Cheat Engine

[paulb104]

So I've been running Windows Defender and CE 6.5 for ages together without any issues. I just enabled speedhack for a game and BAM, severe threat detected: Trojan:Win32/Detplock detected. I've never even heard of Win32/Detplock.

I'm aware that CE is often read as a virus, so should I just going guess that, since I haven't updated CE since Jan 2016, Defender has a new algorithm that is just now picking up speedhack as yucky?

[LeFiXER]

Windows Defender often flags things that are safe as unsafe. Cheat Engine is completely safe to use, including the speedhack.

[paulb104]

Well, yes, I know it's safe, but I am just wondering why, after five or six years it randomly flagged speedhack...

[atom0s]

Malware, and other malicious software, share some code/techniques that CE makes use of to attach to, hook/alter and manipulate remote processes. Because of that, some other software that is intended to be harmful will land up being marked/detected by the AV, and then other tools that use similar code are hit as well as collateral damage.

AV's don't generally target any specific software, they just make pattern/signature-based detections that will hit anything that has the same characteristics or parts of code.

You can trigger an AV with as basic as 1-2 lines of code compiled on your system with how sensitive some of them can be. Something as basic as opening a process handle to another process, specifically targeting something like csrss.exe, is enough to mark your program as malicious.

[STN]