Sometimes. Cheats use "code obfuscation" to hide from VAC. Antiviruses hate this. 85% of public DL links are actual malware. If you see "Win32:Malware-gen" – delete immediately.

Never hold the trigger. Tap in 2-3 round bursts.