Antivirus reports suspicious activity cmd.exe /C dir /-c <Data Directory>\system

Symptoms

Antivirus reports suspicious activity. The alerts are triggered by the following command executed periodically: cmd.exe /C dir /-c <TeamCity Data Directory>\system.

Cause

The <TeamCity Data Directory>/system is a directory that includes build results, remote run changes, plugin data, and caches. TeamCity periodically queries <TeamCity Data Directory>/system using the above command. It may also create and access cache files in it, etc.

Resolution

This is expected behavior. No action is required.