Manolis K 0 Posted July 1 Posted July 1 Dear all, During the last month ESET Endpoint Security is detecting ANYDESK application as THREAT in all computers of my company. Client computers have both Win10 and Win11 with all latest updates installed. Also, ESET is fully updated in both ESET PROTECT server (on-prem) and client computers as well. Is anyone else facing the same issue? The only solution I found so far is to uninstall Anydesk and remove also all relevant files from C folder... Any advises?
Administrators Marcos 5,458 Posted July 1 Administrators Posted July 1 Anydesk is not detected as a threat but as a potentially unsafe application as it's been misused in attacks. Detection of potentially unsafe applications is disabled by default. Since you use the application intentionally, we recommend creating a detection exclusion.
Manolis K 0 Posted July 1 Author Posted July 1 2 minutes ago, Marcos said: Anydesk is not detected as a threat but as a potentially unsafe application as it's been misused in attacks. Detection of potentially unsafe applications is disabled by default. Since you use the application intentionally, we recommend creating a detection exclusion. Thank you Marcos. Can you give me step-by-step instructions on how to create this detection exclusion?
Administrators Marcos 5,458 Posted July 1 Administrators Posted July 1 On the Detections pane select the desired detection you want to exclude and select "Create exclusion" from the menu.
Laskmar 0 Posted July 11 Posted July 11 Good afternoon, prior proceeding with this i would like to draw your attention to discuss bit further and do clarify below. At the warnings can you please check of the information in detail of all columns, can you detect cases where anydesk.exe was blocked from accessing files irrelevant to Anydesk / suspicious such as below : C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\explorer.exe C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MsMpEng.exe C:\Program Files (x86)\Microsoft Intune Management Extension\SensorLogonTask.exe C:\Windows\System32\svchost.exe
Recommended Posts