Add Improvements to .exe files in C:\Program Files (x86)\ScreenConnect\Bin and C:\SystemTemp\ScreenConnect\XX.XX.XX.XXXX folders to prevent anti virus false positives.

Avatar
  • updated
  • Pending Review

Antivirus solutions like Sentinel One and Defender are creating alerts/quarantines for randomized .EXE files in C:\SystemTemp\ScreenConnect\25.4.25.9313 folder after upgrade and certificate setup. The ScreenConnect.ClientSetup.exe and ScreenConnect.Client.exe files in the C:\Program Files (x86)\ScreenConnect\Bin folder are also affected and not signed by ConnectWise or our own configured code signing certificate.

Avatar
0
fineware sistemi

Same problem with SentinelOne

Avatar
0
nathan levandowski

Same issue with crowdstrike seeing randomly generated EXE names:

C:\Windows\SystemTemp\ScreenConnect\25.5.3.9371\GR4LipPSs0qK.exe



Top contributors

Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar