My software is using low-level keyboard and mouse Win32 hooks for legitimate reasons (if it's any relevant, it's for determining a change in the caret position of the active code pane in the VBA IDE).
Windows Defender is flagging my installer as "malicious":
Same with Symantec, and probably other antivirus/malware detection tools too.
I've had similar false-positive "malware alert" issues before with Symantec, supposedly due to the file being recent and/or having very few downloads, but these older versions didn't use a Win32 low-level keyboard hook, and AFAIK weren't flagged as "malicious" by Windows Defender.
I have NOT implemented a key logger; I do NOT handle WM messages sent anywhere other than the VBE's active code pane, and I have NOT intentionally packaged malware with my installer.
Does merely using a keyboard hook inherently make software "malicious"? Or is there a way to use them that doesn't trigger a malware alert?
Or does "Trojan:Win32/Fathale.B!plock" have completely nothing to do with that and it turns out there is something that somehow managed to sneak into my installer package?