Microsoft Toolkit: 272
Even the legitimate, unmodified Toolkit triggers Windows Defender and most antivirus software because it uses "hacking techniques" (process injection and service emulation). This means you cannot distinguish between a clean version and a malicious one by antivirus alerts alone.
The benefits of using Microsoft Toolkit 2.7.2 are numerous: microsoft toolkit 272