Almost every trainer triggers Windows Defender or Norton. This is because trainers use "code injection"—the same method viruses use. While 99% of trainers from reputable sites are safe, the 1% from shady forums are not.
Let's address the elephant in the room: Is using a "cheating"?