Your comments

Thanks Sean - that worked like a charm. I was on v6.9 and updating to v19.1 solved the problem. Computers with McAfee installed now will join sessions and install the access client once again. Appreciate the help from all here!

-rob

I don't know what to tell you but it's still deleting them. If I use the copy URL to download an access client or just try to join a support session I get this from McAfee when trying to run the program:

Is it perhaps just a certain version of the connectwise control client that McAfee whitelisted and I need to match that one?

Thanks!

-rob

This is happening when trying to join a support session and the user runs the downloaded program to join the session. It's happening on multiple windows machines at multiple client locations - only those with McAfee anti-virus. McAfee auto-deletes it (instead of quarantining it) and you get the above On-Access Scan screen.

Thanks!

-rob

Still no luck. The file name is: ScreenConnect.WindowsClient.exe

And I did an update on the McAfee to make sure it has the most recent definitions...

Also, for some reason your posts to here aren't emailing me so that's why there's a delay in getting back to you...

Here's a screenshot showing it still as marking them as viruses. Here's the version info for this client:

McAfee Agent
Version number: 5.0.5.658
Status: Managed
SuperAgent: Peer to Peer
Last security update check: 6/4/2019 6:12:51 AM
Last agent-to-server communication: 6/4/2019 5:57:54 AM
Agent to Server Communication Interval (every): 1 hour
Policy Enforcement Interval (every): 1 hour
Agent ID: {39bc6308-e454-11e6-0e14-c4346b935630}
ePO Server/Agent Handler

McAfee Endpoint Security
Version number: 10.5
For module and content information, view the About page
in the McAfee Endpoint Security Client

So something still isn't right. If I try to join a session, even after whitelisting ScreenConnect*.* and even individual files, the installer opens and then McAfee jumps over it saying virus detected and it was deleted (not even quarantined - meaning McAfee things it's a very bad virus and not even worthy of quarantining...)

Really frustrating to try to support these clients with this going on!

Thanks!

-rob

We're still seeing this with numerous clients. I don't believe they are running the enterprise version of McAfee (one client essentially had a Windows 10 home computer that came with a McAfee pre-installed and it wouldn't let them join a support session or meeting)...