What version of the Codex App are you using (From “About Codex” dialog)?
26.707.91948
What subscription do you have?
Plus
What platform is your computer?
Microsoft Windows NT 10.0.19045.0 x64 — Windows 10 22H2, OS Build 19045.6466
What issue are you seeing?
After the standalone Codex app was upgraded to the new unified ChatGPT desktop app, launching the app began causing severe system-wide mouse stuttering for approximately 10–15 seconds.
After the initial stuttering stops, Microsoft Defender's Antimalware Service Executable (MsMpEng.exe) continuously consumes approximately 5%–17% CPU, even when the ChatGPT app has been completely idle for several minutes.
Closing the unified ChatGPT desktop app causes Defender CPU usage to immediately return to approximately 0%.
This issue also occurs when I use only Chat and never enter or use Codex.
What steps can reproduce the bug?
- Enable Microsoft Defender real-time protection.
- Launch the unified ChatGPT desktop app installed from Microsoft Store.
- Observe severe system-wide mouse and UI stuttering for approximately 10–15 seconds during startup.
- Leave the app completely idle for at least five minutes.
- Observe Antimalware Service Executable continuously consuming CPU.
- Fully close the ChatGPT desktop app.
- Observe Defender CPU usage immediately return to approximately 0%.
What is the expected behavior?
The ChatGPT desktop app should start without causing system-wide stuttering, and Microsoft Defender should return to idle after completing any initial application scan.
Actual behavior
- The entire system stutters for approximately 10–15 seconds when the app starts.
- Mouse movement becomes visibly intermittent.
- Defender continues using approximately 5%–17% CPU indefinitely while the app remains open.
- Closing the app immediately stops the Defender CPU usage.
- Temporarily disabling Defender real-time protection also immediately stops the CPU usage.
Additional information
A fresh Microsoft Defender performance recording, captured after uninstalling Microsoft PC Manager and reinstalling ChatGPT from Microsoft Store, reported:
ChatGPT.exe: 1,647 real-time scans, approximately 1,295.58 ms total duration
- Bundled
app\resources\codex.exe: 474 scans, approximately 348.08 ms total duration
.codex\config.toml: 8 scans, approximately 103.24 ms total duration
- Additional scans of temporary
CRX_INSTALL JavaScript files, the desktop app's Chromium cache, extension state, service worker data, and AMSI memory content
Although the ordinary file-scan duration is not sufficient by itself to explain all of the sustained CPU usage, the problem consistently stops when the ChatGPT app closes or Defender real-time protection is disabled.
Defender also repeatedly requested permission to submit .codex\config.toml as a sample for cloud analysis. Disabling automatic sample submission did not resolve the CPU issue.
Defender protection history contains no malware detection or quarantine event for ChatGPT or Codex.
Troubleshooting already completed
The following did not resolve the issue:
- Restarting Windows
- Leaving the app completely idle
- Using only Chat without entering Codex
- Updating the ChatGPT desktop app
- Repairing the application
- Completely uninstalling and reinstalling it from Microsoft Store
- Uninstalling Microsoft PC Manager
- Temporarily disabling automatic sample submission
- Adding and subsequently removing folder exclusions
- Adding and subsequently removing process exclusions for
ChatGPT.exe and Codex.exe
- Changing
[windows] sandbox from "elevated" to "unelevated"
- Setting
sandbox_private_desktop = false
- Disabling or changing the Windows sandbox configuration
All Defender exclusions and diagnostic sandbox changes have now been removed or restored to their defaults.
Environment
- App: New unified ChatGPT desktop app with Codex
- Installation source: Microsoft Store
- Current app version:
26.707.91948
- Previous affected versions observed:
26.707.6957.0, 26.707.9981.0, and 26.707.12708.0
- OS: Microsoft Windows NT 10.0.19045.0 x64
- Windows edition: Windows 10 22H2
- OS build:
19045.6466
- Microsoft Defender platform observed during testing:
4.18.26060.3008
- Microsoft Defender engine:
1.1.26060.3008
- Advanced Account Security: Not enabled
- OpenAI Support case:
11394524
Additional notes
The issue began immediately after the former standalone Codex application was upgraded into the unified ChatGPT desktop application. The previous standalone ChatGPT and Codex applications did not cause this behavior on the same computer.
I can provide the original Defender .etl performance recordings privately if an OpenAI maintainer needs them. I have not attached the raw ETL publicly because it may contain local file paths and other machine-specific information.
What version of the Codex App are you using (From “About Codex” dialog)?
26.707.91948
What subscription do you have?
Plus
What platform is your computer?
Microsoft Windows NT 10.0.19045.0 x64 — Windows 10 22H2, OS Build 19045.6466
What issue are you seeing?
After the standalone Codex app was upgraded to the new unified ChatGPT desktop app, launching the app began causing severe system-wide mouse stuttering for approximately 10–15 seconds.
After the initial stuttering stops, Microsoft Defender's Antimalware Service Executable (
MsMpEng.exe) continuously consumes approximately 5%–17% CPU, even when the ChatGPT app has been completely idle for several minutes.Closing the unified ChatGPT desktop app causes Defender CPU usage to immediately return to approximately 0%.
This issue also occurs when I use only Chat and never enter or use Codex.
What steps can reproduce the bug?
What is the expected behavior?
The ChatGPT desktop app should start without causing system-wide stuttering, and Microsoft Defender should return to idle after completing any initial application scan.
Actual behavior
Additional information
A fresh Microsoft Defender performance recording, captured after uninstalling Microsoft PC Manager and reinstalling ChatGPT from Microsoft Store, reported:
ChatGPT.exe: 1,647 real-time scans, approximately 1,295.58 ms total durationapp\resources\codex.exe: 474 scans, approximately 348.08 ms total duration.codex\config.toml: 8 scans, approximately 103.24 ms total durationCRX_INSTALLJavaScript files, the desktop app's Chromium cache, extension state, service worker data, and AMSI memory contentAlthough the ordinary file-scan duration is not sufficient by itself to explain all of the sustained CPU usage, the problem consistently stops when the ChatGPT app closes or Defender real-time protection is disabled.
Defender also repeatedly requested permission to submit
.codex\config.tomlas a sample for cloud analysis. Disabling automatic sample submission did not resolve the CPU issue.Defender protection history contains no malware detection or quarantine event for ChatGPT or Codex.
Troubleshooting already completed
The following did not resolve the issue:
ChatGPT.exeandCodex.exe[windows] sandboxfrom"elevated"to"unelevated"sandbox_private_desktop = falseAll Defender exclusions and diagnostic sandbox changes have now been removed or restored to their defaults.
Environment
26.707.9194826.707.6957.0,26.707.9981.0, and26.707.12708.019045.64664.18.26060.30081.1.26060.300811394524Additional notes
The issue began immediately after the former standalone Codex application was upgraded into the unified ChatGPT desktop application. The previous standalone ChatGPT and Codex applications did not cause this behavior on the same computer.
I can provide the original Defender
.etlperformance recordings privately if an OpenAI maintainer needs them. I have not attached the raw ETL publicly because it may contain local file paths and other machine-specific information.