Cheat Engine

Xenocritus · Cheater Reputation: 0 Joined: 27 Dec 2020 Posts: 25

Hello,

I'm quite new here. I'm making trainers with the Visual editor and adding Lua code for functionality (common Trainer).
But, as you know, when making the EXE and execute it, all the alarms are turned on in my system. As I want to share my trainers, I would like to know some good practices to avoid (as far as possible) been detected as a menace.

I don't want to just report my program as safe nor telling people to put my file as an exception for the AV, just good practices to improve it.

For example:
- Compression None: This avoid my AV to auto-delete my file.

So, can you give me some tips and good practices? Maybe include some kind of log and see some kind of messages? Maybe using just Lua code and not Visual Editor? Some try catch code? Ways to close the trainers? I Don't know, but there should be some tips for sure.

Thanks!!!!

AylinCE · Posted: Sat Mar 13, 2021 2:59 am Post subject:

OK. For CETrainer.exe, this was a constant problem.
I have now created a tool for this problem.
I will post a code that I have edited and used (Trainer preloader.).
To archive this code, the forum; I will post it to the "Lua Tutorials" section.
I try to train today.

What will this tool and code do;

1) It will turn the Defender off and on automatically.
2) To download the correct Trainer, Windows will determine the 32-64 bit.
3) Will download the Trainer into a file
4) Will add Trainer.exe to the "Firewall" list.
5) Add the Trainer.exe to the "Windows Defender" exclusions list.

I'll take some time for coding and sample usage.

Lynxz Gaming

my current way is
make 1 folder
put cheat engine files (just the ce executable, lua dll, autorun folder, defines.lua, main.lua, and dlls that your trainer need) and put your .cetrainer there.
make a bat file to run the cetrainer using cheat engine.
or you can edit main.lua to load the cetrainer.

and to share, zip the folder and send

example my trainer (i renamed the ce executable "cheatengine-x86_64.exe" to "My Hack.exe") :

ByTransient

@Lynxz Gaming, the ".CETRAINER" file has no concern for Windows security.
However, ".EXE" files get stuck with Windows security.
It makes more sense to present the solution via ".EXE". Wink

Lynxz Gaming

AylinCE

Here is a different tool.
You can use it as provided or in "Cetrainer / exe" conversion.
I will try the example you gave, write the result.

https://forum.cheatengine.org/viewtopic.php?t=617321

Xenocritus · Cheater Reputation: 0 Joined: 27 Dec 2020 Posts: 25

Thanks both for the reply.

However, I have to say I feel more confortable with Lynxz Gaming solution.

I mean, turning off the defender is exactly what would make my program a real menace lol. Besides, Defender is just one AV, there are dozens of them, and my first real problem was GoogleDrive, avoiding my program of beeing downloaded.

Other tips or ideas are very welcome.

atom0s · Posted: Sun Mar 14, 2021 5:27 pm Post subject:

Most AV's have deemed CE a harmful/malicious program or potentially harmful. No matter what you do, your trainer is going to always trigger those same detections if they can tell it's running through CE/bundled with it.

If you try to obfuscate/pack/protect the trainer CE generates, you are just going to increase the amount of variants the AVs will flag your file for as well.

If the goal is to prevent any issues with an AV, then you need to code your own trainers and work with AVs when your stuff get flagged. Most AVs are pretty easy to contact to have your stuff reviewed and whitelisted.