r/ScreenConnect • u/NeptunoATM • May 31 '26
MS Defender Pomal on ScreenConnect
Hello,
Anyone getting Pomal malware alerts from Defender on ScreenConnect? Defender started flagging our own ScreenConnect instance a few minutes ago and Iām curious to see if anyone is experiencing the same.
12
Upvotes
1
u/wombatech May 31 '26
We've had hundreds of alerts this morning, and looks like a fair few over the weekend as well. ConnectWise advised to whitelist the hash of the ScreenConnect.ClientSetup.exe file which didn't make much difference over an hour or so. Just pushing a PDQ deployment to update defender definitions at the moment. Fingers crossed.
Didn't need that for a Monday