codex - 💡(How to fix) Fix Rider Codex - windows defender - trojan Trojan:Script/Wacatac.F!ml [1 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
openai/codex#20151Fetched 2026-04-30 06:33:08
View on GitHub
Comments
0
Participants
1
Timeline
4
Reactions
0
Participants
Timeline (top)
labeled ×3cross-referenced ×1

Error Message

"Failed to initialize ACP session. Error: Codex process has exited with code 1"

Root Cause

latest can't see because it is is quaranteened by defender but the latest as of today

RAW_BUFFERClick to expand / collapse

What version of the IDE extension are you using?

latest can't see because it is is quaranteened by defender but the latest as of today

What subscription do you have?

Pro

Which IDE are you using?

Rider 2026.1.1

What platform is your computer?

windows

What issue are you seeing?

Windows Defender recognizes the exe file codex-x86_64-pc-windows-msvc.exe located under AppData\Local\JetBrains\Rider2026.1\aia\codex\bin\codex-x86_64-pc-windows-msvc.exe as "Trojan:Script/Wacatac.F!ml". Every time I install the plugin in rider the defender pops up with the same message.

What steps can reproduce the bug?

rename/delete the folder ...\AppData\Local\JetBrains\Rider2026.1\aia\codex
open rider -> open the AI chat window - >select codes (if not ylready sselected) -> type in a message and hit return codex installs and shows fail message

"Failed to initialize ACP session. Error: Codex process has exited with code 1"

What is the expected behavior?

No response

Additional information

I already updated the signatures for Defender with either "Update-MpSignature" or manually but no success.

extent analysis

TL;DR

The issue is likely due to Windows Defender falsely flagging the codex-x86_64-pc-windows-msvc.exe file as a Trojan, causing the Codex process to exit with code 1.

Guidance

  • Verify that the codex-x86_64-pc-windows-msvc.exe file is not actually malicious by checking its digital signature and verifying it with the JetBrains team.
  • Try adding an exclusion to Windows Defender for the AppData\Local\JetBrains\Rider2026.1\aia\codex\bin directory to prevent it from scanning the file.
  • Check if there are any updates available for the Codex plugin or Rider IDE that may resolve the issue.
  • Consider submitting a false positive report to Microsoft for the Trojan:Script/Wacatac.F!ml detection.

Example

No code snippet is provided as this issue is related to a false positive detection by Windows Defender.

Notes

The issue may be specific to the user's environment or Windows Defender configuration. The provided steps to reproduce the bug may not work for everyone.

Recommendation

Apply workaround: Add an exclusion to Windows Defender for the AppData\Local\JetBrains\Rider2026.1\aia\codex\bin directory, as this is a more immediate solution to the problem.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

codex - 💡(How to fix) Fix Rider Codex - windows defender - trojan Trojan:Script/Wacatac.F!ml [1 participants]