Windows Defender Detection: Behavior:Win32/DefenseEvasion.A!ml

[vtwarrior25]

When I installed and ran the program, Windows Defender detected it as a threat.
I am assuming that this is a false positive, but I wanted to make sure that this was known.

[Taiko2k]

This has come up before. Its probably safe. Tauon is built with a lot of 3rd party software, so I can't guarantee its safe from supply chain attacks. Though in these cases, you can see the name in Windows Defender ends with A!.ml which means its machine learning detected and not an exact known malware match. But I don't know exactly why its getting triggered exactly.

[C0rn3j]

Annoyingly enough it tags pyinstaller too when building.

Had to temporarily disable realtime protection via Windows Security -> Virus & thread protection*2 -> Manage settings -> Windows Real-time protection: off to get it to package...

[C0rn3j]

So apparently Defender simply always tags latest pyinstaller as malware.

Next version of pyinstaller has fixes we need, so we can't do this right now, but later we can fix Windows builds to use a specific version and just not update it, and it should generate binaries that it won't tag anymore.

Users can also build Tauon from source themselves without packing it with pyinstaller into a single executable - https://github.com/Taiko2k/Tauon/wiki/Building-for-Windows