Windows Defender or Antivirus Blocking Emulator — False Positive Fix
My emulator (RPCS3, PCSX2, shadPS4, Dolphin, Cemu, GameLoop, or another) was working fine, then Windows Defender or my antivirus flagged it as a threat, quarantined files, or now the emulator crashes on launch without any error message. How do I stop antivirus from interfering with my emulator?
Solutions
solution #847
The correct fix is to add an exclusion path, not to disable your antivirus entirely. Exclusions tell Defender to skip scanning a specific folder — your emulator keeps running cleanly, and the rest of your PC stays protected.
Add a folder exclusion in Windows Defender:
- Open Windows Security (search "Windows Security" in Start menu).
- Go to Virus & threat protection → Virus & threat protection settings → Manage settings.
- Scroll down to Exclusions → Add or remove exclusions → Add an exclusion → Folder.
- Navigate to the folder where your emulator is installed (e.g., C:\RPCS3, C:\PCSX2, C:\Dolphin) and click Select Folder.
- Also add your ROMs / game files folder and your BIOS folder if they're in a different location. Defender can flag BIOS files as suspicious firmware.
- Relaunch the emulator — it should now open and run without interference.
Why emulators trigger false positives: Emulators use low-level CPU instructions (JIT recompilation, memory mapping tricks, kernel hooks for controller input) that antivirus heuristics associate with malware behavior. The code itself is legitimate; the detection is a false positive. Official emulators distributed via GitHub are safe — always download from the official repo, never from random download sites.
solution #848
If Defender already quarantined emulator files before you set the exclusion, the emulator may be broken even after adding the exclusion (missing .exe, missing DLLs, corrupt shader cache).
Restore from quarantine:
- Open Windows Security → Virus & threat protection → Protection history.
- Find the quarantine events related to your emulator. They're listed by date with the file path.
- Click each item → Allow on device (for files from the official emulator source).
- The file is moved back to its original location.
- If "Allow on device" is greyed out or unavailable, you'll need to re-download the emulator fresh from its official GitHub release page, then add the exclusion before extracting/running the new download.
solution #849
Third-party antivirus products (Kaspersky, Avast, AVG, Bitdefender, Malwarebytes) each have their own exclusion settings.
General steps (varies by product):
- Kaspersky: Settings → Protection → Application Control → Manage Applications → find emulator .exe → Set to "Trusted". Also: Settings → Threats and Exclusions → Add exclusion path.
- Avast / AVG: Settings → General → Exceptions → Add Exception → browse to emulator folder.
- Malwarebytes: Settings → Allow List → Add → Folder → emulator folder path. Note: Malwarebytes often interferes with GameLoop and CODM specifically due to anti-cheat hooks.
- Bitdefender: Protection → Antivirus → Settings → Exceptions → Add folder.
If you're unsure of the exact menu, search your antivirus's settings for "exclusions", "exceptions", or "whitelist".
solution #850
GameLoop is particularly prone to antivirus false positives because it bundles an Android virtualization layer (not a standard x86 VM), uses background services, and patches CODM's anti-cheat. This pattern resembles malware behavior to heuristic scanners.
If GameLoop crashes on launch, fails at the loading bar, or shows "GameLoop has stopped working":
- Add the entire GameLoop installation folder to exclusions (default: C:\Program Files\TxGameAssistant or wherever you installed it).
- Add the CODM game files folder as well (usually under the GameLoop data directory).
- Also add an exclusion for the GameLoop service executable: open Task Manager → look for GameLoop-related background processes → right-click → Open file location → add that folder.
- After adding exclusions, run GameLoop's built-in repair tool (GameLoop settings → Tools → Repair) to restore any files Defender already quarantined.
Comments (0)
Sign in to_leave_comment