Jump to content

ANYDESK DETECTED AS THREAT


Recommended Posts

Dear all,

During the last month ESET Endpoint Security is detecting ANYDESK application as THREAT in all computers of my company. 
Client computers have both Win10 and Win11 with all latest updates installed. Also, ESET is fully updated in both ESET PROTECT server (on-prem) and client computers as well.
Is anyone else facing the same issue? The only solution I found so far is to uninstall Anydesk and remove also all relevant files from C folder... 
Any advises? 

Link to comment
Share on other sites

  • Administrators

Anydesk is not detected as a threat but as a potentially unsafe application as it's been misused in attacks. Detection of potentially unsafe applications is disabled by default. Since you use the application intentionally, we recommend creating a detection exclusion.

Link to comment
Share on other sites

2 minutes ago, Marcos said:

Anydesk is not detected as a threat but as a potentially unsafe application as it's been misused in attacks. Detection of potentially unsafe applications is disabled by default. Since you use the application intentionally, we recommend creating a detection exclusion.

Thank you Marcos. 
Can you give me step-by-step instructions on how to create this detection exclusion?

Link to comment
Share on other sites

  • Administrators

On the Detections pane select the desired detection you want to exclude and select "Create exclusion" from the menu.

Link to comment
Share on other sites

  • 2 weeks later...

Good afternoon, prior proceeding with this i would like to draw your attention to discuss bit further and do clarify below.
At the warnings can you please check of the information in detail of all columns, can you detect cases where anydesk.exe was blocked from accessing files irrelevant to Anydesk / suspicious such as below :  

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  
C:\Windows\explorer.exe
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MsMpEng.exe
C:\Program Files (x86)\Microsoft Intune Management Extension\SensorLogonTask.exe
C:\Windows\System32\svchost.exe

anydesk eset 1.PNG

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...