Windows defender immediately identified the trainer as a trojan.
"Trojan:Win32/CryptInject!ml"
I didn't bother to redownload it and try another program.
Same here.
In fact, the Chinese Trainer I downloaded in the past had the same issue. With the additional problem that I had no idea who made the program, nor did I know or trust the site I got it off. But it ended up working.
It's normal for trainers because they tend to use anti-reversal protection or other means that tips off MS Defender. Also, in most cases they have to use patterns and functions not only to access a windows process, but also scan memory signatures to find the right location of the stuff it wants to modify in a game. That sort of modification will always look malicious to an anti-virus program. Keep in mind that anti-viruses only rely on known patterns from program samples analysed in the past and are not fully aware of what an executable does
exactly.
Well, maybe not the cleanest and most accurate description, but that's kind of the gist of it all. TBH, it's an age-old debate and especially when you borrow and play cracked games, you will run into this issue commonly, since the same thing applies to game cracks too.
I don't have any personal agenda, nor do I want to force anyone to use the trainer I linked, but I can only vouch for Fling. He has his own official website, a fairly fresh patreon, and he listens to suggestions and supports the latest games with as many features one could ask for.
These are the trainers I've been using recently. "Virus" detection on all of them.
But don't take my word for it, it's just my personal experience. Coming back to the MS Defender issue: Almost always, I have to recover such files and add them to an exclusion list. In most cases, Defender even kills the 7z archives as soon as they are downloaded. Which is a good thing in general; means it's doing its intended work.
But don't take my word for any of this.
When in doubt, just use Defender to recover the EXE (without executing it) and upload it to virustotal.com to get a better picture. Sometimes, community members will vouch or warn about any given program.
You must be registered to see the links
I took the liberty to re-submit the file a moment ago. In most cases, there will have been a user before you who has already done the same thing and usually its not necessary to re-upload the same file over and over again.
So, to get an understanding of whether or not there is risky software at play here, just look at the anti-viruses' names and determine for yourself which of those are more or less reliable. Defender, according to this engine, says 'Program:Win32/Uwasson.A!ml'. Not quite the thing you pointed out, but what counts is that there was some sort of detection. These warning codes often sound far more frightening than they really are. You can see that McAfee for instance also has a false positive; about McAfee: it's become a global meme, therefore its data is not that trustworthy either. The other protection programs in the red section don't really ring a bell for me. In the green are 'reputable' names such as: Avast, BitDefender, AVG, Kaspersky, and Malwarebytes. You don't have to personally use or trust these brands, but from my knowledge they have had a decent track record in the past. Malwarebytes especially. In conclusion, if such reputable anti-virus engines deem the program as harmless, then you can almost be sure that they are. If the trainer uploaded or invaded any of your personal data, then pretty much all anti-viruses would have picked up those signatures/patterns.
Closing thought: Windows Defender will always be a bit more aggressive than your average anti-virus program because it implies that it has millions of uninformed normie-users. Moreover there is Windows' long-lasting history with fatal viruses. It's a good thing that it's so over-protective. But if you deal with cracked software and the likes, you have to be informed and not get nervous immediately.
Finally: Haydee 2 and its base map/story mode is unplayable for me without a trainer
Fuck those mines
Edit/Note: Found out that the setting One Hit Kill will insta-kill you/brick your run if you enter the poisoned area in L2 Medical (second floor) - regardless of GodMode.