Why does my windows defender say its a trojan virus??
- Thread starter Trojanas
- Start date
-
All active subscriptions were wiped because we updated the forum. If you had a subscription active before the forum update ( 12.25.2025 ), you need to oepn a ticket here to have it manually added back
-
Staff availability (EU):
Mon–Fri: 10:00–20:00
Sat/Sun: 12:00–14:00
Holidays limited
All times: are in UTC + 0 -
We've permanently lowered prices of all subscriptions
there are a few reasons as to why anti-virus softwares detect cheats as malware. And it's not exactly correct to say, it's just a false possitive, it technically is not a false positive. The way cheat inject into games and stay undetected from anti-cheats is by using common routines that originally came from malware. One such routine is called manual mapping, this routine was initially used in malware back in the day, before it got leaked, if I recall correctly on wikileaks or something. Manual mapping emulates the way windows loads dlls into processes but skips all of the steps that leave traces inside the target process of the dll being loaded, hence making it really stealthy. The way AV software suites detect software is by using signatures, what is a signature you may ask? Well imagine it being similar to how you have a fingerprint that's unique. Same goes for manual mapping, regardless of how it's written it follows a set of steps which can relatively easily be identified and hence build up a signature/fingerprint off of. Your AV cannot possibly know you are trying to cheat in a video game, so it plays it safe and flags the software regardless of whether it's trying to exploit your PC or a game. Another reason the software is also getting flagged is because we employ a third-party software called VMProtect ( https://vmpsoft.com/ ) to protect our software from tampering and cracking. This software does a lot of stuff that usually makes the program really hard to analyise by anti-virus softwares, however it is incredibily obvious when a protector software such as VMP has been used on a program, that's why anti-virus software suites usually play it safe by just assuming, anything that's protected by such programs, is malicious.
this is a technical explanation
in short its a false alarm all loaders are like that
