Under review

SC Client is flagged as malicious by Windows Defender ATP

Lourens 2 years ago updated by Caitlin M Barnes (Product Manager) 2 years ago 1

Detected as Woreflint Malware

If you open the ScreenConnect alert within the Action Center and click on “Go to alert page to see full description”, it takes you to the Crowdstrike alarm. If you click on the device name itself that has the ScreenConnect service flagged as malicious, it only shows the Crowdstrike alert.

Also flagged on Virus Total - https://www.virustotal.com/gui/file/fb387fb2f49c59dd2fb308f7db84e93ac95ca8396c3a1ccc8839ef4002001652/detection

ConnectWise Control Version:
Server Affected:
Host Client Affected:
Guest Client Affected:

Hi Lourens, 

Please submit a ticket with Crowdstrike regarding this false positive. As a product, we will also reach out to try and resolve this problem, but often direct customers have better luck reaching support and finding a solution. We work hard to ensure that the major AV vendors correctly identify our products as safe; however, new virus definitions are released every day, which makes things difficult.