Windows Defender Antivirus for Windows server 2016 show Behavior:Win32/DefenseEvasion.WI!ml

Submit the file as a false positive to Microsoft: https://www.microsoft.com/en-us/wdsi/filesubmission
It's happened at least twice with the Cherwell cloud installer at my employer.  Microsoft is usually pretty quick on releasing a new definition file fix.

Hi Adam Leinss,
   Thanks for your quick response. I am worried about the issue all of the time.

  Thanks.

jeff 

Iti s a false positive. Exclude that folder and as mentioned above: submit the file to Microsoft as a false positive

Hi Sinisa Vuk,
   That's what I worry about.  When I compile the same project,the Windows Defender Antivirus  will show Behavior:Win32/DefenseEvasion.WI!ml, but scan other AP and Windows Defender Antivirus  never show virus message in Delphi.It's so strange.

   I try to use other virus scanner and removal tool to scan and clean  all of the AP, the other virus scanner show all of the AP is clean. ️ How do I know I can trust a virus scanner?

   Thanks.

jeff

Hi David Johnson,
  I had uploaded the AP to Microsoft: https://www.microsoft.com/en-us/wdsi/filesubmission to check  if the AP is Malware or not.

  Thank you for your suggestion.

jeff

Hi Sinisa Vuk,
   Finally, I'd like to thank you for your suggestion. When I remove some third-party components, virus scanner don't show any error message.

  Thanks again.

jeff