Hi,
This behavior is by design. When you do not set EnableEOWP, our library will try use rundll32.exe first. However if for whatever reason that failed (usually due to the process being silently killed by a AntiVirus program), then the library will use eowp.exe.
The best way to avoid this kind of issue is to use this method to customize the name of eowp.exe:
https://www.essentialobjects.com/doc/eo.base.runtime.initworkerprocessexecutable.aspxYou can rename eowp.exe to a name that suggests it to be a part of your application and then ship that with your application. If you do not include the exe file in your distribution, InitWorkerProcessExecutable will automatically create it, however that may trigger false alarm again.
If you do rely on InitWorkerProcessExecutable to automatically create the file for you, make sure you download build .65 from our download page. In early build InitWorkerProcessExecutable may still try to re-create the file even if the file exists. In build .65 it will skip in that case.
Hope this helps. Please feel free to let us know if you still have any questions.
Thanks!