Windows Defender - False Positive from Deepstack?

mrc545

Getting the hang of it
Jun 1, 2019
78
41
US
One of the temp files Deepstack generated on my BI PC (AppData\Local\Temp\Deepstack) was marked as severe, and was automatically removed by Windows Defender, tagging it as Trojan:Script/Oneeva.A!ml

Don't see how it could have been anything other than a false positive. It says the affected item was the temp file itself, which was locally generated. I guess my PC is crafting trojans out of thin air now.

Has anyone else gotten one of these? Been using Deepstack for months now, with no issues. Maybe something changed with the latest Windows Defender definitions and this will pop up more often.
 
You see this with definition updates for various things. Try exempting that folder in Defender's settings and you won't see that issue again.