Antivirus is blocking OverRider

Short answer

Browser automation looks like malware to heuristic scanners, so false positives are common. Add the OverRider installation folder and its browser engines to your antivirus exclusion list, then reinstall the engine if it was quarantined.

OverRider launches browser processes, injects scripts into pages and opens many outbound connections. Heuristic scanners treat that combination as suspicious because malware does similar things. The detection is a false positive, but the consequences are real — a quarantined browser binary stops everything.

Symptoms

SymptomWhat the scanner did
Installer deleted or blockedFlagged the download
Application will not startQuarantined the executable
“Browser executable not found”Quarantined the engine’s browser
Worked for days, then stoppedA definition update flagged it retroactively
Every visit fails immediatelyBlocking the browser process from launching

That fourth row is the confusing one. Nothing on your side changed — your antivirus updated its definitions and re-evaluated files it had previously allowed.

Add exclusions

Exclude the OverRider installation folder, and its data folder:

C:Program FilesOverRider
%APPDATA%OverRider

Excluding the installation folder covers the browser engines too, since they install beneath it.

Windows Defender

  1. Open Windows Security.
  2. Go to Virus & threat protection.
  3. Under Virus & threat protection settings, click Manage settings.
  4. Scroll to Exclusions and click Add or remove exclusions.
  5. Add a Folder exclusion for each path above.

Other security suites

The wording differs but the concept is the same — look for Exclusions, Exceptions, Allowed items, or Whitelist. Norton, McAfee, Avast, AVG, Bitdefender, Kaspersky and Malwarebytes all support folder exclusions.

Restore what was quarantined

Adding an exclusion does not return files already quarantined. After adding exclusions:

  1. Open your antivirus quarantine and restore anything OverRider-related, or
  2. Reinstall the affected browser engine from the Engines panel.

Reinstalling is usually simpler and more reliable than restoring.

Windows SmartScreen at install time

SmartScreen warns about executables it has not seen often. Choose More info then Run anyway. This is a reputation warning based on download volume, not a malware detection.

Verifying the download

Only install from your overrider.io account page or your CodeCanyon downloads. Copies from elsewhere may genuinely be modified, in which case the warning is not a false positive.

A current virus scan report is available on request if your security team needs one.

Corporate machines

Managed endpoints often prevent users from adding their own exclusions. You will need your IT team to add them centrally. Useful things to tell them:

  • OverRider is a browser automation tool using Puppeteer and Playwright — both widely used, open-source testing frameworks.
  • It downloads Chrome or Chromium from the official distribution servers.
  • It contacts overrider.io once for license verification, and otherwise only the sites you point it at.

If exclusions do not help

Some suites apply network-level inspection independently of file exclusions. If visits still fail with connection errors after excluding the folders, test by pausing protection briefly. If everything works while paused, the network component is responsible and needs its own exception.

Last updated:

Still stuck? Email support@overrider.io or use the contact form.