charmbracelet / charmbracelet/vhs

Windows Defender Quarantines the VHS Executable

Open
#482 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
20.9k
Forks
474
Avg merge
4d 1h
Merged PRs (30d)
2

Description

**Describe the bug**
Windows Defender quarantines the vhs executable.
I have been running VHS fine for a week or so until suddenly PowerShell errored out with the following message:
```powershell
Operation did not complete successfully because the file contains a virus or potentially unwanted software.
```

Sure enough, checking `Windows Defender > Virus and threat protection > Protection History` revealed the executable was quarantined.

**Setup**
- OS [Windows 10]
- Shell [PowerShell]
- Terminal Emulator [Windows Terminal]

**To Reproduce**
I'm not sure how reproducible this issue is. I'd imagine someone running Windows with the same Windows Defender virus definitions as me would eventually run into this issue. Definition version: `1.411.280.0`

**Expected behavior**
VHS should not be quarantined by anti-virus software and the software should remain accessible to the user.

**Screenshots**
![image](https://github.com/charmbracelet/vhs/assets/13340723/c3d39789-1c3a-479a-addb-9413d01a492f)

**Additional Context**
I have submitted a false positive report to Microsoft Security Intelligence.

Contributor guide

Open the contributing guide

Research direction

Start with the reported Windows 10, PowerShell, and Windows Defender behavior, including definition version 1.411.280.0. Review the VHS executable distribution and the submitted Microsoft false-positive report; done means the executable remains accessible without being quarantined on the reported setup.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cli, release
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.