Rider Codex - windows defender - trojan Trojan:Script/Wacatac.F!ml

What version of the IDE extension are you using?

latest can't see because it is is quaranteened by defender but the latest as of today

What subscription do you have?

Pro

Which IDE are you using?

Rider 2026.1.1

What platform is your computer?

windows

What issue are you seeing?

Windows Defender recognizes the exe file codex-x86_64-pc-windows-msvc.exe located under AppData\Local\JetBrains\Rider2026.1\aia\codex\bin\codex-x86_64-pc-windows-msvc.exe as "Trojan:Script/Wacatac.F!ml".
Every time I install the plugin in rider the defender pops up with the same message.

What steps can reproduce the bug?

rename/delete the folder ...\AppData\Local\JetBrains\Rider2026.1\aia\codex\
open rider -> open the AI chat window - >select codes (if not ylready sselected) -> type in a message and hit return
codex installs and shows fail message

"Failed to initialize ACP session. Error: Codex process has exited with code 1"

What is the expected behavior?

_No response_

Additional information

I already updated the signatures for Defender with either "Update-MpSignature" or manually but no success.