Closed needtoreport closed 3 years ago
Looks like a false positive. Both the installer (VirusTotal) and PoB executable (VirusTotal) should be clean (notice TrendMicro results).
However, depending on the settings used you may get different detection results and the threat identification "HEU" suggests you are using heuristics which means your av is performing informed guesses. TSC_GENCLEAN is just some additional clean-up.
It's possible that something is tampering with your exe files. If you're a bit tech-savvy (and willing to pause your av) you can check if the files are identical by computing SHA-256 hashes. Open PowerShell and run (Get-FileHash "path/to/file").Hash
. The string you'll get should be equal to the one from VirusTotal report.
I downloaded the latest release, Release 1.4.170.16 and after installing and attempting to run was informed by Trend Micro Internet Security that it was affected by HEU_AEGISCS922 and TSC_GENCLEAN