FALSE Positive Detection ( WALLAHACK )

[AdilFalseRed]

Hello. I've been detected 3 times as "wallahack".

RAPORT: <b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b>

ANTIVIRUS: AVAST ANTI VIRUS FREE VERSION
Additional information: I do have "addons files" named " virtus pro CSDM bots ", it's like Deathmatch mod (with bots) for local server.
GAME MEMORY DUMP LINK: <b>You have to register to ba able to see this link</b>

Thank you in advance for your precious help.

[Tiger]

Unfortunately, that detection signature doesn't exists anymore in your memory dump . You have to reproduce the detection and redo all steps again.

[AdilFalseRed]

Here's my new scan :
<b>You have to register to ba able to see this link</b>

and my new memory dump files:
<b>You have to register to ba able to see this link</b> ( same password as previously )

Thank you for your help.


edit:
I'm adding the files of Tesco aswell cause he has issues while trying to reply to his own topic.
scan: <b>You have to register to ba able to see this link</b>
dump files : <b>You have to register to ba able to see this link</b>

Thanks again.

[Tiger]

Please upload me the addons files to test myself, as it's very weird what's going on. Those modules shouldn't act in this way.

[AdilFalseRed]

Hello,
Here are the addons files :
<b>You have to register to ba able to see this link</b>

I put everything that is inside the "cstrike" folder into my C:\Program Files (x86)\Steam\steamapps\common\Half-Life\cstrike folder, and then i have access to deathmatch on local server + on the prac_maps i can throw unlimited flashes/smokes/he.
(I dont use the cstrike_russian folder)

Thank you for your help.

[Tiger]

This addons doesn't trigger your detection.

I searched in database players who used this addons and none of them were detected because of this addons:

<b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b> -> ESP (wallhack) injected in memory
<b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b>
...


Also I found you scanned while having this addons loaded, in 21.03, and you weren't detected:

<b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b>


It must be something else. Unfortunately without explicit proof I can't clear your detections.

[AdilFalseRed]

What can i bring you more ?

[Tiger]

Because I can't find the required information in your memory dump, you have to reproduce this issue until you found what app caused it and tell me. I will test whatever you tell me and see if generates that false-positive.