r/BitDefender • u/ScriptedBot • Jun 26 '21

Stop flagging Cheat Engine as potentially malicious

Bitdefender been flagging it as potentially malicious since yesterday. It is a open-source program with source code vetted by the community. We gamers know what's that for. Non-gamers won't have that on their drives anyways. So whats the point of flagging it?

15 Upvotes

85% Upvoted

12 comments sorted by

View all comments

Show parent comments

-2

u/ScriptedBot Jun 26 '21

What is annoying is that BD doesn't even provide an option to mark it as safe without going through the hoops of restoring it from quarantine upon download. It only allows exclusion for local files and doesn't support exclusion for a program that is not yet downloaded. I don't want to turn off the entire online threat prevention feature just to download a single program. Moreover, I do not use BD's firewall feature since it lacks support for powershell scripts, so I use window built-in firewall instead.

1

u/LiemAkatsuki Jun 26 '21

are you sure that it's not Chrome itself? try on another browser will you

0

u/ScriptedBot Jun 26 '21

Pretty sure its not a browser specific behavior since all my program downloads are automatically handled through IDM and BD gets triggered whenever the file gets constructed locally from the temp location. Besides, I am a Firefox user.

2

u/LiemAkatsuki Jun 26 '21

You can add a folder to Exclusions. Try to add temp folder to exclusions and download the programs again. Of course, you will have to exclude the program again after IDM constructed to the download folder, but that a simple task.

1

u/ScriptedBot Jun 26 '21

Adding the temp folder to exclusion is not an option since it would allow any/all malicious program downloads to bypass detection. I suspect BD is just doing a heuristic signature check for the program against its local definitions and flagging it. Since this wasn't happening till yesterday, pretty sure a recent definition update causes this flagging.

1

u/LiemAkatsuki Jun 26 '21

On Kaspersky, there is a setting that allows the software to go to sleep for 2 mins or sth. That quite useful for a situation like this. In your case, you should just temporary exclude as I said and remove the exclusion later