TROUBLESHOOTING / DOCUMENTATION

False Positive
Antivirus Detections

01 / DEFINITION

What is a false positive?

A false positive occurs when antivirus software incorrectly identifies a legitimate, harmless file or application as malicious.

Antivirus products such as Windows Defender use several detection methods. A legitimate application may trigger a warning because of its behavior, file structure or techniques.

Not every detection is a false positive. Investigate the warning before treating the file as safe.

02 / POSSIBLE CAUSES

Why can antivirus software detect cheats?

Cheat applications may interact with games or Windows at a low level. Reasons for a detection can include:

  • Memory access: reading or modifying another process's memory.
  • Kernel drivers: privileged system access that receives additional scrutiny.
  • Code obfuscation: protected code that can resemble malicious software.
  • Unsigned files: executables or drivers without trusted digital signatures.
  • Low reputation: new or rarely downloaded files without an established reputation.
  • Behavioral detection: warnings based on suspicious actions rather than a known signature.

These characteristics may explain a warning; they do not prove the file is harmless.

03 / WINDOWS DEFENDER

File quarantine

Windows Defender may block or quarantine a file it identifies as potentially dangerous. If SwingApp depends on that file, the application may fail to launch or display an error.

Look in Windows Security → Virus & threat protection → Protection history for the detection name and affected file. A quarantined file is not necessarily permanently deleted.

Microsoft: Protection history ↗
04 / VERIFICATION

How to verify a potential false positive

First confirm that the file came from SwingApp's official download source. Review the exact detection details in Protection history.

VirusTotal can compare results from multiple antivirus engines. A clean result does not guarantee safety, and several detections do not automatically prove a file is malicious. Do not upload private or proprietary files to a public scanning service without permission.

If the detection appears incorrect, report it to the antivirus vendor for analysis.

VirusTotal: private scanning information ↗
05 / SWINGAPP

What if SwingApp is detected?

Do not automatically assume the warning is a false positive. Contact SwingApp Support with the detection name, affected file, Windows version and relevant screenshots.

Support should investigate the detection and provide a verified, compatible version when appropriate. Avoid permanently disabling Windows Security, creating broad antivirus exclusions or bypassing driver security protections solely to make an application run.

Contact SwingApp Support ↗
06 / FINAL INFORMATION

Review every warning.

A false positive is an incorrect antivirus detection, not a label that automatically applies to every flagged cheat or kernel driver.

Verify the detected file, investigate the cause and resolve compatibility or security issues without weakening the computer's protections.

← Back to Troubleshooting