Latest 0.21 release registers as virus in Windows defender
Resolved 💬 4 comments Opened Aug 12, 2025 by zagros Closed Aug 28, 2025
What version of Codex is running?
0.21
Which model were you using?
5
What platform is your computer?
Windows 11 Ent
What steps can reproduce the bug?
Uninstall 0.20 and install 0.21 - Windows defender registers the following
What is the expected behavior?
We don't want a virus alert
What do you see instead?
See the screenshot
Additional information
I had the following issue : 👉 https://github.com/openai/codex/issues/2131#event-19076031269
So upgraded to 0.21 that just got released hoping to see it fixed and instead got this virus alert
<img width="553" height="599" alt="Image" src="https://github.com/user-attachments/assets/3107aba8-7bac-40a1-95fc-5ea5e05fa35f" />
4 Comments
Any one submitted this to the MS FP site? https://www.microsoft.com/en-us/wdsi/filesubmission. Typically these things get flagged because the exe isn't signed, or which I suspect, is the rust optimizations. It's worth a shot to submit it as they may be able to change this signature to not affect codex. They will never say why, but it's a good first step.
latest '0.25` didn't throw this errr - I believe this can be closed
NOT fixed. 0.31.0 was just removed by defender
Had it removed on 0.36.0 today by defender on Windows 10. Still not fixed.