, 2025): Hi! 👋 I've reproduced this issue running the app locally on Windows and can confirm the antivirus blocking behavior described here. The `IDPHELIJ.PSE46 - Command line detection` error causes opencode to be blocked/deleted, preventing browser opening during authentication. I've created **PR #1673** that resolves this issue by: - Adding Windows-specific fallback methods for opening URLs - Using multiple Windows-native commands (`start`, `rundll32`, `explorer`) to avoid antivirus triggers - Providing helpful error messages when all methods fail - Maintaining existing behavior on non-Windows platforms **Testing:** I've verified locally that these changes resolve the authentication blocking issue and the fallback methods work correctly when antivirus software interferes with the primary browser opening mechanism. The fix is ready for review!
Author
Owner

@NSPC911 commented on GitHub (Oct 21, 2025):

Image came up yet again this update

the only solution to thiswas manually adding an exclusion to the defender list

@NSPC911 commented on GitHub (Oct 21, 2025): <img width="1356" height="903" alt="Image" src="https://github.com/user-attachments/assets/f33bf975-1f46-4b9e-9866-3eda6985f335" /> came up yet again this update the only solution to thiswas manually adding an exclusion to the defender list
Author
Owner

@t01tr commented on GitHub (Feb 5, 2026):

https://github.com/anomalyco/opencode/releases/tag/v1.1.51 for this version, trojan virus detected on kaspersky

@t01tr commented on GitHub (Feb 5, 2026): https://github.com/anomalyco/opencode/releases/tag/v1.1.51 for this version, trojan virus detected on kaspersky
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#783