Skip to main content
If you’ve been told to disable your anti-virus before running a cheat, it’s a reasonable thing to want to understand. This page explains exactly why it’s required, how cheats work at a technical level, and what your anti-virus software actually sees when a cheat is running.

​
How cheats work

Cheats don’t run like normal programs. To function, they must:
  • Attach to the game process while it’s running
  • Read and modify game memory in real time
  • Inject code into the game process
  • Interact with protected or monitored areas of the system
These actions are required for features like ESP, aimbot logic, and other in-game modifications to work.

​
How anti-virus sees cheats

Anti-virus software doesn’t judge intent — it looks at behavior. Any program that:
  • Injects into another process
  • Modifies memory
  • Hooks game functions
is automatically flagged as suspicious. These behaviors are common in malware, so anti-virus blocks them by default even when the file itself is completely clean.

​
Why cheats get flagged

This is why cheats are often detected as:
  • Trojans
  • Generic malware
  • Suspicious programs
These are false positives caused by how cheats operate, not because the cheat is actually malicious.

​
Why you need to disable everything

Most anti-virus programs have multiple layers of protection:
  • Real-time scanning
  • Behavioral monitoring
  • Background services
Even if one feature is turned off, others can still interfere. This can cause:
  • Injection failures
  • Crashes
  • Features not working correctly
  • Files being silently quarantined without warning
Fully disabling your anti-virus (or correctly excluding the cheat files) prevents this interference entirely.
You are free to re-enable your anti-virus after you’re done playing. The cheat only requires protection to be off while it’s being loaded and while you’re in-game.
For step-by-step instructions on how to properly disable Windows Defender and related protections, see Anti-Virus Setup.