ANY AV is a love-hate thing.

Obviously Trend Micro just added (last definition update?) a code segment or "call" template that's the same or identical to something in that auxhost.

Probably means BOLO (be on the look out for) for other calls and applications (dll's, com's, exe's,..) that TM won't like, giving you warning's. As a user you won't know which particular "bad actors" TM thinks you have until they bite you.

I'd report this one as a false positive to Trend.

Larry


Win10Pro,i9,64GB,2TBSSD+20TBHDDs,1080TI,BIAB'24,Scarlett18i8,Montage7,Fusion 8HD,QS8,Integra7,XV5080,QSR,SC-8850,SPLAT,FL21&others,Komp.14,IK suite&others, just a guitar player-AXE FX III &FM9T, FishmanTP, MIDIGuitar2, GK2/3'sw/GI20