@pesto the thing that av's detect is plutonium-bootstrapper-win32.exe which is the part of the client that loads the game binary into memory and does all the modifications to game memory. It's also obfuscated which by itself is a reason it gets detected by some av's.