Doug,

I have had 5 calls/emails and 4 so far were Windows Defender identifying the file in question as a trojan virus. The 5th has not answered my reply yet.

Initially replacing the file was not sufficient because as soon the .dll was used to run a backup, Defender removed it again. As previously stated, an exclusion of the folder was needed in Defender's Virus and protection settings. Then replacing the file and excluding the file name. In two cases, replacing the file (even with the folder exclusion) flagged it again for removal and I had to mark it as "Allow" in the threat history.

So while I have not see it with other AV software as of yet, (as others have) Defender is the only AV software some clients use now.

My own machine seems unaffected since I use Norton AV and Windows is set to allow Norton as the AV solution. Hopefully Norton does not pick this definition up from Defender.